$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/5QzCfu4hnXY6hrbmZE8RN94nPP8.roa File: 5QzCfu4hnXY6hrbmZE8RN94nPP8.roa (raw, json) Hash identifier: PDH1y19lskjRVG6zl4MPZ3iMwyqqO1olTCCm6k3Ne4o= Subject key identifier: E5:0C:C2:7E:EE:21:9D:76:3A:86:B6:E6:64:4F:11:37:DE:27:3C:FF Certificate issuer: /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B Certificate serial: 01C3 Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/5QzCfu4hnXY6hrbmZE8RN94nPP8.roa Signing time: Fri 31 May 2024 01:30:44 +0000 ROA not before: Fri 31 May 2024 01:30:44 +0000 ROA not after: Thu 15 May 2025 01:30:03 +0000 asID: 4713 IP address blocks: 153.252.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jul 2024 07:52:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 451 (0x1c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B Validity Not Before: May 31 01:30:44 2024 GMT Not After : May 15 01:30:03 2025 GMT Subject: CN=E50CC27EEE219D763A86B6E6644F1137DE273CFF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:42:7f:fe:76:a4:b3:bc:77:ef:1b:7e:ef:8c: 26:8d:97:02:42:99:80:37:f1:7c:ce:eb:ae:db:6a: a7:e9:9d:c8:b8:cc:27:79:cc:5d:69:61:8c:d1:05: 5e:44:b4:34:15:d6:b6:06:33:16:fb:01:e7:bc:d9: 38:0d:bd:77:e8:2c:ab:6c:53:e1:ff:f5:01:ed:f7: f1:a5:1d:15:c9:89:af:eb:51:aa:1a:a7:fc:aa:12: 5b:4d:ff:d5:37:af:69:07:56:49:6e:4a:95:86:09: 1e:b5:06:0f:19:ce:c7:db:93:4d:18:ae:db:1b:62: b5:22:7a:55:3c:47:99:54:42:90:78:8a:08:57:32: 41:af:93:c8:d3:9b:5d:4a:4a:d4:3c:9b:ce:8e:a8: c5:ee:9b:27:3a:02:89:9c:0a:5f:03:05:7a:0e:c9: 31:8c:f5:ee:94:c2:27:6a:d4:c8:96:bc:e6:19:5c: 12:3f:d7:99:3f:c9:dc:06:fd:3a:56:c1:ea:12:f2: 6d:2f:45:5c:20:78:b5:0a:ff:cc:9f:7a:37:88:c8: 66:7d:95:cc:59:08:a7:be:4b:86:01:64:fa:48:54: b1:15:2c:1e:b5:46:e4:ac:40:c8:23:29:57:97:d4: 13:1b:9c:50:d7:3c:1f:17:db:97:23:81:5b:d9:28: f4:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:0C:C2:7E:EE:21:9D:76:3A:86:B6:E6:64:4F:11:37:DE:27:3C:FF X509v3 Authority Key Identifier: keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/5QzCfu4hnXY6hrbmZE8RN94nPP8.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 153.252.0.0/15 Signature Algorithm: sha256WithRSAEncryption 02:48:9e:1b:a9:39:d3:8b:d2:4e:33:67:76:98:de:66:e5:8b: 4b:d0:36:10:e5:ed:4c:4d:32:20:2c:00:ff:d2:96:73:c5:45: 6a:ed:55:64:21:7d:92:f5:9f:51:89:dd:4e:06:d7:79:d9:18: bf:8f:f9:09:d0:fc:e9:5f:c0:98:e8:6f:7a:69:bc:c1:a9:0d: be:23:bd:61:d6:b8:fe:fb:7b:0d:16:97:c1:66:b4:36:12:01: 85:8c:5f:8b:a6:d8:5e:e0:af:04:2c:e9:85:89:2b:2a:2b:e3: 7e:e6:c7:c2:ed:d0:97:4d:dc:da:02:b2:a4:c5:c0:ed:de:ce: b2:e8:d6:64:7b:d0:26:f9:09:eb:69:ae:50:7c:5b:56:d5:00: 0e:df:33:8d:bd:40:e4:cd:7c:e9:ed:bc:d4:34:33:23:73:6c: 00:e4:cf:80:aa:74:a2:f6:2c:10:bb:45:47:a1:8f:24:04:0e: 86:d0:56:4d:08:75:78:d0:cb:af:70:82:d4:00:1b:77:c3:ab: a8:7e:c2:3d:90:86:93:5e:b4:aa:30:89:56:83:67:df:36:cb: a4:87:70:00:b9:ff:a2:e6:f1:7a:12:bf:8f:e1:12:ac:8c:15: 43:0c:02:e7:2d:f3:f5:d5:32:b9:16:01:94:84:5c:7a:35:9f: bd:2a:fb:0c -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgICAcMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkZD MDk5MjNCMDVBN0U4RjFBREQ5QTU5ODRFREMxOTMyMERCOTc0QjAeFw0yNDA1MzEw MTMwNDRaFw0yNTA1MTUwMTMwMDNaMDMxMTAvBgNVBAMTKEU1MENDMjdFRUUyMTlE NzYzQTg2QjZFNjY0NEYxMTM3REUyNzNDRkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCrQn/+dqSzvHfvG37vjCaNlwJCmYA38XzO667baqfpnci4zCd5 zF1pYYzRBV5EtDQV1rYGMxb7Aee82TgNvXfoLKtsU+H/9QHt9/GlHRXJia/rUaoa p/yqEltN/9U3r2kHVkluSpWGCR61Bg8Zzsfbk00YrtsbYrUielU8R5lUQpB4ighX MkGvk8jTm11KStQ8m86OqMXumyc6AomcCl8DBXoOyTGM9e6Uwidq1MiWvOYZXBI/ 15k/ydwG/TpWweoS8m0vRVwgeLUK/8yfejeIyGZ9lcxZCKe+S4YBZPpIVLEVLB61 RuSsQMgjKVeX1BMbnFDXPB8X25cjgVvZKPS7AgMBAAGjggIjMIICHzAdBgNVHQ4E FgQU5QzCfu4hnXY6hrbmZE8RN94nPP8wHwYDVR0jBBgwFoAUL8CZI7Bafo8a3ZpZ hO3BkyDbl0swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzEzMS9MOENaSTdCYWZvOGEzWnBaaE8zQmt5RGJsMHMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9MOENaSTdCYWZvOGEzWnBaaE8zQmt5 RGJsMHMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTMxLzVRekNmdTRoblhZNmhyYm1aRThSTjk0blBQOC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwGZ/DANBgkqhkiG9w0BAQsFAAOCAQEAAkieG6k504vSTjNndpjeZuWLS9A2 EOXtTE0yICwA/9KWc8VFau1VZCF9kvWfUYndTgbXedkYv4/5CdD86V/AmOhvemm8 wakNviO9Yda4/vt7DRaXwWa0NhIBhYxfi6bYXuCvBCzphYkrKivjfubHwu3Ql03c 2gKypMXA7d7OsujWZHvQJvkJ62muUHxbVtUADt8zjb1A5M186e281DQzI3NsAOTP gKp0ovYsELtFR6GPJAQOhtBWTQh1eNDLr3CC1AAbd8OrqH7CPZCGk160qjCJVoNn 3zbLpIdwALn/oubxehK/j+ESrIwVQwwC5y3z9dUyuRYBlIRcejWfvSr7DA== -----END CERTIFICATE-----Generated at Wed Jun 26 09:28:33 2024 by rpki-client on console-fra.rpki-client.org