$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/2154/V_xXLU_yzwTMPpo-xG2iL60Ts0g.roa File: V_xXLU_yzwTMPpo-xG2iL60Ts0g.roa (raw, json) Hash identifier: yXML+ClFj2AuMunUvsdfvxxJJmRJuN+UbmvdPR/Yo4c= Subject key identifier: 57:FC:57:2D:4F:F2:CF:04:CC:3E:9A:3E:C4:6D:A2:2F:AD:13:B3:48 Certificate issuer: /CN=35892143C493B9B2CC1E79133F5231C72E152685 Certificate serial: 2B Authority key identifier: 35:89:21:43:C4:93:B9:B2:CC:1E:79:13:3F:52:31:C7:2E:15:26:85 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/NYkhQ8STubLMHnkTP1Ixxy4VJoU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2154/V_xXLU_yzwTMPpo-xG2iL60Ts0g.roa Signing time: Fri 01 Dec 2023 01:30:43 +0000 ROA not before: Fri 01 Dec 2023 01:30:43 +0000 ROA not after: Thu 14 Nov 2024 01:30:03 +0000 asID: 396982 IP address blocks: 202.250.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2154/NYkhQ8STubLMHnkTP1Ixxy4VJoU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2154/NYkhQ8STubLMHnkTP1Ixxy4VJoU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/NYkhQ8STubLMHnkTP1Ixxy4VJoU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 01:35:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43 (0x2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35892143C493B9B2CC1E79133F5231C72E152685 Validity Not Before: Dec 1 01:30:43 2023 GMT Not After : Nov 14 01:30:03 2024 GMT Subject: CN=57FC572D4FF2CF04CC3E9A3EC46DA22FAD13B348 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:0d:b5:76:55:b5:ed:c1:a2:af:91:a0:9c:f5: 50:17:24:da:ef:69:68:21:d9:dd:ea:2a:36:71:6e: 02:f1:eb:1d:ed:d7:c9:14:eb:da:88:69:98:f1:61: 0a:ef:0e:7c:d2:08:4e:70:fd:b3:63:0e:97:ec:fe: 60:84:16:39:47:43:a2:33:d6:d1:75:a9:37:69:5d: 88:73:fb:7a:49:47:b9:39:c0:62:5d:3c:e1:68:cd: 33:e1:6a:28:01:47:b5:04:7f:d0:9d:af:7e:11:ff: 6d:5e:5c:f4:bb:a4:33:6e:92:de:e4:61:d4:35:07: 64:83:40:6a:33:b2:24:72:34:b6:3d:98:5d:6c:d7: 48:7a:f8:67:01:86:df:4d:0c:b4:b4:88:f2:46:d8: c3:a7:36:9b:39:92:c8:01:8f:49:7b:81:91:a4:0a: 6b:30:05:d9:e3:a1:12:8f:3d:37:a7:57:e5:ae:70: 5c:8d:84:1e:95:fa:7e:b6:0a:ef:22:a7:db:01:96: b0:36:4f:0c:18:8b:dc:1e:d9:56:7e:30:f6:d5:8f: 98:bf:78:7a:11:1f:fa:76:b9:c4:39:64:ba:a7:83: 83:78:d3:64:6a:ef:88:e2:7c:0e:87:7f:a1:6e:ce: 21:6a:6a:1a:56:91:90:ea:12:5c:c6:bc:61:75:5a: 20:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:FC:57:2D:4F:F2:CF:04:CC:3E:9A:3E:C4:6D:A2:2F:AD:13:B3:48 X509v3 Authority Key Identifier: keyid:35:89:21:43:C4:93:B9:B2:CC:1E:79:13:3F:52:31:C7:2E:15:26:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2154/NYkhQ8STubLMHnkTP1Ixxy4VJoU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/NYkhQ8STubLMHnkTP1Ixxy4VJoU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2154/V_xXLU_yzwTMPpo-xG2iL60Ts0g.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.250.28.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:a4:89:b8:3e:f0:65:0d:f0:b4:cc:de:74:dd:22:9d:dd:6b: 4b:3e:59:ff:de:cd:64:9e:4d:fd:1a:cc:b7:b5:84:8e:5f:be: 1c:f0:14:26:e2:e6:63:dd:da:5e:1d:82:3e:b0:19:5a:9b:51: 65:6b:09:6c:76:b8:ec:a4:fd:d4:6e:16:e9:2e:30:82:fd:78: 37:6b:1b:b0:ae:b7:23:8a:fe:36:a4:00:eb:13:4d:0e:10:0b: 44:75:32:5d:ba:05:f5:6f:cf:8b:62:e1:1a:49:28:64:6e:ac: 40:0a:60:f5:97:e0:7c:9b:98:36:9c:43:13:a0:f3:ff:e5:d2: 3c:ed:72:f2:60:ce:c6:95:8b:b3:0e:e5:c7:63:5a:75:38:6c: a0:d7:9b:97:ba:c4:4a:2a:78:83:a7:3b:f5:6a:91:d2:ba:f7: 15:72:8f:e5:b0:60:54:88:62:b9:95:48:88:99:16:65:37:80: b9:48:49:de:b1:4d:49:50:80:1e:25:cf:58:ca:8d:08:a7:c3: 38:40:a4:b3:b7:d9:e7:12:98:1c:87:17:b9:a1:44:59:ed:64: 77:8c:ea:ef:e8:42:3b:d0:60:23:f7:a3:7f:06:c9:51:1d:a7: 89:ba:6d:27:0f:ea:96:9a:75:96:7f:ad:4a:71:88:28:5a:cb: bd:8c:6b:ac -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgIBKzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzNTg5 MjE0M0M0OTNCOUIyQ0MxRTc5MTMzRjUyMzFDNzJFMTUyNjg1MB4XDTIzMTIwMTAx MzA0M1oXDTI0MTExNDAxMzAwM1owMzExMC8GA1UEAxMoNTdGQzU3MkQ0RkYyQ0Yw NENDM0U5QTNFQzQ2REEyMkZBRDEzQjM0ODCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALINtXZVte3Boq+RoJz1UBck2u9paCHZ3eoqNnFuAvHrHe3XyRTr 2ohpmPFhCu8OfNIITnD9s2MOl+z+YIQWOUdDojPW0XWpN2ldiHP7eklHuTnAYl08 4WjNM+FqKAFHtQR/0J2vfhH/bV5c9LukM26S3uRh1DUHZINAajOyJHI0tj2YXWzX SHr4ZwGG300MtLSI8kbYw6c2mzmSyAGPSXuBkaQKazAF2eOhEo89N6dX5a5wXI2E HpX6frYK7yKn2wGWsDZPDBiL3B7ZVn4w9tWPmL94ehEf+na5xDlkuqeDg3jTZGrv iOJ8Dod/oW7OIWpqGlaRkOoSXMa8YXVaIJsCAwEAAaOCAiYwggIiMB0GA1UdDgQW BBRX/FctT/LPBMw+mj7EbaIvrROzSDAfBgNVHSMEGDAWgBQ1iSFDxJO5ssweeRM/ UjHHLhUmhTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjE1NC9OWWtoUThTVHViTE1IbmtUUDFJeHh5NFZKb1UuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9OWWtoUThTVHViTE1IbmtUUDFJeHh5 NFZKb1UuY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMjE1NC9WX3hYTFVfeXp3VE1QcG8teEcyaUw2MFRzMGcucm9h MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAyvocMA0GCSqGSIb3DQEBCwUAA4IBAQA/pIm4PvBlDfC0zN503SKd3WtL Pln/3s1knk39Gsy3tYSOX74c8BQm4uZj3dpeHYI+sBlam1FlawlsdrjspP3Ubhbp LjCC/Xg3axuwrrcjiv42pADrE00OEAtEdTJdugX1b8+LYuEaSShkbqxACmD1l+B8 m5g2nEMToPP/5dI87XLyYM7GlYuzDuXHY1p1OGyg15uXusRKKniDpzv1apHSuvcV co/lsGBUiGK5lUiImRZlN4C5SEnesU1JUIAeJc9Yyo0Ip8M4QKSzt9nnEpgchxe5 oURZ7WR3jOrv6EI70GAj96N/BslRHaeJum0nD+qWmnWWf61KcYgoWsu9jGus -----END CERTIFICATE-----Generated at Mon May 6 03:07:02 2024 by rpki-client on console-fra.rpki-client.org