$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/IFrYkCgBxysdW-hY9YG0k7SOpeQ.roa File: IFrYkCgBxysdW-hY9YG0k7SOpeQ.roa (raw, json) Hash identifier: zjIBylhi8EnwBpmQfjS8fmgDrSumZKjGp18SWhVSbx4= Subject key identifier: 20:5A:D8:90:28:01:C7:2B:1D:5B:E8:58:F5:81:B4:93:B4:8E:A5:E4 Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 0286 Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/IFrYkCgBxysdW-hY9YG0k7SOpeQ.roa Signing time: Fri 31 May 2024 01:39:39 +0000 ROA not before: Fri 31 May 2024 01:39:39 +0000 ROA not after: Thu 15 May 2025 01:30:03 +0000 asID: 10013 IP address blocks: 119.150.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Oct 2024 13:36:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 646 (0x286) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: May 31 01:39:39 2024 GMT Not After : May 15 01:30:03 2025 GMT Subject: CN=205AD8902801C72B1D5BE858F581B493B48EA5E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:91:d1:d5:32:84:0f:31:52:ce:1e:3e:00:36: b0:5a:6d:be:33:86:15:4a:ee:bf:a3:20:e9:cf:1d: 17:e8:3e:28:c9:d4:5a:89:86:f5:4f:32:59:b3:5c: 00:ae:1f:8d:bf:00:0d:cf:60:ff:b8:f4:e0:b7:12: 07:e8:20:35:c1:9f:c2:ff:33:f2:62:af:fe:2a:52: 3b:77:b1:0b:92:8f:d2:ab:36:e9:e5:bb:2d:61:4f: c9:a2:3f:a1:f4:5a:67:d7:90:c5:89:f7:df:b5:ad: 7d:b2:4b:d2:ae:69:47:4f:fe:8d:fe:51:aa:af:53: 15:97:4d:28:4c:a7:36:fe:57:4b:fb:5d:fa:77:ca: 84:db:f7:5b:9c:b4:02:03:b1:b0:19:5f:12:17:a3: 13:c4:05:bb:e8:f2:43:5f:24:74:b5:dc:35:01:19: 87:ba:ba:89:46:4a:ab:62:4a:61:5e:19:20:8c:ce: 9a:63:6e:26:c1:9c:22:20:3a:f6:4b:b6:f1:d6:e3: eb:94:05:07:a9:be:2c:a5:4b:7a:51:24:91:74:13: dd:65:2d:0b:34:62:34:64:b1:d6:2d:c2:3d:52:5e: f1:6c:bd:68:f9:bb:1c:55:80:f5:83:40:4e:c1:94: e3:00:62:1a:59:3a:6e:fe:e7:52:94:80:22:4e:e9: e7:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:5A:D8:90:28:01:C7:2B:1D:5B:E8:58:F5:81:B4:93:B4:8E:A5:E4 X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/IFrYkCgBxysdW-hY9YG0k7SOpeQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 119.150.128.0/18 Signature Algorithm: sha256WithRSAEncryption 18:17:bb:e3:1a:6a:e2:62:bc:fd:89:ba:62:cf:8a:b4:e6:26: 06:ca:c5:f0:67:05:ea:94:3c:6c:18:ef:18:48:91:d6:07:03: f9:1b:91:23:ed:f5:d6:84:53:ee:fd:21:96:4b:6a:63:93:d2: df:5b:be:9d:21:b5:96:f4:cc:a2:12:c6:3d:8a:f0:c6:0f:76: 07:fe:be:fd:9b:06:8f:58:bd:45:4a:8e:3f:a0:49:af:5a:cf: c6:77:39:01:40:cb:89:28:6b:42:82:df:03:45:31:1a:af:58: 9a:21:65:65:59:e2:dc:dc:37:dc:f8:e6:11:d4:b5:70:35:46: a1:a5:8b:99:3d:13:9c:8c:64:7c:37:d9:56:06:cb:cf:90:1f: f2:c1:a4:3e:f0:4d:e5:25:55:d2:87:f1:97:f8:b3:56:f9:33: f1:42:d2:f9:d2:15:bf:58:af:a1:5b:a4:73:f4:65:af:74:75: d2:07:41:3c:1c:08:7b:84:dd:c7:b7:7e:c8:2d:36:4a:98:e8: 80:15:b4:02:35:e1:be:cc:c4:86:50:fb:fd:a8:a0:2a:d4:40: 25:2b:0d:21:ba:c6:b4:2a:88:04:f7:77:36:dd:56:9c:78:e9: ca:19:fe:66:b9:dc:78:2b:4b:c1:47:bf:12:f8:3a:f4:89:be: bc:cd:fe:99 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAoYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNDA1MzEw MTM5MzlaFw0yNTA1MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDIwNUFEODkwMjgwMUM3 MkIxRDVCRTg1OEY1ODFCNDkzQjQ4RUE1RTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC2kdHVMoQPMVLOHj4ANrBabb4zhhVK7r+jIOnPHRfoPijJ1FqJ hvVPMlmzXACuH42/AA3PYP+49OC3EgfoIDXBn8L/M/Jir/4qUjt3sQuSj9KrNunl uy1hT8miP6H0WmfXkMWJ99+1rX2yS9KuaUdP/o3+UaqvUxWXTShMpzb+V0v7Xfp3 yoTb91uctAIDsbAZXxIXoxPEBbvo8kNfJHS13DUBGYe6uolGSqtiSmFeGSCMzppj bibBnCIgOvZLtvHW4+uUBQepviylS3pRJJF0E91lLQs0YjRksdYtwj1SXvFsvWj5 uxxVgPWDQE7BlOMAYhpZOm7+51KUgCJO6eeDAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUIFrYkCgBxysdW+hY9YG0k7SOpeQwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L0lGcllrQ2dCeHlzZFctaFk5WUcwazdTT3BlUS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAZ3loAwDQYJKoZIhvcNAQELBQADggEBABgXu+MaauJivP2JumLPirTmJgbK xfBnBeqUPGwY7xhIkdYHA/kbkSPt9daEU+79IZZLamOT0t9bvp0htZb0zKISxj2K 8MYPdgf+vv2bBo9YvUVKjj+gSa9az8Z3OQFAy4koa0KC3wNFMRqvWJohZWVZ4tzc N9z45hHUtXA1RqGli5k9E5yMZHw32VYGy8+QH/LBpD7wTeUlVdKH8Zf4s1b5M/FC 0vnSFb9Yr6FbpHP0Za90ddIHQTwcCHuE3ce3fsgtNkqY6IAVtAI14b7MxIZQ+/2o oCrUQCUrDSG6xrQqiAT3dzbdVpx46coZ/ma53HgrS8FHvxL4OvSJvrzN/pk= -----END CERTIFICATE-----Generated at Fri Sep 27 05:00:22 2024 by rpki-client on console-fra.rpki-client.org