$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/OpcHXPBNXaXt5yLugpHoscqniYQ.roa File: OpcHXPBNXaXt5yLugpHoscqniYQ.roa (raw, json) Hash identifier: GAyO6MPLcl2Wq4PCgelYdb98OGwMU8TkkFq+7fPhA14= Subject key identifier: 3A:97:07:5C:F0:4D:5D:A5:ED:E7:22:EE:82:91:E8:B1:CA:A7:89:84 Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 026B Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/OpcHXPBNXaXt5yLugpHoscqniYQ.roa Signing time: Fri 31 May 2024 01:37:41 +0000 ROA not before: Fri 31 May 2024 01:37:41 +0000 ROA not after: Thu 15 May 2025 01:30:03 +0000 asID: 10013 IP address blocks: 61.44.72.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Oct 2024 13:36:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 619 (0x26b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: May 31 01:37:41 2024 GMT Not After : May 15 01:30:03 2025 GMT Subject: CN=3A97075CF04D5DA5EDE722EE8291E8B1CAA78984 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:05:6d:ad:c7:56:80:aa:27:6d:49:41:9e:95: 2a:aa:08:03:21:06:05:21:bf:6f:1f:87:a0:83:1a: c5:7f:89:4d:c9:5c:eb:e1:49:1f:f9:2f:b6:74:95: a6:f7:fd:79:eb:22:e4:c2:79:a0:87:b7:52:7c:3b: 93:49:fc:63:28:17:1d:e2:37:5e:72:cf:01:f1:d2: 92:05:a2:14:31:02:d5:e2:93:d2:17:e6:e2:ae:e4: 56:4e:11:d3:76:1f:18:a3:87:8b:20:57:60:88:bc: 7d:ca:11:3c:12:9b:75:82:5f:a0:80:0c:36:52:8a: 38:c3:db:e7:0b:a0:a3:94:e2:e0:c8:98:87:42:63: 14:40:74:ee:ef:54:13:2c:1d:7a:0c:fe:d8:72:b1: 61:9c:40:f0:3c:4f:16:03:a0:2f:9a:93:bf:6c:a5: dd:b2:15:30:bc:e9:ad:66:81:c2:7f:42:ea:11:29: b6:41:f5:f1:85:8c:b1:c5:70:32:05:82:cc:61:23: 33:8c:c7:7d:f2:15:72:7f:0b:fe:1e:7c:db:57:f1: 76:6b:29:8d:36:59:a2:64:52:da:ec:4f:57:4d:77: b8:41:ed:d9:7e:07:6c:32:0d:06:e4:75:39:ba:46: d0:ab:17:fb:bd:6c:09:e8:89:0e:0d:2b:43:c8:25: d5:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:97:07:5C:F0:4D:5D:A5:ED:E7:22:EE:82:91:E8:B1:CA:A7:89:84 X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/OpcHXPBNXaXt5yLugpHoscqniYQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 61.44.72.0/21 Signature Algorithm: sha256WithRSAEncryption 41:03:db:e9:14:26:c3:1b:8c:b2:6b:f7:6d:32:45:d3:74:d9: 50:1c:7a:b2:af:19:62:12:88:db:4f:fd:fb:7a:07:99:4b:72: bc:e4:b7:ce:d0:eb:3c:7e:1a:84:71:55:f8:02:6b:fe:11:d9: c9:ab:42:f6:83:f7:e2:0a:69:b0:56:f8:32:2c:0e:89:42:1d: 37:5b:c1:3f:96:41:7e:bd:ee:16:00:90:66:d3:e3:ee:81:c7: a6:59:42:d5:a4:9a:69:8e:61:10:90:97:d9:31:ab:01:76:35: 03:70:f8:83:02:35:4b:9b:70:0e:6d:59:e0:e5:e2:81:25:4f: 93:bb:c2:32:b8:ac:71:e7:14:6e:69:9d:37:07:7f:21:d1:3d: 5c:38:9c:9a:e0:02:fe:17:8a:d1:90:fc:21:49:3e:d7:1a:70: 10:1a:e7:d2:3d:05:c0:f3:87:e5:c1:c1:21:16:c5:46:fe:5d: a3:8a:fb:cc:18:1c:6a:25:70:41:b7:6b:0b:42:be:bb:d4:57: 78:57:48:e5:6f:36:a2:ed:41:7f:53:d4:3e:7c:63:cd:39:8d: 11:c5:83:d3:de:d8:f6:38:bf:d4:67:6a:b0:d9:9b:81:af:0e: 60:5d:09:e2:35:8d:7a:83:28:6f:3f:d7:a9:10:12:4c:e8:78: 69:f0:d2:21 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAmswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNDA1MzEw MTM3NDFaFw0yNTA1MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDNBOTcwNzVDRjA0RDVE QTVFREU3MjJFRTgyOTFFOEIxQ0FBNzg5ODQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDCBW2tx1aAqidtSUGelSqqCAMhBgUhv28fh6CDGsV/iU3JXOvh SR/5L7Z0lab3/XnrIuTCeaCHt1J8O5NJ/GMoFx3iN15yzwHx0pIFohQxAtXik9IX 5uKu5FZOEdN2Hxijh4sgV2CIvH3KETwSm3WCX6CADDZSijjD2+cLoKOU4uDImIdC YxRAdO7vVBMsHXoM/thysWGcQPA8TxYDoC+ak79spd2yFTC86a1mgcJ/QuoRKbZB 9fGFjLHFcDIFgsxhIzOMx33yFXJ/C/4efNtX8XZrKY02WaJkUtrsT1dNd7hB7dl+ B2wyDQbkdTm6RtCrF/u9bAnoiQ4NK0PIJdU5AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUOpcHXPBNXaXt5yLugpHoscqniYQwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L09wY0hYUEJOWGFYdDV5THVncEhvc2NxbmlZUS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAM9LEgwDQYJKoZIhvcNAQELBQADggEBAEED2+kUJsMbjLJr920yRdN02VAc erKvGWISiNtP/ft6B5lLcrzkt87Q6zx+GoRxVfgCa/4R2cmrQvaD9+IKabBW+DIs DolCHTdbwT+WQX697hYAkGbT4+6Bx6ZZQtWkmmmOYRCQl9kxqwF2NQNw+IMCNUub cA5tWeDl4oElT5O7wjK4rHHnFG5pnTcHfyHRPVw4nJrgAv4XitGQ/CFJPtcacBAa 59I9BcDzh+XBwSEWxUb+XaOK+8wYHGolcEG3awtCvrvUV3hXSOVvNqLtQX9T1D58 Y805jRHFg9Pe2PY4v9RnarDZm4GvDmBdCeI1jXqDKG8/16kQEkzoeGnw0iE= -----END CERTIFICATE-----Generated at Fri Sep 27 06:22:06 2024 by rpki-client on console-ams.rpki-client.org