$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/UJIqamlH5qiX4pdHFv5msIT12d4.roa File: UJIqamlH5qiX4pdHFv5msIT12d4.roa (raw, json) Hash identifier: nTMCM/oyhvpJc+rPKWQqUF0hjIIid5Qhb5kZs1swPc0= Subject key identifier: 50:92:2A:6A:69:47:E6:A8:97:E2:97:47:16:FE:66:B0:84:F5:D9:DE Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 02D1 Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/UJIqamlH5qiX4pdHFv5msIT12d4.roa Signing time: Sun 30 Jun 2024 01:32:17 +0000 ROA not before: Sun 30 Jun 2024 01:32:17 +0000 ROA not after: Tue 24 Jun 2025 10:46:45 +0000 asID: 10013 IP address blocks: 153.120.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Oct 2024 13:36:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 721 (0x2d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: Jun 30 01:32:17 2024 GMT Not After : Jun 24 10:46:45 2025 GMT Subject: CN=50922A6A6947E6A897E2974716FE66B084F5D9DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:15:df:e0:08:fc:14:c6:03:7f:f0:c4:87:d9: 57:ff:b4:8f:ac:ec:ac:cb:39:50:51:db:31:8b:da: 0f:ce:c8:e3:f5:06:3c:7e:8c:a1:12:1b:a1:3c:06: 95:f5:9c:b7:9a:9c:fc:2b:d0:d4:76:d0:88:ed:9a: f6:b9:5f:6f:5d:81:1b:7e:ee:28:79:cd:9f:3f:fa: d9:97:e6:c6:48:91:ce:b1:a0:e8:cd:3a:45:48:c0: 9c:d7:2f:eb:c2:0d:9f:7a:a6:28:17:24:ea:10:e3: 78:39:22:29:7d:cb:fc:92:6c:5f:60:0a:10:72:e1: 48:3e:ed:23:9e:47:dd:41:ff:b7:d8:51:5c:51:f3: 6c:1b:b3:54:84:5b:a3:c7:a4:2b:c2:90:93:df:3e: d1:cb:e2:52:d9:ec:85:29:f9:f9:ba:c3:51:1c:d4: 9a:86:c9:27:bc:a0:7c:4f:f0:fc:84:04:57:24:80: 3f:e7:d6:18:96:d4:3d:ce:4f:65:3e:e7:0b:ce:9f: a6:39:0f:fe:bf:55:2f:df:3b:7c:95:71:db:d2:63: a3:14:eb:a3:75:69:5d:96:c1:a2:ea:3f:5c:77:34: b2:9d:58:a9:ed:eb:88:1b:66:a2:bd:9a:06:00:2d: 69:be:bb:8b:36:b9:9e:ff:e9:65:2f:76:a1:88:2d: 66:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:92:2A:6A:69:47:E6:A8:97:E2:97:47:16:FE:66:B0:84:F5:D9:DE X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/UJIqamlH5qiX4pdHFv5msIT12d4.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 153.120.240.0/20 Signature Algorithm: sha256WithRSAEncryption 73:c8:77:ad:92:58:6a:34:98:8d:e6:2b:6c:5a:05:11:c1:50: 1c:e5:88:30:b0:14:c0:88:d8:9e:e7:b6:6c:97:62:4d:3d:4e: 90:6e:1d:2c:14:a0:68:6e:22:a1:78:5c:e3:b2:8b:68:07:ca: d5:dc:2f:e1:e7:17:3a:d1:2b:9d:de:4a:6d:d9:8d:7d:41:ef: 8d:96:e1:3c:95:a2:76:e1:9e:0e:51:63:82:cc:a6:d8:9b:d3: 4d:b5:12:a0:ad:86:4a:53:07:f5:64:91:6f:cf:ac:cf:f6:cc: a0:b2:c0:c0:d3:fe:b6:82:89:de:73:9c:cd:91:70:78:73:36: 71:27:82:a8:23:6b:6a:1e:5b:1b:cd:71:7d:59:dc:b9:cb:7c: a0:47:19:7a:ad:1a:11:2e:14:96:36:7e:a4:f4:a1:dc:da:cd: 3e:a0:43:ac:40:57:0c:90:dc:dd:1f:76:49:6d:be:be:6f:bc: a8:a7:a1:89:bf:00:d1:91:90:9b:87:39:a2:f2:06:94:c1:d2: 32:5c:97:cd:b4:52:17:a0:36:95:0b:12:b9:86:f3:3b:ac:7c: 08:ae:6e:74:ab:bf:19:63:c9:a0:d2:49:29:fd:b9:87:62:24: b1:e9:cd:d8:9a:70:f1:d9:9f:e0:89:7c:69:8e:e9:c4:e6:38: 85:b4:e7:27 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAtEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNDA2MzAw MTMyMTdaFw0yNTA2MjQxMDQ2NDVaMDMxMTAvBgNVBAMTKDUwOTIyQTZBNjk0N0U2 QTg5N0UyOTc0NzE2RkU2NkIwODRGNUQ5REUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCuFd/gCPwUxgN/8MSH2Vf/tI+s7KzLOVBR2zGL2g/OyOP1Bjx+ jKESG6E8BpX1nLeanPwr0NR20Ijtmva5X29dgRt+7ih5zZ8/+tmX5sZIkc6xoOjN OkVIwJzXL+vCDZ96pigXJOoQ43g5Iil9y/ySbF9gChBy4Ug+7SOeR91B/7fYUVxR 82wbs1SEW6PHpCvCkJPfPtHL4lLZ7IUp+fm6w1Ec1JqGySe8oHxP8PyEBFckgD/n 1hiW1D3OT2U+5wvOn6Y5D/6/VS/fO3yVcdvSY6MU66N1aV2WwaLqP1x3NLKdWKnt 64gbZqK9mgYALWm+u4s2uZ7/6WUvdqGILWbzAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUUJIqamlH5qiX4pdHFv5msIT12d4wHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L1VKSXFhbWxINXFpWDRwZEhGdjVtc0lUMTJkNC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBASZePAwDQYJKoZIhvcNAQELBQADggEBAHPId62SWGo0mI3mK2xaBRHBUBzl iDCwFMCI2J7ntmyXYk09TpBuHSwUoGhuIqF4XOOyi2gHytXcL+HnFzrRK53eSm3Z jX1B742W4TyVonbhng5RY4LMptib0021EqCthkpTB/VkkW/PrM/2zKCywMDT/raC id5znM2RcHhzNnEngqgja2oeWxvNcX1Z3LnLfKBHGXqtGhEuFJY2fqT0odzazT6g Q6xAVwyQ3N0fdkltvr5vvKinoYm/ANGRkJuHOaLyBpTB0jJcl820UhegNpULErmG 8zusfAiubnSrvxljyaDSSSn9uYdiJLHpzdiacPHZn+CJfGmO6cTmOIW05yc= -----END CERTIFICATE-----Generated at Fri Sep 27 06:22:07 2024 by rpki-client on console-ams.rpki-client.org