$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/Xusa67HE1J3wdbt6WJeSw2_LF1M.roa File: Xusa67HE1J3wdbt6WJeSw2_LF1M.roa (raw, json) Hash identifier: aGlt1Mi8J5k7o+DOxFOL7pYUGdTsLia5rF3ohHt3ESo= Subject key identifier: 5E:EB:1A:EB:B1:C4:D4:9D:F0:75:BB:7A:58:97:92:C3:6F:CB:17:53 Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 023B Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/Xusa67HE1J3wdbt6WJeSw2_LF1M.roa Signing time: Fri 31 May 2024 01:33:16 +0000 ROA not before: Fri 31 May 2024 01:33:16 +0000 ROA not after: Thu 15 May 2025 01:30:03 +0000 asID: 10013 IP address blocks: 110.3.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Oct 2024 13:36:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 571 (0x23b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: May 31 01:33:16 2024 GMT Not After : May 15 01:30:03 2025 GMT Subject: CN=5EEB1AEBB1C4D49DF075BB7A589792C36FCB1753 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:8c:64:d8:83:42:6b:db:31:48:7a:09:ad:65: 88:d5:1a:a9:c9:f6:07:f3:61:7d:a9:53:2c:37:1f: c2:46:83:2e:4d:56:e4:b6:48:e0:a6:43:b9:10:f0: 74:bf:b2:5a:78:87:b4:9b:4a:d7:ea:be:ef:fe:ad: 99:25:fa:75:4f:04:04:55:3e:90:2e:8b:fe:3c:b8: e8:bd:db:47:5a:a3:bd:43:ac:e1:21:a2:f8:36:99: 21:10:d4:f8:25:82:30:de:c1:90:4a:9e:be:d6:f5: cf:c3:39:a7:c1:69:85:42:31:ef:0a:ba:0f:4a:7d: 89:d5:77:73:10:ab:c7:6c:90:b9:84:17:39:c1:32: e4:0e:cf:36:58:1f:90:be:1b:3d:4d:b6:42:28:94: 02:69:7a:90:6a:9c:ea:ac:a8:43:1c:d1:f2:1c:19: de:f0:53:57:c4:25:ec:59:3e:ce:22:22:b5:1c:2c: 6b:7b:f6:4b:f3:25:64:be:65:8c:1b:7b:22:ce:be: 7e:99:15:28:66:bd:28:6b:d9:61:54:53:6f:fc:26: 75:40:4a:96:c7:fe:ad:7c:4b:0a:4c:56:a0:e2:de: ac:92:1d:88:30:c7:f6:18:15:dc:86:3a:b8:04:34: 02:7a:26:ed:91:32:80:1e:0b:91:4c:6f:6b:86:a6: 0f:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:EB:1A:EB:B1:C4:D4:9D:F0:75:BB:7A:58:97:92:C3:6F:CB:17:53 X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/Xusa67HE1J3wdbt6WJeSw2_LF1M.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 110.3.192.0/18 Signature Algorithm: sha256WithRSAEncryption 79:e2:e1:39:61:fe:07:b5:fb:d8:86:1c:93:fd:18:cd:26:b4: 61:6d:f8:e4:1a:58:96:80:4c:fc:72:9d:bb:11:48:34:81:23: 87:ce:90:9b:95:1c:5f:40:0d:12:27:55:5a:81:81:b9:be:61: f2:c8:57:61:a7:0b:d7:be:5d:58:e6:fd:f3:e9:e5:ae:0d:f4: 17:d1:71:bb:4c:47:80:dd:d5:45:2e:a2:d3:90:cc:fd:4c:c1: 8f:85:68:0f:8e:58:66:b3:ca:d9:1e:4b:38:c9:bf:2c:01:2f: 6c:dd:9d:74:26:7a:6e:16:bf:73:3b:81:a4:4a:59:65:98:03: dd:23:11:9c:59:a0:42:aa:88:03:7c:d1:2e:34:b6:84:e2:42: 3a:0f:ac:54:86:a0:1f:3a:e9:1e:74:7f:32:d2:6c:a3:72:95: 65:e0:aa:2d:8b:c2:ea:e1:89:ad:af:09:3d:73:72:28:aa:4e: 53:e0:7b:7c:37:28:b0:1d:71:9f:8d:da:76:64:ec:d1:52:e3: d2:04:5e:84:ca:31:2e:69:a7:a8:2e:ff:43:d7:ff:bc:d1:50: ec:84:87:bf:30:49:cb:d3:88:c5:3b:13:92:ab:48:5b:8a:bc: 4b:e7:a2:6f:64:d9:c3:8c:c8:1a:2e:a6:21:fe:fa:b3:c1:cf: 8c:ab:f3:30 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAjswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNDA1MzEw MTMzMTZaFw0yNTA1MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDVFRUIxQUVCQjFDNEQ0 OURGMDc1QkI3QTU4OTc5MkMzNkZDQjE3NTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDMjGTYg0Jr2zFIegmtZYjVGqnJ9gfzYX2pUyw3H8JGgy5NVuS2 SOCmQ7kQ8HS/slp4h7SbStfqvu/+rZkl+nVPBARVPpAui/48uOi920dao71DrOEh ovg2mSEQ1PglgjDewZBKnr7W9c/DOafBaYVCMe8Kug9KfYnVd3MQq8dskLmEFznB MuQOzzZYH5C+Gz1NtkIolAJpepBqnOqsqEMc0fIcGd7wU1fEJexZPs4iIrUcLGt7 9kvzJWS+ZYwbeyLOvn6ZFShmvShr2WFUU2/8JnVASpbH/q18SwpMVqDi3qySHYgw x/YYFdyGOrgENAJ6Ju2RMoAeC5FMb2uGpg9ZAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUXusa67HE1J3wdbt6WJeSw2/LF1MwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L1h1c2E2N0hFMUozd2RidDZXSmVTdzJfTEYxTS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAZuA8AwDQYJKoZIhvcNAQELBQADggEBAHni4Tlh/ge1+9iGHJP9GM0mtGFt +OQaWJaATPxynbsRSDSBI4fOkJuVHF9ADRInVVqBgbm+YfLIV2GnC9e+XVjm/fPp 5a4N9BfRcbtMR4Dd1UUuotOQzP1MwY+FaA+OWGazytkeSzjJvywBL2zdnXQmem4W v3M7gaRKWWWYA90jEZxZoEKqiAN80S40toTiQjoPrFSGoB866R50fzLSbKNylWXg qi2Lwurhia2vCT1zciiqTlPge3w3KLAdcZ+N2nZk7NFS49IEXoTKMS5pp6gu/0PX /7zRUOyEh78wScvTiMU7E5KrSFuKvEvnom9k2cOMyBoupiH++rPBz4yr8zA= -----END CERTIFICATE-----Generated at Fri Sep 27 06:22:07 2024 by rpki-client on console-ams.rpki-client.org