$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/YKPTc2leDXpg9k28k7GDThYu0BM.roa File: YKPTc2leDXpg9k28k7GDThYu0BM.roa (raw, json) Hash identifier: gEuXvLGpLd1nGZBxcSVdOEnFIyIfN/69/AMlhiXYPns= Subject key identifier: 60:A3:D3:73:69:5E:0D:7A:60:F6:4D:BC:93:B1:83:4E:16:2E:D0:13 Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 01FF Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/YKPTc2leDXpg9k28k7GDThYu0BM.roa Signing time: Fri 31 May 2024 01:29:08 +0000 ROA not before: Fri 31 May 2024 01:29:08 +0000 ROA not after: Thu 15 May 2025 01:30:03 +0000 asID: 10013 IP address blocks: 27.120.184.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Oct 2024 13:36:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 511 (0x1ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: May 31 01:29:08 2024 GMT Not After : May 15 01:30:03 2025 GMT Subject: CN=60A3D373695E0D7A60F64DBC93B1834E162ED013 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:1a:65:a3:34:67:0a:2b:d0:b4:97:ae:b8:4d: 46:d3:df:e4:ec:db:26:a2:01:b1:e3:e7:e8:a3:e1: bf:73:9d:53:c9:1c:82:ca:c4:46:62:9f:d6:e6:a6: 86:a5:2d:b7:0d:40:53:f1:ef:9d:38:1a:69:0c:f5: 2f:23:71:60:ed:36:09:0b:a1:77:67:93:e7:78:b7: 30:1b:c0:f1:ba:2c:ce:bd:9b:a2:ed:f1:77:c5:0d: 4b:c1:28:49:1c:0c:f9:80:60:e7:f4:1c:d3:7b:f2: 08:75:70:1c:72:41:97:ce:c9:bb:f7:8b:60:3c:8d: ad:95:23:aa:94:31:4b:51:ef:96:bf:21:ac:5d:c7: 6c:42:03:c9:06:6b:c1:45:0b:9c:21:ad:f1:0c:01: 55:7f:10:53:1c:3c:14:bc:65:06:6f:b0:48:5c:6a: 0b:1f:52:de:a0:be:7b:be:95:db:8d:8a:16:fb:17: 4a:fe:2f:55:8b:5c:b8:be:6c:4b:2d:e0:dd:76:cd: 25:33:a6:4d:6b:9d:a3:b4:ab:c4:1e:13:63:3a:a3: 26:01:e9:d9:d6:50:64:04:a4:d6:88:6b:28:96:af: a4:30:9d:ac:6a:45:1f:89:af:52:61:bd:98:6e:71: e2:1c:23:d5:ba:93:82:f9:a9:41:dc:64:55:4f:61: 3d:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:A3:D3:73:69:5E:0D:7A:60:F6:4D:BC:93:B1:83:4E:16:2E:D0:13 X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/YKPTc2leDXpg9k28k7GDThYu0BM.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.120.184.0/21 Signature Algorithm: sha256WithRSAEncryption 19:5b:f0:a6:c8:00:c3:01:fb:dd:48:3d:cd:72:ff:d1:8e:20: f8:96:74:1a:b7:c3:36:51:8c:0d:d3:6f:28:25:a4:5e:ee:37: 3f:4d:a9:85:f3:20:0d:84:ae:16:70:46:14:27:82:30:16:ae: b3:48:81:d6:44:01:8e:88:61:59:19:ab:72:03:41:96:c1:dc: ae:d5:7b:6e:91:aa:a4:03:4a:6c:70:ca:d2:bd:60:8e:ea:dc: b7:6e:ae:62:01:a3:7d:78:b2:6f:5a:e2:14:f9:4f:8e:32:a9: da:e3:d7:ab:bc:b4:60:b4:7a:86:7d:77:1d:aa:d8:1f:7d:4e: 7e:ff:96:d7:0d:22:43:22:f6:53:9c:57:01:ba:81:0b:a5:fe: 21:2a:80:8d:cd:4c:9d:3c:4d:b0:8d:bb:18:ab:d0:c7:06:a4: 63:c8:b9:61:b9:97:29:7c:43:d2:5a:48:f2:fc:97:16:93:91: 91:90:77:fa:cf:78:ea:80:b9:b1:1d:5d:96:c6:b3:23:6a:70: aa:73:ea:ba:37:db:9d:73:a0:c8:fa:08:d2:6b:7a:e9:3d:12: a6:4a:82:f6:57:68:1d:4d:e7:50:13:d9:a5:30:cf:b0:79:92: f5:35:70:33:cd:8c:5e:ec:5e:32:e1:aa:65:a7:9d:1f:34:33: 3d:3c:ae:b8 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAf8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNDA1MzEw MTI5MDhaFw0yNTA1MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDYwQTNEMzczNjk1RTBE N0E2MEY2NERCQzkzQjE4MzRFMTYyRUQwMTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDPGmWjNGcKK9C0l664TUbT3+Ts2yaiAbHj5+ij4b9znVPJHILK xEZin9bmpoalLbcNQFPx7504GmkM9S8jcWDtNgkLoXdnk+d4tzAbwPG6LM69m6Lt 8XfFDUvBKEkcDPmAYOf0HNN78gh1cBxyQZfOybv3i2A8ja2VI6qUMUtR75a/Iaxd x2xCA8kGa8FFC5whrfEMAVV/EFMcPBS8ZQZvsEhcagsfUt6gvnu+lduNihb7F0r+ L1WLXLi+bEst4N12zSUzpk1rnaO0q8QeE2M6oyYB6dnWUGQEpNaIayiWr6Qwnaxq RR+Jr1JhvZhuceIcI9W6k4L5qUHcZFVPYT1pAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUYKPTc2leDXpg9k28k7GDThYu0BMwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L1lLUFRjMmxlRFhwZzlrMjhrN0dEVGhZdTBCTS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMbeLgwDQYJKoZIhvcNAQELBQADggEBABlb8KbIAMMB+91IPc1y/9GOIPiW dBq3wzZRjA3TbyglpF7uNz9NqYXzIA2ErhZwRhQngjAWrrNIgdZEAY6IYVkZq3ID QZbB3K7Ve26RqqQDSmxwytK9YI7q3LdurmIBo314sm9a4hT5T44yqdrj16u8tGC0 eoZ9dx2q2B99Tn7/ltcNIkMi9lOcVwG6gQul/iEqgI3NTJ08TbCNuxir0McGpGPI uWG5lyl8Q9JaSPL8lxaTkZGQd/rPeOqAubEdXZbGsyNqcKpz6ro3251zoMj6CNJr euk9EqZKgvZXaB1N51AT2aUwz7B5kvU1cDPNjF7sXjLhqmWnnR80Mz08rrg= -----END CERTIFICATE-----Generated at Fri Sep 27 05:00:22 2024 by rpki-client on console-fra.rpki-client.org