$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/c4D0HsiOX65lukWiRm_8Y4nyNHM.roa File: c4D0HsiOX65lukWiRm_8Y4nyNHM.roa (raw, json) Hash identifier: RcAaK5ZKLK++lOQfbzTWgcWrnWnyi+rzZGMjMJbiZZk= Subject key identifier: 73:80:F4:1E:C8:8E:5F:AE:65:BA:45:A2:46:6F:FC:63:89:F2:34:73 Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 02AC Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/c4D0HsiOX65lukWiRm_8Y4nyNHM.roa Signing time: Fri 31 May 2024 01:41:37 +0000 ROA not before: Fri 31 May 2024 01:41:37 +0000 ROA not after: Thu 15 May 2025 01:30:03 +0000 asID: 10013 IP address blocks: 153.120.216.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Oct 2024 13:36:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 684 (0x2ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: May 31 01:41:37 2024 GMT Not After : May 15 01:30:03 2025 GMT Subject: CN=7380F41EC88E5FAE65BA45A2466FFC6389F23473 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:3a:32:cb:61:11:20:ca:79:50:e3:06:74:df: 3e:c8:5f:e9:ca:21:55:e2:c3:c3:aa:7a:58:63:b7: 05:f3:c6:15:d8:85:7c:bb:58:37:7c:55:e9:20:82: 9a:c3:d7:e9:a8:e6:78:04:fd:22:a5:c7:03:d5:aa: fa:ee:2c:d9:d8:02:54:dd:34:7b:6d:2b:47:6b:7c: 40:8c:1e:78:5c:4f:d3:c1:4a:c0:77:ca:49:3e:ba: f7:13:ae:d6:bc:17:66:f7:c6:8a:ae:a1:d3:1a:7c: 51:da:4b:4d:01:0c:c3:e7:d0:78:b7:be:9a:8e:6c: e7:8e:07:46:85:08:11:fa:6b:58:5c:ce:8f:f0:9a: 55:1a:fd:15:55:8f:5b:c0:23:97:37:b0:cc:3d:44: f5:df:00:41:51:7a:72:fe:98:67:b8:c5:54:4f:90: c8:45:a4:0e:05:d0:d1:7b:8e:d2:57:e0:16:db:83: 42:eb:5c:0f:94:b8:6b:cc:e6:55:27:d9:e9:3b:25: da:5d:b5:e2:34:9a:aa:da:31:c6:3a:65:23:10:ae: 5b:e1:f9:79:1b:ef:d8:1e:e0:83:e2:65:b8:3b:2c: 61:98:0f:f9:a0:65:cf:95:87:c9:55:69:b7:d2:16: 27:07:38:00:4e:7f:98:0b:a6:7e:37:08:8a:75:73: 11:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:80:F4:1E:C8:8E:5F:AE:65:BA:45:A2:46:6F:FC:63:89:F2:34:73 X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/c4D0HsiOX65lukWiRm_8Y4nyNHM.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 153.120.216.0/23 Signature Algorithm: sha256WithRSAEncryption 5f:0d:0e:61:9e:31:37:a6:71:87:6e:92:4e:54:61:86:64:61: 39:5d:f7:6a:ae:a7:f7:83:52:fc:aa:52:7f:5a:42:71:30:3d: c5:9f:0a:da:3e:94:2d:79:65:4f:ac:ae:fe:6b:df:de:8a:e0: 68:ae:db:cf:5e:30:20:bd:53:f5:e1:0e:58:16:04:f8:f3:7d: ff:ec:37:da:3f:f1:31:88:69:d4:76:6a:12:d4:77:e5:09:b1: a0:0c:d3:8a:31:fe:8f:e2:b0:f3:77:99:a9:79:a0:04:e7:66: 1d:c7:bf:88:46:a6:b3:3b:8c:1f:fa:66:af:a7:8d:3b:37:98: 82:82:db:a6:6a:75:11:bf:c6:19:ed:cf:90:1f:a7:0e:9e:7f: c5:90:1c:0a:43:ba:d0:18:d0:a6:90:eb:be:25:c3:49:04:92: 8f:8e:28:a8:77:79:20:c8:3d:71:5e:1a:f1:cd:f1:9e:94:85: b0:95:85:46:fc:51:ac:6a:ca:4f:cc:df:b9:58:05:0a:db:66: 7f:9e:5b:fb:14:bd:33:95:04:11:fc:6f:07:7a:0f:06:cb:70: d0:76:9e:03:4d:b4:30:37:7d:cf:97:1b:c5:d3:b0:6b:ea:4b: 44:be:dc:f2:39:54:14:a0:08:6c:d0:24:5d:7c:b5:2c:a9:a8: 49:40:c9:d5 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAqwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNDA1MzEw MTQxMzdaFw0yNTA1MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDczODBGNDFFQzg4RTVG QUU2NUJBNDVBMjQ2NkZGQzYzODlGMjM0NzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDUOjLLYREgynlQ4wZ03z7IX+nKIVXiw8OqelhjtwXzxhXYhXy7 WDd8VekggprD1+mo5ngE/SKlxwPVqvruLNnYAlTdNHttK0drfECMHnhcT9PBSsB3 ykk+uvcTrta8F2b3xoquodMafFHaS00BDMPn0Hi3vpqObOeOB0aFCBH6a1hczo/w mlUa/RVVj1vAI5c3sMw9RPXfAEFRenL+mGe4xVRPkMhFpA4F0NF7jtJX4Bbbg0Lr XA+UuGvM5lUn2ek7JdpdteI0mqraMcY6ZSMQrlvh+Xkb79ge4IPiZbg7LGGYD/mg Zc+Vh8lVabfSFicHOABOf5gLpn43CIp1cxEjAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUc4D0HsiOX65lukWiRm/8Y4nyNHMwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L2M0RDBIc2lPWDY1bHVrV2lSbV84WTRueU5ITS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAGZeNgwDQYJKoZIhvcNAQELBQADggEBAF8NDmGeMTemcYdukk5UYYZkYTld 92qup/eDUvyqUn9aQnEwPcWfCto+lC15ZU+srv5r396K4Giu289eMCC9U/XhDlgW BPjzff/sN9o/8TGIadR2ahLUd+UJsaAM04ox/o/isPN3mal5oATnZh3Hv4hGprM7 jB/6Zq+njTs3mIKC26ZqdRG/xhntz5Afpw6ef8WQHApDutAY0KaQ674lw0kEko+O KKh3eSDIPXFeGvHN8Z6UhbCVhUb8Uaxqyk/M37lYBQrbZn+eW/sUvTOVBBH8bwd6 DwbLcNB2ngNNtDA3fc+XG8XTsGvqS0S+3PI5VBSgCGzQJF18tSypqElAydU= -----END CERTIFICATE-----Generated at Fri Sep 27 06:22:07 2024 by rpki-client on console-ams.rpki-client.org