$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/cyS7y-cFiDmyQP5r4d5Ctf0Px1Y.roa File: cyS7y-cFiDmyQP5r4d5Ctf0Px1Y.roa (raw, json) Hash identifier: 88Rv/UkU/GcdjdutApTwG5+9n9r68wdY2pWZ+O2kpS4= Subject key identifier: 73:24:BB:CB:E7:05:88:39:B2:40:FE:6B:E1:DE:42:B5:FD:0F:C7:56 Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 0232 Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/cyS7y-cFiDmyQP5r4d5Ctf0Px1Y.roa Signing time: Fri 31 May 2024 01:33:13 +0000 ROA not before: Fri 31 May 2024 01:33:13 +0000 ROA not after: Thu 15 May 2025 01:30:03 +0000 asID: 10013 IP address blocks: 36.52.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Oct 2024 13:36:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 562 (0x232) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: May 31 01:33:13 2024 GMT Not After : May 15 01:30:03 2025 GMT Subject: CN=7324BBCBE7058839B240FE6BE1DE42B5FD0FC756 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:fc:bc:42:8c:b3:30:a1:8c:41:d4:23:49:e6: 22:7d:a0:f9:51:6f:bc:c1:70:3c:3b:d7:a0:82:14: 6d:4e:6d:91:5a:1b:f7:1f:dd:0c:aa:c2:fa:9d:00: fc:e1:75:4f:01:a9:fb:92:ed:99:cb:26:79:85:9e: 00:92:62:e3:c8:a4:ba:61:e4:c4:f1:65:c6:33:8e: 74:29:d9:c3:71:18:e3:4c:3d:c6:74:f6:4e:f5:67: 14:f8:69:f2:84:4e:fb:9a:d6:88:34:f6:fc:b9:7e: ac:66:3d:73:3f:c9:c7:69:91:33:78:61:27:3b:6e: 11:98:05:3e:d4:ed:19:ec:d4:90:1b:2d:ac:b5:4c: c7:bb:9f:18:83:66:1d:2b:82:6a:0b:bd:76:2a:6d: 51:06:2e:f7:d0:fb:5f:65:33:8a:5b:80:b3:c4:32: 76:d8:e4:c5:95:98:42:73:32:f2:58:31:65:8b:6c: 9d:6b:f3:e4:f9:e3:a9:c2:fb:4a:30:cb:75:d1:f8: 5b:4f:1e:ba:da:11:4e:0b:67:2c:8f:f4:1f:d1:1f: a5:ae:e6:c7:ba:f7:99:01:cc:37:42:f2:7b:a3:96: dd:3c:81:30:6a:e4:f0:75:b3:27:2c:c4:84:ce:66: 2d:8a:f0:fe:e8:eb:a1:81:3d:74:a6:82:56:fb:84: 24:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:24:BB:CB:E7:05:88:39:B2:40:FE:6B:E1:DE:42:B5:FD:0F:C7:56 X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/cyS7y-cFiDmyQP5r4d5Ctf0Px1Y.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 36.52.32.0/19 Signature Algorithm: sha256WithRSAEncryption 69:ad:73:d3:21:b7:a9:4b:0a:7c:c7:dc:0d:14:b3:c6:4e:1a: 4a:11:b0:8c:2f:a7:ef:3f:ac:4d:f0:81:98:e3:1b:3b:36:18: 53:9c:33:17:df:c4:63:57:f5:c9:e0:e2:2f:ff:2d:8d:02:7e: 73:d8:f3:6d:76:a9:22:89:94:03:59:db:b6:a4:0f:c8:57:31: 12:ca:a7:46:b6:89:ab:ec:60:0f:40:3e:4c:10:f4:7f:07:c7: 19:1a:a4:7e:ff:9d:2e:60:d6:4f:d5:3a:fe:4c:73:2a:89:04: c3:cc:12:b7:d9:d9:ed:9e:1f:1e:2a:be:a4:c8:95:12:10:2e: 91:b2:3c:5f:9e:04:0c:bc:aa:7a:b3:0b:16:85:62:2d:7f:b8: 33:ab:15:52:40:32:de:d8:95:58:45:98:36:07:59:ae:0a:cb: 92:38:5e:39:80:a5:35:ce:53:c4:f2:47:57:ac:f6:b1:6a:a9: 28:cb:0d:a4:bf:54:d9:54:a5:98:41:27:39:e7:cd:19:0e:93: e6:3b:fd:ee:86:cf:6d:41:3b:f9:2f:87:d4:f7:bb:30:02:0b: f5:e6:40:26:d3:6f:37:f8:33:de:f3:d5:69:e8:06:84:44:6a: 4a:e5:a7:5d:86:ae:06:85:97:52:0d:3d:86:ab:6a:84:00:30: 47:15:80:af -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAjIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNDA1MzEw MTMzMTNaFw0yNTA1MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDczMjRCQkNCRTcwNTg4 MzlCMjQwRkU2QkUxREU0MkI1RkQwRkM3NTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC8/LxCjLMwoYxB1CNJ5iJ9oPlRb7zBcDw716CCFG1ObZFaG/cf 3QyqwvqdAPzhdU8BqfuS7ZnLJnmFngCSYuPIpLph5MTxZcYzjnQp2cNxGONMPcZ0 9k71ZxT4afKETvua1og09vy5fqxmPXM/ycdpkTN4YSc7bhGYBT7U7Rns1JAbLay1 TMe7nxiDZh0rgmoLvXYqbVEGLvfQ+19lM4pbgLPEMnbY5MWVmEJzMvJYMWWLbJ1r 8+T546nC+0owy3XR+FtPHrraEU4LZyyP9B/RH6Wu5se695kBzDdC8nujlt08gTBq 5PB1sycsxITOZi2K8P7o66GBPXSmglb7hCTJAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUcyS7y+cFiDmyQP5r4d5Ctf0Px1YwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L2N5Uzd5LWNGaURteVFQNXI0ZDVDdGYwUHgxWS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAUkNCAwDQYJKoZIhvcNAQELBQADggEBAGmtc9Mht6lLCnzH3A0Us8ZOGkoR sIwvp+8/rE3wgZjjGzs2GFOcMxffxGNX9cng4i//LY0CfnPY8212qSKJlANZ27ak D8hXMRLKp0a2iavsYA9APkwQ9H8HxxkapH7/nS5g1k/VOv5McyqJBMPMErfZ2e2e Hx4qvqTIlRIQLpGyPF+eBAy8qnqzCxaFYi1/uDOrFVJAMt7YlVhFmDYHWa4Ky5I4 XjmApTXOU8TyR1es9rFqqSjLDaS/VNlUpZhBJznnzRkOk+Y7/e6Gz21BO/kvh9T3 uzACC/XmQCbTbzf4M97z1WnoBoREakrlp12GrgaFl1INPYaraoQAMEcVgK8= -----END CERTIFICATE-----Generated at Fri Sep 27 05:00:22 2024 by rpki-client on console-fra.rpki-client.org