$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/f1ATsifGfCs7KnZM8gA4WRztwvM.roa File: f1ATsifGfCs7KnZM8gA4WRztwvM.roa (raw, json) Hash identifier: qDIZC05GcbTnIURdl6MEMyCH5Pdb+4U8oVvNIB55V7s= Subject key identifier: 7F:50:13:B2:27:C6:7C:2B:3B:2A:76:4C:F2:00:38:59:1C:ED:C2:F3 Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 0281 Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/f1ATsifGfCs7KnZM8gA4WRztwvM.roa Signing time: Fri 31 May 2024 01:37:50 +0000 ROA not before: Fri 31 May 2024 01:37:50 +0000 ROA not after: Thu 15 May 2025 01:30:03 +0000 asID: 10013 IP address blocks: 111.234.64.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Oct 2024 13:36:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 641 (0x281) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: May 31 01:37:50 2024 GMT Not After : May 15 01:30:03 2025 GMT Subject: CN=7F5013B227C67C2B3B2A764CF20038591CEDC2F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:3f:b6:cb:b2:3e:2c:cc:54:77:b5:df:48:cd: bd:0f:80:b6:33:8b:b7:58:74:28:2f:7f:21:15:3b: 23:23:a2:7c:28:dc:06:db:c5:35:e2:7a:79:ec:b5: ff:98:fb:b7:df:4c:22:fd:e1:a5:da:74:2c:bd:ff: 95:b0:44:91:db:0f:12:fb:b2:55:5b:74:7c:80:58: 0b:bf:ce:3e:06:43:21:ef:c7:5a:da:a5:45:7b:56: 02:20:31:13:eb:ac:ce:be:0a:fc:bc:d7:d7:9b:89: ea:d0:6a:67:6f:be:a3:c8:b2:25:ac:c9:ff:6b:25: 27:28:86:a3:cf:ba:42:ad:89:5a:a1:40:1a:b4:30: 22:da:56:41:ca:80:5a:8c:7b:72:03:b9:7a:c2:ac: a1:1e:96:44:bd:65:9a:bc:e2:c6:02:f7:aa:d0:64: c6:f4:b5:2a:0c:4e:f0:16:ce:56:7f:e1:4e:4c:ed: b6:6d:ab:87:3b:ad:3c:45:ad:e0:35:99:47:ef:2f: 71:83:25:88:71:2a:d7:43:7d:74:9f:64:6c:3a:98: 0a:64:27:db:6f:6e:47:2b:e8:38:5f:d4:4e:a7:f9: 03:67:b4:b9:66:98:df:48:12:50:33:5c:58:7a:e9: 44:b6:a7:d9:06:9e:6e:b6:18:74:6a:4a:41:c6:95: 15:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:50:13:B2:27:C6:7C:2B:3B:2A:76:4C:F2:00:38:59:1C:ED:C2:F3 X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/f1ATsifGfCs7KnZM8gA4WRztwvM.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 111.234.64.0/19 Signature Algorithm: sha256WithRSAEncryption 3c:61:8f:4f:8d:46:c9:5e:26:49:0e:f1:66:e6:f9:68:5d:00: d5:cd:83:19:f8:1c:23:95:a4:5b:e7:01:29:c4:61:a0:1e:e2: 86:cb:33:1f:1e:93:29:f8:74:b2:31:bd:48:e1:e2:ab:cd:e9: 20:0e:7a:12:42:a2:f1:d9:08:2d:13:ee:95:55:6a:09:fc:2c: 98:80:e8:6b:bf:54:8e:e2:10:18:8c:a8:35:4d:c4:1b:e8:ff: 2e:a2:f8:28:04:88:bc:d2:0e:6c:82:fc:89:93:4e:69:b7:d1: 81:95:53:70:90:4b:aa:bf:19:38:ec:38:9d:32:87:8d:41:fb: a4:d7:6b:50:38:54:dd:70:37:df:f4:12:68:c7:2d:a5:65:d7: 59:e6:7a:a4:34:6c:38:97:01:1c:59:d7:bd:7d:49:d0:75:57: 2a:84:2d:c2:87:dc:6e:54:12:2d:ba:58:cb:b1:a1:d9:b0:40: 28:21:9c:ab:fc:e7:c6:a9:93:a8:c8:4a:7c:34:d1:eb:d4:d6: 24:ff:27:f0:54:57:4d:35:46:70:21:af:b5:92:5d:c7:ca:1a: 10:55:74:b2:a1:be:77:6d:3c:dc:a5:a1:9b:a7:24:81:ab:b4: a9:69:43:23:6b:88:bb:0f:56:8d:f4:12:4e:8e:e5:f0:ed:3e: b7:f8:dc:eb -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAoEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNDA1MzEw MTM3NTBaFw0yNTA1MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDdGNTAxM0IyMjdDNjdD MkIzQjJBNzY0Q0YyMDAzODU5MUNFREMyRjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDFP7bLsj4szFR3td9Izb0PgLYzi7dYdCgvfyEVOyMjonwo3Abb xTXiennstf+Y+7ffTCL94aXadCy9/5WwRJHbDxL7slVbdHyAWAu/zj4GQyHvx1ra pUV7VgIgMRPrrM6+Cvy819ebierQamdvvqPIsiWsyf9rJScohqPPukKtiVqhQBq0 MCLaVkHKgFqMe3IDuXrCrKEelkS9ZZq84sYC96rQZMb0tSoMTvAWzlZ/4U5M7bZt q4c7rTxFreA1mUfvL3GDJYhxKtdDfXSfZGw6mApkJ9tvbkcr6Dhf1E6n+QNntLlm mN9IElAzXFh66US2p9kGnm62GHRqSkHGlRXhAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUf1ATsifGfCs7KnZM8gA4WRztwvMwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L2YxQVRzaWZHZkNzN0tuWk04Z0E0V1J6dHd2TS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAVv6kAwDQYJKoZIhvcNAQELBQADggEBADxhj0+NRsleJkkO8Wbm+WhdANXN gxn4HCOVpFvnASnEYaAe4obLMx8ekyn4dLIxvUjh4qvN6SAOehJCovHZCC0T7pVV agn8LJiA6Gu/VI7iEBiMqDVNxBvo/y6i+CgEiLzSDmyC/ImTTmm30YGVU3CQS6q/ GTjsOJ0yh41B+6TXa1A4VN1wN9/0EmjHLaVl11nmeqQ0bDiXARxZ1719SdB1VyqE LcKH3G5UEi26WMuxodmwQCghnKv858apk6jISnw00evU1iT/J/BUV001RnAhr7WS XcfKGhBVdLKhvndtPNyloZunJIGrtKlpQyNriLsPVo30Ek6O5fDtPrf43Os= -----END CERTIFICATE-----Generated at Fri Sep 27 05:00:22 2024 by rpki-client on console-fra.rpki-client.org