$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/jYQi1_cboxpTlK0oL33IvZk_Hc4.roa File: jYQi1_cboxpTlK0oL33IvZk_Hc4.roa (raw, json) Hash identifier: 2O2X2Eh9iU80okgWuzbwnfguIZS/5yanyWS/9Z6XE24= Subject key identifier: 8D:84:22:D7:F7:1B:A3:1A:53:94:AD:28:2F:7D:C8:BD:99:3F:1D:CE Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 0213 Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/jYQi1_cboxpTlK0oL33IvZk_Hc4.roa Signing time: Fri 31 May 2024 01:29:17 +0000 ROA not before: Fri 31 May 2024 01:29:17 +0000 ROA not after: Thu 15 May 2025 01:30:03 +0000 asID: 10013 IP address blocks: 220.150.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Oct 2024 13:36:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 531 (0x213) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: May 31 01:29:17 2024 GMT Not After : May 15 01:30:03 2025 GMT Subject: CN=8D8422D7F71BA31A5394AD282F7DC8BD993F1DCE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ba:15:c2:5a:a1:4d:1a:4d:fe:6e:f4:66:26: 2a:45:c7:fa:40:09:cc:42:ba:6f:bf:36:0d:82:6b: ef:7d:5d:5e:4a:82:49:ba:18:ff:b8:0a:05:ba:bd: f5:f9:f4:ea:fb:65:c1:da:6b:0f:e5:ed:19:0f:66: d0:a9:35:19:40:fe:14:49:05:a6:75:c8:eb:dd:fe: d9:9d:1b:40:0a:48:cb:ce:e8:95:0d:f0:fa:82:73: 07:3f:8f:ca:ce:c6:0d:0c:48:7d:98:c5:8d:22:56: d5:44:85:f6:1b:28:1a:10:cf:d9:ab:b1:61:a3:96: e9:18:b9:11:73:33:a2:67:30:d9:93:24:b7:cb:e3: 9a:b7:0b:58:8b:de:cf:9b:ba:f4:fb:37:6e:49:13: f1:a9:74:bb:c8:6f:31:4a:0a:89:ef:98:a2:37:07: 45:c5:a0:9a:5c:0c:91:17:5d:e9:ee:09:bc:09:5b: 01:76:10:ec:4c:a6:a2:59:b6:b2:50:b0:e4:52:59: 3a:3c:20:dd:65:08:2d:01:79:cc:18:62:43:ac:e4: 8a:b7:4a:63:28:08:b2:bb:c3:e8:f2:f2:72:30:5a: 40:5a:d7:a9:96:dc:49:9d:bb:e9:f7:98:60:be:3d: e3:3d:63:8b:1a:7a:4e:86:0b:53:97:3c:66:99:47: 6c:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:84:22:D7:F7:1B:A3:1A:53:94:AD:28:2F:7D:C8:BD:99:3F:1D:CE X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/jYQi1_cboxpTlK0oL33IvZk_Hc4.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 220.150.0.0/20 Signature Algorithm: sha256WithRSAEncryption 73:f2:cc:24:06:1a:4f:ba:3b:f6:d3:c7:31:0e:48:d9:8b:be: c6:4f:8b:04:d1:a8:65:f2:a9:93:0b:a4:3a:e2:a5:16:87:8a: d0:85:72:6f:fa:74:ae:eb:c9:ff:3c:3e:74:c7:f7:92:fa:76: fe:2f:09:64:eb:0d:fb:43:d4:2b:58:62:b8:4f:04:07:5b:f2: 62:0a:28:e2:b2:0a:90:37:ee:b7:18:8b:85:c0:bd:1f:98:f7: c5:5e:ff:3d:7c:21:fc:3d:f9:76:a2:82:37:c8:de:8b:98:09: db:38:3a:c0:28:65:ad:6f:70:1a:83:3f:73:a0:df:de:57:7e: f2:f6:08:df:b9:b1:d3:d7:4a:18:85:2b:09:8f:87:3c:1c:d9: 27:e9:a0:4e:eb:d3:63:c1:78:6f:93:df:19:95:34:18:7b:12: bd:ca:ec:97:8b:17:1e:3f:9e:e0:a4:a2:bd:84:24:e3:3d:79: fa:17:4c:50:10:3e:a2:11:ef:82:f6:b6:1b:ec:59:77:9c:ec: 87:61:29:7a:f3:56:28:bd:b9:cb:82:35:ea:09:9e:df:30:80: 80:7f:a6:fe:11:66:76:7b:7e:79:81:d3:d9:39:0d:fb:4a:a7: 2a:d0:60:83:c5:8e:02:65:a9:34:2b:8e:d3:f4:7e:c2:07:eb: ed:99:be:7a -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAhMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNDA1MzEw MTI5MTdaFw0yNTA1MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDhEODQyMkQ3RjcxQkEz MUE1Mzk0QUQyODJGN0RDOEJEOTkzRjFEQ0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCruhXCWqFNGk3+bvRmJipFx/pACcxCum+/Ng2Ca+99XV5Kgkm6 GP+4CgW6vfX59Or7ZcHaaw/l7RkPZtCpNRlA/hRJBaZ1yOvd/tmdG0AKSMvO6JUN 8PqCcwc/j8rOxg0MSH2YxY0iVtVEhfYbKBoQz9mrsWGjlukYuRFzM6JnMNmTJLfL 45q3C1iL3s+buvT7N25JE/GpdLvIbzFKConvmKI3B0XFoJpcDJEXXenuCbwJWwF2 EOxMpqJZtrJQsORSWTo8IN1lCC0BecwYYkOs5Iq3SmMoCLK7w+jy8nIwWkBa16mW 3Emdu+n3mGC+PeM9Y4saek6GC1OXPGaZR2zxAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUjYQi1/cboxpTlK0oL33IvZk/Hc4wHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L2pZUWkxX2Nib3hwVGxLMG9MMzNJdlprX0hjNC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBATclgAwDQYJKoZIhvcNAQELBQADggEBAHPyzCQGGk+6O/bTxzEOSNmLvsZP iwTRqGXyqZMLpDripRaHitCFcm/6dK7ryf88PnTH95L6dv4vCWTrDftD1CtYYrhP BAdb8mIKKOKyCpA37rcYi4XAvR+Y98Ve/z18Ifw9+XaigjfI3ouYCds4OsAoZa1v cBqDP3Og395XfvL2CN+5sdPXShiFKwmPhzwc2SfpoE7r02PBeG+T3xmVNBh7Er3K 7JeLFx4/nuCkor2EJOM9efoXTFAQPqIR74L2thvsWXec7IdhKXrzVii9ucuCNeoJ nt8wgIB/pv4RZnZ7fnmB09k5DftKpyrQYIPFjgJlqTQrjtP0fsIH6+2Zvno= -----END CERTIFICATE-----Generated at Fri Sep 27 05:00:23 2024 by rpki-client on console-fra.rpki-client.org