$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/yk7whfYyFhAqX-OxoJshTTRLjAQ.roa File: yk7whfYyFhAqX-OxoJshTTRLjAQ.roa (raw, json) Hash identifier: DnpADyKQdzKC+7h8vxUxMdtT5qFQKtrOJ0LJp13i4gs= Subject key identifier: CA:4E:F0:85:F6:32:16:10:2A:5F:E3:B1:A0:9B:21:4D:34:4B:8C:04 Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 02B3 Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/yk7whfYyFhAqX-OxoJshTTRLjAQ.roa Signing time: Fri 31 May 2024 01:41:42 +0000 ROA not before: Fri 31 May 2024 01:41:42 +0000 ROA not after: Thu 15 May 2025 01:30:03 +0000 asID: 10013 IP address blocks: 183.181.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Oct 2024 13:36:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 691 (0x2b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: May 31 01:41:42 2024 GMT Not After : May 15 01:30:03 2025 GMT Subject: CN=CA4EF085F63216102A5FE3B1A09B214D344B8C04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:79:9a:4c:41:be:93:83:97:43:cc:b5:2a:b1: 4f:94:5f:d4:c7:1c:f9:d2:d0:96:1b:d9:33:7c:07: e5:c7:24:1c:17:8b:2e:e9:65:32:33:24:8d:5f:ce: 5d:82:5f:8b:c6:28:77:1e:55:9a:11:5d:b6:25:76: 42:62:f4:c4:9c:c5:06:9d:a3:ab:79:64:c3:de:ba: 27:a0:a6:6a:11:60:67:24:59:df:d3:a2:0d:b5:64: 4a:d1:82:48:1b:60:1a:ec:1b:38:a9:d1:de:63:17: 45:51:27:b2:74:a4:ed:e8:a8:c1:2b:6b:d2:93:2a: 6f:a8:8c:a8:d6:3a:7f:61:49:e5:0e:9f:16:aa:16: 15:73:a3:b6:df:fb:ac:48:b9:a5:2e:b2:00:3d:e5: 8a:12:b0:e2:77:53:9c:0c:12:80:ce:f5:9e:50:9d: 38:ee:18:c1:e0:1f:b1:83:3f:76:a4:f8:3f:0f:66: 40:96:a7:0d:50:eb:59:ac:df:ef:f8:18:10:1a:7c: 71:84:65:15:e3:3c:82:7e:96:c9:d1:ce:3e:cd:1d: 94:2f:6a:cd:24:86:8b:4e:4b:64:30:56:17:50:50: a1:e5:d7:53:6a:80:c0:e3:99:a5:9f:22:cf:1d:81: 3d:6e:4d:7f:0c:fc:0a:4a:a6:fb:af:1e:88:d3:23: f2:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:4E:F0:85:F6:32:16:10:2A:5F:E3:B1:A0:9B:21:4D:34:4B:8C:04 X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/yk7whfYyFhAqX-OxoJshTTRLjAQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 183.181.0.0/18 Signature Algorithm: sha256WithRSAEncryption 2f:0b:b6:6c:f2:22:c8:e4:07:ba:88:e2:01:26:67:f4:15:ff: e5:e0:a1:64:7b:b9:58:29:08:8d:68:b8:54:19:d9:08:4c:14: e2:74:0d:20:63:aa:04:00:78:66:24:c2:2a:d1:49:94:8e:ec: 0b:fe:fc:b6:d7:92:8d:63:bb:81:23:91:85:c2:8a:68:19:ef: c6:2c:13:27:ca:f3:cd:1f:3b:be:85:23:e3:39:ff:31:96:f7: 29:c0:8c:84:d0:e4:bd:b8:7f:05:de:0f:e7:5a:0d:2e:c3:dd: 7f:ec:18:0d:fd:34:f6:da:70:c6:5e:f4:85:6f:29:75:53:fc: 6f:0f:92:e0:9d:5a:1d:81:7b:ac:aa:be:d1:4c:fb:22:cc:ec: 5a:4c:29:52:86:fc:3c:71:30:34:32:50:fd:6d:ae:d7:b1:31: ac:54:9d:ec:9e:3d:06:f9:b9:51:6a:79:5b:28:83:eb:dd:00: 47:bd:f0:2f:1f:cf:5a:14:cb:28:7b:20:c4:eb:ec:4b:a2:58: b9:d5:cb:2e:c2:f4:c1:f4:42:4a:9c:02:8a:62:f4:7e:10:e0: a6:67:8c:99:1d:a1:43:5e:a1:fd:ed:e2:67:6d:12:2a:0b:bc: 8c:52:8f:ac:00:12:fb:ce:93:c0:28:c6:53:ca:3d:06:34:4d: 36:a4:bd:10 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICArMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNDA1MzEw MTQxNDJaFw0yNTA1MTUwMTMwMDNaMDMxMTAvBgNVBAMTKENBNEVGMDg1RjYzMjE2 MTAyQTVGRTNCMUEwOUIyMTREMzQ0QjhDMDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC/eZpMQb6Tg5dDzLUqsU+UX9THHPnS0JYb2TN8B+XHJBwXiy7p ZTIzJI1fzl2CX4vGKHceVZoRXbYldkJi9MScxQado6t5ZMPeuiegpmoRYGckWd/T og21ZErRgkgbYBrsGzip0d5jF0VRJ7J0pO3oqMEra9KTKm+ojKjWOn9hSeUOnxaq FhVzo7bf+6xIuaUusgA95YoSsOJ3U5wMEoDO9Z5QnTjuGMHgH7GDP3ak+D8PZkCW pw1Q61ms3+/4GBAafHGEZRXjPIJ+lsnRzj7NHZQvas0khotOS2QwVhdQUKHl11Nq gMDjmaWfIs8dgT1uTX8M/ApKpvuvHojTI/IrAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUyk7whfYyFhAqX+OxoJshTTRLjAQwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L3lrN3doZll5RmhBcVgtT3hvSnNoVFRSTGpBUS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAa3tQAwDQYJKoZIhvcNAQELBQADggEBAC8LtmzyIsjkB7qI4gEmZ/QV/+Xg oWR7uVgpCI1ouFQZ2QhMFOJ0DSBjqgQAeGYkwirRSZSO7Av+/LbXko1ju4EjkYXC imgZ78YsEyfK880fO76FI+M5/zGW9ynAjITQ5L24fwXeD+daDS7D3X/sGA39NPba cMZe9IVvKXVT/G8PkuCdWh2Be6yqvtFM+yLM7FpMKVKG/DxxMDQyUP1trtexMaxU neyePQb5uVFqeVsog+vdAEe98C8fz1oUyyh7IMTr7EuiWLnVyy7C9MH0QkqcAopi 9H4Q4KZnjJkdoUNeof3t4mdtEioLvIxSj6wAEvvOk8AoxlPKPQY0TTakvRA= -----END CERTIFICATE-----Generated at Fri Sep 27 05:00:23 2024 by rpki-client on console-fra.rpki-client.org