$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/DvvlG6dUfkh9Yj68inGLe93zMnY.roa File: DvvlG6dUfkh9Yj68inGLe93zMnY.roa (raw, json) Hash identifier: IFFFfJplDNOVK7iyiK+EGsAoTf0MdvmQ12636yDR7lU= Subject key identifier: 0E:FB:E5:1B:A7:54:7E:48:7D:62:3E:BC:8A:71:8B:7B:DD:F3:32:76 Certificate issuer: /CN=40610DA68E93ED538A48A46C5214024ED54D07F6 Certificate serial: FC Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/DvvlG6dUfkh9Yj68inGLe93zMnY.roa Signing time: Fri 01 Dec 2023 01:29:48 +0000 ROA not before: Fri 01 Dec 2023 01:29:48 +0000 ROA not after: Thu 14 Nov 2024 01:30:03 +0000 asID: 10021 IP address blocks: 202.95.208.0/21 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Jun 2024 06:27:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 252 (0xfc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6 Validity Not Before: Dec 1 01:29:48 2023 GMT Not After : Nov 14 01:30:03 2024 GMT Subject: CN=0EFBE51BA7547E487D623EBC8A718B7BDDF33276 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:b0:1d:74:c5:61:97:28:12:15:9b:e6:b6:de: 36:62:fb:cb:18:d7:8f:46:0c:14:20:fb:ec:7f:bd: e2:77:0e:e9:b1:fa:bd:84:34:fc:fd:4b:ba:7e:d5: 13:5d:50:9a:f6:a0:ab:50:f6:f5:64:61:52:4c:4d: 7a:5f:7b:50:aa:e5:97:8c:60:2b:d0:9b:87:f7:cd: f5:f5:55:00:79:45:0a:7f:00:80:11:6c:52:02:8c: d2:bf:a1:8a:79:70:bd:0f:56:d3:74:a7:f3:44:f6: 00:01:02:90:d0:bb:3e:0d:58:51:5f:c7:cb:af:f1: 2f:32:8c:d0:38:70:4a:7c:dd:3f:09:cc:fb:3c:83: 28:d1:da:01:a1:11:0d:ce:89:72:2e:b1:cd:90:aa: f1:0a:09:73:f2:db:82:28:9e:e2:81:ee:21:62:db: 63:bc:35:b1:65:36:71:a5:c1:87:c6:b3:d9:5f:b2: c8:45:3f:8b:59:90:ef:1d:b1:b5:c7:49:2b:8e:59: 4d:42:f6:df:5a:4c:45:77:79:51:1f:88:35:12:a0: f5:bd:d0:2d:ac:77:7f:b8:d5:09:7c:89:01:b7:cb: 25:11:a4:85:68:ba:78:ff:f0:d5:49:0e:70:97:47: 56:4d:88:3f:dc:f9:8b:e0:de:84:3d:16:9b:66:a8: 94:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:FB:E5:1B:A7:54:7E:48:7D:62:3E:BC:8A:71:8B:7B:DD:F3:32:76 X509v3 Authority Key Identifier: keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/DvvlG6dUfkh9Yj68inGLe93zMnY.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.95.208.0/21 Signature Algorithm: sha256WithRSAEncryption 20:32:6e:ff:a4:b1:c0:af:19:c9:dc:ec:f8:dd:59:ca:9d:e4: 48:00:8b:75:14:99:f6:fe:b8:38:cb:96:15:fe:96:49:e7:70: 62:5c:af:ca:ea:96:de:8d:69:e8:d5:8b:14:0a:3b:63:c0:2e: 3c:d4:e3:ab:54:17:65:b4:9c:3e:e1:e9:17:45:04:00:35:be: 51:15:34:4d:9e:7e:b2:82:5b:bb:65:b2:a8:1a:b4:6a:55:87: c3:d9:7f:e4:b5:41:7c:b2:95:f1:19:8b:43:f0:0b:65:8d:8d: c0:b8:b3:d3:a5:67:dd:06:38:f6:ff:68:9e:5d:32:e8:da:be: 3a:70:39:19:6e:d9:91:8a:83:83:76:0a:87:4b:50:c2:dd:ca: 56:ae:bf:7e:1f:ba:e8:66:4c:67:f8:62:29:c8:66:37:a4:9b: c2:ba:37:fb:5e:8d:40:3c:6f:35:1f:be:86:c1:42:88:fa:6a: 5b:ea:8f:33:81:81:31:5a:f2:56:dc:39:d0:6f:4d:b5:2a:18: c1:5f:94:c4:f9:f5:04:a1:e6:29:28:4d:e5:c2:ab:79:a0:ee: 3c:57:9a:7f:c4:16:f7:29:32:f3:f1:cb:66:93:63:52:a4:7d: 1a:d4:b0:9e:e0:36:0a:f5:2f:c7:d0:d6:bb:0f:f4:70:0a:d1: 08:0f:c2:81 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAPwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDA2 MTBEQTY4RTkzRUQ1MzhBNDhBNDZDNTIxNDAyNEVENTREMDdGNjAeFw0yMzEyMDEw MTI5NDhaFw0yNDExMTQwMTMwMDNaMDMxMTAvBgNVBAMTKDBFRkJFNTFCQTc1NDdF NDg3RDYyM0VCQzhBNzE4QjdCRERGMzMyNzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDasB10xWGXKBIVm+a23jZi+8sY149GDBQg++x/veJ3Dumx+r2E NPz9S7p+1RNdUJr2oKtQ9vVkYVJMTXpfe1Cq5ZeMYCvQm4f3zfX1VQB5RQp/AIAR bFICjNK/oYp5cL0PVtN0p/NE9gABApDQuz4NWFFfx8uv8S8yjNA4cEp83T8JzPs8 gyjR2gGhEQ3OiXIusc2QqvEKCXPy24IonuKB7iFi22O8NbFlNnGlwYfGs9lfsshF P4tZkO8dsbXHSSuOWU1C9t9aTEV3eVEfiDUSoPW90C2sd3+41Ql8iQG3yyURpIVo unj/8NVJDnCXR1ZNiD/c+Yvg3oQ9FptmqJQZAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUDvvlG6dUfkh9Yj68inGLe93zMnYwHwYDVR0jBBgwFoAUQGENpo6T7VOKSKRs UhQCTtVNB/YwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzQ2OS9RR0VOcG82VDdWT0tTS1JzVWhRQ1R0Vk5CX1kuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9RR0VOcG82VDdWT0tTS1JzVWhRQ1R0 Vk5CX1kuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNDY5L0R2dmxHNmRVZmtoOVlqNjhpbkdMZTkzek1uWS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAPKX9AwDQYJKoZIhvcNAQELBQADggEBACAybv+kscCvGcnc7PjdWcqd5EgA i3UUmfb+uDjLlhX+lknncGJcr8rqlt6NaejVixQKO2PALjzU46tUF2W0nD7h6RdF BAA1vlEVNE2efrKCW7tlsqgatGpVh8PZf+S1QXyylfEZi0PwC2WNjcC4s9OlZ90G OPb/aJ5dMujavjpwORlu2ZGKg4N2CodLUMLdylauv34fuuhmTGf4YinIZjekm8K6 N/tejUA8bzUfvobBQoj6alvqjzOBgTFa8lbcOdBvTbUqGMFflMT59QSh5ikoTeXC q3mg7jxXmn/EFvcpMvPxy2aTY1KkfRrUsJ7gNgr1L8fQ1rsP9HAK0QgPwoE= -----END CERTIFICATE-----Generated at Mon Jun 24 23:50:30 2024 by rpki-client on console-fra.rpki-client.org