$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/530/MnnFPS_9Jwly8z4Dl1VkUZ0if5A.roa File: MnnFPS_9Jwly8z4Dl1VkUZ0if5A.roa (raw, json) Hash identifier: rB9qeiHMPFaVctxnSzphrCgTjelxqAswpvFIFxlOd+U= Subject key identifier: 32:79:C5:3D:2F:FD:27:09:72:F3:3E:03:97:55:64:51:9D:22:7F:90 Certificate issuer: /CN=40D220B9E4A6358E03CD47864517D9D300B06FF0 Certificate serial: 34 Authority key identifier: 40:D2:20:B9:E4:A6:35:8E:03:CD:47:86:45:17:D9:D3:00:B0:6F:F0 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QNIgueSmNY4DzUeGRRfZ0wCwb_A.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/MnnFPS_9Jwly8z4Dl1VkUZ0if5A.roa Signing time: Fri 01 Dec 2023 07:49:13 +0000 ROA not before: Fri 01 Dec 2023 07:49:13 +0000 ROA not after: Thu 14 Nov 2024 01:30:03 +0000 asID: 59125 IP address blocks: 160.237.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/QNIgueSmNY4DzUeGRRfZ0wCwb_A.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/QNIgueSmNY4DzUeGRRfZ0wCwb_A.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QNIgueSmNY4DzUeGRRfZ0wCwb_A.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Jul 2024 10:50:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52 (0x34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40D220B9E4A6358E03CD47864517D9D300B06FF0 Validity Not Before: Dec 1 07:49:13 2023 GMT Not After : Nov 14 01:30:03 2024 GMT Subject: CN=3279C53D2FFD270972F33E03975564519D227F90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ec:52:5d:17:5c:73:6a:21:09:96:c6:9f:80: 9e:ce:dc:d1:a5:ef:97:39:a8:c2:12:42:a5:c2:85: 15:7a:86:e9:40:f7:4f:e6:d7:1a:bf:26:24:23:1d: 2b:55:17:67:cc:8b:e3:74:af:3f:15:ca:a0:62:cf: 57:f9:57:82:6d:23:10:ad:6b:0d:f9:c2:7f:b7:d9: 9b:d5:06:ee:b2:94:e6:f4:cb:8b:6c:b9:0c:57:fc: 89:f3:62:63:63:dc:c0:d9:ee:2e:3a:ac:58:0d:91: bb:85:5c:90:af:28:c7:3d:da:25:44:f9:0f:64:fd: 48:ce:af:05:66:21:10:19:b9:f4:6a:55:ed:f5:9a: e8:c8:da:8c:5a:32:08:bb:98:7c:9b:f6:43:2a:f9: 72:6c:e7:c8:08:c6:3d:ed:52:a2:f3:19:dd:31:bb: 3b:b7:9e:77:50:a6:33:2b:4e:b9:bb:b8:45:0b:ac: d7:dc:0c:ad:58:fe:61:31:6f:2a:b7:5f:a3:4f:9d: 0e:14:06:aa:b1:6f:42:33:d5:55:13:1a:ef:04:d6: 00:12:ba:78:ee:76:45:75:55:ec:43:44:fa:a1:43: 4e:7c:3a:0c:90:ca:2b:cd:89:5e:7e:48:9d:1e:b2: 02:71:25:e8:fb:f2:7a:b8:63:f5:91:8f:de:27:10: 30:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:79:C5:3D:2F:FD:27:09:72:F3:3E:03:97:55:64:51:9D:22:7F:90 X509v3 Authority Key Identifier: keyid:40:D2:20:B9:E4:A6:35:8E:03:CD:47:86:45:17:D9:D3:00:B0:6F:F0 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/QNIgueSmNY4DzUeGRRfZ0wCwb_A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QNIgueSmNY4DzUeGRRfZ0wCwb_A.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/MnnFPS_9Jwly8z4Dl1VkUZ0if5A.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.237.128.0/19 Signature Algorithm: sha256WithRSAEncryption 68:30:24:53:86:3c:ac:93:bb:ab:0f:6c:24:7f:cf:b7:04:56: 7a:87:bb:9b:69:b6:f9:32:e6:6c:d9:7e:00:9b:f7:94:0b:37: 9f:26:90:b8:63:c3:a5:be:14:7f:ca:23:d8:91:ef:b4:75:02: 1c:30:89:0d:bc:df:fc:c7:25:a4:8d:98:9e:d1:76:00:73:1a: 63:9c:4b:7f:01:6b:db:55:a6:49:dc:d6:bc:99:37:80:33:dd: 3b:59:84:2f:b1:ac:d8:84:02:e2:20:2f:0a:00:1e:b7:6a:12: 75:bc:0b:fc:19:03:2e:bd:3f:03:25:e1:66:a2:32:dd:84:48: f1:7d:96:99:6d:92:be:09:43:d9:68:2c:f4:1b:ce:9d:56:76: 0b:1a:9f:f6:ab:ab:bc:fa:90:f3:bf:fd:16:60:0c:3a:e6:e8: 85:96:d9:1d:12:aa:64:49:f9:5e:e2:72:bf:9f:99:bf:a2:e8: c9:bd:25:e5:ed:0f:6f:c8:6d:c5:60:e5:25:ae:fc:90:1f:26: 9b:1f:b6:65:6e:0a:0f:7f:e2:c1:10:49:18:7c:b5:fe:3e:ad: c2:ec:bd:7f:49:25:88:2f:53:da:5f:54:c3:9a:6e:aa:7e:f5: 3a:a0:ca:69:7f:dd:6a:5e:a6:ad:89:a7:42:9a:be:a4:31:0e: 24:99:bb:31 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBNDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0MEQy MjBCOUU0QTYzNThFMDNDRDQ3ODY0NTE3RDlEMzAwQjA2RkYwMB4XDTIzMTIwMTA3 NDkxM1oXDTI0MTExNDAxMzAwM1owMzExMC8GA1UEAxMoMzI3OUM1M0QyRkZEMjcw OTcyRjMzRTAzOTc1NTY0NTE5RDIyN0Y5MDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMrsUl0XXHNqIQmWxp+Ans7c0aXvlzmowhJCpcKFFXqG6UD3T+bX Gr8mJCMdK1UXZ8yL43SvPxXKoGLPV/lXgm0jEK1rDfnCf7fZm9UG7rKU5vTLi2y5 DFf8ifNiY2PcwNnuLjqsWA2Ru4VckK8oxz3aJUT5D2T9SM6vBWYhEBm59GpV7fWa 6MjajFoyCLuYfJv2Qyr5cmznyAjGPe1SovMZ3TG7O7eed1CmMytOubu4RQus19wM rVj+YTFvKrdfo0+dDhQGqrFvQjPVVRMa7wTWABK6eO52RXVV7ENE+qFDTnw6DJDK K82JXn5InR6yAnEl6Pvyerhj9ZGP3icQMIkCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBQyecU9L/0nCXLzPgOXVWRRnSJ/kDAfBgNVHSMEGDAWgBRA0iC55KY1jgPNR4ZF F9nTALBv8DAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNTMwL1FOSWd1ZVNtTlk0RHpVZUdSUmZaMHdDd2JfQS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1FOSWd1ZVNtTlk0RHpVZUdSUmZaMHdD d2JfQS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC81MzAvTW5uRlBTXzlKd2x5OHo0RGwxVmtVWjBpZjVBLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBaDtgDANBgkqhkiG9w0BAQsFAAOCAQEAaDAkU4Y8rJO7qw9sJH/PtwRWeoe7 m2m2+TLmbNl+AJv3lAs3nyaQuGPDpb4Uf8oj2JHvtHUCHDCJDbzf/MclpI2YntF2 AHMaY5xLfwFr21WmSdzWvJk3gDPdO1mEL7Gs2IQC4iAvCgAet2oSdbwL/BkDLr0/ AyXhZqIy3YRI8X2WmW2SvglD2Wgs9BvOnVZ2Cxqf9qurvPqQ87/9FmAMOubohZbZ HRKqZEn5XuJyv5+Zv6Loyb0l5e0Pb8htxWDlJa78kB8mmx+2ZW4KD3/iwRBJGHy1 /j6twuy9f0kliC9T2l9Uw5puqn71OqDKaX/dal6mrYmnQpq+pDEOJJm7MQ== -----END CERTIFICATE-----Generated at Sun Jun 30 15:03:16 2024 by rpki-client on console-fra.rpki-client.org