$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/530/veUe3_ZA1YYiRFBAUk8l6a9L2ro.roa File: veUe3_ZA1YYiRFBAUk8l6a9L2ro.roa (raw, json) Hash identifier: VKTl3KSQvluGlecgAlFmfXupF4AyVQYi8Wg8FDbAEUQ= Subject key identifier: BD:E5:1E:DF:F6:40:D5:86:22:44:50:40:52:4F:25:E9:AF:4B:DA:BA Certificate issuer: /CN=1B20A06A21205820B28FD06CE0A84F03FCDAEBC5 Certificate serial: 4C Authority key identifier: 1B:20:A0:6A:21:20:58:20:B2:8F:D0:6C:E0:A8:4F:03:FC:DA:EB:C5 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GyCgaiEgWCCyj9Bs4KhPA_za68U.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/veUe3_ZA1YYiRFBAUk8l6a9L2ro.roa Signing time: Tue 30 Apr 2024 01:28:46 +0000 ROA not before: Tue 30 Apr 2024 01:28:46 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 59125 IP address blocks: 1.21.96.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/GyCgaiEgWCCyj9Bs4KhPA_za68U.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/GyCgaiEgWCCyj9Bs4KhPA_za68U.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GyCgaiEgWCCyj9Bs4KhPA_za68U.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Jun 2024 06:27:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76 (0x4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1B20A06A21205820B28FD06CE0A84F03FCDAEBC5 Validity Not Before: Apr 30 01:28:46 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=BDE51EDFF640D58622445040524F25E9AF4BDABA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:7f:87:b7:95:ac:71:e0:6e:0c:a7:6a:bd:3c: b6:2e:63:c0:8f:eb:c2:61:2d:a8:fb:da:2c:0e:bf: 21:81:9f:42:1a:e7:75:34:47:55:81:b9:91:9d:7b: 35:c5:ef:d2:6f:b8:c2:22:04:f3:ea:a7:98:f8:92: ed:0c:7f:5f:98:55:5a:72:c4:6a:80:86:3d:1f:4d: bf:05:41:9d:3e:d8:f6:a5:6c:9f:3d:5e:ab:9a:bc: 08:b6:77:c1:4c:bf:46:c0:eb:b9:0a:3e:3c:b6:6a: ed:78:f6:db:77:73:ce:3f:9a:91:c5:d6:dd:05:02: 74:04:eb:54:1e:6a:95:ad:65:7f:d4:01:5a:59:d5: 12:c4:27:97:12:67:7a:b0:7b:95:f3:75:83:dd:ac: 9a:f0:cb:61:d5:16:94:ef:e2:ee:b3:7b:f0:6a:06: 10:84:4a:77:90:7c:83:97:25:3c:6b:da:d9:65:5e: a5:61:63:02:88:b8:8b:83:a7:0b:0a:92:fd:c9:30: 79:fa:80:65:c7:7c:11:91:ca:65:0e:36:6c:df:b5: c5:5f:7a:d9:6d:12:0c:42:fa:e1:d1:cc:60:aa:c3: 54:ef:7e:b5:34:c6:75:b4:c3:69:19:47:62:b2:7d: 4f:29:a3:cf:64:2a:57:bb:23:be:bf:6d:63:07:63: ed:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:E5:1E:DF:F6:40:D5:86:22:44:50:40:52:4F:25:E9:AF:4B:DA:BA X509v3 Authority Key Identifier: keyid:1B:20:A0:6A:21:20:58:20:B2:8F:D0:6C:E0:A8:4F:03:FC:DA:EB:C5 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/GyCgaiEgWCCyj9Bs4KhPA_za68U.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GyCgaiEgWCCyj9Bs4KhPA_za68U.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/veUe3_ZA1YYiRFBAUk8l6a9L2ro.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.21.96.0/20 Signature Algorithm: sha256WithRSAEncryption 0a:96:c8:f0:75:99:8e:2c:dc:9e:4c:f4:38:75:77:0e:15:24: d4:12:b1:5d:fc:ca:67:66:b2:43:14:0f:3a:a7:b4:7d:05:f9: 60:42:2c:68:00:0a:97:be:c3:42:d0:1d:81:8b:eb:e4:d8:b4: 90:00:33:9f:79:59:7d:6f:92:93:5f:21:d2:30:82:fe:01:3b: b5:dc:4c:14:0f:67:d6:6c:86:2a:38:44:91:42:01:d6:9a:91: cb:0a:41:87:47:21:30:45:0d:22:5b:50:81:c9:9e:0b:4c:86: 4b:c5:ac:5b:fa:2f:c7:48:84:12:6d:91:db:26:08:24:29:13: 4b:91:7d:fd:22:e7:ca:ef:5a:23:60:a8:b6:43:b1:f5:07:e8: 7f:6e:6a:e9:f9:35:a4:b0:b3:1b:7d:cb:14:fa:48:cc:88:94: d7:65:72:c8:c3:d4:3c:5d:af:79:15:6c:fc:17:02:35:14:4a: 5b:ce:56:c6:27:62:c0:5d:c7:df:64:1a:a6:c4:78:c6:c4:cd: ab:31:99:a9:fa:3f:08:e8:c1:e7:75:f5:3c:f3:36:12:ce:30: b1:0e:43:c4:7a:a1:22:96:24:23:55:eb:34:d4:51:11:d0:07: 35:64:55:8b:f6:c6:aa:c7:a8:b5:9d:b0:69:3c:85:6c:0d:8d: 81:95:3e:16 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBTDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxQjIw QTA2QTIxMjA1ODIwQjI4RkQwNkNFMEE4NEYwM0ZDREFFQkM1MB4XDTI0MDQzMDAx Mjg0NloXDTI1MDQxNTAxMzAwMlowMzExMC8GA1UEAxMoQkRFNTFFREZGNjQwRDU4 NjIyNDQ1MDQwNTI0RjI1RTlBRjRCREFCQTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANN/h7eVrHHgbgynar08ti5jwI/rwmEtqPvaLA6/IYGfQhrndTRH VYG5kZ17NcXv0m+4wiIE8+qnmPiS7Qx/X5hVWnLEaoCGPR9NvwVBnT7Y9qVsnz1e q5q8CLZ3wUy/RsDruQo+PLZq7Xj223dzzj+akcXW3QUCdATrVB5qla1lf9QBWlnV EsQnlxJnerB7lfN1g92smvDLYdUWlO/i7rN78GoGEIRKd5B8g5clPGva2WVepWFj Aoi4i4OnCwqS/ckwefqAZcd8EZHKZQ42bN+1xV962W0SDEL64dHMYKrDVO9+tTTG dbTDaRlHYrJ9Tymjz2QqV7sjvr9tYwdj7fMCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBS95R7f9kDVhiJEUEBSTyXpr0vaujAfBgNVHSMEGDAWgBQbIKBqISBYILKP0Gzg qE8D/NrrxTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNTMwL0d5Q2dhaUVnV0NDeWo5QnM0S2hQQV96YTY4VS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0d5Q2dhaUVnV0NDeWo5QnM0S2hQQV96 YTY4VS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC81MzAvdmVVZTNfWkExWVlpUkZCQVVrOGw2YTlMMnJvLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBAEVYDANBgkqhkiG9w0BAQsFAAOCAQEACpbI8HWZjizcnkz0OHV3DhUk1BKx XfzKZ2ayQxQPOqe0fQX5YEIsaAAKl77DQtAdgYvr5Ni0kAAzn3lZfW+Sk18h0jCC /gE7tdxMFA9n1myGKjhEkUIB1pqRywpBh0chMEUNIltQgcmeC0yGS8WsW/ovx0iE Em2R2yYIJCkTS5F9/SLnyu9aI2CotkOx9Qfof25q6fk1pLCzG33LFPpIzIiU12Vy yMPUPF2veRVs/BcCNRRKW85WxidiwF3H32QapsR4xsTNqzGZqfo/COjB53X1PPM2 Es4wsQ5DxHqhIpYkI1XrNNRREdAHNWRVi/bGqseotZ2waTyFbA2NgZU+Fg== -----END CERTIFICATE-----Generated at Mon Jun 24 23:50:30 2024 by rpki-client on console-fra.rpki-client.org