$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/4GecTI4i4ZWhhtJjDyoaqL4KXws.roa File: 4GecTI4i4ZWhhtJjDyoaqL4KXws.roa (raw, json) Hash identifier: nlN3E4u5hkX/dXYIanFQL16yzOury50QFIRaDp8S+BM= Subject key identifier: E0:67:9C:4C:8E:22:E1:95:A1:86:D2:63:0F:2A:1A:A8:BE:0A:5F:0B Certificate issuer: /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9 Certificate serial: 0147 Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/4GecTI4i4ZWhhtJjDyoaqL4KXws.roa Signing time: Fri 31 May 2024 01:31:15 +0000 ROA not before: Fri 31 May 2024 01:31:15 +0000 ROA not after: Thu 15 May 2025 01:30:03 +0000 asID: 32787 IP address blocks: 210.148.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Jul 2024 10:50:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 327 (0x147) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9 Validity Not Before: May 31 01:31:15 2024 GMT Not After : May 15 01:30:03 2025 GMT Subject: CN=E0679C4C8E22E195A186D2630F2A1AA8BE0A5F0B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:64:99:3e:98:8b:b1:41:f1:9a:0c:71:d5:00: bb:ed:91:e4:11:a3:e2:3c:68:2f:53:e7:e7:70:58: 2d:88:a4:75:fb:74:17:f7:74:73:16:54:05:2c:ee: 86:57:1c:57:09:0a:68:94:85:18:b1:3c:33:03:26: 44:a2:26:92:d3:8a:5e:92:6c:39:bd:e5:ab:19:a0: 3a:f3:45:e1:b5:ee:eb:41:d2:92:ff:aa:49:72:b1: c4:78:7e:ca:10:92:bd:da:b2:a4:cc:e4:d5:1a:08: 00:6a:d2:b4:0e:c9:ed:87:8c:ae:a6:c5:3b:d7:bb: 56:2e:4a:b9:f0:b9:8b:71:c6:33:b1:1d:74:b5:89: 00:fe:f9:10:20:7e:96:38:4a:6d:6a:9f:02:fd:ca: 1d:57:26:81:54:56:a5:05:5d:47:01:be:fa:36:77: 07:68:cb:cf:32:5a:2d:9a:4f:f0:a6:84:58:53:e9: c6:44:c1:8a:ae:17:ba:6c:d5:19:c7:33:1f:b4:0b: 2a:41:22:1e:15:f9:29:44:74:44:72:ef:3d:10:cf: 3d:9a:d6:55:4a:78:c2:f2:2e:21:eb:39:04:3a:9f: f3:f6:de:06:aa:17:2e:32:b4:db:ad:0e:91:b8:f2: c3:40:7d:0a:5e:64:4b:e3:7a:22:25:6e:d4:7b:7b: 50:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:67:9C:4C:8E:22:E1:95:A1:86:D2:63:0F:2A:1A:A8:BE:0A:5F:0B X509v3 Authority Key Identifier: keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/4GecTI4i4ZWhhtJjDyoaqL4KXws.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.148.128.0/24 Signature Algorithm: sha256WithRSAEncryption 29:f8:86:99:01:6b:0f:c4:92:a9:44:8e:df:86:7f:12:d8:3c: 58:6c:31:1b:fd:7e:3f:66:63:b6:4a:a2:21:26:fd:5a:ee:e2: 5b:ef:8c:28:f4:73:9b:ef:84:78:53:c7:79:f0:06:5f:07:e7: 5e:b8:9a:b4:76:f6:59:2c:12:d5:b1:7d:70:51:54:8b:76:0e: 88:5a:bd:6f:ad:0d:50:12:7d:f8:0e:d6:30:60:1c:d9:6e:dd: d9:c4:9b:42:ab:3d:53:01:c0:68:dd:bc:d0:4b:94:3a:42:81: 0b:d6:d6:0e:f6:3e:c0:9f:6f:8a:74:51:68:a1:c3:80:5f:a3: d7:f4:be:67:f4:1e:80:28:7b:8c:cf:a1:70:38:08:3e:c1:14: 55:e5:ae:1f:38:f4:8d:f0:05:68:32:38:32:62:d3:78:ce:72: f6:12:d8:ca:1c:fb:b0:e7:3e:13:d4:cc:a0:59:cb:db:41:a6: 64:b5:13:35:a3:1c:28:d3:e5:d3:a4:5c:10:4c:5b:75:82:4d: b5:44:f6:29:7e:83:17:69:b3:cf:98:ae:e3:8e:57:c5:1b:d8: 35:92:2a:0a:4f:a6:cb:e5:31:1b:82:f2:e1:d8:bb:7b:37:19: e5:3e:34:ed:e9:e2:9b:25:76:38:e4:2e:4b:dd:c5:71:17:c4: 4f:7b:54:97 -----BEGIN CERTIFICATE----- MIIFBDCCA+ygAwIBAgICAUcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjk4 M0NGRDVGOENBRkEwMDY4RDJFQkEyNUVEMEY3MDEyNDRCMTJGOTAeFw0yNDA1MzEw MTMxMTVaFw0yNTA1MTUwMTMwMDNaMDMxMTAvBgNVBAMTKEUwNjc5QzRDOEUyMkUx OTVBMTg2RDI2MzBGMkExQUE4QkUwQTVGMEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDbZJk+mIuxQfGaDHHVALvtkeQRo+I8aC9T5+dwWC2IpHX7dBf3 dHMWVAUs7oZXHFcJCmiUhRixPDMDJkSiJpLTil6SbDm95asZoDrzReG17utB0pL/ qklyscR4fsoQkr3asqTM5NUaCABq0rQOye2HjK6mxTvXu1YuSrnwuYtxxjOxHXS1 iQD++RAgfpY4Sm1qnwL9yh1XJoFUVqUFXUcBvvo2dwdoy88yWi2aT/CmhFhT6cZE wYquF7ps1RnHMx+0CypBIh4V+SlEdERy7z0Qzz2a1lVKeMLyLiHrOQQ6n/P23gaq Fy4ytNutDpG48sNAfQpeZEvjeiIlbtR7e1D7AgMBAAGjggIgMIICHDAdBgNVHQ4E FgQU4GecTI4i4ZWhhtJjDyoaqL4KXwswHwYDVR0jBBgwFoAUKYPP1fjK+gBo0uui XtD3ASRLEvkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzYvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JMRXZrLmNybDBtBggrBgEF BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JM RXZrLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgbkGCCsGAQUFBwELBIGsMIGpMF8GCCsG AQUFBzALhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzYvNEdlY1RJNGk0WldoaHRKakR5b2FxTDRLWHdzLnJvYTBGBggr BgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3JyZHAv YXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME ANKUgDANBgkqhkiG9w0BAQsFAAOCAQEAKfiGmQFrD8SSqUSO34Z/Etg8WGwxG/1+ P2ZjtkqiISb9Wu7iW++MKPRzm++EeFPHefAGXwfnXriatHb2WSwS1bF9cFFUi3YO iFq9b60NUBJ9+A7WMGAc2W7d2cSbQqs9UwHAaN280EuUOkKBC9bWDvY+wJ9vinRR aKHDgF+j1/S+Z/QegCh7jM+hcDgIPsEUVeWuHzj0jfAFaDI4MmLTeM5y9hLYyhz7 sOc+E9TMoFnL20GmZLUTNaMcKNPl06RcEExbdYJNtUT2KX6DF2mzz5iu445XxRvY NZIqCk+my+UxG4Ly4di7ezcZ5T407enimyV2OOQuS93FcRfET3tUlw== -----END CERTIFICATE-----Generated at Fri Jun 28 04:55:54 2024 by rpki-client on console-fra.rpki-client.org