$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/ACOVjTcamOdQN6YUq1ubZHHI9kI.roa File: ACOVjTcamOdQN6YUq1ubZHHI9kI.roa (raw, json) Hash identifier: jSaBsv4XAfOr6VZi236NqTPDJoC7gAQbGYQagJemTlU= Subject key identifier: 00:23:95:8D:37:1A:98:E7:50:37:A6:14:AB:5B:9B:64:71:C8:F6:42 Certificate issuer: /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9 Certificate serial: 0123 Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/ACOVjTcamOdQN6YUq1ubZHHI9kI.roa Signing time: Sun 01 Oct 2023 01:28:36 +0000 ROA not before: Sun 01 Oct 2023 01:28:36 +0000 ROA not after: Sat 14 Sep 2024 01:30:03 +0000 asID: 2497 IP address blocks: 202.32.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jul 2024 06:55:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 291 (0x123) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9 Validity Not Before: Oct 1 01:28:36 2023 GMT Not After : Sep 14 01:30:03 2024 GMT Subject: CN=0023958D371A98E75037A614AB5B9B6471C8F642 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:ae:90:96:eb:32:f2:15:33:ec:b1:4c:29:87: 42:b8:67:0a:46:00:5e:c0:2e:e4:f8:95:88:ce:36: 89:a4:f0:6d:a1:3b:d1:de:81:32:c8:39:61:e8:a7: bb:67:92:1f:99:eb:07:ef:a6:f0:ca:30:d2:b8:56: a2:58:45:9a:25:a7:05:b6:d9:33:96:61:c5:a7:66: bc:fb:49:7f:46:3e:7f:7f:68:d9:59:f3:9a:c3:44: 09:7a:48:e9:ed:4c:e8:26:ae:19:d5:8e:5e:da:12: 10:7c:6a:91:42:0b:6d:bb:4f:e1:41:d9:05:b9:45: 3a:af:87:fe:13:a9:10:5f:db:0c:1f:25:dd:3b:01: 66:74:ae:ae:38:77:4d:8f:f3:18:4a:9d:fd:c5:31: 20:28:a7:99:be:df:82:13:a5:c0:a8:cd:3f:1b:b2: 78:f6:ec:20:b9:6b:9e:47:01:5d:8a:a8:e7:07:b1: ac:06:a8:e7:fa:85:9a:4b:73:2a:8a:c2:b0:d8:c4: 04:96:55:db:cc:3b:47:33:8e:56:95:e0:3c:49:c4: 7a:a5:31:3d:c2:71:15:fe:18:ac:d2:1e:c1:b4:35: 1c:87:84:ad:08:77:ac:38:c9:9c:c6:a9:a8:51:76: 73:d2:ce:ed:0f:70:b4:23:07:98:c0:9c:2b:ba:43: 72:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:23:95:8D:37:1A:98:E7:50:37:A6:14:AB:5B:9B:64:71:C8:F6:42 X509v3 Authority Key Identifier: keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/ACOVjTcamOdQN6YUq1ubZHHI9kI.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.32.0.0/16 Signature Algorithm: sha256WithRSAEncryption 30:90:2a:36:58:f6:ab:82:6c:9f:99:39:b5:26:3c:b2:c8:ca: d5:8e:46:d7:0b:58:44:3c:82:11:f6:e3:d5:bf:2b:46:a1:d8: 20:44:85:9d:e6:18:1d:3a:c3:0a:a4:9c:40:13:9d:56:98:b1: 54:ec:18:a6:eb:69:4e:8e:21:bf:8d:56:5e:b0:9d:fa:ea:15: 3d:fc:4b:43:fc:2e:a5:f2:d3:68:96:21:05:bd:e9:bb:9c:89: 30:94:35:b3:ae:28:77:eb:4c:9b:09:d5:c3:59:47:af:09:73: fb:f0:b3:7c:61:e2:d5:dd:d0:05:be:2d:df:c6:98:7c:76:67: 5b:0e:18:62:ff:d5:c5:ab:55:79:e6:bd:e0:58:2c:1e:ec:48: cf:e5:63:f9:cf:c4:21:0a:fd:bc:fc:74:12:59:60:43:20:50: 1d:d8:85:38:39:64:6b:93:fe:c6:57:08:8f:5d:fb:3c:90:81: 34:dd:62:da:fa:be:33:26:f2:56:ed:7e:09:d9:96:6e:01:ef: 12:e1:54:46:81:02:48:48:ca:d1:46:15:77:ea:53:5f:02:1b: dc:5e:2a:e2:3a:92:79:d0:86:94:c1:bf:02:ca:87:e8:bb:66: 18:5e:1e:fa:52:22:d1:8a:e6:86:c7:a0:89:e9:d8:40:5f:09: 7b:8c:fd:92 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgICASMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjk4 M0NGRDVGOENBRkEwMDY4RDJFQkEyNUVEMEY3MDEyNDRCMTJGOTAeFw0yMzEwMDEw MTI4MzZaFw0yNDA5MTQwMTMwMDNaMDMxMTAvBgNVBAMTKDAwMjM5NThEMzcxQTk4 RTc1MDM3QTYxNEFCNUI5QjY0NzFDOEY2NDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCarpCW6zLyFTPssUwph0K4ZwpGAF7ALuT4lYjONomk8G2hO9He gTLIOWHop7tnkh+Z6wfvpvDKMNK4VqJYRZolpwW22TOWYcWnZrz7SX9GPn9/aNlZ 85rDRAl6SOntTOgmrhnVjl7aEhB8apFCC227T+FB2QW5RTqvh/4TqRBf2wwfJd07 AWZ0rq44d02P8xhKnf3FMSAop5m+34ITpcCozT8bsnj27CC5a55HAV2KqOcHsawG qOf6hZpLcyqKwrDYxASWVdvMO0czjlaV4DxJxHqlMT3CcRX+GKzSHsG0NRyHhK0I d6w4yZzGqahRdnPSzu0PcLQjB5jAnCu6Q3LZAgMBAAGjggIfMIICGzAdBgNVHQ4E FgQUACOVjTcamOdQN6YUq1ubZHHI9kIwHwYDVR0jBBgwFoAUKYPP1fjK+gBo0uui XtD3ASRLEvkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzYvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JMRXZrLmNybDBtBggrBgEF BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JM RXZrLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgbkGCCsGAQUFBwELBIGsMIGpMF8GCCsG AQUFBzALhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzYvQUNPVmpUY2FtT2RRTjZZVXExdWJaSEhJOWtJLnJvYTBGBggr BgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3JyZHAv YXAvbm90aWZpY2F0aW9uLnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMD AMogMA0GCSqGSIb3DQEBCwUAA4IBAQAwkCo2WPargmyfmTm1JjyyyMrVjkbXC1hE PIIR9uPVvytGodggRIWd5hgdOsMKpJxAE51WmLFU7Bim62lOjiG/jVZesJ366hU9 /EtD/C6l8tNoliEFvem7nIkwlDWzrih360ybCdXDWUevCXP78LN8YeLV3dAFvi3f xph8dmdbDhhi/9XFq1V55r3gWCwe7EjP5WP5z8QhCv28/HQSWWBDIFAd2IU4OWRr k/7GVwiPXfs8kIE03WLa+r4zJvJW7X4J2ZZuAe8S4VRGgQJISMrRRhV36lNfAhvc XiriOpJ50IaUwb8Cyofou2YYXh76UiLRiuaGx6CJ6dhAXwl7jP2S -----END CERTIFICATE-----Generated at Wed Jun 26 08:13:01 2024 by rpki-client on console-ams.rpki-client.org