$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/WDKV67UxxZpK8gDw7QK8cRGA1EY.roa File: WDKV67UxxZpK8gDw7QK8cRGA1EY.roa (raw, json) Hash identifier: Lkki06WhWA+XW03rq7RvSfyndFYSqu+dQD61BZXyDp0= Subject key identifier: 58:32:95:EB:B5:31:C5:9A:4A:F2:00:F0:ED:02:BC:71:11:80:D4:46 Certificate issuer: /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9 Certificate serial: F7 Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/WDKV67UxxZpK8gDw7QK8cRGA1EY.roa Signing time: Fri 01 Sep 2023 01:28:51 +0000 ROA not before: Fri 01 Sep 2023 01:28:51 +0000 ROA not after: Wed 14 Aug 2024 01:30:02 +0000 asID: 2497 IP address blocks: 116.118.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jul 2024 06:55:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 247 (0xf7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9 Validity Not Before: Sep 1 01:28:51 2023 GMT Not After : Aug 14 01:30:02 2024 GMT Subject: CN=583295EBB531C59A4AF200F0ED02BC711180D446 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:0a:4f:e5:10:14:10:ea:af:1e:9b:86:c2:0a: be:3c:be:0d:86:fd:6c:df:07:e9:9c:ee:29:fd:bc: 65:3b:01:6c:26:9b:3d:ad:4c:56:1b:f1:14:5b:5c: 0f:9b:4e:03:f7:c5:eb:f2:e8:08:0b:b4:c9:82:c3: a8:72:e4:0a:71:65:c6:05:63:f1:6b:7d:25:b0:ad: c2:1e:81:a5:ea:15:78:92:df:09:50:74:b4:3c:b8: 70:cd:85:87:83:9f:22:ab:95:57:ed:6a:e8:5a:d1: d3:dc:2f:5e:c2:f0:a1:5a:50:33:66:1b:d5:70:3c: 78:28:3d:82:b9:cf:b7:8a:5d:cb:7b:11:90:ef:5f: 20:ad:2a:29:95:2b:67:46:3e:36:65:96:ca:15:80: 5b:3c:3a:54:7c:19:10:34:77:8a:18:5b:bb:0a:18: da:eb:93:55:c7:8e:3b:16:5e:93:af:99:48:be:a3: 5b:7b:b2:53:8d:3f:d9:8d:c9:2f:e3:c8:f1:62:88: 62:4b:40:ff:17:7a:e3:1c:a1:73:82:92:de:3b:cb: 07:4d:7a:19:a5:86:3e:3b:2b:2c:cd:a4:c4:6c:0e: c7:e9:74:36:5e:d0:a0:d6:3e:73:da:01:63:34:17: 1a:5c:40:0e:c5:72:9c:8d:43:a8:b0:a1:d2:5d:21: 67:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:32:95:EB:B5:31:C5:9A:4A:F2:00:F0:ED:02:BC:71:11:80:D4:46 X509v3 Authority Key Identifier: keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/WDKV67UxxZpK8gDw7QK8cRGA1EY.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 116.118.192.0/20 Signature Algorithm: sha256WithRSAEncryption 6f:99:f6:38:55:47:a6:10:9f:ff:5a:98:76:f4:53:9c:2e:5d: 1c:de:db:81:87:88:f6:7b:46:6d:ca:59:97:b3:3d:d3:87:7d: 42:de:ff:59:d2:17:ff:44:a6:0a:df:e3:93:b1:e0:ee:db:a1: 87:39:43:0c:3f:5e:2f:44:7e:35:45:e0:60:66:eb:fc:e7:9e: 5e:47:2b:cf:fa:68:47:bd:91:dd:f5:1f:72:aa:48:c0:01:cc: de:f4:76:b4:39:0e:b9:a2:85:dd:f0:c2:d6:c6:11:0b:ee:e2: 76:67:b5:00:56:b2:59:5a:cf:7e:b0:ca:ee:d9:2b:63:44:df: 6e:76:00:88:bf:c5:5b:66:f6:a2:a8:59:8f:b1:b2:5b:52:bf: 5d:4c:48:c2:16:e2:e1:64:6c:60:56:1c:0c:b3:99:c6:05:db: 4c:bc:fe:6c:97:e6:53:1f:2c:30:fe:27:5b:78:78:3b:e8:5f: 8a:6f:e3:51:a4:80:c3:54:51:ba:fd:7c:15:50:06:34:5b:9c: 7c:1c:94:70:40:a2:b9:3c:f8:66:03:5b:e0:3f:25:fb:8e:b4: 54:f6:06:80:5a:63:60:8a:35:73:29:43:11:f9:17:6a:53:21: f9:9e:2d:05:d8:89:3b:ca:97:56:83:73:ba:ab:c4:79:8a:f7: 5d:55:92:cf -----BEGIN CERTIFICATE----- MIIFBDCCA+ygAwIBAgICAPcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjk4 M0NGRDVGOENBRkEwMDY4RDJFQkEyNUVEMEY3MDEyNDRCMTJGOTAeFw0yMzA5MDEw MTI4NTFaFw0yNDA4MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDU4MzI5NUVCQjUzMUM1 OUE0QUYyMDBGMEVEMDJCQzcxMTE4MEQ0NDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDVCk/lEBQQ6q8em4bCCr48vg2G/WzfB+mc7in9vGU7AWwmmz2t TFYb8RRbXA+bTgP3xevy6AgLtMmCw6hy5ApxZcYFY/FrfSWwrcIegaXqFXiS3wlQ dLQ8uHDNhYeDnyKrlVftauha0dPcL17C8KFaUDNmG9VwPHgoPYK5z7eKXct7EZDv XyCtKimVK2dGPjZllsoVgFs8OlR8GRA0d4oYW7sKGNrrk1XHjjsWXpOvmUi+o1t7 slONP9mNyS/jyPFiiGJLQP8XeuMcoXOCkt47ywdNehmlhj47KyzNpMRsDsfpdDZe 0KDWPnPaAWM0FxpcQA7FcpyNQ6iwodJdIWf9AgMBAAGjggIgMIICHDAdBgNVHQ4E FgQUWDKV67UxxZpK8gDw7QK8cRGA1EYwHwYDVR0jBBgwFoAUKYPP1fjK+gBo0uui XtD3ASRLEvkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzYvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JMRXZrLmNybDBtBggrBgEF BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JM RXZrLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgbkGCCsGAQUFBwELBIGsMIGpMF8GCCsG AQUFBzALhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzYvV0RLVjY3VXh4WnBLOGdEdzdRSzhjUkdBMUVZLnJvYTBGBggr BgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3JyZHAv YXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME BHR2wDANBgkqhkiG9w0BAQsFAAOCAQEAb5n2OFVHphCf/1qYdvRTnC5dHN7bgYeI 9ntGbcpZl7M904d9Qt7/WdIX/0SmCt/jk7Hg7tuhhzlDDD9eL0R+NUXgYGbr/Oee Xkcrz/poR72R3fUfcqpIwAHM3vR2tDkOuaKF3fDC1sYRC+7idme1AFayWVrPfrDK 7tkrY0TfbnYAiL/FW2b2oqhZj7GyW1K/XUxIwhbi4WRsYFYcDLOZxgXbTLz+bJfm Ux8sMP4nW3h4O+hfim/jUaSAw1RRuv18FVAGNFucfByUcECiuTz4ZgNb4D8l+460 VPYGgFpjYIo1cylDEfkXalMh+Z4tBdiJO8qXVoNzuqvEeYr3XVWSzw== -----END CERTIFICATE-----Generated at Wed Jun 26 08:13:02 2024 by rpki-client on console-ams.rpki-client.org