$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/YWj2FvgWLFJKZFr1OQ1MMBvJAmk.roa File: YWj2FvgWLFJKZFr1OQ1MMBvJAmk.roa (raw, json) Hash identifier: hw+XpkNCF36GaSjBX2e193BtlMcT+SAXRdH2vLRcc7Q= Subject key identifier: 61:68:F6:16:F8:16:2C:52:4A:64:5A:F5:39:0D:4C:30:1B:C9:02:69 Certificate issuer: /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9 Certificate serial: 0111 Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/YWj2FvgWLFJKZFr1OQ1MMBvJAmk.roa Signing time: Fri 01 Sep 2023 01:31:35 +0000 ROA not before: Fri 01 Sep 2023 01:31:35 +0000 ROA not after: Wed 14 Aug 2024 01:30:02 +0000 asID: 2497 IP address blocks: 219.121.160.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jul 2024 06:55:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 273 (0x111) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9 Validity Not Before: Sep 1 01:31:35 2023 GMT Not After : Aug 14 01:30:02 2024 GMT Subject: CN=6168F616F8162C524A645AF5390D4C301BC90269 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:4a:02:dc:6d:e2:0e:bd:bd:94:e8:e6:1b:97: 8a:31:2e:9f:24:14:d5:6c:dc:04:a3:a5:59:be:90: 4c:45:92:b2:65:e4:4d:a2:ca:ad:4c:b3:28:d5:93: 84:c4:74:ac:a2:07:c6:17:5c:22:20:6a:a6:e3:a6: 84:01:a6:24:48:ea:51:41:e3:6d:6a:14:c0:d6:28: 12:8b:5c:a5:63:68:e0:30:25:cf:4a:64:9e:81:ff: 56:37:73:dc:d6:4b:90:f9:cb:cf:be:a5:a7:f1:41: 71:c3:d1:e7:8f:57:c9:48:0e:77:ad:53:84:f2:d6: 7a:cc:25:20:ce:1b:fb:4e:c8:21:b6:c2:58:8b:e9: 77:21:df:19:4d:06:e3:de:21:b2:4a:46:66:3a:88: 89:ca:e3:e6:ce:49:b4:53:c1:d6:9e:a5:11:19:22: 81:63:0b:8d:db:cf:dd:35:3a:99:1f:e4:5d:84:b2: 28:71:4b:f8:0d:4f:6d:ef:0b:de:1a:3e:d7:7a:a0: 02:18:38:14:e2:2c:64:8f:6a:d4:92:97:d7:63:42: bf:65:5f:98:86:1c:ec:21:b1:63:d0:ca:17:82:ce: 57:bd:02:f9:77:2d:08:57:39:70:28:6b:63:47:0b: a9:df:2a:23:ae:36:97:4d:b2:42:63:47:7f:2b:a1: b0:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:68:F6:16:F8:16:2C:52:4A:64:5A:F5:39:0D:4C:30:1B:C9:02:69 X509v3 Authority Key Identifier: keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/YWj2FvgWLFJKZFr1OQ1MMBvJAmk.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 219.121.160.0/19 Signature Algorithm: sha256WithRSAEncryption 7f:b5:a3:2f:9d:e2:f4:03:24:18:e3:01:a2:0d:98:40:c0:81: 58:28:b7:e0:e6:06:48:50:2d:f6:e8:2e:25:66:1e:07:1c:30: 43:55:43:b7:4a:9d:55:a4:43:2e:ad:64:e7:b9:8f:60:11:e4: d8:80:6c:77:21:d6:21:0e:f9:bb:a6:3f:b5:cd:50:77:5b:86: 6e:c5:9e:7b:e4:80:dd:a5:7d:9a:8d:cc:32:be:58:6a:45:96: 5b:ff:9d:2c:31:42:87:f3:95:63:49:64:32:3f:25:de:18:34: 01:19:bc:d0:6f:55:60:e4:a5:69:84:70:e0:94:ec:0a:b3:3c: 85:f7:2c:ea:21:0f:f1:2b:b9:86:a9:8c:9a:73:4f:c7:4e:4d: 10:70:4d:76:10:63:d2:72:63:f8:8f:6f:cf:a6:30:56:c6:8f: 6f:61:e5:71:fa:3a:c0:51:27:50:5a:40:e2:d6:5c:fa:49:92: 94:94:26:21:96:86:b8:73:73:f4:65:0a:a8:e3:22:ea:9c:a9: c2:c0:1c:bc:2a:b9:93:5d:9e:f6:a0:72:23:cc:8e:ff:60:83: ea:a2:03:41:29:3d:7b:e8:95:76:a6:de:1d:16:50:d5:91:c8: 22:28:22:0f:3d:59:a1:a5:87:60:80:4f:45:2c:c7:19:e3:65: 76:5c:57:6c -----BEGIN CERTIFICATE----- MIIFBDCCA+ygAwIBAgICAREwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjk4 M0NGRDVGOENBRkEwMDY4RDJFQkEyNUVEMEY3MDEyNDRCMTJGOTAeFw0yMzA5MDEw MTMxMzVaFw0yNDA4MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDYxNjhGNjE2RjgxNjJD NTI0QTY0NUFGNTM5MEQ0QzMwMUJDOTAyNjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD3SgLcbeIOvb2U6OYbl4oxLp8kFNVs3ASjpVm+kExFkrJl5E2i yq1MsyjVk4TEdKyiB8YXXCIgaqbjpoQBpiRI6lFB421qFMDWKBKLXKVjaOAwJc9K ZJ6B/1Y3c9zWS5D5y8++pafxQXHD0eePV8lIDnetU4Ty1nrMJSDOG/tOyCG2wliL 6Xch3xlNBuPeIbJKRmY6iInK4+bOSbRTwdaepREZIoFjC43bz901Opkf5F2Esihx S/gNT23vC94aPtd6oAIYOBTiLGSPatSSl9djQr9lX5iGHOwhsWPQyheCzle9Avl3 LQhXOXAoa2NHC6nfKiOuNpdNskJjR38robDpAgMBAAGjggIgMIICHDAdBgNVHQ4E FgQUYWj2FvgWLFJKZFr1OQ1MMBvJAmkwHwYDVR0jBBgwFoAUKYPP1fjK+gBo0uui XtD3ASRLEvkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzYvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JMRXZrLmNybDBtBggrBgEF BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JM RXZrLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgbkGCCsGAQUFBwELBIGsMIGpMF8GCCsG AQUFBzALhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzYvWVdqMkZ2Z1dMRkpLWkZyMU9RMU1NQnZKQW1rLnJvYTBGBggr BgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3JyZHAv YXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME Bdt5oDANBgkqhkiG9w0BAQsFAAOCAQEAf7WjL53i9AMkGOMBog2YQMCBWCi34OYG SFAt9uguJWYeBxwwQ1VDt0qdVaRDLq1k57mPYBHk2IBsdyHWIQ75u6Y/tc1Qd1uG bsWee+SA3aV9mo3MMr5YakWWW/+dLDFCh/OVY0lkMj8l3hg0ARm80G9VYOSlaYRw 4JTsCrM8hfcs6iEP8Su5hqmMmnNPx05NEHBNdhBj0nJj+I9vz6YwVsaPb2Hlcfo6 wFEnUFpA4tZc+kmSlJQmIZaGuHNz9GUKqOMi6pypwsAcvCq5k12e9qByI8yO/2CD 6qIDQSk9e+iVdqbeHRZQ1ZHIIigiDz1ZoaWHYIBPRSzHGeNldlxXbA== -----END CERTIFICATE-----Generated at Wed Jun 26 08:13:02 2024 by rpki-client on console-ams.rpki-client.org