$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/gRO1EbFR2A0b6x42zNqQBXIVvW4.roa File: gRO1EbFR2A0b6x42zNqQBXIVvW4.roa (raw, json) Hash identifier: l/j1gon93w2lPu186YqSzT0NOUGyGOG9cGSg2TrAqH0= Subject key identifier: 81:13:B5:11:B1:51:D8:0D:1B:EB:1E:36:CC:DA:90:05:72:15:BD:6E Certificate issuer: /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9 Certificate serial: 0118 Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/gRO1EbFR2A0b6x42zNqQBXIVvW4.roa Signing time: Fri 01 Sep 2023 01:31:38 +0000 ROA not before: Fri 01 Sep 2023 01:31:38 +0000 ROA not after: Wed 14 Aug 2024 01:30:02 +0000 asID: 2497 IP address blocks: 219.111.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jul 2024 06:55:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 280 (0x118) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9 Validity Not Before: Sep 1 01:31:38 2023 GMT Not After : Aug 14 01:30:02 2024 GMT Subject: CN=8113B511B151D80D1BEB1E36CCDA90057215BD6E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:76:b9:0d:4c:52:ae:61:2e:01:84:aa:bb:c0: 5a:e8:28:e7:e3:27:c4:99:00:70:25:29:df:fa:6b: 5a:c4:6b:e1:94:cd:c2:ad:9d:3a:2b:1c:4c:0e:f6: f1:c0:85:eb:cf:cb:73:51:11:29:b3:bc:27:b2:ab: ec:5a:77:9e:5e:f0:3a:8d:e8:32:83:e1:5e:e0:11: eb:63:f6:18:b6:3d:63:41:ef:a0:c1:39:5c:6c:0a: c0:c2:60:9e:92:d5:9b:b6:8c:1b:17:b3:21:99:bb: bf:09:ea:d5:fb:c3:5b:ec:17:29:88:1b:b5:3b:ea: d1:54:c0:7f:e9:f0:da:47:2c:65:93:38:5a:e6:87: e1:d2:4b:e8:3d:32:75:ab:c4:bd:8a:ba:64:4a:b8: b8:cf:02:ef:89:3d:61:59:44:40:a9:1a:38:ae:d0: ab:b3:16:b2:22:f8:1f:57:bd:3c:d2:f0:f3:e3:d7: 57:d3:91:7f:68:45:80:c6:c4:f6:8a:b4:25:c0:4d: 32:3e:1d:ff:a6:8d:9c:81:e1:e6:3f:f1:80:1b:96: 73:96:61:5d:86:db:e9:71:97:28:2c:f5:cf:f8:8a: e1:32:e3:36:5f:11:b8:50:a7:11:08:b2:25:c3:19: 71:30:43:45:85:c7:61:aa:a2:f5:46:b6:4a:55:28: 0b:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:13:B5:11:B1:51:D8:0D:1B:EB:1E:36:CC:DA:90:05:72:15:BD:6E X509v3 Authority Key Identifier: keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/gRO1EbFR2A0b6x42zNqQBXIVvW4.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 219.111.0.0/17 Signature Algorithm: sha256WithRSAEncryption 2f:30:d9:1d:f5:98:cb:41:79:d0:b2:6b:56:18:0f:2d:7b:55: 77:86:98:78:a6:15:6c:47:6e:25:a7:37:4a:9c:12:b2:fd:57: 29:0f:38:19:06:c2:73:ef:6b:a1:22:5b:7b:df:b5:b4:aa:75: 23:af:14:d7:70:14:9f:5c:72:ee:cd:b0:18:6b:7f:f3:54:37: 21:c4:b3:66:d8:41:a7:7f:aa:31:64:b7:6b:48:e7:6a:3c:32: 94:88:26:7f:32:f6:0c:68:67:14:a7:b0:64:a1:59:df:64:02: 59:bc:3e:28:ef:eb:dd:76:57:1b:5f:63:ff:93:f0:13:37:ff: b7:37:4e:f0:a9:98:6b:4e:61:22:97:23:57:1d:e7:7c:84:78: 65:c2:58:4a:bb:fa:c0:70:1b:28:be:ca:31:f8:fa:b4:66:82: ee:7d:2d:cf:90:80:9c:c6:4d:b3:59:3d:57:d1:44:b7:44:17: 9f:a2:b9:eb:37:36:c4:64:20:2d:b4:67:23:e3:f2:5e:ea:8e: f8:e0:ad:1d:32:fc:a7:0c:27:ca:7e:2d:d3:b0:0f:6a:cc:be: 74:52:44:38:7b:d7:89:ad:a5:1e:5a:ab:23:63:17:12:98:e4: dd:ef:f6:e1:d4:00:e8:01:04:20:b8:52:ca:ab:90:21:a7:f4: 1d:03:2f:da -----BEGIN CERTIFICATE----- MIIFBDCCA+ygAwIBAgICARgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjk4 M0NGRDVGOENBRkEwMDY4RDJFQkEyNUVEMEY3MDEyNDRCMTJGOTAeFw0yMzA5MDEw MTMxMzhaFw0yNDA4MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDgxMTNCNTExQjE1MUQ4 MEQxQkVCMUUzNkNDREE5MDA1NzIxNUJENkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCfdrkNTFKuYS4BhKq7wFroKOfjJ8SZAHAlKd/6a1rEa+GUzcKt nTorHEwO9vHAhevPy3NRESmzvCeyq+xad55e8DqN6DKD4V7gEetj9hi2PWNB76DB OVxsCsDCYJ6S1Zu2jBsXsyGZu78J6tX7w1vsFymIG7U76tFUwH/p8NpHLGWTOFrm h+HSS+g9MnWrxL2KumRKuLjPAu+JPWFZRECpGjiu0KuzFrIi+B9XvTzS8PPj11fT kX9oRYDGxPaKtCXATTI+Hf+mjZyB4eY/8YAblnOWYV2G2+lxlygs9c/4iuEy4zZf EbhQpxEIsiXDGXEwQ0WFx2GqovVGtkpVKAu7AgMBAAGjggIgMIICHDAdBgNVHQ4E FgQUgRO1EbFR2A0b6x42zNqQBXIVvW4wHwYDVR0jBBgwFoAUKYPP1fjK+gBo0uui XtD3ASRLEvkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzYvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JMRXZrLmNybDBtBggrBgEF BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JM RXZrLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgbkGCCsGAQUFBwELBIGsMIGpMF8GCCsG AQUFBzALhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzYvZ1JPMUViRlIyQTBiNng0MnpOcVFCWElWdlc0LnJvYTBGBggr BgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3JyZHAv YXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME B9tvADANBgkqhkiG9w0BAQsFAAOCAQEALzDZHfWYy0F50LJrVhgPLXtVd4aYeKYV bEduJac3SpwSsv1XKQ84GQbCc+9roSJbe9+1tKp1I68U13AUn1xy7s2wGGt/81Q3 IcSzZthBp3+qMWS3a0jnajwylIgmfzL2DGhnFKewZKFZ32QCWbw+KO/r3XZXG19j /5PwEzf/tzdO8KmYa05hIpcjVx3nfIR4ZcJYSrv6wHAbKL7KMfj6tGaC7n0tz5CA nMZNs1k9V9FEt0QXn6K56zc2xGQgLbRnI+PyXuqO+OCtHTL8pwwnyn4t07APasy+ dFJEOHvXia2lHlqrI2MXEpjk3e/24dQA6AEEILhSyquQIaf0HQMv2g== -----END CERTIFICATE-----Generated at Wed Jun 26 08:13:02 2024 by rpki-client on console-ams.rpki-client.org