$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/p-2HJLNWIPxXY2YN2VIE7OOXX0Q.roa File: p-2HJLNWIPxXY2YN2VIE7OOXX0Q.roa (raw, json) Hash identifier: wNldhRykeWJ6gYrqBDNx0BAsVSos09LI5r62BQxyep4= Subject key identifier: A7:ED:87:24:B3:56:20:FC:57:63:66:0D:D9:52:04:EC:E3:97:5F:44 Certificate issuer: /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9 Certificate serial: 013C Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/p-2HJLNWIPxXY2YN2VIE7OOXX0Q.roa Signing time: Fri 15 Dec 2023 06:17:35 +0000 ROA not before: Fri 15 Dec 2023 06:17:35 +0000 ROA not after: Sat 14 Dec 2024 01:30:03 +0000 asID: 2497 IP address blocks: 163.218.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jul 2024 07:52:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 316 (0x13c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9 Validity Not Before: Dec 15 06:17:35 2023 GMT Not After : Dec 14 01:30:03 2024 GMT Subject: CN=A7ED8724B35620FC5763660DD95204ECE3975F44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:3b:0c:a6:55:c0:29:0b:9d:24:ba:6f:6a:8c: 8e:98:aa:14:76:94:48:6c:05:52:f4:ef:d9:ea:cd: f2:d2:6d:cc:b6:b4:9c:24:5f:98:12:b6:71:59:c4: 44:6f:33:27:72:56:a1:fb:2a:be:9a:ee:77:35:f4: 1d:6f:38:5d:ff:84:68:db:09:13:56:9a:d5:a3:d1: 6f:d5:6a:b9:f5:91:26:b6:f2:97:30:db:0f:19:f0: 2e:7d:84:23:1b:95:31:e7:11:b2:40:93:50:10:ce: 57:83:e5:64:db:42:fb:b0:e1:09:e4:61:6b:e7:1f: 0e:ea:91:c0:92:d6:0c:ed:7a:a2:e6:02:9f:69:e6: ca:b9:c0:69:04:6b:d7:a1:ee:9a:71:8d:d0:25:81: a1:2f:ab:ba:fb:01:2e:98:71:9e:f7:a8:c9:4c:5a: 01:d1:01:5b:17:25:6b:5d:38:aa:0f:73:6c:81:66: c4:c5:76:90:e9:5c:c1:2b:f3:3e:53:05:c1:1d:18: de:56:04:a8:87:00:55:f7:50:b2:37:f8:0e:39:c8: b4:1b:e0:40:a6:1a:82:39:ed:5d:0b:79:a1:35:c9: 12:56:a7:cc:e4:02:47:37:50:01:0b:33:ff:44:0d: 7b:72:ba:65:bc:f8:95:9e:0d:cc:11:04:bb:06:e4: 06:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:ED:87:24:B3:56:20:FC:57:63:66:0D:D9:52:04:EC:E3:97:5F:44 X509v3 Authority Key Identifier: keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/p-2HJLNWIPxXY2YN2VIE7OOXX0Q.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 163.218.0.0/16 Signature Algorithm: sha256WithRSAEncryption 13:15:4c:74:f2:3a:a5:9e:25:e7:1a:1a:92:34:1f:ef:75:6c: 89:9c:04:f1:37:b7:d1:1e:9a:f0:38:eb:0d:95:5e:cf:88:93: 0a:cd:91:ca:5e:d7:56:61:2c:72:71:1e:1f:2e:92:b8:85:d6: 93:b5:97:95:a1:c3:76:8b:71:49:99:e3:7a:94:d6:d7:bb:13: ca:fb:b8:52:3d:ec:c1:df:1e:54:eb:e6:c4:d6:a5:f7:61:07: fe:e0:21:c5:e1:69:e0:50:78:56:50:8b:db:58:4d:2d:32:a6: 4c:39:8d:22:63:40:2f:c5:bd:2d:6b:2c:85:04:6b:13:a5:b0: 40:1b:a0:e6:7e:1c:2c:3d:f5:32:93:e1:bb:bd:ec:76:5a:0e: b8:97:bb:28:f0:9d:43:c0:d6:4f:e9:6e:77:d0:00:eb:86:95: d6:38:e5:15:02:fc:69:8b:05:42:da:67:f9:ff:0f:fe:2d:fe: 12:e3:f6:5d:af:16:55:85:1d:01:29:e5:3e:13:36:23:2b:18: d5:5c:ae:0a:cc:d7:80:ec:77:19:15:ae:44:4c:55:30:20:37: 0f:b8:74:8a:ff:53:bb:b5:8b:08:d3:b7:6f:f5:39:c0:fd:44: fa:6e:4a:b1:42:da:78:20:49:dc:95:21:dc:38:6f:20:06:0b: ae:86:64:5b -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgICATwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjk4 M0NGRDVGOENBRkEwMDY4RDJFQkEyNUVEMEY3MDEyNDRCMTJGOTAeFw0yMzEyMTUw NjE3MzVaFw0yNDEyMTQwMTMwMDNaMDMxMTAvBgNVBAMTKEE3RUQ4NzI0QjM1NjIw RkM1NzYzNjYwREQ5NTIwNEVDRTM5NzVGNDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCvOwymVcApC50kum9qjI6YqhR2lEhsBVL079nqzfLSbcy2tJwk X5gStnFZxERvMydyVqH7Kr6a7nc19B1vOF3/hGjbCRNWmtWj0W/Varn1kSa28pcw 2w8Z8C59hCMblTHnEbJAk1AQzleD5WTbQvuw4QnkYWvnHw7qkcCS1gzteqLmAp9p 5sq5wGkEa9eh7ppxjdAlgaEvq7r7AS6YcZ73qMlMWgHRAVsXJWtdOKoPc2yBZsTF dpDpXMEr8z5TBcEdGN5WBKiHAFX3ULI3+A45yLQb4ECmGoI57V0LeaE1yRJWp8zk Akc3UAELM/9EDXtyumW8+JWeDcwRBLsG5AbtAgMBAAGjggIfMIICGzAdBgNVHQ4E FgQUp+2HJLNWIPxXY2YN2VIE7OOXX0QwHwYDVR0jBBgwFoAUKYPP1fjK+gBo0uui XtD3ASRLEvkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzYvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JMRXZrLmNybDBtBggrBgEF BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JM RXZrLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgbkGCCsGAQUFBwELBIGsMIGpMF8GCCsG AQUFBzALhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzYvcC0ySEpMTldJUHhYWTJZTjJWSUU3T09YWDBRLnJvYTBGBggr BgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3JyZHAv YXAvbm90aWZpY2F0aW9uLnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMD AKPaMA0GCSqGSIb3DQEBCwUAA4IBAQATFUx08jqlniXnGhqSNB/vdWyJnATxN7fR HprwOOsNlV7PiJMKzZHKXtdWYSxycR4fLpK4hdaTtZeVocN2i3FJmeN6lNbXuxPK +7hSPezB3x5U6+bE1qX3YQf+4CHF4WngUHhWUIvbWE0tMqZMOY0iY0Avxb0tayyF BGsTpbBAG6DmfhwsPfUyk+G7vex2Wg64l7so8J1DwNZP6W530ADrhpXWOOUVAvxp iwVC2mf5/w/+Lf4S4/ZdrxZVhR0BKeU+EzYjKxjVXK4KzNeA7HcZFa5ETFUwIDcP uHSK/1O7tYsI07dv9TnA/UT6bkqxQtp4IEnclSHcOG8gBguuhmRb -----END CERTIFICATE-----Generated at Wed Jun 26 09:28:47 2024 by rpki-client on console-fra.rpki-client.org