$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/906/XH5OZYj4U8NTrNjFlnKY9bFtHuw.roa File: XH5OZYj4U8NTrNjFlnKY9bFtHuw.roa (raw, json) Hash identifier: pwhQums6To1cYGBC/25G0Wjt4DMrOs3HFpapc+uBRno= Subject key identifier: 5C:7E:4E:65:88:F8:53:C3:53:AC:D8:C5:96:72:98:F5:B1:6D:1E:EC Certificate issuer: /CN=539BDF2FE18FF387FD03842C5081A145EEEB1CF7 Certificate serial: 08 Authority key identifier: 53:9B:DF:2F:E1:8F:F3:87:FD:03:84:2C:50:81:A1:45:EE:EB:1C:F7 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/U5vfL-GP84f9A4QsUIGhRe7rHPc.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/XH5OZYj4U8NTrNjFlnKY9bFtHuw.roa Signing time: Wed 02 Aug 2023 02:05:46 +0000 ROA not before: Wed 02 Aug 2023 02:05:46 +0000 ROA not after: Thu 01 Aug 2024 01:47:14 +0000 asID: 24259 IP address blocks: 123.255.232.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/U5vfL-GP84f9A4QsUIGhRe7rHPc.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/U5vfL-GP84f9A4QsUIGhRe7rHPc.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/U5vfL-GP84f9A4QsUIGhRe7rHPc.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Jun 2024 06:27:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8 (0x8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=539BDF2FE18FF387FD03842C5081A145EEEB1CF7 Validity Not Before: Aug 2 02:05:46 2023 GMT Not After : Aug 1 01:47:14 2024 GMT Subject: CN=5C7E4E6588F853C353ACD8C5967298F5B16D1EEC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:6c:11:06:80:bb:7d:d9:96:0d:46:a7:e1:f2: fa:7e:bf:0a:18:4b:da:68:4d:d8:4b:99:6e:1d:62: e4:a5:5c:15:e7:90:af:b8:85:e9:53:a7:d9:65:37: 6a:b7:d5:0a:67:af:c4:8d:b7:50:89:4d:e9:a5:1d: 57:e1:16:2f:1f:f3:ea:ad:64:44:44:e7:c4:f0:ad: 0e:5d:1c:16:8e:29:10:03:2c:7e:42:df:2c:9c:e3: a9:15:53:9e:59:de:d3:ba:00:48:11:68:20:c3:d8: 05:54:27:1a:0d:bf:bd:db:59:c3:ad:86:e5:2d:a5: 2f:26:bb:6c:39:4d:de:73:55:69:11:12:b1:0a:1d: f5:4a:95:99:1f:bd:a3:da:a7:38:07:44:b7:a2:fc: 2a:1e:c9:72:fd:6a:45:9d:c1:81:3a:2a:08:70:04: 0b:a5:5d:60:52:82:0c:3e:ab:4d:3d:81:7b:f9:e2: 06:52:22:1c:c8:72:4f:30:86:70:ba:e5:6d:97:1f: fc:6d:6f:0a:4f:d2:6b:ea:56:b1:61:c1:df:ff:e7: 08:b4:da:e4:94:27:49:5d:09:4b:29:9e:9e:9a:25: 52:7b:3e:fe:df:66:1d:3e:5f:47:b0:90:3b:48:6e: df:c1:e2:2d:43:72:39:cf:a0:63:df:90:56:37:19: de:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:7E:4E:65:88:F8:53:C3:53:AC:D8:C5:96:72:98:F5:B1:6D:1E:EC X509v3 Authority Key Identifier: keyid:53:9B:DF:2F:E1:8F:F3:87:FD:03:84:2C:50:81:A1:45:EE:EB:1C:F7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/U5vfL-GP84f9A4QsUIGhRe7rHPc.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/U5vfL-GP84f9A4QsUIGhRe7rHPc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/XH5OZYj4U8NTrNjFlnKY9bFtHuw.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 123.255.232.0/21 Signature Algorithm: sha256WithRSAEncryption 1d:0d:28:11:44:cc:83:7f:64:a0:76:79:af:0f:46:d5:df:32: fa:cc:fe:13:43:d7:77:25:32:dd:41:d1:e8:9c:f5:0c:24:01: 93:95:9d:79:58:ea:da:3b:0f:bf:3b:fb:b5:b2:ea:6a:9f:a6: a0:87:d3:97:7a:e7:b0:aa:b6:31:9c:ad:75:6c:4a:1d:11:8f: 8b:a4:45:d6:24:ad:cd:7a:cc:ae:35:a6:88:f2:44:4d:0d:77: 41:4c:e7:83:83:62:c1:39:17:0d:de:a1:b7:be:2a:54:b6:e0: 1d:3f:25:56:6e:f0:cd:08:02:e8:2b:d3:b3:fe:ec:05:f0:9b: b0:49:f3:a9:3a:98:49:c8:cc:6e:45:cc:39:88:e9:4b:cb:3b: e7:8d:73:51:de:44:aa:89:4f:ac:da:51:16:c8:a9:db:81:07: 19:cf:b0:f1:64:cd:54:6f:0e:a9:f4:a1:f7:6c:2d:50:17:da: 16:06:c3:10:67:2d:51:43:03:44:77:51:5f:28:24:e2:88:32: 2d:09:da:60:7a:1d:98:91:a3:85:fd:86:62:2e:ba:4d:05:e4: 64:de:f3:85:34:27:41:ee:55:f5:19:a7:40:c0:41:ad:c5:36: e5:73:9f:0f:60:49:ce:af:88:0a:a4:e8:cc:7c:1a:b7:03:69: 36:b3:47:89 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBCDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1MzlC REYyRkUxOEZGMzg3RkQwMzg0MkM1MDgxQTE0NUVFRUIxQ0Y3MB4XDTIzMDgwMjAy MDU0NloXDTI0MDgwMTAxNDcxNFowMzExMC8GA1UEAxMoNUM3RTRFNjU4OEY4NTND MzUzQUNEOEM1OTY3Mjk4RjVCMTZEMUVFQzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAK9sEQaAu33Zlg1Gp+Hy+n6/ChhL2mhN2EuZbh1i5KVcFeeQr7iF 6VOn2WU3arfVCmevxI23UIlN6aUdV+EWLx/z6q1kRETnxPCtDl0cFo4pEAMsfkLf LJzjqRVTnlne07oASBFoIMPYBVQnGg2/vdtZw62G5S2lLya7bDlN3nNVaRESsQod 9UqVmR+9o9qnOAdEt6L8Kh7Jcv1qRZ3BgToqCHAEC6VdYFKCDD6rTT2Be/niBlIi HMhyTzCGcLrlbZcf/G1vCk/Sa+pWsWHB3//nCLTa5JQnSV0JSymenpolUns+/t9m HT5fR7CQO0hu38HiLUNyOc+gY9+QVjcZ3mMCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBRcfk5liPhTw1Os2MWWcpj1sW0e7DAfBgNVHSMEGDAWgBRTm98v4Y/zh/0DhCxQ gaFF7usc9zAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvOTA2L1U1dmZMLUdQODRmOUE0UXNVSUdoUmU3ckhQYy5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1U1dmZMLUdQODRmOUE0UXNVSUdoUmU3 ckhQYy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC85MDYvWEg1T1pZajRVOE5Uck5qRmxuS1k5YkZ0SHV3LnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEA3v/6DANBgkqhkiG9w0BAQsFAAOCAQEAHQ0oEUTMg39koHZ5rw9G1d8y+sz+ E0PXdyUy3UHR6Jz1DCQBk5WdeVjq2jsPvzv7tbLqap+moIfTl3rnsKq2MZytdWxK HRGPi6RF1iStzXrMrjWmiPJETQ13QUzng4NiwTkXDd6ht74qVLbgHT8lVm7wzQgC 6CvTs/7sBfCbsEnzqTqYScjMbkXMOYjpS8s7541zUd5EqolPrNpRFsip24EHGc+w 8WTNVG8OqfSh92wtUBfaFgbDEGctUUMDRHdRXygk4ogyLQnaYHodmJGjhf2GYi66 TQXkZN7zhTQnQe5V9RmnQMBBrcU25XOfD2BJzq+ICqTozHwatwNpNrNHiQ== -----END CERTIFICATE-----Generated at Tue Jun 25 00:53:03 2024 by rpki-client on console-ams.rpki-client.org