$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10173/4ntYgocY0FrItMT6mrEv8f4f0uo.roa File: 4ntYgocY0FrItMT6mrEv8f4f0uo.roa (raw, json) Hash identifier: 5VoalpYosrXFU4PrxnhdAhNk5c5vWz9pF6f2YuJOy1M= Subject key identifier: E2:7B:58:82:87:18:D0:5A:C8:B4:C4:FA:9A:B1:2F:F1:FE:1F:D2:EA Certificate issuer: /CN=101A90E4E74C403ABE8E5E0A1FE8E4157ABD2AE7 Certificate serial: A7 Authority key identifier: 10:1A:90:E4:E7:4C:40:3A:BE:8E:5E:0A:1F:E8:E4:15:7A:BD:2A:E7 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/4ntYgocY0FrItMT6mrEv8f4f0uo.roa Signing time: Thu 29 Feb 2024 01:30:12 +0000 ROA not before: Thu 29 Feb 2024 01:30:12 +0000 ROA not after: Fri 14 Feb 2025 01:30:03 +0000 asID: 18126 IP address blocks: 124.18.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 13 Jun 2024 14:03:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 167 (0xa7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=101A90E4E74C403ABE8E5E0A1FE8E4157ABD2AE7 Validity Not Before: Feb 29 01:30:12 2024 GMT Not After : Feb 14 01:30:03 2025 GMT Subject: CN=E27B58828718D05AC8B4C4FA9AB12FF1FE1FD2EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:26:de:a1:f0:51:d6:3e:2e:db:4b:de:ad:c2: 46:50:b5:63:16:db:e4:18:c3:8f:aa:bb:33:b7:54: 65:16:d2:bb:f3:44:8a:b9:70:19:7e:46:4f:30:c0: 7b:8b:c8:4e:2b:85:f7:b4:ef:4b:7e:07:f2:14:29: af:49:ae:0f:7d:c4:b5:89:fd:2f:62:4b:e4:8e:be: f6:0f:55:dd:5f:7a:76:d8:1d:da:08:ca:c6:84:62: 45:b9:2f:47:bb:8b:4c:1a:b4:b4:14:7f:da:53:66: 87:98:a7:e3:b5:17:a1:1b:4a:1e:7f:59:f9:b8:f7: a7:69:d6:55:f5:05:21:5e:3e:84:47:74:e3:69:3e: 6d:9e:92:1f:43:f2:f8:6f:69:61:c5:b0:83:fd:5f: 0f:c6:26:d9:e6:2e:25:d9:f3:5a:09:30:c1:c1:95: 0d:16:d1:4f:53:a0:a6:ce:6a:36:7f:bf:6e:c3:c3: ea:73:e4:b2:54:25:cf:da:72:77:33:da:56:cf:25: 67:21:de:f1:c7:09:d4:da:b3:b9:2c:0f:da:41:73: 0f:11:4a:6c:da:5b:32:66:ef:09:a5:c6:f9:ee:21: 76:ca:7a:d5:1c:94:3a:a3:45:b3:f4:b7:a3:4c:43: f7:21:bc:b8:a7:aa:2c:f4:f2:ee:4e:cd:c6:79:ba: a4:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:7B:58:82:87:18:D0:5A:C8:B4:C4:FA:9A:B1:2F:F1:FE:1F:D2:EA X509v3 Authority Key Identifier: keyid:10:1A:90:E4:E7:4C:40:3A:BE:8E:5E:0A:1F:E8:E4:15:7A:BD:2A:E7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/4ntYgocY0FrItMT6mrEv8f4f0uo.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 124.18.0.0/16 Signature Algorithm: sha256WithRSAEncryption 6a:d0:d3:6b:1f:c3:fa:74:4f:7c:a5:35:75:0c:a7:4f:6d:bd: 8e:3a:31:68:8c:fd:9b:03:ec:8d:1b:a9:05:39:1a:8c:fd:83: e4:ea:a9:27:00:5c:81:00:5e:92:45:81:82:40:cf:f8:c0:1e: 40:ba:28:c5:c1:c1:c3:7d:1a:51:a3:7d:5e:2f:0b:6e:38:bd: 0c:2d:47:a2:e0:7f:7e:50:4b:48:c7:96:d3:6f:70:1f:38:40: 48:7f:d2:97:0b:ec:da:9e:09:f9:c5:cc:9b:0c:4f:60:30:e2: 82:48:1c:6c:13:4c:a0:12:3c:f2:55:1d:c8:b5:37:0b:8e:6f: c2:e7:71:6a:9b:e3:e9:de:d6:f6:15:cb:da:6f:54:be:bb:0a: 52:9c:cd:a0:9d:a8:1f:f5:b2:f2:b3:2c:a2:0e:09:d9:24:98: 1a:c0:0c:44:9e:74:9c:39:b0:2c:b1:05:94:7a:e3:01:d9:3c: d7:87:ac:c6:23:61:84:ff:bf:bb:62:9d:64:a9:81:e6:1b:61: 97:b0:1e:fc:06:d3:c1:fa:44:52:34:11:2f:4f:a6:e5:a6:f9: d8:00:a0:8b:c6:c5:d3:cd:fd:56:00:b4:d1:58:91:ae:9f:9a: 8f:e3:9a:fd:4e:b4:91:91:ae:8d:70:f4:9a:a5:64:5a:23:1a: d6:76:6a:48 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgICAKcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTAx QTkwRTRFNzRDNDAzQUJFOEU1RTBBMUZFOEU0MTU3QUJEMkFFNzAeFw0yNDAyMjkw MTMwMTJaFw0yNTAyMTQwMTMwMDNaMDMxMTAvBgNVBAMTKEUyN0I1ODgyODcxOEQw NUFDOEI0QzRGQTlBQjEyRkYxRkUxRkQyRUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC/Jt6h8FHWPi7bS96twkZQtWMW2+QYw4+quzO3VGUW0rvzRIq5 cBl+Rk8wwHuLyE4rhfe070t+B/IUKa9Jrg99xLWJ/S9iS+SOvvYPVd1fenbYHdoI ysaEYkW5L0e7i0watLQUf9pTZoeYp+O1F6EbSh5/Wfm496dp1lX1BSFePoRHdONp Pm2ekh9D8vhvaWHFsIP9Xw/GJtnmLiXZ81oJMMHBlQ0W0U9ToKbOajZ/v27Dw+pz 5LJUJc/acncz2lbPJWch3vHHCdTas7ksD9pBcw8RSmzaWzJm7wmlxvnuIXbKetUc lDqjRbP0t6NMQ/chvLinqiz08u5OzcZ5uqTzAgMBAAGjggInMIICIzAdBgNVHQ4E FgQU4ntYgocY0FrItMT6mrEv8f4f0uowHwYDVR0jBBgwFoAUEBqQ5OdMQDq+jl4K H+jkFXq9KucwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzEwMTczL0VCcVE1T2RNUURxLWpsNEtILWprRlhxOUt1Yy5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0VCcVE1T2RNUURxLWpsNEtILWpr RlhxOUt1Yy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8xMDE3My80bnRZZ29jWTBGckl0TVQ2bXJFdjhmNGYwdW8u cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTAL BAIAATAFAwMAfBIwDQYJKoZIhvcNAQELBQADggEBAGrQ02sfw/p0T3ylNXUMp09t vY46MWiM/ZsD7I0bqQU5Goz9g+TqqScAXIEAXpJFgYJAz/jAHkC6KMXBwcN9GlGj fV4vC244vQwtR6Lgf35QS0jHltNvcB84QEh/0pcL7NqeCfnFzJsMT2Aw4oJIHGwT TKASPPJVHci1NwuOb8LncWqb4+ne1vYVy9pvVL67ClKczaCdqB/1svKzLKIOCdkk mBrADESedJw5sCyxBZR64wHZPNeHrMYjYYT/v7tinWSpgeYbYZewHvwG08H6RFI0 ES9PpuWm+dgAoIvGxdPN/VYAtNFYka6fmo/jmv1OtJGRro1w9JqlZFojGtZ2akg= -----END CERTIFICATE-----Generated at Thu Jun 6 14:56:12 2024 by rpki-client on console-fra.rpki-client.org