$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/173/k4m_BR2xgOkh2vm_QDBFrBTu2sE.roa File: k4m_BR2xgOkh2vm_QDBFrBTu2sE.roa (raw, json) Hash identifier: PEGRtg6kAFmJ2u+KG4uwz9rt3bTS4G4CA9idpR3SQ5w= Subject key identifier: 93:89:BF:05:1D:B1:80:E9:21:DA:F9:BF:40:30:45:AC:14:EE:DA:C1 Certificate issuer: /CN=CD312427F800B8296DA11540C8B86E5CE12FC6C5 Certificate serial: A2 Authority key identifier: CD:31:24:27:F8:00:B8:29:6D:A1:15:40:C8:B8:6E:5C:E1:2F:C6:C5 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/k4m_BR2xgOkh2vm_QDBFrBTu2sE.roa Signing time: Tue 01 Aug 2023 01:30:47 +0000 ROA not before: Tue 01 Aug 2023 01:30:47 +0000 ROA not after: Sun 14 Jul 2024 01:30:03 +0000 asID: 19905 IP address blocks: 218.216.176.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 13:36:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162 (0xa2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD312427F800B8296DA11540C8B86E5CE12FC6C5 Validity Not Before: Aug 1 01:30:47 2023 GMT Not After : Jul 14 01:30:03 2024 GMT Subject: CN=9389BF051DB180E921DAF9BF403045AC14EEDAC1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f8:19:f4:ca:60:50:ba:b7:d3:09:02:4d:d3: 9b:25:aa:56:2c:de:2e:14:ab:62:ba:0f:fe:cf:75: 17:05:73:b3:73:88:d9:76:18:f9:9f:c7:cd:52:cb: 9e:1f:e5:83:59:a3:bf:78:ce:a5:de:c1:f6:9c:4d: ea:98:fd:f7:1b:db:dc:0e:e0:fc:a6:30:31:95:60: dc:7e:96:04:3a:41:8e:19:3d:a1:58:e9:77:59:1f: a3:0b:64:76:1f:73:68:d2:9e:de:6f:fb:f8:fd:75: 8e:95:58:65:6f:97:de:e3:7c:e4:4e:6a:6a:32:d2: c6:c6:0d:e4:a6:71:53:2d:e4:59:43:e0:55:8a:d9: e8:93:50:e6:d4:83:5a:88:24:73:3a:d0:ed:a7:4f: fe:50:25:c6:0f:15:6b:77:6a:1f:5d:0e:65:f3:d8: c6:3f:10:fb:3b:6f:9e:40:81:74:cf:12:bb:57:2d: e8:1e:65:c6:bd:88:f7:17:fc:65:a6:13:03:0e:66: 1d:61:41:3f:7c:71:be:1e:cb:f4:50:34:03:c7:12: 91:3b:a4:4f:1f:9d:b2:96:99:4c:d7:23:ca:8a:8d: e2:d6:0b:44:4f:47:77:7f:c3:ef:03:80:e5:13:d5: f9:2e:67:e2:54:f2:77:8e:a2:ae:a4:fc:c1:37:a7: 88:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:89:BF:05:1D:B1:80:E9:21:DA:F9:BF:40:30:45:AC:14:EE:DA:C1 X509v3 Authority Key Identifier: keyid:CD:31:24:27:F8:00:B8:29:6D:A1:15:40:C8:B8:6E:5C:E1:2F:C6:C5 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/k4m_BR2xgOkh2vm_QDBFrBTu2sE.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 218.216.176.0/20 Signature Algorithm: sha256WithRSAEncryption 33:f3:1d:d3:0d:01:c4:f2:52:9c:d5:34:e4:65:50:79:b2:80: 55:f4:81:37:d0:a0:ae:4f:59:7d:1a:3e:08:55:e0:ce:0c:0f: ee:d1:f1:7a:ff:46:b4:f4:7e:d0:1a:f4:bb:64:cc:74:c5:6c: 8c:b4:21:05:80:2a:10:24:15:1b:5d:0b:c5:3a:89:ed:09:e3: eb:22:1b:be:f3:5c:0a:a5:f5:e1:8c:50:c6:e5:d3:35:60:88: b4:5c:f1:80:16:ce:21:9b:7e:5a:4a:4d:01:79:a8:9e:79:23: 92:5e:71:61:ea:59:6c:db:2d:92:67:27:ed:60:3b:ca:10:ac: d4:48:7d:b6:5f:eb:ec:d9:83:04:ae:47:24:56:86:08:b2:13: e1:29:66:7d:a4:4c:0a:9b:59:7e:4c:bf:50:39:7c:66:08:38: 21:e0:44:99:e0:8e:1a:c4:ae:4a:82:5f:22:02:29:05:dd:7e: c4:f8:6d:e2:27:72:37:84:4a:35:45:78:c2:f0:0c:62:75:4f: e2:ca:b3:4a:f5:d7:0b:0d:42:97:91:a6:b8:c9:bf:77:2d:22: d7:d3:82:a9:25:07:75:3f:1f:82:ee:63:60:bf:6e:ce:66:03: a5:f3:43:5b:6a:cc:d4:bd:b2:64:fa:9c:23:ed:1f:61:88:c4: 7e:7e:14:05 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAKIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0Qz MTI0MjdGODAwQjgyOTZEQTExNTQwQzhCODZFNUNFMTJGQzZDNTAeFw0yMzA4MDEw MTMwNDdaFw0yNDA3MTQwMTMwMDNaMDMxMTAvBgNVBAMTKDkzODlCRjA1MURCMTgw RTkyMURBRjlCRjQwMzA0NUFDMTRFRURBQzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCs+Bn0ymBQurfTCQJN05slqlYs3i4Uq2K6D/7PdRcFc7NziNl2 GPmfx81Sy54f5YNZo794zqXewfacTeqY/fcb29wO4PymMDGVYNx+lgQ6QY4ZPaFY 6XdZH6MLZHYfc2jSnt5v+/j9dY6VWGVvl97jfOROamoy0sbGDeSmcVMt5FlD4FWK 2eiTUObUg1qIJHM60O2nT/5QJcYPFWt3ah9dDmXz2MY/EPs7b55AgXTPErtXLege Zca9iPcX/GWmEwMOZh1hQT98cb4ey/RQNAPHEpE7pE8fnbKWmUzXI8qKjeLWC0RP R3d/w+8DgOUT1fkuZ+JU8neOoq6k/ME3p4jTAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUk4m/BR2xgOkh2vm/QDBFrBTu2sEwHwYDVR0jBBgwFoAUzTEkJ/gAuCltoRVA yLhuXOEvxsUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE3My96VEVrSl9nQXVDbHRvUlZBeUxodVhPRXZ4c1UuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC96VEVrSl9nQXVDbHRvUlZBeUxodVhP RXZ4c1UuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTczL2s0bV9CUjJ4Z09raDJ2bV9RREJGckJUdTJzRS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBATa2LAwDQYJKoZIhvcNAQELBQADggEBADPzHdMNAcTyUpzVNORlUHmygFX0 gTfQoK5PWX0aPghV4M4MD+7R8Xr/RrT0ftAa9LtkzHTFbIy0IQWAKhAkFRtdC8U6 ie0J4+siG77zXAql9eGMUMbl0zVgiLRc8YAWziGbflpKTQF5qJ55I5JecWHqWWzb LZJnJ+1gO8oQrNRIfbZf6+zZgwSuRyRWhgiyE+EpZn2kTAqbWX5Mv1A5fGYIOCHg RJngjhrErkqCXyICKQXdfsT4beIncjeESjVFeMLwDGJ1T+LKs0r11wsNQpeRprjJ v3ctItfTgqklB3U/H4LuY2C/bs5mA6XzQ1tqzNS9smT6nCPtH2GIxH5+FAU= -----END CERTIFICATE-----Generated at Thu May 2 14:32:27 2024 by rpki-client on console-fra.rpki-client.org