$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20031/0XBeuLS7fhqxzsoC1266WZxvNHg.roa File: 0XBeuLS7fhqxzsoC1266WZxvNHg.roa (raw, json) Hash identifier: 2ARCfSvLJ/D5KX/IjxP3lMhmi/LYstyQvfoAR+NaKQU= Subject key identifier: D1:70:5E:B8:B4:BB:7E:1A:B1:CE:CA:02:D7:6E:BA:59:9C:6F:34:78 Certificate issuer: /CN=7642A07D9AC9D227EA42F79E6D131CB1A920EDCE Certificate serial: 1A Authority key identifier: 76:42:A0:7D:9A:C9:D2:27:EA:42:F7:9E:6D:13:1C:B1:A9:20:ED:CE Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/dkKgfZrJ0ifqQveebRMcsakg7c4.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/0XBeuLS7fhqxzsoC1266WZxvNHg.roa Signing time: Mon 20 Nov 2023 03:58:13 +0000 ROA not before: Mon 20 Nov 2023 03:58:13 +0000 ROA not after: Thu 14 Nov 2024 01:30:03 +0000 asID: 7511 IP address blocks: 219.100.8.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/dkKgfZrJ0ifqQveebRMcsakg7c4.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/dkKgfZrJ0ifqQveebRMcsakg7c4.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/dkKgfZrJ0ifqQveebRMcsakg7c4.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26 (0x1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7642A07D9AC9D227EA42F79E6D131CB1A920EDCE Validity Not Before: Nov 20 03:58:13 2023 GMT Not After : Nov 14 01:30:03 2024 GMT Subject: CN=D1705EB8B4BB7E1AB1CECA02D76EBA599C6F3478 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:39:7c:ee:b0:38:d4:cb:3c:51:95:1c:ca:1a: 8a:22:a7:45:54:f8:b6:f8:66:f5:dd:0a:8c:f2:aa: e5:fe:8a:32:26:7a:b2:87:de:28:8c:59:7f:51:9a: 80:f9:67:f1:da:50:b8:e6:47:51:aa:4c:1d:b6:63: eb:a6:93:71:4e:57:2c:1b:0a:3b:cc:17:97:4e:f5: 3c:59:d5:35:af:a5:04:c3:fa:46:13:b4:0a:c8:c7: c9:a1:17:a6:a0:2f:cc:66:44:1d:34:12:90:54:7b: 87:76:a8:dd:09:92:24:72:05:82:d9:75:ac:75:b2: d4:12:b5:a6:c4:0a:e8:df:14:1e:bb:09:fb:43:44: 87:f0:19:6d:6b:c5:04:6e:dd:bb:9d:ab:64:61:96: 64:59:0f:d3:29:47:67:70:55:07:72:86:70:1e:e8: 9d:a1:c2:0b:3e:7b:2a:dc:21:eb:73:f9:25:0e:3c: d1:1b:46:de:c8:37:1e:e2:94:93:eb:90:e8:2c:07: 61:16:76:b6:37:a3:2b:e0:19:f5:b7:dd:bd:80:ba: 64:0f:9d:94:11:7b:cf:69:2f:fd:69:39:46:30:05: cd:84:7c:3c:51:0a:c9:cb:69:7f:30:2e:30:42:4d: 11:28:9a:52:38:be:93:3c:58:3e:0d:e5:5f:20:5f: c1:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:70:5E:B8:B4:BB:7E:1A:B1:CE:CA:02:D7:6E:BA:59:9C:6F:34:78 X509v3 Authority Key Identifier: keyid:76:42:A0:7D:9A:C9:D2:27:EA:42:F7:9E:6D:13:1C:B1:A9:20:ED:CE X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/dkKgfZrJ0ifqQveebRMcsakg7c4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/dkKgfZrJ0ifqQveebRMcsakg7c4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/0XBeuLS7fhqxzsoC1266WZxvNHg.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 219.100.8.0/22 Signature Algorithm: sha256WithRSAEncryption 68:67:9c:71:11:59:48:b0:54:dc:2b:a2:3a:ba:ac:b7:f7:38: 11:cc:00:8e:e9:70:47:34:95:ac:a9:bb:6b:08:56:c0:57:7d: 12:75:39:fd:97:4d:e7:61:e1:47:dc:4d:5c:0c:ed:43:9f:3b: 76:73:fc:e3:17:11:34:b4:2e:6b:12:c8:50:46:8c:05:b2:82: 37:b2:46:69:a6:39:03:d3:14:7e:9d:2a:e0:a3:9a:47:b4:d3: 78:1f:cb:21:7f:3a:65:8d:3a:3d:c3:16:c3:ee:c1:95:e7:ba: bc:e9:47:10:c4:38:eb:19:f6:4d:4a:12:e3:c4:19:31:0a:ba: 3a:f1:fd:1f:c2:01:a1:2d:44:a8:68:1b:62:4f:50:2f:da:3b: b1:c3:0e:f1:b2:a7:9f:f7:5b:43:34:50:8f:91:67:f5:23:be: 67:0f:d5:50:c3:4a:30:53:95:9d:46:52:8a:83:4c:a8:8c:84: b7:61:ac:3a:1a:37:a5:89:ad:06:21:ff:dd:4f:af:81:2d:b8: 9c:a8:99:09:70:7e:ec:ef:4c:1d:dd:2f:4a:fc:38:dc:66:ce: 39:88:8f:d9:d5:d7:b8:f4:4b:99:9a:e0:5c:1f:42:85:20:1a: 8c:85:cd:f2:41:5a:e9:1a:36:87:53:31:3f:f2:52:a7:02:c0: 3e:63:37:ba -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIBGjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3NjQy QTA3RDlBQzlEMjI3RUE0MkY3OUU2RDEzMUNCMUE5MjBFRENFMB4XDTIzMTEyMDAz NTgxM1oXDTI0MTExNDAxMzAwM1owMzExMC8GA1UEAxMoRDE3MDVFQjhCNEJCN0Ux QUIxQ0VDQTAyRDc2RUJBNTk5QzZGMzQ3ODCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAPA5fO6wONTLPFGVHMoaiiKnRVT4tvhm9d0KjPKq5f6KMiZ6sofe KIxZf1GagPln8dpQuOZHUapMHbZj66aTcU5XLBsKO8wXl071PFnVNa+lBMP6RhO0 CsjHyaEXpqAvzGZEHTQSkFR7h3ao3QmSJHIFgtl1rHWy1BK1psQK6N8UHrsJ+0NE h/AZbWvFBG7du52rZGGWZFkP0ylHZ3BVB3KGcB7onaHCCz57Ktwh63P5JQ480RtG 3sg3HuKUk+uQ6CwHYRZ2tjejK+AZ9bfdvYC6ZA+dlBF7z2kv/Wk5RjAFzYR8PFEK yctpfzAuMEJNESiaUji+kzxYPg3lXyBfwUsCAwEAAaOCAigwggIkMB0GA1UdDgQW BBTRcF64tLt+GrHOygLXbrpZnG80eDAfBgNVHSMEGDAWgBR2QqB9msnSJ+pC955t ExyxqSDtzjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjAwMzEvZGtLZ2ZackowaWZxUXZlZWJSTWNzYWtnN2M0LmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvZGtLZ2ZackowaWZxUXZlZWJSTWNz YWtnN2M0LmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzIwMDMxLzBYQmV1TFM3ZmhxeHpzb0MxMjY2V1p4dk5IZy5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBALbZAgwDQYJKoZIhvcNAQELBQADggEBAGhnnHERWUiwVNwrojq6rLf3 OBHMAI7pcEc0laypu2sIVsBXfRJ1Of2XTedh4UfcTVwM7UOfO3Zz/OMXETS0LmsS yFBGjAWygjeyRmmmOQPTFH6dKuCjmke003gfyyF/OmWNOj3DFsPuwZXnurzpRxDE OOsZ9k1KEuPEGTEKujrx/R/CAaEtRKhoG2JPUC/aO7HDDvGyp5/3W0M0UI+RZ/Uj vmcP1VDDSjBTlZ1GUoqDTKiMhLdhrDoaN6WJrQYh/91Pr4EtuJyomQlwfuzvTB3d L0r8ONxmzjmIj9nV17j0S5ma4FwfQoUgGoyFzfJBWukaNodTMT/yUqcCwD5jN7o= -----END CERTIFICATE-----Generated at Sat Jun 1 15:54:17 2024 by rpki-client on console-ams.rpki-client.org