$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20031/z3ZtrV3v5LYvJ6UzYK3-LTVj88w.roa File: z3ZtrV3v5LYvJ6UzYK3-LTVj88w.roa (raw, json) Hash identifier: imMFVsH3ym87F9XJNtQlrvmeL1GyKz4a73JIYz+jick= Subject key identifier: CF:76:6D:AD:5D:EF:E4:B6:2F:27:A5:33:60:AD:FE:2D:35:63:F3:CC Certificate issuer: /CN=7642A07D9AC9D227EA42F79E6D131CB1A920EDCE Certificate serial: 19 Authority key identifier: 76:42:A0:7D:9A:C9:D2:27:EA:42:F7:9E:6D:13:1C:B1:A9:20:ED:CE Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/dkKgfZrJ0ifqQveebRMcsakg7c4.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/z3ZtrV3v5LYvJ6UzYK3-LTVj88w.roa Signing time: Mon 20 Nov 2023 03:54:12 +0000 ROA not before: Mon 20 Nov 2023 03:54:12 +0000 ROA not after: Thu 14 Nov 2024 01:30:03 +0000 asID: 7511 IP address blocks: 210.237.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/dkKgfZrJ0ifqQveebRMcsakg7c4.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/dkKgfZrJ0ifqQveebRMcsakg7c4.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/dkKgfZrJ0ifqQveebRMcsakg7c4.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25 (0x19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7642A07D9AC9D227EA42F79E6D131CB1A920EDCE Validity Not Before: Nov 20 03:54:12 2023 GMT Not After : Nov 14 01:30:03 2024 GMT Subject: CN=CF766DAD5DEFE4B62F27A53360ADFE2D3563F3CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:7a:ac:31:60:da:b6:31:2d:92:8d:67:b1:df: 8a:6a:11:e7:78:ac:a6:08:7d:cb:02:99:66:25:3a: fa:f7:48:17:ae:2d:b9:d6:8b:6c:20:3f:cc:f4:af: ea:3e:5a:02:df:bf:ae:41:ad:0e:45:ed:bf:b5:55: 2e:b2:71:ca:f5:8a:1b:d3:8b:6d:ea:d0:14:35:71: 6a:ab:ab:61:e0:0c:b6:ad:35:ee:70:71:78:4c:2b: c1:f7:71:a1:63:d9:c4:0a:70:8a:35:50:c2:4a:27: 01:ac:7f:12:64:74:2e:11:13:87:6d:c5:8b:59:0f: ba:e8:8a:20:fa:3b:54:9a:ce:1a:74:27:70:05:11: 85:74:83:9f:a3:a3:8c:d8:4d:ee:e3:74:07:a6:3c: de:20:0e:b9:19:54:d1:01:5e:ea:d0:66:bd:28:64: ff:d4:28:a1:5d:5c:bc:a2:b1:53:1a:48:d6:22:ce: 88:ff:3c:7c:38:e9:99:58:fd:c7:3e:21:3d:3a:a7: ed:8d:75:76:24:f1:75:5b:ae:fe:a3:de:fc:5e:f8: 3b:e3:3e:97:b8:b3:1a:45:e2:a3:de:1a:59:7f:39: 4b:83:4f:16:63:64:6b:af:ca:9c:a2:b8:67:8b:8e: 08:26:54:f5:48:a2:45:ba:91:a1:25:94:27:fa:2f: 4a:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:76:6D:AD:5D:EF:E4:B6:2F:27:A5:33:60:AD:FE:2D:35:63:F3:CC X509v3 Authority Key Identifier: keyid:76:42:A0:7D:9A:C9:D2:27:EA:42:F7:9E:6D:13:1C:B1:A9:20:ED:CE X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/dkKgfZrJ0ifqQveebRMcsakg7c4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/dkKgfZrJ0ifqQveebRMcsakg7c4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/z3ZtrV3v5LYvJ6UzYK3-LTVj88w.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.237.32.0/19 Signature Algorithm: sha256WithRSAEncryption 6d:62:e6:45:a0:27:54:cc:76:71:31:bd:35:c1:99:9e:e6:c4: 2b:98:ff:d9:56:9b:6a:a3:15:e4:6a:53:b1:6f:c7:16:4e:6c: 74:eb:5c:9c:62:58:31:4a:a2:fc:9a:d5:6d:73:c8:8e:3d:5b: 1e:e6:e1:1c:e9:e2:b7:2d:05:c5:18:11:06:53:c4:b0:20:ef: ca:9e:53:d5:47:41:34:52:fb:68:71:e0:df:33:9a:73:9f:12: e5:fd:7e:97:5f:19:a3:5a:32:e9:37:06:e5:2f:8a:08:d2:35: bc:a9:80:ad:eb:f1:a3:d1:5f:c5:37:99:f8:8f:01:6d:3d:0c: 2c:c2:47:9c:88:2e:d8:11:fa:90:43:62:d1:ba:23:9f:26:39: 9a:a0:b3:03:15:9c:71:9c:5f:4f:8f:53:5b:eb:1c:bf:11:ab: 93:a9:6e:8b:0b:7e:31:e2:58:93:e8:57:d4:ca:7e:30:53:85: b0:23:0c:68:df:a7:66:a5:f9:b8:86:48:9b:06:0c:0b:b1:35: 6a:fe:40:f9:64:3c:c4:47:67:9a:6c:9a:e3:66:87:cf:5e:c8: 1c:7c:c5:4d:f9:9a:cf:aa:70:32:e0:94:18:dc:a7:5e:64:c7: a1:bf:6f:01:98:37:81:64:da:53:3c:23:c7:22:95:d0:7e:a2: 20:f6:06:80 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIBGTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3NjQy QTA3RDlBQzlEMjI3RUE0MkY3OUU2RDEzMUNCMUE5MjBFRENFMB4XDTIzMTEyMDAz NTQxMloXDTI0MTExNDAxMzAwM1owMzExMC8GA1UEAxMoQ0Y3NjZEQUQ1REVGRTRC NjJGMjdBNTMzNjBBREZFMkQzNTYzRjNDQzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALd6rDFg2rYxLZKNZ7HfimoR53ispgh9ywKZZiU6+vdIF64tudaL bCA/zPSv6j5aAt+/rkGtDkXtv7VVLrJxyvWKG9OLberQFDVxaqurYeAMtq017nBx eEwrwfdxoWPZxApwijVQwkonAax/EmR0LhETh23Fi1kPuuiKIPo7VJrOGnQncAUR hXSDn6OjjNhN7uN0B6Y83iAOuRlU0QFe6tBmvShk/9QooV1cvKKxUxpI1iLOiP88 fDjpmVj9xz4hPTqn7Y11diTxdVuu/qPe/F74O+M+l7izGkXio94aWX85S4NPFmNk a6/KnKK4Z4uOCCZU9UiiRbqRoSWUJ/ovShECAwEAAaOCAigwggIkMB0GA1UdDgQW BBTPdm2tXe/kti8npTNgrf4tNWPzzDAfBgNVHSMEGDAWgBR2QqB9msnSJ+pC955t ExyxqSDtzjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjAwMzEvZGtLZ2ZackowaWZxUXZlZWJSTWNzYWtnN2M0LmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvZGtLZ2ZackowaWZxUXZlZWJSTWNz YWtnN2M0LmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzIwMDMxL3ozWnRyVjN2NUxZdko2VXpZSzMtTFRWajg4dy5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAXS7SAwDQYJKoZIhvcNAQELBQADggEBAG1i5kWgJ1TMdnExvTXBmZ7m xCuY/9lWm2qjFeRqU7FvxxZObHTrXJxiWDFKovya1W1zyI49Wx7m4Rzp4rctBcUY EQZTxLAg78qeU9VHQTRS+2hx4N8zmnOfEuX9fpdfGaNaMuk3BuUvigjSNbypgK3r 8aPRX8U3mfiPAW09DCzCR5yILtgR+pBDYtG6I58mOZqgswMVnHGcX0+PU1vrHL8R q5OpbosLfjHiWJPoV9TKfjBThbAjDGjfp2al+biGSJsGDAuxNWr+QPlkPMRHZ5ps muNmh89eyBx8xU35ms+qcDLglBjcp15kx6G/bwGYN4Fk2lM8I8cildB+oiD2BoA= -----END CERTIFICATE-----Generated at Sat Jun 1 15:54:17 2024 by rpki-client on console-ams.rpki-client.org