$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20031/z4AojZW-2dwWMqmvjFFg33DoFwU.roa File: z4AojZW-2dwWMqmvjFFg33DoFwU.roa (raw, json) Hash identifier: UUElWRF3UknCbMlV8A1KX2UIN7y83J0Q/fxzJF0mkLU= Subject key identifier: CF:80:28:8D:95:BE:D9:DC:16:32:A9:AF:8C:51:60:DF:70:E8:17:05 Certificate issuer: /CN=7642A07D9AC9D227EA42F79E6D131CB1A920EDCE Certificate serial: 14 Authority key identifier: 76:42:A0:7D:9A:C9:D2:27:EA:42:F7:9E:6D:13:1C:B1:A9:20:ED:CE Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/dkKgfZrJ0ifqQveebRMcsakg7c4.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/z4AojZW-2dwWMqmvjFFg33DoFwU.roa Signing time: Mon 20 Nov 2023 03:54:10 +0000 ROA not before: Mon 20 Nov 2023 03:54:10 +0000 ROA not after: Thu 14 Nov 2024 01:30:03 +0000 asID: 7511 IP address blocks: 203.111.192.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/dkKgfZrJ0ifqQveebRMcsakg7c4.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/dkKgfZrJ0ifqQveebRMcsakg7c4.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/dkKgfZrJ0ifqQveebRMcsakg7c4.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20 (0x14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7642A07D9AC9D227EA42F79E6D131CB1A920EDCE Validity Not Before: Nov 20 03:54:10 2023 GMT Not After : Nov 14 01:30:03 2024 GMT Subject: CN=CF80288D95BED9DC1632A9AF8C5160DF70E81705 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d0:ab:e0:48:84:ec:1c:2c:71:41:c6:f9:ab: 8e:26:d8:75:7c:dd:ab:46:33:b2:28:ca:2e:87:ed: 34:7b:7a:72:a2:b4:b5:1d:c5:88:03:59:32:c4:63: 6c:7e:e2:27:2f:3f:30:f9:5c:80:95:52:dc:2b:34: e3:f1:d2:ab:12:0f:01:70:15:c7:65:80:b9:0e:cd: 85:c9:48:a8:09:d7:54:80:c5:dd:4b:46:25:0c:69: 77:fd:bd:fc:82:cd:6b:f3:5a:22:2d:39:66:45:fc: ae:66:f7:e9:68:64:48:e5:4f:3d:38:92:73:00:e5: f0:97:bc:3f:c8:a5:c5:bd:d2:c6:b4:66:e0:64:d8: 02:a8:7d:08:31:05:7a:1f:c1:5e:e7:86:11:4c:be: 39:6e:3e:d2:ee:f8:e0:d5:57:b6:fb:fd:5d:83:ba: 1f:79:2e:b8:44:19:7e:31:c6:d5:13:ef:22:90:de: 3c:7b:b5:66:6b:1d:26:da:5c:1a:d7:6c:e5:c8:c4: b6:da:6a:2b:3d:d9:72:f9:af:f8:9c:09:7b:dc:7a: 7b:d3:da:88:be:25:e3:f4:29:01:a2:d3:b0:c4:9e: 6b:37:7b:13:7b:0d:bc:26:90:4d:65:bd:20:50:9b: bc:02:b6:14:07:82:5c:db:a6:b3:8f:98:d0:d4:a0: f4:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:80:28:8D:95:BE:D9:DC:16:32:A9:AF:8C:51:60:DF:70:E8:17:05 X509v3 Authority Key Identifier: keyid:76:42:A0:7D:9A:C9:D2:27:EA:42:F7:9E:6D:13:1C:B1:A9:20:ED:CE X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/dkKgfZrJ0ifqQveebRMcsakg7c4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/dkKgfZrJ0ifqQveebRMcsakg7c4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/z4AojZW-2dwWMqmvjFFg33DoFwU.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.111.192.0/20 Signature Algorithm: sha256WithRSAEncryption 7a:3e:2a:4f:0e:af:56:c0:79:b7:28:d3:6a:a7:05:35:c1:88: db:84:32:8f:37:ed:f8:12:d5:9e:96:ee:38:20:b4:a7:72:00: f0:1e:a0:08:a9:7e:04:34:58:a6:fe:f5:42:46:17:cc:75:1b: a9:c5:0b:62:c5:5a:bb:17:c8:a1:bb:a0:2e:22:70:93:bc:76: 9c:04:3e:38:17:1a:75:67:9b:29:5e:1e:5a:67:66:eb:3d:6c: 10:78:fc:4d:3e:93:bd:48:40:34:b3:f0:74:e6:1b:e4:ee:bb: a6:dc:a9:34:f0:1f:31:3e:3e:a7:4f:34:8e:86:62:22:3d:fb: 0d:c5:5b:6c:d1:e3:95:73:8c:b7:9b:eb:a1:10:73:65:7b:24: 51:a0:ab:fb:42:6e:4e:6f:b6:d4:60:ed:2e:e6:b1:0c:fd:a3: 8f:fe:84:19:38:90:c0:e4:4e:1e:69:8b:f8:dc:07:b5:27:bb: 49:5c:90:1a:fd:7b:4b:a2:5d:08:3b:1d:69:ef:fe:fb:68:bf: e1:a0:32:1f:38:7b:32:52:3c:e6:ed:3c:f4:c8:e9:c6:a6:7a: af:da:8c:c7:0e:8f:97:8c:3a:65:2e:5f:bd:2c:b3:9e:e7:9b: b7:0e:e1:f0:8f:ff:06:38:53:e2:86:e7:05:20:cb:29:5f:40: 3c:22:ed:54 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIBFDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3NjQy QTA3RDlBQzlEMjI3RUE0MkY3OUU2RDEzMUNCMUE5MjBFRENFMB4XDTIzMTEyMDAz NTQxMFoXDTI0MTExNDAxMzAwM1owMzExMC8GA1UEAxMoQ0Y4MDI4OEQ5NUJFRDlE QzE2MzJBOUFGOEM1MTYwREY3MEU4MTcwNTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALDQq+BIhOwcLHFBxvmrjibYdXzdq0YzsijKLoftNHt6cqK0tR3F iANZMsRjbH7iJy8/MPlcgJVS3Cs04/HSqxIPAXAVx2WAuQ7NhclIqAnXVIDF3UtG JQxpd/29/ILNa/NaIi05ZkX8rmb36WhkSOVPPTiScwDl8Je8P8ilxb3SxrRm4GTY Aqh9CDEFeh/BXueGEUy+OW4+0u744NVXtvv9XYO6H3kuuEQZfjHG1RPvIpDePHu1 ZmsdJtpcGtds5cjEttpqKz3Zcvmv+JwJe9x6e9PaiL4l4/QpAaLTsMSeazd7E3sN vCaQTWW9IFCbvAK2FAeCXNums4+Y0NSg9IcCAwEAAaOCAigwggIkMB0GA1UdDgQW BBTPgCiNlb7Z3BYyqa+MUWDfcOgXBTAfBgNVHSMEGDAWgBR2QqB9msnSJ+pC955t ExyxqSDtzjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjAwMzEvZGtLZ2ZackowaWZxUXZlZWJSTWNzYWtnN2M0LmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvZGtLZ2ZackowaWZxUXZlZWJSTWNz YWtnN2M0LmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzIwMDMxL3o0QW9qWlctMmR3V01xbXZqRkZnMzNEb0Z3VS5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBATLb8AwDQYJKoZIhvcNAQELBQADggEBAHo+Kk8Or1bAebco02qnBTXB iNuEMo837fgS1Z6W7jggtKdyAPAeoAipfgQ0WKb+9UJGF8x1G6nFC2LFWrsXyKG7 oC4icJO8dpwEPjgXGnVnmyleHlpnZus9bBB4/E0+k71IQDSz8HTmG+Tuu6bcqTTw HzE+PqdPNI6GYiI9+w3FW2zR45VzjLeb66EQc2V7JFGgq/tCbk5vttRg7S7msQz9 o4/+hBk4kMDkTh5pi/jcB7Unu0lckBr9e0uiXQg7HWnv/vtov+GgMh84ezJSPObt PPTI6cameq/ajMcOj5eMOmUuX70ss57nm7cO4fCP/wY4U+KG5wUgyylfQDwi7VQ= -----END CERTIFICATE-----Generated at Sat Jun 1 15:54:17 2024 by rpki-client on console-ams.rpki-client.org