$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20034/h5bvueMTRBEoUsTX9RCpt4X1s0w.roa File: h5bvueMTRBEoUsTX9RCpt4X1s0w.roa (raw, json) Hash identifier: DkG8buC2f929QimL3Sq6r4zg/ot+PWBhL7VeQevsYO8= Subject key identifier: 87:96:EF:B9:E3:13:44:11:28:52:C4:D7:F5:10:A9:B7:85:F5:B3:4C Certificate issuer: /CN=8D62A86EAB39FC40E319BE7346F22CC8F5B191A3 Certificate serial: 1F Authority key identifier: 8D:62:A8:6E:AB:39:FC:40:E3:19:BE:73:46:F2:2C:C8:F5:B1:91:A3 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jWKobqs5_EDjGb5zRvIsyPWxkaM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/h5bvueMTRBEoUsTX9RCpt4X1s0w.roa Signing time: Fri 12 Jan 2024 04:06:18 +0000 ROA not before: Fri 12 Jan 2024 04:06:18 +0000 ROA not after: Sat 14 Dec 2024 01:30:03 +0000 asID: 131923 IP address blocks: 219.100.156.0/22 maxlen: 25 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/jWKobqs5_EDjGb5zRvIsyPWxkaM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/jWKobqs5_EDjGb5zRvIsyPWxkaM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jWKobqs5_EDjGb5zRvIsyPWxkaM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31 (0x1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D62A86EAB39FC40E319BE7346F22CC8F5B191A3 Validity Not Before: Jan 12 04:06:18 2024 GMT Not After : Dec 14 01:30:03 2024 GMT Subject: CN=8796EFB9E31344112852C4D7F510A9B785F5B34C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:93:ec:43:50:52:1c:c6:2a:d2:4d:16:c8:48: 4d:40:6c:32:f7:b9:41:19:a3:94:d8:87:5e:f8:10: 27:5f:54:31:98:4f:30:45:f0:a2:f0:e3:43:fc:85: f2:72:f9:5f:be:f0:fd:c1:30:7b:b5:e9:50:7f:87: 94:56:0d:de:c2:2b:66:07:92:32:5f:b4:a7:34:fc: 8b:b4:ae:53:94:a0:f6:ce:f0:c3:fd:a6:e9:19:00: 99:46:76:ec:59:96:6a:92:c3:31:f6:f3:2b:6b:2e: 65:3b:c4:83:35:65:bf:0c:45:9c:f0:93:fe:e6:48: 79:d8:1a:fb:4e:87:f8:07:82:27:7f:17:8f:9e:65: 61:39:bb:f6:ee:6b:3a:6a:94:73:11:f8:f3:3b:c9: 1d:ab:fb:c5:a9:80:b1:34:d4:df:43:6b:57:fc:c0: 9d:1f:26:b1:2b:38:0a:00:8a:b5:df:77:b1:dd:bf: c7:c3:3c:03:1b:15:ee:2f:24:10:a3:28:41:c5:d4: aa:94:7a:d4:67:bd:61:fe:a7:04:2f:ba:f3:97:1d: 89:07:71:2e:3f:e2:5f:66:68:4e:b7:12:55:ef:4a: 6f:94:c6:4b:80:c3:a7:f2:ea:a5:13:71:54:7c:55: e2:56:cd:27:62:b0:51:52:bf:97:ae:3f:16:90:e9: e7:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:96:EF:B9:E3:13:44:11:28:52:C4:D7:F5:10:A9:B7:85:F5:B3:4C X509v3 Authority Key Identifier: keyid:8D:62:A8:6E:AB:39:FC:40:E3:19:BE:73:46:F2:2C:C8:F5:B1:91:A3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/jWKobqs5_EDjGb5zRvIsyPWxkaM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jWKobqs5_EDjGb5zRvIsyPWxkaM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/h5bvueMTRBEoUsTX9RCpt4X1s0w.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 219.100.156.0/22 Signature Algorithm: sha256WithRSAEncryption 52:70:88:93:83:b0:46:0f:18:37:7f:60:4b:2a:bf:f8:c4:4a: 17:07:c8:02:fb:c7:37:2d:67:0b:80:21:b4:c0:ba:84:4c:39: ad:e1:92:a2:82:e5:f3:c1:b0:33:b9:cf:df:eb:fc:97:08:97: 98:d3:6f:d1:e2:d1:da:24:86:00:76:b0:b7:c3:a4:0c:36:28: ba:66:26:36:5f:6f:30:c9:51:21:c7:84:04:bc:ab:62:ce:8b: 72:b5:9b:83:90:54:a9:29:e7:2e:ed:41:fd:5d:35:02:37:ad: ea:30:64:55:47:e5:f3:3a:3d:1b:78:c6:7d:f1:74:88:bd:99: b5:23:19:5c:30:a6:0a:2c:5c:91:65:6b:7f:6b:51:ac:eb:18: 46:37:71:90:ff:06:0a:b2:7f:12:d7:df:e7:10:4a:41:e8:3f: 0f:dc:b2:f7:65:f1:ed:2e:47:1c:2a:11:fd:ef:7d:a3:8d:47: b2:9c:dc:f2:6b:5f:07:3e:f8:3c:09:aa:67:81:b9:c4:32:2d: 93:f0:13:cd:4d:70:f7:45:5b:fb:ed:eb:5f:70:b7:fe:08:60: 5c:e6:92:28:e8:22:17:ee:92:7e:ad:1e:55:30:56:8a:26:a8: e5:5c:66:11:c4:38:99:65:7e:31:56:d5:31:41:f3:ea:d7:ce: 07:36:97:aa -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIBHzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4RDYy QTg2RUFCMzlGQzQwRTMxOUJFNzM0NkYyMkNDOEY1QjE5MUEzMB4XDTI0MDExMjA0 MDYxOFoXDTI0MTIxNDAxMzAwM1owMzExMC8GA1UEAxMoODc5NkVGQjlFMzEzNDQx MTI4NTJDNEQ3RjUxMEE5Qjc4NUY1QjM0QzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALqT7ENQUhzGKtJNFshITUBsMve5QRmjlNiHXvgQJ19UMZhPMEXw ovDjQ/yF8nL5X77w/cEwe7XpUH+HlFYN3sIrZgeSMl+0pzT8i7SuU5Sg9s7ww/2m 6RkAmUZ27FmWapLDMfbzK2suZTvEgzVlvwxFnPCT/uZIedga+06H+AeCJ38Xj55l YTm79u5rOmqUcxH48zvJHav7xamAsTTU30NrV/zAnR8msSs4CgCKtd93sd2/x8M8 AxsV7i8kEKMoQcXUqpR61Ge9Yf6nBC+685cdiQdxLj/iX2ZoTrcSVe9Kb5TGS4DD p/LqpRNxVHxV4lbNJ2KwUVK/l64/FpDp54UCAwEAAaOCAigwggIkMB0GA1UdDgQW BBSHlu+54xNEEShSxNf1EKm3hfWzTDAfBgNVHSMEGDAWgBSNYqhuqzn8QOMZvnNG 8izI9bGRozAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjAwMzQvaldLb2JxczVfRURqR2I1elJ2SXN5UFd4a2FNLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvaldLb2JxczVfRURqR2I1elJ2SXN5 UFd4a2FNLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzIwMDM0L2g1YnZ1ZU1UUkJFb1VzVFg5UkNwdDRYMXMwdy5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBALbZJwwDQYJKoZIhvcNAQELBQADggEBAFJwiJODsEYPGDd/YEsqv/jE ShcHyAL7xzctZwuAIbTAuoRMOa3hkqKC5fPBsDO5z9/r/JcIl5jTb9Hi0dokhgB2 sLfDpAw2KLpmJjZfbzDJUSHHhAS8q2LOi3K1m4OQVKkp5y7tQf1dNQI3reowZFVH 5fM6PRt4xn3xdIi9mbUjGVwwpgosXJFla39rUazrGEY3cZD/BgqyfxLX3+cQSkHo Pw/csvdl8e0uRxwqEf3vfaONR7Kc3PJrXwc++DwJqmeBucQyLZPwE81NcPdFW/vt 619wt/4IYFzmkijoIhfukn6tHlUwVoomqOVcZhHEOJllfjFW1TFB8+rXzgc2l6o= -----END CERTIFICATE-----Generated at Sat Jun 1 13:38:43 2024 by rpki-client on console-fra.rpki-client.org