$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20042/-kA8jYnSHtGpDFYuRuheqKRydhI.roa File: -kA8jYnSHtGpDFYuRuheqKRydhI.roa (raw, json) Hash identifier: zFf4Ezt/4zeS90sLTAOQ8WimRLQ4zZ0xKwPvBTzW1nU= Subject key identifier: FA:40:3C:8D:89:D2:1E:D1:A9:0C:56:2E:46:E8:5E:A8:A4:72:76:12 Certificate issuer: /CN=961BC18512722AAF9A90D898ADEA9AF7793C2543 Certificate serial: 35 Authority key identifier: 96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/-kA8jYnSHtGpDFYuRuheqKRydhI.roa Signing time: Tue 26 Sep 2023 06:57:16 +0000 ROA not before: Tue 26 Sep 2023 06:57:16 +0000 ROA not after: Sat 14 Sep 2024 01:30:03 +0000 asID: 17941 IP address blocks: 219.122.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 23 Jun 2024 11:53:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53 (0x35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=961BC18512722AAF9A90D898ADEA9AF7793C2543 Validity Not Before: Sep 26 06:57:16 2023 GMT Not After : Sep 14 01:30:03 2024 GMT Subject: CN=FA403C8D89D21ED1A90C562E46E85EA8A4727612 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:c4:0f:b2:85:df:68:a4:5e:b6:5f:b6:13:b2: 9d:b2:96:d6:37:bc:0f:cb:2a:cd:77:d8:6c:24:58: 24:a1:d5:b3:63:16:03:eb:8d:17:de:9c:32:c4:fb: 05:80:ac:5b:4b:8e:d6:98:63:ff:49:c7:dd:e2:f2: 53:93:8e:a2:09:e7:01:13:5a:66:dc:db:55:95:f2: 16:24:02:66:fb:9d:d4:50:09:ea:24:cf:3a:af:19: 38:bb:0a:6a:54:99:e9:e0:dd:e6:88:af:c8:79:df: 31:c7:6c:d0:d3:0c:cd:f2:d9:12:05:97:f9:9f:dc: ab:cb:fa:ee:7c:8f:7c:27:92:c6:ad:83:be:f1:1c: 34:f9:5b:2a:dd:d3:80:76:3e:8b:05:ca:c7:28:9a: 0c:b3:7e:16:a4:f3:b5:2c:56:36:fe:8d:1b:54:09: 0d:08:03:5f:6b:64:d9:4e:51:bf:69:ec:dd:ff:bf: 5a:e4:a4:22:54:87:43:4a:08:ba:a3:b0:92:89:9a: 18:c2:09:46:96:0a:63:ec:70:d0:ff:13:e9:14:8b: c8:31:c1:fb:bf:84:36:61:be:3a:f9:bf:05:3d:88: 98:4e:54:c8:a2:fd:d8:e6:ab:80:6c:3f:81:4e:1d: 7d:a7:7e:fe:f7:ce:85:1c:a4:4b:6b:e4:57:d2:ef: f0:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:40:3C:8D:89:D2:1E:D1:A9:0C:56:2E:46:E8:5E:A8:A4:72:76:12 X509v3 Authority Key Identifier: keyid:96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/-kA8jYnSHtGpDFYuRuheqKRydhI.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 219.122.0.0/20 Signature Algorithm: sha256WithRSAEncryption a3:11:52:44:6d:40:7a:39:c0:ed:b6:54:d2:05:99:56:99:07: 3e:4d:ec:06:56:a8:61:45:e0:ab:79:a4:ad:25:ce:0e:17:42: 3b:7e:e4:5c:af:6b:8d:29:a7:c1:a8:0f:6f:23:63:57:1f:6d: 25:05:73:45:ca:5a:c2:a3:5f:76:cd:41:ea:55:64:63:bb:6d: 0d:9c:bc:b0:79:2e:bd:f1:aa:fa:dc:27:58:bd:5d:9d:c9:f6: 52:7f:94:f0:f1:29:9d:7d:af:2d:eb:12:7b:85:b4:9b:08:3a: c0:fc:6c:89:1f:2f:03:02:a3:fd:6b:d3:0d:b3:2b:93:1c:85: b9:51:3c:a1:ad:01:bd:50:77:93:83:e8:99:7e:6b:df:b6:ef: a7:f1:57:70:e0:ed:bf:cc:77:8a:86:19:96:46:6e:f2:26:17: 41:b3:f4:0d:e8:1f:68:c6:ac:00:88:a6:20:34:11:a6:08:6f: 5a:e0:63:8a:3f:a0:19:e9:4a:e5:e4:4c:5c:7b:d7:86:7c:08: 7b:b8:c6:ea:7e:f6:a0:44:65:3c:19:8e:15:28:46:ef:b6:ab: 6e:08:83:8e:e6:48:46:26:ff:88:43:d3:05:c2:0b:43:87:63: f1:96:26:c1:ac:16:90:e4:10:42:a6:23:82:1b:90:39:e4:d4: c2:97:92:82 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIBNTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5NjFC QzE4NTEyNzIyQUFGOUE5MEQ4OThBREVBOUFGNzc5M0MyNTQzMB4XDTIzMDkyNjA2 NTcxNloXDTI0MDkxNDAxMzAwM1owMzExMC8GA1UEAxMoRkE0MDNDOEQ4OUQyMUVE MUE5MEM1NjJFNDZFODVFQThBNDcyNzYxMjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAOfED7KF32ikXrZfthOynbKW1je8D8sqzXfYbCRYJKHVs2MWA+uN F96cMsT7BYCsW0uO1phj/0nH3eLyU5OOognnARNaZtzbVZXyFiQCZvud1FAJ6iTP Oq8ZOLsKalSZ6eDd5oivyHnfMcds0NMMzfLZEgWX+Z/cq8v67nyPfCeSxq2DvvEc NPlbKt3TgHY+iwXKxyiaDLN+FqTztSxWNv6NG1QJDQgDX2tk2U5Rv2ns3f+/WuSk IlSHQ0oIuqOwkomaGMIJRpYKY+xw0P8T6RSLyDHB+7+ENmG+Ovm/BT2ImE5UyKL9 2OargGw/gU4dfad+/vfOhRykS2vkV9Lv8E8CAwEAAaOCAigwggIkMB0GA1UdDgQW BBT6QDyNidIe0akMVi5G6F6opHJ2EjAfBgNVHSMEGDAWgBSWG8GFEnIqr5qQ2Jit 6pr3eTwlQzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjAwNDIvbGh2QmhSSnlLcS1ha05pWXJlcWE5M2s4SlVNLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvbGh2QmhSSnlLcS1ha05pWXJlcWE5 M2s4SlVNLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzIwMDQyLy1rQThqWW5TSHRHcERGWXVSdWhlcUtSeWRoSS5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBATbegAwDQYJKoZIhvcNAQELBQADggEBAKMRUkRtQHo5wO22VNIFmVaZ Bz5N7AZWqGFF4Kt5pK0lzg4XQjt+5Fyva40pp8GoD28jY1cfbSUFc0XKWsKjX3bN QepVZGO7bQ2cvLB5Lr3xqvrcJ1i9XZ3J9lJ/lPDxKZ19ry3rEnuFtJsIOsD8bIkf LwMCo/1r0w2zK5MchblRPKGtAb1Qd5OD6Jl+a9+276fxV3Dg7b/Md4qGGZZGbvIm F0Gz9A3oH2jGrACIpiA0EaYIb1rgY4o/oBnpSuXkTFx714Z8CHu4xup+9qBEZTwZ jhUoRu+2q24Ig47mSEYm/4hD0wXCC0OHY/GWJsGsFpDkEEKmI4IbkDnk1MKXkoI= -----END CERTIFICATE-----Generated at Sun Jun 16 14:31:44 2024 by rpki-client on console-ams.rpki-client.org