$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20042/HjNbY-ZRkrtVs_nBjpcvHy7iJxA.roa File: HjNbY-ZRkrtVs_nBjpcvHy7iJxA.roa (raw, json) Hash identifier: PShvB3fKTWlDxtG+mt3vppKzgshroU/k8uU4JoR8N6Y= Subject key identifier: 1E:33:5B:63:E6:51:92:BB:55:B3:F9:C1:8E:97:2F:1F:2E:E2:27:10 Certificate issuer: /CN=961BC18512722AAF9A90D898ADEA9AF7793C2543 Certificate serial: 29 Authority key identifier: 96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/HjNbY-ZRkrtVs_nBjpcvHy7iJxA.roa Signing time: Tue 26 Sep 2023 06:51:11 +0000 ROA not before: Tue 26 Sep 2023 06:51:11 +0000 ROA not after: Sat 14 Sep 2024 01:30:03 +0000 asID: 17941 IP address blocks: 119.75.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Jun 2024 01:32:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41 (0x29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=961BC18512722AAF9A90D898ADEA9AF7793C2543 Validity Not Before: Sep 26 06:51:11 2023 GMT Not After : Sep 14 01:30:03 2024 GMT Subject: CN=1E335B63E65192BB55B3F9C18E972F1F2EE22710 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:dd:18:96:3a:b9:51:97:1f:1d:ef:7a:25:13: 61:29:8e:bd:c8:1d:bc:52:c9:47:99:af:21:5a:d7: 04:70:10:3c:b1:29:3b:8f:1f:aa:97:73:17:3c:d1: e7:c1:ca:39:60:66:f9:0b:dd:49:f2:7d:be:5b:71: d5:c2:8d:a7:44:e9:4c:11:f3:af:62:fb:e4:b9:e4: 97:a3:85:8c:7d:40:87:d9:ff:82:1f:84:d9:c0:c3: f9:e7:72:9d:09:3c:4c:3b:4d:74:c6:25:f1:6b:e1: b4:ce:ac:33:ac:8e:14:14:6c:f6:8e:31:3e:f1:8b: 53:ce:09:db:d4:14:4a:e5:86:c2:4f:e3:e4:0a:79: 0a:96:e6:72:fb:22:6c:81:ee:e8:16:e9:82:f5:20: 72:3e:82:5a:a3:a9:ab:78:6b:d6:f0:98:c2:4d:82: 56:f6:01:9b:1d:40:81:6c:33:cc:41:f2:c0:02:0f: 6c:bb:1f:73:20:0d:4a:84:d6:8d:f4:5c:ec:7e:a1: 67:af:82:88:ac:94:1b:0f:d7:12:2c:fa:e9:5a:59: 34:55:af:97:7f:bf:8a:c9:f7:ab:22:64:b5:48:7d: f4:2b:b5:ad:d8:29:8f:04:33:17:49:a6:59:9c:a2: 66:34:6a:96:47:74:1c:60:dd:ab:b1:0a:73:4e:6f: fb:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:33:5B:63:E6:51:92:BB:55:B3:F9:C1:8E:97:2F:1F:2E:E2:27:10 X509v3 Authority Key Identifier: keyid:96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/HjNbY-ZRkrtVs_nBjpcvHy7iJxA.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 119.75.224.0/20 Signature Algorithm: sha256WithRSAEncryption 6e:6a:7b:47:15:0c:3b:d8:f9:d4:7b:57:05:21:e8:be:fa:70: 7d:1d:ec:c2:eb:56:f2:22:f3:72:1a:d4:b4:ac:32:40:db:63: 7d:44:89:1a:1a:c7:97:2b:51:2f:c7:df:69:5f:25:ad:2e:f2: 5c:80:5f:bf:14:dd:15:51:2d:a9:85:42:d2:75:a6:f0:33:99: 7f:54:eb:f5:13:d8:6a:57:8d:32:ac:08:81:f9:29:ad:de:e1: 34:8f:64:1e:f7:8a:4c:ec:19:63:88:44:b3:7c:0b:0d:17:33: db:d5:18:01:86:fa:07:f0:74:04:4e:b5:b0:35:b8:80:ab:5e: 5d:9d:df:41:c4:b2:fa:20:4f:ec:d2:77:d9:a4:10:c4:e3:4d: ed:07:b7:6b:0d:7c:63:49:e8:e1:e0:1e:61:08:52:da:25:1c: ca:87:64:af:2b:cf:77:0f:3e:b3:e9:2c:75:e7:45:98:03:ae: 8a:3d:00:b5:66:a5:72:1b:d3:82:a7:95:3f:f0:42:07:6d:3c: 1a:4a:f8:9a:ca:b2:7f:f2:b5:fe:5d:4d:8e:b3:d3:0b:e8:b7: 9d:71:c1:2f:9b:c1:a6:18:eb:15:05:a2:16:f6:24:c7:a3:d3: b6:ac:14:fe:b2:ee:27:e6:f0:3c:20:ed:41:1d:3f:52:27:42: 03:c2:ee:a1 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIBKTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5NjFC QzE4NTEyNzIyQUFGOUE5MEQ4OThBREVBOUFGNzc5M0MyNTQzMB4XDTIzMDkyNjA2 NTExMVoXDTI0MDkxNDAxMzAwM1owMzExMC8GA1UEAxMoMUUzMzVCNjNFNjUxOTJC QjU1QjNGOUMxOEU5NzJGMUYyRUUyMjcxMDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAOzdGJY6uVGXHx3veiUTYSmOvcgdvFLJR5mvIVrXBHAQPLEpO48f qpdzFzzR58HKOWBm+QvdSfJ9vltx1cKNp0TpTBHzr2L75Lnkl6OFjH1Ah9n/gh+E 2cDD+edynQk8TDtNdMYl8WvhtM6sM6yOFBRs9o4xPvGLU84J29QUSuWGwk/j5Ap5 CpbmcvsibIHu6BbpgvUgcj6CWqOpq3hr1vCYwk2CVvYBmx1AgWwzzEHywAIPbLsf cyANSoTWjfRc7H6hZ6+CiKyUGw/XEiz66VpZNFWvl3+/isn3qyJktUh99Cu1rdgp jwQzF0mmWZyiZjRqlkd0HGDdq7EKc05v+3kCAwEAAaOCAigwggIkMB0GA1UdDgQW BBQeM1tj5lGSu1Wz+cGOly8fLuInEDAfBgNVHSMEGDAWgBSWG8GFEnIqr5qQ2Jit 6pr3eTwlQzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjAwNDIvbGh2QmhSSnlLcS1ha05pWXJlcWE5M2s4SlVNLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvbGh2QmhSSnlLcS1ha05pWXJlcWE5 M2s4SlVNLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzIwMDQyL0hqTmJZLVpSa3J0VnNfbkJqcGN2SHk3aUp4QS5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAR3S+AwDQYJKoZIhvcNAQELBQADggEBAG5qe0cVDDvY+dR7VwUh6L76 cH0d7MLrVvIi83Ia1LSsMkDbY31EiRoax5crUS/H32lfJa0u8lyAX78U3RVRLamF QtJ1pvAzmX9U6/UT2GpXjTKsCIH5Ka3e4TSPZB73ikzsGWOIRLN8Cw0XM9vVGAGG +gfwdAROtbA1uICrXl2d30HEsvogT+zSd9mkEMTjTe0Ht2sNfGNJ6OHgHmEIUtol HMqHZK8rz3cPPrPpLHXnRZgDroo9ALVmpXIb04KnlT/wQgdtPBpK+JrKsn/ytf5d TY6z0wvot51xwS+bwaYY6xUFohb2JMej07asFP6y7ifm8Dwg7UEdP1InQgPC7qE= -----END CERTIFICATE-----Generated at Sat Jun 15 02:41:48 2024 by rpki-client on console-ams.rpki-client.org