$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20060/L_cD71bAOtMXNqk-46pTbytRIU0.roa File: L_cD71bAOtMXNqk-46pTbytRIU0.roa (raw, json) Hash identifier: AzyC0wVxNUNvqAySWojBgI1k0+n0aPeOn6BybSKEDN0= Subject key identifier: 2F:F7:03:EF:56:C0:3A:D3:17:36:A9:3E:E3:AA:53:6F:2B:51:21:4D Certificate issuer: /CN=C163A3387592F96B1BCC77F8ACFCF4F1F11FA99D Certificate serial: 06 Authority key identifier: C1:63:A3:38:75:92:F9:6B:1B:CC:77:F8:AC:FC:F4:F1:F1:1F:A9:9D Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wWOjOHWS-WsbzHf4rPz08fEfqZ0.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20060/L_cD71bAOtMXNqk-46pTbytRIU0.roa Signing time: Tue 14 May 2024 01:05:50 +0000 ROA not before: Tue 14 May 2024 01:05:50 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 131928 IP address blocks: 133.226.130.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20060/wWOjOHWS-WsbzHf4rPz08fEfqZ0.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20060/wWOjOHWS-WsbzHf4rPz08fEfqZ0.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wWOjOHWS-WsbzHf4rPz08fEfqZ0.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:22:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6 (0x6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C163A3387592F96B1BCC77F8ACFCF4F1F11FA99D Validity Not Before: May 14 01:05:50 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=2FF703EF56C03AD31736A93EE3AA536F2B51214D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:74:20:f1:65:70:c5:3d:0f:fd:bd:f2:ee:cf: a6:e0:b8:ab:74:e1:b9:09:4b:fd:ad:f0:ac:e1:4c: c0:ba:3d:31:0d:54:84:70:6f:1a:9c:c2:0f:ed:6a: 85:2e:b1:97:ba:39:91:ff:5d:5f:0c:47:4f:19:9b: 83:38:6d:70:46:de:f0:d6:99:45:d3:cf:87:65:c6: 29:d9:3c:97:48:dd:aa:a7:0b:19:8e:d3:6d:88:5c: 8e:ab:d7:84:92:ee:23:06:23:ed:09:df:81:12:95: 89:e6:5c:d9:91:18:b9:9e:d3:db:b7:6f:c4:09:b2: 82:64:d3:46:ca:0d:ce:72:2a:3b:d3:76:2b:f8:9f: df:48:23:11:01:69:6a:41:95:11:fa:46:28:2b:cf: a3:b2:89:9d:55:04:e4:9d:ae:28:82:85:e9:b5:7e: e9:57:9c:44:e6:93:b9:78:aa:a1:7c:ba:d6:72:3d: 50:30:42:c0:ea:a3:9a:45:15:56:86:6b:46:a0:54: d5:a1:85:0a:2d:fe:67:e3:fb:1a:dd:ab:79:1a:98: 27:3c:c8:f1:18:82:54:10:d4:6f:7f:66:1e:ed:e8: 88:a6:dc:15:1d:88:15:73:f9:92:64:09:10:25:3e: 4a:83:e7:0c:5c:78:c6:5e:9e:be:39:e0:2a:e6:d2: 67:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:F7:03:EF:56:C0:3A:D3:17:36:A9:3E:E3:AA:53:6F:2B:51:21:4D X509v3 Authority Key Identifier: keyid:C1:63:A3:38:75:92:F9:6B:1B:CC:77:F8:AC:FC:F4:F1:F1:1F:A9:9D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20060/wWOjOHWS-WsbzHf4rPz08fEfqZ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wWOjOHWS-WsbzHf4rPz08fEfqZ0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20060/L_cD71bAOtMXNqk-46pTbytRIU0.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 133.226.130.0/23 Signature Algorithm: sha256WithRSAEncryption b9:e9:b7:fa:82:77:8d:73:7d:eb:ee:91:15:75:70:b1:20:73: 23:0f:62:87:83:37:4e:cd:26:cb:b2:86:6c:04:7a:e1:47:e4: 89:d4:6b:c3:0d:79:b7:4d:e2:e3:b3:87:e5:db:40:56:7b:90: cb:fa:a7:39:ea:55:5a:5d:63:3c:0e:fb:80:10:40:d4:4e:d2: 41:85:04:93:1f:f5:d2:1d:6d:c9:67:7e:bf:ef:33:6e:2e:2f: 60:68:b6:67:d8:04:50:51:5e:40:de:ae:26:1b:dc:6e:18:1d: 4d:ef:cd:6f:6e:d7:8c:4b:0d:29:e2:c9:4b:79:23:35:24:6f: b4:b1:d6:d9:3d:4f:39:5c:03:d6:a8:64:28:73:f6:22:79:f2: 2e:29:b3:a6:1a:49:98:83:a6:ec:30:0a:1a:06:c7:d2:1b:d1: 01:b8:33:ce:37:e1:b5:0f:27:f8:ab:65:a8:82:09:25:95:a0: 9d:e2:68:d5:46:76:ea:44:54:89:0c:44:92:37:50:28:1b:47: d0:49:b1:54:63:92:d6:0a:21:eb:52:7c:3c:3c:2c:cf:73:a4: fb:7e:23:a4:51:41:10:19:69:6c:b5:1b:f1:63:08:36:21:e1: e9:c2:fe:11:8b:97:1a:21:8e:87:16:cf:92:e5:d6:3a:12:9a: b5:99:02:7d -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIBBjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDMTYz QTMzODc1OTJGOTZCMUJDQzc3RjhBQ0ZDRjRGMUYxMUZBOTlEMB4XDTI0MDUxNDAx MDU1MFoXDTI1MDQxNTAxMzAwMlowMzExMC8GA1UEAxMoMkZGNzAzRUY1NkMwM0FE MzE3MzZBOTNFRTNBQTUzNkYyQjUxMjE0RDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKt0IPFlcMU9D/298u7PpuC4q3ThuQlL/a3wrOFMwLo9MQ1UhHBv GpzCD+1qhS6xl7o5kf9dXwxHTxmbgzhtcEbe8NaZRdPPh2XGKdk8l0jdqqcLGY7T bYhcjqvXhJLuIwYj7QnfgRKVieZc2ZEYuZ7T27dvxAmygmTTRsoNznIqO9N2K/if 30gjEQFpakGVEfpGKCvPo7KJnVUE5J2uKIKF6bV+6VecROaTuXiqoXy61nI9UDBC wOqjmkUVVoZrRqBU1aGFCi3+Z+P7Gt2reRqYJzzI8RiCVBDUb39mHu3oiKbcFR2I FXP5kmQJECU+SoPnDFx4xl6evjngKubSZ6sCAwEAAaOCAigwggIkMB0GA1UdDgQW BBQv9wPvVsA60xc2qT7jqlNvK1EhTTAfBgNVHSMEGDAWgBTBY6M4dZL5axvMd/is /PTx8R+pnTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjAwNjAvd1dPak9IV1MtV3NiekhmNHJQejA4ZkVmcVowLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvd1dPak9IV1MtV3NiekhmNHJQejA4 ZkVmcVowLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzIwMDYwL0xfY0Q3MWJBT3RNWE5xay00NnBUYnl0UklVMC5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAGF4oIwDQYJKoZIhvcNAQELBQADggEBALnpt/qCd41zfevukRV1cLEg cyMPYoeDN07NJsuyhmwEeuFH5InUa8MNebdN4uOzh+XbQFZ7kMv6pznqVVpdYzwO +4AQQNRO0kGFBJMf9dIdbclnfr/vM24uL2BotmfYBFBRXkDeriYb3G4YHU3vzW9u 14xLDSniyUt5IzUkb7Sx1tk9TzlcA9aoZChz9iJ58i4ps6YaSZiDpuwwChoGx9Ib 0QG4M8434bUPJ/irZaiCCSWVoJ3iaNVGdupEVIkMRJI3UCgbR9BJsVRjktYKIetS fDw8LM9zpPt+I6RRQRAZaWy1G/FjCDYh4enC/hGLlxohjocWz5Ll1joSmrWZAn0= -----END CERTIFICATE-----Generated at Fri Nov 22 16:45:27 2024 by rpki-client on console-ams.rpki-client.org