$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/8xA5YSRXug2e_l5zQF7xI-OI8tg.roa File: 8xA5YSRXug2e_l5zQF7xI-OI8tg.roa (raw, json) Hash identifier: 5mUKdC/3eBCaIGgs0ME/NKYiKu6Hsj3o6b2yu0vNosQ= Subject key identifier: F3:10:39:61:24:57:BA:0D:9E:FE:5E:73:40:5E:F1:23:E3:88:F2:D8 Certificate issuer: /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Certificate serial: 56 Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/8xA5YSRXug2e_l5zQF7xI-OI8tg.roa Signing time: Sun 31 Mar 2024 01:30:38 +0000 ROA not before: Sun 31 Mar 2024 01:30:38 +0000 ROA not after: Sat 15 Mar 2025 01:30:02 +0000 asID: 4694 IP address blocks: 211.133.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Jun 2024 01:59:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 86 (0x56) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Validity Not Before: Mar 31 01:30:38 2024 GMT Not After : Mar 15 01:30:02 2025 GMT Subject: CN=F31039612457BA0D9EFE5E73405EF123E388F2D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:7d:3f:dd:54:3a:74:5f:ab:1a:42:f4:78:7c: af:16:0c:87:8a:10:51:c2:03:24:50:4c:3b:19:1b: 65:14:6a:bf:ad:81:46:11:10:30:c8:93:99:8d:0f: 44:7d:66:10:7d:be:e5:d3:e3:60:82:2c:cb:4c:cd: 6a:46:23:90:28:ad:e1:a6:ae:0e:e2:8b:2b:b1:1e: d6:94:a5:90:cb:5b:80:fc:e1:b1:bb:2f:18:cf:ce: 46:65:76:38:c1:93:5b:ab:fa:c9:9c:b7:b2:b4:f7: 28:9a:3d:0b:5c:fc:cf:53:94:d7:f6:1a:06:0b:bd: 9d:8d:8f:a5:09:3b:98:0d:fe:1e:98:07:9b:e1:54: 9f:fa:12:19:92:06:bd:2b:4c:b3:b1:97:01:15:22: de:19:9e:23:d0:05:b1:18:94:df:06:20:7d:14:9d: da:e1:e8:40:84:9b:56:2b:52:97:c4:a7:bb:38:88: 0e:94:d8:ed:12:7e:2d:8d:db:77:44:83:4a:7c:17: 5a:41:9b:bb:f9:5c:80:bc:88:d5:38:d6:71:08:06: 3c:9d:8c:c1:68:80:b8:5e:b4:c8:c0:63:75:eb:24: 78:7d:d1:00:4b:c9:d2:84:11:e5:f1:dc:90:af:a0: d2:2a:fd:c1:b5:9e:d5:f2:82:68:ff:10:c3:a5:b3: ab:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:10:39:61:24:57:BA:0D:9E:FE:5E:73:40:5E:F1:23:E3:88:F2:D8 X509v3 Authority Key Identifier: keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/8xA5YSRXug2e_l5zQF7xI-OI8tg.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 211.133.128.0/20 Signature Algorithm: sha256WithRSAEncryption 0b:ed:8a:b9:8c:0f:a4:7d:6f:a5:b0:1e:16:d1:8a:0d:4f:17: 82:48:74:2c:28:c9:75:9b:93:1b:c9:dc:be:ec:94:be:05:91: 3d:49:46:8d:3a:40:6e:e2:2d:ae:6a:6e:e3:2d:fb:85:ab:4b: e9:a8:b2:f2:b0:c9:07:a0:93:cb:bc:77:9d:6a:51:de:6a:23: 2e:71:f0:0b:85:b1:80:12:23:91:c8:b5:5c:d3:4c:02:e2:b7: e2:c2:ef:33:e2:be:72:5e:61:40:83:13:25:9b:86:f2:f1:90: f7:6f:12:f6:d4:db:67:75:97:78:16:38:e0:9f:6d:ba:98:07: ef:13:65:a3:51:d6:40:32:dc:78:5f:e9:c9:c1:2f:76:e1:ba: 59:13:5f:a3:b9:2f:56:15:63:84:20:a0:bc:a4:a5:a9:20:7c: b7:07:6a:ea:d1:27:c1:2a:80:92:e0:0c:59:d3:5a:84:d3:8b: b2:a9:18:37:ce:08:94:4c:73:a0:3b:81:73:dc:ec:b3:6c:2b: a1:66:69:2d:8e:25:fe:bf:8d:b5:50:62:c0:40:50:84:ec:ed: 44:5d:97:fb:92:8a:02:17:31:0a:40:f5:93:d0:fc:8e:12:fa: 4b:91:fb:7e:e8:fc:b4:f2:15:2b:24:9c:69:d2:90:71:80:76: e1:bd:dc:d0 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIBVjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1OTBB ODIyODhEMkUyM0RCRkE4NzYzOEYzRUI4Qjk5NUUxODk3RTk1MB4XDTI0MDMzMTAx MzAzOFoXDTI1MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoRjMxMDM5NjEyNDU3QkEw RDlFRkU1RTczNDA1RUYxMjNFMzg4RjJEODCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKF9P91UOnRfqxpC9Hh8rxYMh4oQUcIDJFBMOxkbZRRqv62BRhEQ MMiTmY0PRH1mEH2+5dPjYIIsy0zNakYjkCit4aauDuKLK7Ee1pSlkMtbgPzhsbsv GM/ORmV2OMGTW6v6yZy3srT3KJo9C1z8z1OU1/YaBgu9nY2PpQk7mA3+HpgHm+FU n/oSGZIGvStMs7GXARUi3hmeI9AFsRiU3wYgfRSd2uHoQISbVitSl8SnuziIDpTY 7RJ+LY3bd0SDSnwXWkGbu/lcgLyI1TjWcQgGPJ2MwWiAuF60yMBjdeskeH3RAEvJ 0oQR5fHckK+g0ir9wbWe1fKCaP8Qw6Wzqx8CAwEAAaOCAigwggIkMB0GA1UdDgQW BBTzEDlhJFe6DZ7+XnNAXvEj44jy2DAfBgNVHSMEGDAWgBRZCoIojS4j2/qHY48+ uLmV4Yl+lTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjAwODMvV1FxQ0tJMHVJOXY2aDJPUFByaTVsZUdKZnBVLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvV1FxQ0tJMHVJOXY2aDJPUFByaTVs ZUdKZnBVLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzIwMDgzLzh4QTVZU1JYdWcyZV9sNXpRRjd4SS1PSTh0Zy5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBATThYAwDQYJKoZIhvcNAQELBQADggEBAAvtirmMD6R9b6WwHhbRig1P F4JIdCwoyXWbkxvJ3L7slL4FkT1JRo06QG7iLa5qbuMt+4WrS+mosvKwyQegk8u8 d51qUd5qIy5x8AuFsYASI5HItVzTTALit+LC7zPivnJeYUCDEyWbhvLxkPdvEvbU 22d1l3gWOOCfbbqYB+8TZaNR1kAy3Hhf6cnBL3bhulkTX6O5L1YVY4QgoLykpakg fLcHaurRJ8EqgJLgDFnTWoTTi7KpGDfOCJRMc6A7gXPc7LNsK6FmaS2OJf6/jbVQ YsBAUITs7URdl/uSigIXMQpA9ZPQ/I4S+kuR+37o/LTyFSsknGnSkHGAduG93NA= -----END CERTIFICATE-----Generated at Fri Jun 14 02:47:19 2024 by rpki-client on console-ams.rpki-client.org