$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20160/YMFnYohIJGvzDxoA8pOQxEIQD_U.roa File: YMFnYohIJGvzDxoA8pOQxEIQD_U.roa (raw, json) Hash identifier: ydKNFW0w3zMPfq0n3eDPjn/9y44CqNncVlD+ZbFQLH4= Subject key identifier: 60:C1:67:62:88:48:24:6B:F3:0F:1A:00:F2:93:90:C4:42:10:0F:F5 Certificate issuer: /CN=050401C788B569B3D440041730E28A991F4018D2 Certificate serial: 03 Authority key identifier: 05:04:01:C7:88:B5:69:B3:D4:40:04:17:30:E2:8A:99:1F:40:18:D2 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BQQBx4i1abPUQAQXMOKKmR9AGNI.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20160/YMFnYohIJGvzDxoA8pOQxEIQD_U.roa Signing time: Thu 04 Jul 2024 08:25:35 +0000 ROA not before: Thu 04 Jul 2024 08:25:35 +0000 ROA not after: Thu 03 Jul 2025 05:04:45 +0000 asID: 18282 IP address blocks: 180.94.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20160/BQQBx4i1abPUQAQXMOKKmR9AGNI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20160/BQQBx4i1abPUQAQXMOKKmR9AGNI.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BQQBx4i1abPUQAQXMOKKmR9AGNI.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 22:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=050401C788B569B3D440041730E28A991F4018D2 Validity Not Before: Jul 4 08:25:35 2024 GMT Not After : Jul 3 05:04:45 2025 GMT Subject: CN=60C167628848246BF30F1A00F29390C442100FF5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a1:a7:64:49:a9:12:7b:02:f0:a6:17:d4:bd: df:60:08:0d:bb:61:1c:52:0b:cd:1a:48:d5:ba:02: 08:44:3e:5a:bb:67:0d:8d:ac:5c:43:d4:1c:9c:2e: 37:a6:c8:36:84:42:67:9e:06:35:bd:ae:1e:45:2f: 22:6c:c7:48:30:41:d2:ee:d4:e1:95:64:07:5b:a1: 02:4c:da:dc:93:f7:0b:ae:25:d8:2f:49:b1:a4:ee: c7:88:90:a8:dc:76:a8:7d:ea:2b:58:ca:25:8e:35: 1d:de:96:aa:63:91:33:02:2b:06:f5:3a:92:31:61: 27:82:99:61:20:bd:b9:08:60:42:7f:df:dd:af:ac: 63:03:46:28:f4:b0:52:e0:ce:21:a9:c5:06:92:29: 9c:9e:be:ce:3d:94:6a:5b:ca:62:04:4a:be:43:4b: 1e:6d:17:32:7e:10:a1:45:51:fc:ac:20:1f:15:19: 00:c0:e6:3a:04:2e:ac:2c:22:82:03:18:9b:64:e6: 11:8e:a8:55:d3:bb:98:05:52:8a:15:ad:1b:d6:75: 90:4d:2b:84:be:21:84:23:2a:f0:73:67:12:36:ad: 61:57:b0:1e:7f:1d:f3:f5:49:21:10:3b:c9:eb:7a: 31:ff:89:e9:10:b3:9c:0c:d5:5b:3b:06:d2:03:7d: 53:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:C1:67:62:88:48:24:6B:F3:0F:1A:00:F2:93:90:C4:42:10:0F:F5 X509v3 Authority Key Identifier: keyid:05:04:01:C7:88:B5:69:B3:D4:40:04:17:30:E2:8A:99:1F:40:18:D2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20160/BQQBx4i1abPUQAQXMOKKmR9AGNI.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BQQBx4i1abPUQAQXMOKKmR9AGNI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20160/YMFnYohIJGvzDxoA8pOQxEIQD_U.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 180.94.240.0/20 Signature Algorithm: sha256WithRSAEncryption 12:6b:44:c5:71:cf:38:1d:dc:32:0b:8c:f3:f2:db:dd:5a:1d: 49:04:2e:d7:65:e0:45:68:d3:76:10:7e:7f:3f:30:0b:0f:33: ae:73:20:0f:72:ee:fe:c9:4a:0b:0a:00:6b:29:f1:65:bf:fe: 65:3b:f3:d5:b1:13:ad:8b:42:5d:d7:fa:dd:06:62:4a:80:6a: 59:d6:b9:a7:4a:1e:40:fa:8d:0e:f2:1f:05:b2:fe:5e:d1:7c: c6:c8:a6:8e:7c:7c:71:2e:be:6e:61:e3:66:8c:29:24:5a:ee: 3a:52:32:9e:01:65:6a:52:e5:2f:b6:ea:52:48:79:8a:0d:a5: 0f:72:9f:ae:2d:cd:3c:a3:50:9b:b5:56:ad:1c:a3:03:86:aa: 3a:ab:15:1d:ce:b1:c5:23:cd:d1:cf:25:6d:64:02:7a:58:51: d2:17:f0:1c:8e:cf:70:17:1e:17:38:5f:fe:37:83:84:23:75: ca:fd:4d:19:37:4b:55:9d:f3:4e:5e:f2:6b:1c:a0:a4:c3:f2: dc:15:83:0d:e4:95:a7:f9:6c:cc:f3:47:60:04:a1:49:dc:47: 8e:0b:ff:9b:d9:e3:51:cc:01:3a:24:13:1b:65:13:71:3f:8b: 28:9c:27:2a:b4:d1:ef:13:ac:04:cd:19:fa:ce:83:10:d6:66: 64:62:8f:69 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIBAzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwNTA0 MDFDNzg4QjU2OUIzRDQ0MDA0MTczMEUyOEE5OTFGNDAxOEQyMB4XDTI0MDcwNDA4 MjUzNVoXDTI1MDcwMzA1MDQ0NVowMzExMC8GA1UEAxMoNjBDMTY3NjI4ODQ4MjQ2 QkYzMEYxQTAwRjI5MzkwQzQ0MjEwMEZGNTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMChp2RJqRJ7AvCmF9S932AIDbthHFILzRpI1boCCEQ+WrtnDY2s XEPUHJwuN6bINoRCZ54GNb2uHkUvImzHSDBB0u7U4ZVkB1uhAkza3JP3C64l2C9J saTux4iQqNx2qH3qK1jKJY41Hd6WqmORMwIrBvU6kjFhJ4KZYSC9uQhgQn/f3a+s YwNGKPSwUuDOIanFBpIpnJ6+zj2UalvKYgRKvkNLHm0XMn4QoUVR/KwgHxUZAMDm OgQurCwiggMYm2TmEY6oVdO7mAVSihWtG9Z1kE0rhL4hhCMq8HNnEjatYVewHn8d 8/VJIRA7yet6Mf+J6RCznAzVWzsG0gN9U2sCAwEAAaOCAigwggIkMB0GA1UdDgQW BBRgwWdiiEgka/MPGgDyk5DEQhAP9TAfBgNVHSMEGDAWgBQFBAHHiLVps9RABBcw 4oqZH0AY0jAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjAxNjAvQlFRQng0aTFhYlBVUUFRWE1PS0ttUjlBR05JLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvQlFRQng0aTFhYlBVUUFRWE1PS0tt UjlBR05JLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzIwMTYwL1lNRm5Zb2hJSkd2ekR4b0E4cE9ReEVJUURfVS5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAS0XvAwDQYJKoZIhvcNAQELBQADggEBABJrRMVxzzgd3DILjPPy291a HUkELtdl4EVo03YQfn8/MAsPM65zIA9y7v7JSgsKAGsp8WW//mU789WxE62LQl3X +t0GYkqAalnWuadKHkD6jQ7yHwWy/l7RfMbIpo58fHEuvm5h42aMKSRa7jpSMp4B ZWpS5S+26lJIeYoNpQ9yn64tzTyjUJu1Vq0cowOGqjqrFR3OscUjzdHPJW1kAnpY UdIX8ByOz3AXHhc4X/43g4Qjdcr9TRk3S1Wd805e8mscoKTD8twVgw3klaf5bMzz R2AEoUncR44L/5vZ41HMATokExtlE3E/iyicJyq00e8TrATNGfrOgxDWZmRij2k= -----END CERTIFICATE-----Generated at Mon Nov 25 23:59:04 2024 by rpki-client on console-fra.rpki-client.org