$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/207/6Y2zmnR2Uu-8xsrntDQ1m82YAfc.roa File: 6Y2zmnR2Uu-8xsrntDQ1m82YAfc.roa (raw, json) Hash identifier: Daw3L+eC1ErjMx2Bq2wkKeDHWXqVAZsiMQUxoDKsTJc= Subject key identifier: E9:8D:B3:9A:74:76:52:EF:BC:C6:CA:E7:B4:34:35:9B:CD:98:01:F7 Certificate issuer: /CN=67018B4DFE54BD644E000641A234B471DB20B892 Certificate serial: 77 Authority key identifier: 67:01:8B:4D:FE:54:BD:64:4E:00:06:41:A2:34:B4:71:DB:20:B8:92 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZwGLTf5UvWROAAZBojS0cdsguJI.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/6Y2zmnR2Uu-8xsrntDQ1m82YAfc.roa Signing time: Wed 01 Nov 2023 01:28:42 +0000 ROA not before: Wed 01 Nov 2023 01:28:42 +0000 ROA not after: Mon 14 Oct 2024 01:30:03 +0000 asID: 7521 IP address blocks: 210.173.186.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/ZwGLTf5UvWROAAZBojS0cdsguJI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/ZwGLTf5UvWROAAZBojS0cdsguJI.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZwGLTf5UvWROAAZBojS0cdsguJI.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 16 Jun 2024 13:34:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 119 (0x77) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67018B4DFE54BD644E000641A234B471DB20B892 Validity Not Before: Nov 1 01:28:42 2023 GMT Not After : Oct 14 01:30:03 2024 GMT Subject: CN=E98DB39A747652EFBCC6CAE7B434359BCD9801F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:78:ef:dc:90:6c:ff:fd:aa:06:62:61:24:9c: 19:03:99:e5:fc:0f:b7:65:97:35:8b:6e:90:46:65: b8:96:30:0e:6d:85:1a:1f:82:39:ca:c8:7b:13:bf: 5d:3f:f3:2f:dc:05:20:9e:23:be:bb:60:84:42:c5: 2f:28:9b:77:8c:4e:f9:60:86:68:c2:34:8b:1f:47: 1b:c4:14:0c:04:91:7e:1b:8a:b0:b7:90:6d:1f:52: 5b:19:a3:f0:26:56:47:5c:2a:1f:16:2a:b1:b5:5a: 85:d2:66:4b:fe:ae:a1:03:e7:e9:12:06:b2:cc:c8: a4:2d:ac:09:3f:8c:35:ac:4b:ad:eb:bb:3b:a3:1f: 9c:da:76:da:eb:53:6f:ef:9a:81:a4:2a:13:51:74: 0e:a3:57:e0:85:1a:9f:82:70:00:ec:53:be:27:8d: 14:5d:cc:41:61:d0:af:7a:d5:17:92:ea:93:f3:18: fb:85:9e:2e:6e:a9:9d:5b:41:10:a7:b9:35:18:8a: e1:2d:c1:31:8f:10:22:4d:61:68:13:33:5c:ec:0a: 42:5a:1d:1f:4a:7e:a9:5d:97:c2:72:6f:6a:72:9d: 9e:35:c6:3f:cc:be:f2:5c:82:71:08:3c:38:b7:5c: b5:ff:b4:36:66:0a:b6:51:3f:c2:ba:47:07:7c:67: 6a:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:8D:B3:9A:74:76:52:EF:BC:C6:CA:E7:B4:34:35:9B:CD:98:01:F7 X509v3 Authority Key Identifier: keyid:67:01:8B:4D:FE:54:BD:64:4E:00:06:41:A2:34:B4:71:DB:20:B8:92 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/ZwGLTf5UvWROAAZBojS0cdsguJI.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZwGLTf5UvWROAAZBojS0cdsguJI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/6Y2zmnR2Uu-8xsrntDQ1m82YAfc.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.173.186.0/23 Signature Algorithm: sha256WithRSAEncryption 5f:ac:8f:b0:cd:f0:a3:12:a4:4a:96:d1:c7:33:22:79:a5:7d: 5b:2e:99:5d:1c:e7:2e:a3:73:ee:80:21:74:58:37:2e:54:6e: a8:d3:71:d5:7d:7c:fd:60:9a:61:67:79:eb:57:74:c2:fe:4d: 26:ee:7e:c1:37:66:4e:7a:ac:0d:d5:62:63:11:eb:08:7e:85: a0:4f:ba:c5:c1:9c:9c:15:d9:b8:04:ad:1b:7a:f3:7d:49:2f: 46:2a:66:ef:ef:cc:84:b8:14:ec:4d:3a:5e:3c:4e:de:76:2f: ee:01:22:30:d9:b5:94:65:4c:00:41:22:7d:e7:10:41:1a:0a: 62:42:43:a9:aa:45:90:55:c0:57:ba:8a:3c:f7:d4:97:02:d6: 33:3b:64:5a:50:f6:10:88:7c:0e:b3:4b:3f:e9:3a:33:8e:52: 0b:c2:1d:49:15:74:31:67:75:3f:76:a6:46:0e:af:44:8e:60: c1:96:d4:67:9b:83:f9:4f:bb:27:53:0d:ff:f5:43:7a:35:39: a9:66:01:7f:57:1d:9e:6d:3f:1f:b5:e8:19:f5:ac:8d:55:b7: a2:d6:00:df:38:d1:49:3d:b8:75:aa:ed:67:40:21:e3:ce:36: 14:0b:1c:77:c3:66:5d:b5:42:38:63:55:57:17:83:9b:d4:98: 90:d4:3a:cb -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBdzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2NzAx OEI0REZFNTRCRDY0NEUwMDA2NDFBMjM0QjQ3MURCMjBCODkyMB4XDTIzMTEwMTAx Mjg0MloXDTI0MTAxNDAxMzAwM1owMzExMC8GA1UEAxMoRTk4REIzOUE3NDc2NTJF RkJDQzZDQUU3QjQzNDM1OUJDRDk4MDFGNzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALR479yQbP/9qgZiYSScGQOZ5fwPt2WXNYtukEZluJYwDm2FGh+C OcrIexO/XT/zL9wFIJ4jvrtghELFLyibd4xO+WCGaMI0ix9HG8QUDASRfhuKsLeQ bR9SWxmj8CZWR1wqHxYqsbVahdJmS/6uoQPn6RIGsszIpC2sCT+MNaxLreu7O6Mf nNp22utTb++agaQqE1F0DqNX4IUan4JwAOxTvieNFF3MQWHQr3rVF5Lqk/MY+4We Lm6pnVtBEKe5NRiK4S3BMY8QIk1haBMzXOwKQlodH0p+qV2XwnJvanKdnjXGP8y+ 8lyCcQg8OLdctf+0NmYKtlE/wrpHB3xnap8CAwEAAaOCAiQwggIgMB0GA1UdDgQW BBTpjbOadHZS77zGyue0NDWbzZgB9zAfBgNVHSMEGDAWgBRnAYtN/lS9ZE4ABkGi NLRx2yC4kjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjA3L1p3R0xUZjVVdldST0FBWkJvalMwY2RzZ3VKSS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1p3R0xUZjVVdldST0FBWkJvalMwY2Rz Z3VKSS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8yMDcvNlkyem1uUjJVdS04eHNybnREUTFtODJZQWZjLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAdKtujANBgkqhkiG9w0BAQsFAAOCAQEAX6yPsM3woxKkSpbRxzMieaV9Wy6Z XRznLqNz7oAhdFg3LlRuqNNx1X18/WCaYWd561d0wv5NJu5+wTdmTnqsDdViYxHr CH6FoE+6xcGcnBXZuAStG3rzfUkvRipm7+/MhLgU7E06XjxO3nYv7gEiMNm1lGVM AEEifecQQRoKYkJDqapFkFXAV7qKPPfUlwLWMztkWlD2EIh8DrNLP+k6M45SC8Id SRV0MWd1P3amRg6vRI5gwZbUZ5uD+U+7J1MN//VDejU5qWYBf1cdnm0/H7XoGfWs jVW3otYA3zjRST24dartZ0Ah4842FAscd8NmXbVCOGNVVxeDm9SYkNQ6yw== -----END CERTIFICATE-----Generated at Thu Jun 13 14:58:55 2024 by rpki-client on console-fra.rpki-client.org