$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/207/aJjXa_HPb_Nm7SdXnCJjUcpYAgA.roa File: aJjXa_HPb_Nm7SdXnCJjUcpYAgA.roa (raw, json) Hash identifier: i9JFeRHOLs4XX9n5bt5r6AwUJlwdIMEnMgCgKr8h3IE= Subject key identifier: 68:98:D7:6B:F1:CF:6F:F3:66:ED:27:57:9C:22:63:51:CA:58:02:00 Certificate issuer: /CN=67018B4DFE54BD644E000641A234B471DB20B892 Certificate serial: 74 Authority key identifier: 67:01:8B:4D:FE:54:BD:64:4E:00:06:41:A2:34:B4:71:DB:20:B8:92 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZwGLTf5UvWROAAZBojS0cdsguJI.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/aJjXa_HPb_Nm7SdXnCJjUcpYAgA.roa Signing time: Fri 01 Sep 2023 01:28:19 +0000 ROA not before: Fri 01 Sep 2023 01:28:19 +0000 ROA not after: Wed 14 Aug 2024 01:30:02 +0000 asID: 131079 IP address blocks: 210.173.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/ZwGLTf5UvWROAAZBojS0cdsguJI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/ZwGLTf5UvWROAAZBojS0cdsguJI.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZwGLTf5UvWROAAZBojS0cdsguJI.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Jun 2024 02:39:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 116 (0x74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67018B4DFE54BD644E000641A234B471DB20B892 Validity Not Before: Sep 1 01:28:19 2023 GMT Not After : Aug 14 01:30:02 2024 GMT Subject: CN=6898D76BF1CF6FF366ED27579C226351CA580200 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:66:a5:ae:c5:13:26:c0:a0:eb:ab:a2:ac:f4: 2c:de:0d:14:27:d8:7a:7c:82:4c:40:de:d1:23:5a: 45:64:87:45:68:aa:6f:33:f9:21:3c:23:d6:8d:7a: d0:4e:25:e0:74:a8:09:c3:f6:d2:43:f5:36:f9:3c: ef:1e:d6:44:97:12:65:98:85:42:75:c8:29:2e:9a: e4:c9:32:c7:ba:70:ff:0f:d5:85:7f:85:ed:e9:96: fe:f6:24:a4:42:3c:17:82:50:0c:f3:d5:3c:63:62: 47:9c:9f:9d:3f:11:5b:86:dc:57:cf:c4:2f:6a:20: 70:23:cd:85:0a:56:77:1a:45:9e:72:a4:46:11:09: da:3c:15:28:c4:80:1c:b9:27:67:11:4f:59:eb:d2: c0:7b:cc:06:fe:b0:b9:70:25:ef:aa:b5:58:b7:da: bf:29:40:dc:19:76:1f:fe:ab:d8:60:35:ab:a1:21: d4:35:03:36:a2:f7:51:c6:cf:7e:4d:ba:be:2b:f7: 93:98:77:56:5f:9d:16:f8:2d:8b:e8:78:be:a0:c0: 5c:5f:ed:15:2f:f5:bf:15:cc:6a:cf:fe:70:d7:00: 90:36:e2:e7:83:36:b5:84:f9:df:b8:c4:f8:85:71: fa:c9:83:13:20:fe:a7:83:db:2c:53:b4:b5:fa:fe: b7:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:98:D7:6B:F1:CF:6F:F3:66:ED:27:57:9C:22:63:51:CA:58:02:00 X509v3 Authority Key Identifier: keyid:67:01:8B:4D:FE:54:BD:64:4E:00:06:41:A2:34:B4:71:DB:20:B8:92 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/ZwGLTf5UvWROAAZBojS0cdsguJI.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZwGLTf5UvWROAAZBojS0cdsguJI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/aJjXa_HPb_Nm7SdXnCJjUcpYAgA.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.173.191.0/24 Signature Algorithm: sha256WithRSAEncryption ba:4e:47:f4:49:05:00:d9:79:79:bc:51:49:e3:e7:03:e4:eb: 00:f7:80:4f:28:50:0c:52:18:76:e0:82:51:64:17:90:11:8a: b1:5a:17:7e:aa:68:85:a5:54:f8:25:53:50:ee:14:15:28:35: 2e:01:80:db:75:36:c1:b0:22:8e:8b:8a:63:d4:3f:e3:95:b8: 5e:cd:f7:81:3c:af:6d:ab:17:f1:0d:f6:11:91:29:d7:1f:b0: b6:8b:f6:9d:d1:9a:21:6b:f5:0f:c5:7c:11:87:87:d9:ee:eb: 15:0f:9c:be:8e:98:b8:54:74:53:c9:f7:c6:01:92:c5:87:5e: 03:a1:78:0f:1a:eb:b4:af:19:cc:f4:99:a2:4a:b7:64:9c:84: 85:72:b2:0c:08:9c:51:d9:09:9e:8a:2a:05:02:44:a9:6f:62: a5:3d:14:a9:ec:38:ea:39:b7:b4:1d:52:fb:73:d4:65:87:51: fe:be:81:a1:bd:de:0f:de:0c:ae:40:61:79:85:e9:51:73:e6: 84:d4:d0:f9:b9:ba:2c:21:10:0b:07:42:83:65:93:2a:d2:59: 65:a2:60:d7:82:42:3b:b9:eb:9a:7a:3f:22:40:65:0a:c9:6f: bb:77:de:0c:19:df:41:74:17:3c:7c:6d:e5:f8:f1:c6:d6:4a: 09:98:61:27 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBdDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2NzAx OEI0REZFNTRCRDY0NEUwMDA2NDFBMjM0QjQ3MURCMjBCODkyMB4XDTIzMDkwMTAx MjgxOVoXDTI0MDgxNDAxMzAwMlowMzExMC8GA1UEAxMoNjg5OEQ3NkJGMUNGNkZG MzY2RUQyNzU3OUMyMjYzNTFDQTU4MDIwMDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALNmpa7FEybAoOuroqz0LN4NFCfYenyCTEDe0SNaRWSHRWiqbzP5 ITwj1o160E4l4HSoCcP20kP1Nvk87x7WRJcSZZiFQnXIKS6a5Mkyx7pw/w/VhX+F 7emW/vYkpEI8F4JQDPPVPGNiR5yfnT8RW4bcV8/EL2ogcCPNhQpWdxpFnnKkRhEJ 2jwVKMSAHLknZxFPWevSwHvMBv6wuXAl76q1WLfavylA3Bl2H/6r2GA1q6Eh1DUD NqL3UcbPfk26viv3k5h3Vl+dFvgti+h4vqDAXF/tFS/1vxXMas/+cNcAkDbi54M2 tYT537jE+IVx+smDEyD+p4PbLFO0tfr+tzECAwEAAaOCAiQwggIgMB0GA1UdDgQW BBRomNdr8c9v82btJ1ecImNRylgCADAfBgNVHSMEGDAWgBRnAYtN/lS9ZE4ABkGi NLRx2yC4kjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjA3L1p3R0xUZjVVdldST0FBWkJvalMwY2RzZ3VKSS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1p3R0xUZjVVdldST0FBWkJvalMwY2Rz Z3VKSS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8yMDcvYUpqWGFfSFBiX05tN1NkWG5DSmpVY3BZQWdBLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEANKtvzANBgkqhkiG9w0BAQsFAAOCAQEAuk5H9EkFANl5ebxRSePnA+TrAPeA TyhQDFIYduCCUWQXkBGKsVoXfqpohaVU+CVTUO4UFSg1LgGA23U2wbAijouKY9Q/ 45W4Xs33gTyvbasX8Q32EZEp1x+wtov2ndGaIWv1D8V8EYeH2e7rFQ+cvo6YuFR0 U8n3xgGSxYdeA6F4DxrrtK8ZzPSZokq3ZJyEhXKyDAicUdkJnooqBQJEqW9ipT0U qew46jm3tB1S+3PUZYdR/r6Bob3eD94MrkBheYXpUXPmhNTQ+bm6LCEQCwdCg2WT KtJZZaJg14JCO7nrmno/IkBlCslvu3feDBnfQXQXPHxt5fjxxtZKCZhhJw== -----END CERTIFICATE-----Generated at Thu May 30 03:08:52 2024 by rpki-client on console-fra.rpki-client.org