$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/234/0chVcTnmyco4FOO0qB37LYQOuKE.roa File: 0chVcTnmyco4FOO0qB37LYQOuKE.roa (raw, json) Hash identifier: HsNaQvNeL0WJlQONaElxnk54GsbYTwSfMb75lpcg8k8= Subject key identifier: D1:C8:55:71:39:E6:C9:CA:38:14:E3:B4:A8:1D:FB:2D:84:0E:B8:A1 Certificate issuer: /CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2 Certificate serial: 82 Authority key identifier: 50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/0chVcTnmyco4FOO0qB37LYQOuKE.roa Signing time: Mon 01 Jan 2024 01:28:24 +0000 ROA not before: Mon 01 Jan 2024 01:28:24 +0000 ROA not after: Sat 14 Dec 2024 01:30:03 +0000 asID: 9351 IP address blocks: 124.40.64.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 16 Jun 2024 02:07:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 130 (0x82) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2 Validity Not Before: Jan 1 01:28:24 2024 GMT Not After : Dec 14 01:30:03 2024 GMT Subject: CN=D1C8557139E6C9CA3814E3B4A81DFB2D840EB8A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:7a:db:a8:72:71:f6:b6:b3:5e:b3:b9:ce:4f: ec:e1:9f:4a:83:1d:d0:b1:4e:a1:bd:4a:a2:6c:46: 8d:be:72:c0:17:01:8f:96:93:b0:eb:12:0c:95:27: 2d:ea:8b:1d:45:00:2d:09:96:fa:03:f4:0d:e3:95: 9a:0f:33:7b:53:ee:1d:5c:ac:a6:b8:2a:64:21:e5: 1e:15:e9:cb:d5:8a:dc:20:73:35:8d:a7:24:4d:7d: ce:da:9f:12:c9:f6:22:34:5a:3f:bd:19:f8:4e:9d: 87:1a:09:bf:77:f0:f8:c5:7d:ac:ae:02:e3:79:0c: 97:3d:18:1c:ca:34:d6:41:db:b1:f8:50:2f:c3:90: ff:46:d3:22:2f:0b:dd:d1:bf:63:99:5f:63:55:3e: 70:be:0f:03:8e:3a:fb:55:96:7d:3a:67:91:85:38: d8:62:91:cb:e0:e1:b7:55:a1:d9:90:cf:f3:37:3f: 8c:cd:c6:e9:57:fb:3c:9a:49:a2:b2:75:14:6d:6e: 1f:2b:c4:48:65:70:40:c9:25:67:c3:af:34:9a:13: 64:f1:c7:22:1e:98:61:a6:15:40:e6:86:c0:3d:db: d7:1f:8e:13:49:1d:08:fc:0c:08:65:df:a5:1b:cb: c2:0f:2f:d4:be:33:71:c7:bf:b8:0d:16:9b:31:40: eb:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:C8:55:71:39:E6:C9:CA:38:14:E3:B4:A8:1D:FB:2D:84:0E:B8:A1 X509v3 Authority Key Identifier: keyid:50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/0chVcTnmyco4FOO0qB37LYQOuKE.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 124.40.64.0/19 Signature Algorithm: sha256WithRSAEncryption b7:46:90:31:a5:6e:01:24:6f:c7:e5:45:2d:ac:87:46:42:de: 86:7c:c2:ea:ce:d2:77:cd:b7:13:5f:2a:69:1c:9a:df:74:90: fb:79:47:d6:8f:bb:46:f2:29:40:07:56:60:16:58:b1:ea:e9: 63:e2:91:ae:64:01:c1:f4:7d:5b:4b:b5:65:8f:39:60:b1:72: 4c:da:53:16:43:6e:c7:0d:49:c7:d8:41:5a:55:5a:fa:b7:71: a8:eb:f4:e3:82:78:ac:db:6a:5c:47:ba:60:ac:8a:b8:be:ba: f5:73:60:c4:80:a8:a8:d7:8a:7e:37:fd:9a:2e:14:c0:97:cd: 5a:c6:f2:de:4a:65:b8:ec:13:4a:b0:59:a5:18:12:0a:85:12: 46:05:70:de:76:30:84:b1:19:92:e0:42:73:3a:db:4b:12:0e: cd:16:5a:17:88:c6:b5:91:dd:7c:b1:25:7e:b7:32:74:7f:6e: 12:7e:57:25:ad:90:87:01:a5:49:01:7d:a8:ee:3b:3d:8b:e0: 0c:35:d9:e9:73:b0:85:6f:11:4f:c5:c1:e1:09:c1:b7:4f:a8: 20:d8:e0:1a:cd:9b:47:ba:c0:3d:33:5e:e8:8a:32:b8:cc:ad: 22:7b:0f:12:54:2d:7c:4a:bb:83:a2:1d:df:e5:c7:b9:4c:f1: 48:4c:b3:6d -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAIIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTAw RUYzNThCQ0JFMTRBMzU4Q0E0RUVFNDFCNEU5MERDOTIzRTlEMjAeFw0yNDAxMDEw MTI4MjRaFw0yNDEyMTQwMTMwMDNaMDMxMTAvBgNVBAMTKEQxQzg1NTcxMzlFNkM5 Q0EzODE0RTNCNEE4MURGQjJEODQwRUI4QTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCietuocnH2trNes7nOT+zhn0qDHdCxTqG9SqJsRo2+csAXAY+W k7DrEgyVJy3qix1FAC0JlvoD9A3jlZoPM3tT7h1crKa4KmQh5R4V6cvVitwgczWN pyRNfc7anxLJ9iI0Wj+9GfhOnYcaCb938PjFfayuAuN5DJc9GBzKNNZB27H4UC/D kP9G0yIvC93Rv2OZX2NVPnC+DwOOOvtVln06Z5GFONhikcvg4bdVodmQz/M3P4zN xulX+zyaSaKydRRtbh8rxEhlcEDJJWfDrzSaE2TxxyIemGGmFUDmhsA929cfjhNJ HQj8DAhl36Uby8IPL9S+M3HHv7gNFpsxQOvTAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU0chVcTnmyco4FOO0qB37LYQOuKEwHwYDVR0jBBgwFoAUUA7zWLy+FKNYyk7u QbTpDckj6dIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIzNC9VQTd6V0x5LUZLTll5azd1UWJUcERja2o2ZEkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9VQTd6V0x5LUZLTll5azd1UWJUcERj a2o2ZEkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMjM0LzBjaFZjVG5teWNvNEZPTzBxQjM3TFlRT3VLRS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAV8KEAwDQYJKoZIhvcNAQELBQADggEBALdGkDGlbgEkb8flRS2sh0ZC3oZ8 wurO0nfNtxNfKmkcmt90kPt5R9aPu0byKUAHVmAWWLHq6WPika5kAcH0fVtLtWWP OWCxckzaUxZDbscNScfYQVpVWvq3cajr9OOCeKzbalxHumCsiri+uvVzYMSAqKjX in43/ZouFMCXzVrG8t5KZbjsE0qwWaUYEgqFEkYFcN52MISxGZLgQnM620sSDs0W WheIxrWR3XyxJX63MnR/bhJ+VyWtkIcBpUkBfajuOz2L4Aw12elzsIVvEU/FweEJ wbdPqCDY4BrNm0e6wD0zXuiKMrjMrSJ7DxJULXxKu4OiHd/lx7lM8UhMs20= -----END CERTIFICATE-----Generated at Mon Jun 10 09:56:02 2024 by rpki-client on console-ams.rpki-client.org