$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/240/OKpdlvbaU0za-YShp5Izye2vHGI.roa File: OKpdlvbaU0za-YShp5Izye2vHGI.roa (raw, json) Hash identifier: DrebmLotEUXMyLC4nC3QeqX1Q/80FhOwIOFfk6OLCSs= Subject key identifier: 38:AA:5D:96:F6:DA:53:4C:DA:F9:84:A1:A7:92:33:C9:ED:AF:1C:62 Certificate issuer: /CN=B96964A7CE0A58F4AE3673F47D7A1D425BE4A07D Certificate serial: 12 Authority key identifier: B9:69:64:A7:CE:0A:58:F4:AE:36:73:F4:7D:7A:1D:42:5B:E4:A0:7D Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uWlkp84KWPSuNnP0fXodQlvkoH0.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/OKpdlvbaU0za-YShp5Izye2vHGI.roa Signing time: Fri 18 Aug 2023 02:32:20 +0000 ROA not before: Fri 18 Aug 2023 02:32:20 +0000 ROA not after: Sat 17 Aug 2024 02:01:09 +0000 asID: 9597 IP address blocks: 219.100.168.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/uWlkp84KWPSuNnP0fXodQlvkoH0.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/uWlkp84KWPSuNnP0fXodQlvkoH0.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uWlkp84KWPSuNnP0fXodQlvkoH0.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18 (0x12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B96964A7CE0A58F4AE3673F47D7A1D425BE4A07D Validity Not Before: Aug 18 02:32:20 2023 GMT Not After : Aug 17 02:01:09 2024 GMT Subject: CN=38AA5D96F6DA534CDAF984A1A79233C9EDAF1C62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:c8:56:62:f9:64:25:18:ef:66:0e:bf:36:98: 01:3e:86:86:f3:b4:d9:c4:8d:0a:a3:19:08:a9:05: 48:c0:5a:81:2d:bf:3d:f0:38:69:e1:34:c8:59:c3: 02:4a:7a:09:7b:f2:ed:bb:3e:1d:92:a7:dc:0e:9f: 99:0d:a7:7e:6e:38:49:ba:6b:f1:f4:bf:95:f2:9a: 34:b4:d2:76:06:82:2f:f7:55:a6:a8:23:d5:53:5c: b1:91:45:e4:2b:f3:ca:0a:40:9d:ee:cd:b1:ef:18: 56:a4:67:b2:ee:58:f4:e6:16:7a:ca:f3:0b:8f:e3: 8a:14:18:f7:88:53:50:c9:d0:3b:ee:cb:df:bc:64: b4:be:d0:16:85:d3:5e:d7:1b:e7:e5:f4:1f:06:3c: c0:bb:7c:ea:e9:14:a4:fd:1c:14:f8:d7:ad:b7:02: 75:9a:f1:e6:10:1a:69:d5:84:fe:44:9b:3f:9b:18: 39:c7:d4:6b:a0:af:96:a5:44:02:6d:a4:d5:82:30: e1:0c:17:38:52:a2:67:2d:e1:c8:53:77:fc:ec:b1: bf:bb:4a:da:e7:db:eb:33:3e:e7:31:65:fb:3a:17: 5e:19:2f:19:0c:25:d2:69:91:6d:41:03:8e:9a:62: 07:95:92:cc:80:ce:74:f7:bf:76:e6:87:81:4a:4c: a9:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:AA:5D:96:F6:DA:53:4C:DA:F9:84:A1:A7:92:33:C9:ED:AF:1C:62 X509v3 Authority Key Identifier: keyid:B9:69:64:A7:CE:0A:58:F4:AE:36:73:F4:7D:7A:1D:42:5B:E4:A0:7D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/uWlkp84KWPSuNnP0fXodQlvkoH0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uWlkp84KWPSuNnP0fXodQlvkoH0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/OKpdlvbaU0za-YShp5Izye2vHGI.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 219.100.168.0/22 Signature Algorithm: sha256WithRSAEncryption 35:23:4d:dc:0f:8d:7b:94:8e:12:69:d0:b3:b0:7d:19:01:bc: e0:ef:5d:d0:8c:7e:c8:48:fc:ac:f7:7e:a7:96:9a:23:68:e5: a6:5b:08:c5:41:24:7a:36:cf:02:b6:df:6c:20:53:63:71:9f: f9:5d:7d:79:71:42:57:0b:d4:26:3f:fb:e9:ce:d6:e8:e0:64: 94:2f:9e:d2:4b:20:75:ce:51:f1:a2:85:d6:39:b8:f0:6a:ce: a5:de:52:e1:64:c3:1b:3d:eb:a7:d3:18:97:6e:e9:a1:b7:4d: f8:ca:ae:ef:bb:c4:ef:f9:be:87:f0:b7:f4:da:28:5d:89:0c: 11:95:81:81:68:44:87:3b:35:d7:b0:ec:b3:8d:4b:fe:24:5f: 52:bc:16:e2:45:38:cb:1c:78:9e:63:6b:e7:a0:62:af:f5:80: 32:c1:f2:8a:8d:76:c8:ef:ee:69:9e:a7:5d:40:f1:c1:ee:d8: c0:c6:75:c3:bc:0c:d2:35:a2:18:70:c7:41:1d:c1:e5:9e:e1: 5b:19:1d:59:d5:1d:d9:d2:43:3d:8a:7b:47:00:9c:35:ee:de: 63:40:cd:9e:c9:e6:be:8a:cd:5d:62:f1:fe:fa:f3:14:05:cb: ac:cb:20:b7:99:42:00:17:4a:62:89:3a:d9:3e:4f:d2:56:d1: 3c:63:bb:00 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBEjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCOTY5 NjRBN0NFMEE1OEY0QUUzNjczRjQ3RDdBMUQ0MjVCRTRBMDdEMB4XDTIzMDgxODAy MzIyMFoXDTI0MDgxNzAyMDEwOVowMzExMC8GA1UEAxMoMzhBQTVEOTZGNkRBNTM0 Q0RBRjk4NEExQTc5MjMzQzlFREFGMUM2MjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAPjIVmL5ZCUY72YOvzaYAT6GhvO02cSNCqMZCKkFSMBagS2/PfA4 aeE0yFnDAkp6CXvy7bs+HZKn3A6fmQ2nfm44Sbpr8fS/lfKaNLTSdgaCL/dVpqgj 1VNcsZFF5CvzygpAne7Nse8YVqRnsu5Y9OYWesrzC4/jihQY94hTUMnQO+7L37xk tL7QFoXTXtcb5+X0HwY8wLt86ukUpP0cFPjXrbcCdZrx5hAaadWE/kSbP5sYOcfU a6CvlqVEAm2k1YIw4QwXOFKiZy3hyFN3/Oyxv7tK2ufb6zM+5zFl+zoXXhkvGQwl 0mmRbUEDjppiB5WSzIDOdPe/duaHgUpMqUcCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBQ4ql2W9tpTTNr5hKGnkjPJ7a8cYjAfBgNVHSMEGDAWgBS5aWSnzgpY9K42c/R9 eh1CW+SgfTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjQwL3VXbGtwODRLV1BTdU5uUDBmWG9kUWx2a29IMC5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3VXbGtwODRLV1BTdU5uUDBmWG9kUWx2 a29IMC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8yNDAvT0twZGx2YmFVMHphLVlTaHA1SXp5ZTJ2SEdJLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAttkqDANBgkqhkiG9w0BAQsFAAOCAQEANSNN3A+Ne5SOEmnQs7B9GQG84O9d 0Ix+yEj8rPd+p5aaI2jlplsIxUEkejbPArbfbCBTY3Gf+V19eXFCVwvUJj/76c7W 6OBklC+e0ksgdc5R8aKF1jm48GrOpd5S4WTDGz3rp9MYl27pobdN+Mqu77vE7/m+ h/C39NooXYkMEZWBgWhEhzs117Dss41L/iRfUrwW4kU4yxx4nmNr56Bir/WAMsHy io12yO/uaZ6nXUDxwe7YwMZ1w7wM0jWiGHDHQR3B5Z7hWxkdWdUd2dJDPYp7RwCc Ne7eY0DNnsnmvorNXWLx/vrzFAXLrMsgt5lCABdKYok62T5P0lbRPGO7AA== -----END CERTIFICATE-----Generated at Sat Jun 1 13:38:43 2024 by rpki-client on console-fra.rpki-client.org