$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/247/dikOxW0YhB48xAadi1DX50Jb_Qk.roa File: dikOxW0YhB48xAadi1DX50Jb_Qk.roa (raw, json) Hash identifier: XGJOiKEVmKRIdlAYtghw+h5KUqthToBxQcUToiAjfwc= Subject key identifier: 76:29:0E:C5:6D:18:84:1E:3C:C4:06:9D:8B:50:D7:E7:42:5B:FD:09 Certificate issuer: /CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532 Certificate serial: D3 Authority key identifier: 9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/dikOxW0YhB48xAadi1DX50Jb_Qk.roa Signing time: Fri 31 May 2024 01:31:18 +0000 ROA not before: Fri 31 May 2024 01:31:18 +0000 ROA not after: Thu 15 May 2025 01:30:03 +0000 asID: 9370 IP address blocks: 153.125.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Dec 2024 00:11:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 211 (0xd3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532 Validity Not Before: May 31 01:31:18 2024 GMT Not After : May 15 01:30:03 2025 GMT Subject: CN=76290EC56D18841E3CC4069D8B50D7E7425BFD09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:e3:8e:96:70:0e:d3:15:23:90:2c:80:db:09: 66:b4:09:83:80:c6:c2:18:c2:2b:ba:fd:d8:d8:6c: 54:86:bd:e8:85:fd:5a:90:0c:e9:cd:07:9a:de:79: 9f:d3:c6:c8:96:2f:c9:e6:68:be:30:a2:96:e9:c6: f0:8c:49:44:2b:11:fc:96:ab:18:2a:72:f5:15:43: b9:25:20:6e:cc:58:26:c9:d6:3a:bc:9d:4d:77:bd: 66:26:fe:17:83:5c:04:da:4c:25:1f:7b:f5:4c:7e: 1f:6e:c9:29:0a:5d:e8:6b:b9:3a:ca:ea:cd:c5:92: a8:ec:21:2f:4e:87:bc:15:7f:f9:e2:8d:51:16:ab: 36:b5:f1:4c:cd:38:e7:63:91:59:04:f0:c9:7b:f9: 84:98:30:18:bf:83:1c:b9:55:bd:82:b0:b8:06:14: b1:ac:c7:ac:83:c2:e3:8e:de:dd:ad:98:4a:df:3b: 2d:91:96:9a:1e:eb:a6:92:1f:d0:65:b9:13:18:a9: 17:87:0f:12:15:ff:6d:08:7e:43:7b:4d:26:c7:46: f3:ff:2c:36:33:ab:c1:2c:b0:04:5f:89:5e:3f:01: c3:8a:5b:a4:ec:90:3f:f6:42:c1:d8:10:8e:16:c6: ed:89:28:30:49:50:f6:d5:b1:94:41:9e:58:00:79: 7f:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:29:0E:C5:6D:18:84:1E:3C:C4:06:9D:8B:50:D7:E7:42:5B:FD:09 X509v3 Authority Key Identifier: keyid:9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/dikOxW0YhB48xAadi1DX50Jb_Qk.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 153.125.224.0/20 Signature Algorithm: sha256WithRSAEncryption 5a:f5:29:dd:27:05:80:53:43:21:c4:3f:20:9a:47:ff:54:6c: 3e:29:75:31:3f:64:38:a6:60:b2:65:f6:ff:e2:7e:89:96:d6: 8b:c1:77:03:c3:9e:74:61:e0:16:01:8c:fc:05:0d:1c:f7:0b: b3:4d:02:9e:0a:a5:3f:1d:77:70:ce:00:be:4a:43:9d:81:03: b6:d6:3a:70:17:d1:ca:34:fc:d9:54:2c:fd:2d:44:fb:ec:6d: d4:39:35:d4:86:05:53:5e:fc:41:04:b4:68:28:e7:1b:67:75: 03:9c:2d:a7:bd:c7:dd:f2:b8:84:55:e9:55:a7:aa:d2:fd:65: f4:7c:5f:13:50:0b:8e:bf:cd:f8:bb:3b:83:9e:ff:18:12:e2: d7:8a:90:0b:20:f1:96:d6:71:e1:3d:c5:4a:c7:99:dd:1a:53: 7d:07:c3:77:18:7e:66:86:aa:37:f1:dd:4c:6a:cb:1c:76:40: 28:40:f8:f4:16:18:47:d4:df:36:6d:0f:74:ff:9c:53:37:a1: 9f:1f:71:5d:1d:6c:cc:a1:84:c9:aa:d8:c2:99:6b:22:48:d8: 0d:9e:e9:28:f7:82:30:82:74:45:ea:0e:4a:f5:d1:47:1d:42: ad:d7:71:06:d7:08:c6:9b:6f:64:07:48:46:f2:cd:5d:a4:80: 0a:d3:97:b1 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICANMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOUEy MUJERkYyRENBRkNDMTM4RjVCRkQ2QzAzMzBEMDIxOUUwRjUzMjAeFw0yNDA1MzEw MTMxMThaFw0yNTA1MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDc2MjkwRUM1NkQxODg0 MUUzQ0M0MDY5RDhCNTBEN0U3NDI1QkZEMDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDV446WcA7TFSOQLIDbCWa0CYOAxsIYwiu6/djYbFSGveiF/VqQ DOnNB5reeZ/TxsiWL8nmaL4wopbpxvCMSUQrEfyWqxgqcvUVQ7klIG7MWCbJ1jq8 nU13vWYm/heDXATaTCUfe/VMfh9uySkKXehruTrK6s3FkqjsIS9Oh7wVf/nijVEW qza18UzNOOdjkVkE8Ml7+YSYMBi/gxy5Vb2CsLgGFLGsx6yDwuOO3t2tmErfOy2R lpoe66aSH9BluRMYqReHDxIV/20IfkN7TSbHRvP/LDYzq8EssARfiV4/AcOKW6Ts kD/2QsHYEI4Wxu2JKDBJUPbVsZRBnlgAeX+9AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUdikOxW0YhB48xAadi1DX50Jb/QkwHwYDVR0jBBgwFoAUmiG9/y3K/ME49b/W wDMNAhng9TIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzI0Ny9taUc5X3kzS19NRTQ5Yl9Xd0RNTkFobmc5VEkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9taUc5X3kzS19NRTQ5Yl9Xd0RNTkFo bmc5VEkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMjQ3L2Rpa094VzBZaEI0OHhBYWRpMURYNTBKYl9Ray5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBASZfeAwDQYJKoZIhvcNAQELBQADggEBAFr1Kd0nBYBTQyHEPyCaR/9UbD4p dTE/ZDimYLJl9v/ifomW1ovBdwPDnnRh4BYBjPwFDRz3C7NNAp4KpT8dd3DOAL5K Q52BA7bWOnAX0co0/NlULP0tRPvsbdQ5NdSGBVNe/EEEtGgo5xtndQOcLae9x93y uIRV6VWnqtL9ZfR8XxNQC46/zfi7O4Oe/xgS4teKkAsg8ZbWceE9xUrHmd0aU30H w3cYfmaGqjfx3Uxqyxx2QChA+PQWGEfU3zZtD3T/nFM3oZ8fcV0dbMyhhMmq2MKZ ayJI2A2e6Sj3gjCCdEXqDkr10UcdQq3XcQbXCMabb2QHSEbyzV2kgArTl7E= -----END CERTIFICATE-----Generated at Tue Nov 26 02:27:03 2024 by rpki-client on console-ams.rpki-client.org