$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/2490/wn8jlmacastymL1xX0XWFhd0_x0.roa File: wn8jlmacastymL1xX0XWFhd0_x0.roa (raw, json) Hash identifier: 6aWkq8L1oqlAdARLy1f0ix517PLJrSbUCe9sAoa3Yo4= Subject key identifier: C2:7F:23:96:66:9C:6A:CB:72:98:BD:71:5F:45:D6:16:17:74:FF:1D Certificate issuer: /CN=B8E53C5244B7F9A76D5F9DF9FBAF61E57B2EA93B Certificate serial: 43 Authority key identifier: B8:E5:3C:52:44:B7:F9:A7:6D:5F:9D:F9:FB:AF:61:E5:7B:2E:A9:3B Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uOU8UkS3-adtX535-69h5XsuqTs.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2490/wn8jlmacastymL1xX0XWFhd0_x0.roa Signing time: Thu 29 Feb 2024 01:29:16 +0000 ROA not before: Thu 29 Feb 2024 01:29:16 +0000 ROA not after: Fri 14 Feb 2025 01:30:03 +0000 asID: 7687 IP address blocks: 160.246.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2490/uOU8UkS3-adtX535-69h5XsuqTs.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2490/uOU8UkS3-adtX535-69h5XsuqTs.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uOU8UkS3-adtX535-69h5XsuqTs.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 13 Jun 2024 05:56:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67 (0x43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8E53C5244B7F9A76D5F9DF9FBAF61E57B2EA93B Validity Not Before: Feb 29 01:29:16 2024 GMT Not After : Feb 14 01:30:03 2025 GMT Subject: CN=C27F2396669C6ACB7298BD715F45D6161774FF1D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:60:b6:36:8e:52:57:3d:ef:99:f3:f3:a4:a0: 08:b2:8d:7f:54:7c:b4:2c:e5:55:5f:18:70:00:07: a6:be:59:07:80:6d:56:58:93:bc:b0:6d:31:b3:3f: 6b:39:75:c1:11:bd:d7:67:d1:49:df:96:0c:73:ab: 25:fd:b6:4e:c0:62:1e:b2:e7:35:26:c6:b4:87:f6: 6f:25:8d:33:89:61:c0:3f:99:17:01:83:95:f8:40: 79:04:de:cc:48:5d:15:77:90:6b:20:db:bf:3b:d7: df:aa:fb:0a:36:c7:a5:21:9b:3c:fe:33:1c:a7:64: 66:2d:28:65:a3:1b:b5:2e:6a:b5:4e:ae:4a:4c:c8: 91:e3:79:21:05:3f:83:82:ef:e1:13:cf:2e:18:c7: 0e:39:00:42:10:68:6a:04:82:49:71:3b:76:e4:18: 34:02:bb:0d:0b:c8:25:30:51:83:93:96:fa:6b:0c: a3:c2:0b:00:bd:e9:0b:ce:dc:0d:7b:f0:de:64:2c: 19:fa:4e:ce:3b:58:89:a9:69:54:cc:87:97:9c:e1: 91:5b:19:49:6d:1f:80:30:07:aa:19:3a:21:69:7e: 5d:98:a2:84:a3:5e:51:44:ed:3b:06:10:1e:65:5b: 12:d3:61:5d:db:6d:5d:b2:ca:75:3d:8a:c1:e6:bf: d2:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:7F:23:96:66:9C:6A:CB:72:98:BD:71:5F:45:D6:16:17:74:FF:1D X509v3 Authority Key Identifier: keyid:B8:E5:3C:52:44:B7:F9:A7:6D:5F:9D:F9:FB:AF:61:E5:7B:2E:A9:3B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2490/uOU8UkS3-adtX535-69h5XsuqTs.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uOU8UkS3-adtX535-69h5XsuqTs.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2490/wn8jlmacastymL1xX0XWFhd0_x0.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.246.0.0/16 Signature Algorithm: sha256WithRSAEncryption 6e:4f:98:8b:a7:dd:37:a1:65:6d:ae:2b:16:d3:66:7f:d2:4e: 46:e5:38:33:34:2a:07:09:36:23:6b:9c:8d:57:0a:6e:b6:91: 0b:e8:92:7d:12:fe:d1:3f:aa:df:53:36:94:1f:99:15:ca:9a: cd:54:06:a1:18:cd:01:1b:12:5f:5a:d7:4d:63:9e:aa:7b:fc: fc:d4:af:b2:6d:48:0b:40:d4:24:a2:d2:9c:d7:c8:64:b6:4a: 1d:c9:b6:81:cf:c8:8c:e4:c7:66:73:98:f9:f5:0b:27:86:58: cd:ea:99:d5:79:d9:e4:37:30:e0:89:6d:31:a8:18:f9:8c:c5: 6e:66:fd:3b:dc:6d:82:4b:3a:ce:94:e4:20:87:1c:4e:0d:b1: 9a:f9:16:21:c2:24:4c:15:5e:13:f3:2a:60:0c:ff:a8:d4:a4: 32:45:fa:d6:43:98:1d:4d:f4:4c:2e:90:bc:8c:b5:55:6c:80: 52:b2:25:31:e4:75:ed:47:03:3d:7b:47:b1:d2:9c:83:da:e9: f4:e9:fd:89:fd:f4:60:3f:b9:af:19:e5:7a:79:cd:bf:2d:25: e5:69:f8:ff:86:f4:75:8e:3b:3e:73:59:08:91:76:bd:14:58: 78:fd:c0:d2:07:8e:e2:bd:90:65:5f:f1:8a:c9:bb:0e:21:ee: fc:a1:37:b5 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgIBQzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCOEU1 M0M1MjQ0QjdGOUE3NkQ1RjlERjlGQkFGNjFFNTdCMkVBOTNCMB4XDTI0MDIyOTAx MjkxNloXDTI1MDIxNDAxMzAwM1owMzExMC8GA1UEAxMoQzI3RjIzOTY2NjlDNkFD QjcyOThCRDcxNUY0NUQ2MTYxNzc0RkYxRDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALlgtjaOUlc975nz86SgCLKNf1R8tCzlVV8YcAAHpr5ZB4BtVliT vLBtMbM/azl1wRG912fRSd+WDHOrJf22TsBiHrLnNSbGtIf2byWNM4lhwD+ZFwGD lfhAeQTezEhdFXeQayDbvzvX36r7CjbHpSGbPP4zHKdkZi0oZaMbtS5qtU6uSkzI keN5IQU/g4Lv4RPPLhjHDjkAQhBoagSCSXE7duQYNAK7DQvIJTBRg5OW+msMo8IL AL3pC87cDXvw3mQsGfpOzjtYialpVMyHl5zhkVsZSW0fgDAHqhk6IWl+XZiihKNe UUTtOwYQHmVbEtNhXdttXbLKdT2Kwea/0t0CAwEAAaOCAiUwggIhMB0GA1UdDgQW BBTCfyOWZpxqy3KYvXFfRdYWF3T/HTAfBgNVHSMEGDAWgBS45TxSRLf5p21fnfn7 r2Hley6pOzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjQ5MC91T1U4VWtTMy1hZHRYNTM1LTY5aDVYc3VxVHMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC91T1U4VWtTMy1hZHRYNTM1LTY5aDVY c3VxVHMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMjQ5MC93bjhqbG1hY2FzdHltTDF4WDBYV0ZoZDBfeDAucm9h MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIA ATAFAwMAoPYwDQYJKoZIhvcNAQELBQADggEBAG5PmIun3TehZW2uKxbTZn/STkbl ODM0KgcJNiNrnI1XCm62kQvokn0S/tE/qt9TNpQfmRXKms1UBqEYzQEbEl9a101j nqp7/PzUr7JtSAtA1CSi0pzXyGS2Sh3JtoHPyIzkx2ZzmPn1CyeGWM3qmdV52eQ3 MOCJbTGoGPmMxW5m/TvcbYJLOs6U5CCHHE4NsZr5FiHCJEwVXhPzKmAM/6jUpDJF +tZDmB1N9EwukLyMtVVsgFKyJTHkde1HAz17R7HSnIPa6fTp/Yn99GA/ua8Z5Xp5 zb8tJeVp+P+G9HWOOz5zWQiRdr0UWHj9wNIHjuK9kGVf8YrJuw4h7vyhN7U= -----END CERTIFICATE-----Generated at Thu Jun 6 15:06:33 2024 by rpki-client on console-ams.rpki-client.org