$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/2787/5ksj4443yAOCtr-xBfpGMKZB7Ms.roa File: 5ksj4443yAOCtr-xBfpGMKZB7Ms.roa (raw, json) Hash identifier: qXzy5ZbolIQXmfIliEl2NOk7Ls47j9JsEsN8nnhuzTQ= Subject key identifier: E6:4B:23:E3:8E:37:C8:03:82:B6:BF:B1:05:FA:46:30:A6:41:EC:CB Certificate issuer: /CN=FBD12BD05282FF382B4B1DAF0B460E85FE44FE65 Certificate serial: 43 Authority key identifier: FB:D1:2B:D0:52:82:FF:38:2B:4B:1D:AF:0B:46:0E:85:FE:44:FE:65 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-9Er0FKC_zgrSx2vC0YOhf5E_mU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2787/5ksj4443yAOCtr-xBfpGMKZB7Ms.roa Signing time: Thu 29 Feb 2024 01:30:01 +0000 ROA not before: Thu 29 Feb 2024 01:30:01 +0000 ROA not after: Fri 14 Feb 2025 01:30:03 +0000 asID: 59128 IP address blocks: 192.50.220.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2787/-9Er0FKC_zgrSx2vC0YOhf5E_mU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2787/-9Er0FKC_zgrSx2vC0YOhf5E_mU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-9Er0FKC_zgrSx2vC0YOhf5E_mU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 08:46:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67 (0x43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FBD12BD05282FF382B4B1DAF0B460E85FE44FE65 Validity Not Before: Feb 29 01:30:01 2024 GMT Not After : Feb 14 01:30:03 2025 GMT Subject: CN=E64B23E38E37C80382B6BFB105FA4630A641ECCB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:52:f4:28:a2:92:2b:21:18:b4:57:35:21:37: b3:78:c7:9b:f8:58:67:fe:98:2d:44:9f:db:69:29: 18:e3:4e:e6:cb:57:2f:ab:01:1c:c6:a0:93:dd:c4: e8:72:a9:68:99:09:ed:54:88:21:91:da:46:7e:ef: 46:15:47:2e:dc:26:98:72:eb:48:e6:e8:77:52:b7: 87:d7:c7:d5:98:3e:e4:df:16:89:b9:f5:b9:9b:8f: 84:e7:a2:36:b0:0b:22:36:74:ac:89:c3:2a:03:66: 0b:76:1d:24:2b:9e:bb:6b:01:ee:61:8f:44:66:94: de:1f:17:ac:8e:4c:f8:ad:ed:2e:4a:d2:05:32:f6: 4b:fe:51:dc:e9:72:99:33:d9:ef:d7:e2:50:3d:13: 28:d2:43:48:c8:0a:cd:ce:44:12:6b:ea:4c:19:ef: fa:45:c9:c9:d8:19:db:d8:53:04:78:d4:ba:c6:33: ed:f9:47:c3:b6:c5:80:e8:85:d2:d8:2e:c7:3c:46: 49:bf:e1:0e:e8:dc:26:38:3d:69:b7:c1:e3:0c:37: 16:89:a3:cb:d3:be:2f:42:d9:ed:99:0d:61:85:4f: 3c:91:38:ca:66:01:51:a6:a4:05:d5:fd:9f:bf:cf: 4c:67:07:b9:0c:a3:b9:9f:eb:e1:53:73:4e:59:96: e1:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:4B:23:E3:8E:37:C8:03:82:B6:BF:B1:05:FA:46:30:A6:41:EC:CB X509v3 Authority Key Identifier: keyid:FB:D1:2B:D0:52:82:FF:38:2B:4B:1D:AF:0B:46:0E:85:FE:44:FE:65 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2787/-9Er0FKC_zgrSx2vC0YOhf5E_mU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-9Er0FKC_zgrSx2vC0YOhf5E_mU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2787/5ksj4443yAOCtr-xBfpGMKZB7Ms.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 192.50.220.0/24 Signature Algorithm: sha256WithRSAEncryption 35:60:b8:b8:f6:91:c0:e0:ef:08:a5:8d:fe:f4:6f:ee:c2:89: a1:1c:2f:ac:17:8e:20:f6:8c:53:a4:e1:7d:47:bd:33:65:ce: 83:58:e4:85:20:3e:07:22:da:3c:cf:80:22:12:1a:3d:b1:15: 2a:53:98:7b:42:6b:2d:24:7a:00:3c:cf:31:36:ef:bd:f9:4e: d7:18:7d:35:86:a9:28:23:6c:7d:d3:7f:cd:dc:43:98:dc:72: 6d:70:8d:82:45:28:10:1e:55:6b:3c:ad:dc:df:7b:ca:66:f1: ec:2c:df:b8:ad:01:1f:cb:68:81:23:13:d2:52:72:9f:c4:1d: 8a:7e:ed:08:94:74:e6:cf:fb:cd:51:c1:e8:8e:e9:da:ca:e6: 62:ad:31:c2:38:e4:2a:d1:6c:33:ad:80:4f:3d:35:6a:d4:dd: 0a:7f:99:d0:7f:b4:17:a4:79:6f:f1:ca:89:23:e7:b5:30:0a: 40:49:09:e4:01:b6:dd:20:74:ab:48:8f:cf:66:d3:98:84:53: 95:1b:16:88:fc:04:ad:fb:61:f9:e5:ac:42:99:73:df:ce:1e: 07:45:d2:6b:ad:dd:a2:44:02:0d:06:40:84:9c:e6:9b:f7:7f: 0c:66:0f:d5:db:d5:08:4b:6d:02:4e:da:d6:7b:ee:2d:9a:54: 3e:07:e0:e4 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgIBQzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGQkQx MkJEMDUyODJGRjM4MkI0QjFEQUYwQjQ2MEU4NUZFNDRGRTY1MB4XDTI0MDIyOTAx MzAwMVoXDTI1MDIxNDAxMzAwM1owMzExMC8GA1UEAxMoRTY0QjIzRTM4RTM3Qzgw MzgyQjZCRkIxMDVGQTQ2MzBBNjQxRUNDQjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAOdS9CiikishGLRXNSE3s3jHm/hYZ/6YLUSf22kpGONO5stXL6sB HMagk93E6HKpaJkJ7VSIIZHaRn7vRhVHLtwmmHLrSObod1K3h9fH1Zg+5N8Wibn1 uZuPhOeiNrALIjZ0rInDKgNmC3YdJCueu2sB7mGPRGaU3h8XrI5M+K3tLkrSBTL2 S/5R3OlymTPZ79fiUD0TKNJDSMgKzc5EEmvqTBnv+kXJydgZ29hTBHjUusYz7flH w7bFgOiF0tguxzxGSb/hDujcJjg9abfB4ww3Fomjy9O+L0LZ7ZkNYYVPPJE4ymYB UaakBdX9n7/PTGcHuQyjuZ/r4VNzTlmW4WECAwEAAaOCAiYwggIiMB0GA1UdDgQW BBTmSyPjjjfIA4K2v7EF+kYwpkHsyzAfBgNVHSMEGDAWgBT70SvQUoL/OCtLHa8L Rg6F/kT+ZTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjc4Ny8tOUVyMEZLQ196Z3JTeDJ2QzBZT2hmNUVfbVUuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8tOUVyMEZLQ196Z3JTeDJ2QzBZT2hm NUVfbVUuY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMjc4Ny81a3NqNDQ0M3lBT0N0ci14QmZwR01LWkI3TXMucm9h MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAwDLcMA0GCSqGSIb3DQEBCwUAA4IBAQA1YLi49pHA4O8IpY3+9G/uwomh HC+sF44g9oxTpOF9R70zZc6DWOSFID4HIto8z4AiEho9sRUqU5h7QmstJHoAPM8x Nu+9+U7XGH01hqkoI2x903/N3EOY3HJtcI2CRSgQHlVrPK3c33vKZvHsLN+4rQEf y2iBIxPSUnKfxB2Kfu0IlHTmz/vNUcHojunayuZirTHCOOQq0WwzrYBPPTVq1N0K f5nQf7QXpHlv8cqJI+e1MApASQnkAbbdIHSrSI/PZtOYhFOVGxaI/ASt+2H55axC mXPfzh4HRdJrrd2iRAINBkCEnOab938MZg/V29UIS20CTtrWe+4tmlQ+B+Dk -----END CERTIFICATE-----Generated at Sat Jun 1 13:38:44 2024 by rpki-client on console-fra.rpki-client.org