$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/0Zyy1Ip9CZPjT2OjRfG7wcVU3_U.roa File: 0Zyy1Ip9CZPjT2OjRfG7wcVU3_U.roa (raw, json) Hash identifier: Xok8e/bMa7YfCFJWTn4ud/hpaSQxu/g9cqFY0wseydA= Subject key identifier: D1:9C:B2:D4:8A:7D:09:93:E3:4F:63:A3:45:F1:BB:C1:C5:54:DF:F5 Certificate issuer: /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A Certificate serial: 29 Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0Zyy1Ip9CZPjT2OjRfG7wcVU3_U.roa Signing time: Wed 10 Jan 2024 01:11:10 +0000 ROA not before: Wed 10 Jan 2024 01:11:10 +0000 ROA not after: Sat 14 Dec 2024 01:30:03 +0000 asID: 2514 IP address blocks: 160.248.64.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 13 Jun 2024 05:56:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41 (0x29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A Validity Not Before: Jan 10 01:11:10 2024 GMT Not After : Dec 14 01:30:03 2024 GMT Subject: CN=D19CB2D48A7D0993E34F63A345F1BBC1C554DFF5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:e0:ec:9f:2c:06:67:a2:d6:01:9c:17:cc:75: bf:17:99:c2:5e:37:56:be:c1:f6:23:51:54:5a:ad: e6:d4:4e:a7:7c:df:20:9f:3e:61:b1:28:6d:23:4e: 59:28:ef:54:8d:3a:66:8c:f3:79:ce:dd:ba:de:09: 9f:9f:a3:bd:3f:69:42:3e:fd:13:7e:16:35:ae:04: a1:77:52:6e:82:f4:1f:29:cb:7f:94:5f:19:96:ef: a7:8a:9c:c2:d0:3e:72:22:11:1c:e9:b0:e6:56:b1: 98:72:c4:f0:26:cb:a1:43:e0:84:2e:dd:bc:95:6c: 40:ad:95:03:5b:f9:5b:df:47:17:65:e6:c0:39:09: de:2e:f2:ec:c8:01:06:dc:4e:af:03:14:08:19:29: 21:eb:6d:35:32:76:77:a3:63:85:8f:8e:1f:20:17: 31:f3:f6:6c:81:4e:51:06:a2:90:45:92:ad:48:8f: 8c:0f:81:5f:99:eb:a0:6c:93:ff:13:f4:c6:83:d6: 02:14:ad:a7:fa:b5:89:0a:58:2c:2f:42:45:ed:93: 7a:82:98:a0:9f:ea:6f:43:c0:29:a1:b6:78:b9:d7: 8a:1f:a2:49:9d:43:09:cb:d5:19:e1:93:13:6f:09: fe:52:7f:da:c0:fb:f3:a8:f6:7d:7d:54:ee:d2:c6: b2:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:9C:B2:D4:8A:7D:09:93:E3:4F:63:A3:45:F1:BB:C1:C5:54:DF:F5 X509v3 Authority Key Identifier: keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0Zyy1Ip9CZPjT2OjRfG7wcVU3_U.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.248.64.0/22 Signature Algorithm: sha256WithRSAEncryption 91:e3:c8:52:3d:a2:88:43:9b:6f:99:da:5e:fc:a2:eb:3f:c3: 9f:5e:b4:c8:65:8f:fa:4e:c9:31:e9:09:bf:22:1b:09:0f:3e: 0e:9d:b3:51:81:8b:58:45:97:a9:bc:a6:45:90:fa:46:71:5d: 62:98:75:b2:21:e8:e4:e1:73:74:0d:4f:41:41:a8:8c:58:a7: 53:01:53:8a:0a:f6:85:8b:cc:38:0d:42:4b:aa:05:a4:c9:6f: 07:8a:b0:cc:c6:40:2e:ca:06:20:ad:17:d2:fc:cf:51:9f:9b: b7:83:96:f6:33:77:74:ff:b6:d5:60:21:b2:8d:48:04:a5:40: bd:12:9a:db:ce:be:89:1c:de:2e:b3:80:f1:b7:d4:b4:1b:5a: b2:2f:85:a0:98:70:ef:8f:e6:48:a0:4c:c8:a8:ad:00:43:82: a4:4c:6b:19:43:c8:7f:37:97:a1:12:28:3a:71:08:88:3a:a8: 11:05:dd:4f:25:9b:76:09:8c:29:83:72:75:ec:b6:c9:b4:04: 72:d3:50:fa:a2:ed:45:ae:2c:61:a0:33:dd:f4:de:7c:59:0a: 56:13:90:6a:e9:64:fa:e8:2b:71:fd:ba:97:3b:fe:7e:f0:1f: 82:18:a7:32:ee:bc:50:6f:bb:50:29:10:34:c1:f3:f1:ef:c8: b8:73:eb:6e -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIBKTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhEMTQw MEFCODlCNkQ3MkY3REI0MjRGNEFBQThDQ0ZGNjQzOEQzRDRBMB4XDTI0MDExMDAx MTExMFoXDTI0MTIxNDAxMzAwM1owMzExMC8GA1UEAxMoRDE5Q0IyRDQ4QTdEMDk5 M0UzNEY2M0EzNDVGMUJCQzFDNTU0REZGNTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAJ7g7J8sBmei1gGcF8x1vxeZwl43Vr7B9iNRVFqt5tROp3zfIJ8+ YbEobSNOWSjvVI06Zozzec7dut4Jn5+jvT9pQj79E34WNa4EoXdSboL0HynLf5Rf GZbvp4qcwtA+ciIRHOmw5laxmHLE8CbLoUPghC7dvJVsQK2VA1v5W99HF2XmwDkJ 3i7y7MgBBtxOrwMUCBkpIettNTJ2d6NjhY+OHyAXMfP2bIFOUQaikEWSrUiPjA+B X5nroGyT/xP0xoPWAhStp/q1iQpYLC9CRe2TeoKYoJ/qb0PAKaG2eLnXih+iSZ1D CcvVGeGTE28J/lJ/2sD786j2fX1U7tLGsrkCAwEAAaOCAiIwggIeMB0GA1UdDgQW BBTRnLLUin0Jk+NPY6NF8bvBxVTf9TAfBgNVHSMEGDAWgBTRQAq4m21y99tCT0qq jM/2Q409SjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGUGA1UdHwReMFwwWqBY oFaGVHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjkvMFVBS3VKdHRjdmZiUWs5S3FvelA5a09OUFVvLmNybDBtBggrBgEF BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvMFVBS3VKdHRjdmZiUWs5S3FvelA5a09O UFVvLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgboGCCsGAQUFBwELBIGtMIGqMGAGCCsG AQUFBzALhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzI5LzBaeXkxSXA5Q1pQalQyT2pSZkc3d2NWVTNfVS5yb2EwRgYI KwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRw L2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAKg+EAwDQYJKoZIhvcNAQELBQADggEBAJHjyFI9oohDm2+Z2l78ous/w59etMhl j/pOyTHpCb8iGwkPPg6ds1GBi1hFl6m8pkWQ+kZxXWKYdbIh6OThc3QNT0FBqIxY p1MBU4oK9oWLzDgNQkuqBaTJbweKsMzGQC7KBiCtF9L8z1Gfm7eDlvYzd3T/ttVg IbKNSASlQL0SmtvOvokc3i6zgPG31LQbWrIvhaCYcO+P5kigTMiorQBDgqRMaxlD yH83l6ESKDpxCIg6qBEF3U8lm3YJjCmDcnXstsm0BHLTUPqi7UWuLGGgM9303nxZ ClYTkGrpZProK3H9upc7/n7wH4IYpzLuvFBvu1ApEDTB8/HvyLhz624= -----END CERTIFICATE-----Generated at Thu Jun 6 15:06:33 2024 by rpki-client on console-ams.rpki-client.org