$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/4jXqzmaDFjqs8_bqxvPx06biNvA.roa File: 4jXqzmaDFjqs8_bqxvPx06biNvA.roa (raw, json) Hash identifier: 22zkgpqOphjnZIoJZ759QRuVMzOd5Ul5bzOTzORcms4= Subject key identifier: E2:35:EA:CE:66:83:16:3A:AC:F3:F6:EA:C6:F3:F1:D3:A6:E2:36:F0 Certificate issuer: /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A Certificate serial: 19 Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/4jXqzmaDFjqs8_bqxvPx06biNvA.roa Signing time: Wed 10 Jan 2024 00:59:07 +0000 ROA not before: Wed 10 Jan 2024 00:59:07 +0000 ROA not after: Sat 14 Dec 2024 01:30:03 +0000 asID: 2514 IP address blocks: 143.125.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 13 Jun 2024 05:56:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25 (0x19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A Validity Not Before: Jan 10 00:59:07 2024 GMT Not After : Dec 14 01:30:03 2024 GMT Subject: CN=E235EACE6683163AACF3F6EAC6F3F1D3A6E236F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:bf:53:27:66:78:0f:15:15:55:74:0f:fd:65: 04:a5:f7:a8:9d:6d:0b:60:4f:45:25:21:7c:da:0d: af:4a:ef:1a:ce:69:83:3f:9c:20:b9:ad:10:8b:6b: 5b:91:fc:0a:38:15:04:f1:b6:25:0f:71:c1:ae:b0: 67:b5:21:41:1b:6b:4b:ae:6a:80:32:f0:4e:22:f4: 49:0e:f9:41:e2:f4:02:48:cd:be:d2:fc:3b:06:02: be:eb:b0:92:65:2a:09:d7:b7:b8:aa:f8:c4:33:5f: f5:55:fb:e3:9b:82:96:14:95:9d:5c:f7:09:ca:0e: 22:6e:aa:19:b0:94:7a:7a:95:01:32:58:88:01:00: df:fc:cb:5a:10:2a:af:87:c1:1a:10:de:9d:21:7f: 27:1a:4b:64:c9:e9:b1:af:3b:d9:3f:6b:9b:c0:c7: e6:05:89:1a:60:c0:77:09:5c:02:59:2a:2a:b3:73: 0d:fd:0a:3c:0e:41:e9:f1:2a:23:a7:b2:b6:b7:75: 94:e4:5b:58:08:b4:8b:7f:85:e1:e7:91:25:99:0e: 56:67:c8:d9:3b:5a:d0:5c:fa:91:e7:4d:3e:33:b4: 7f:46:ee:30:5f:27:71:f7:7e:3e:46:02:93:1c:61: d4:33:36:aa:59:fa:86:a6:52:4c:5e:ca:2f:18:26: 02:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:35:EA:CE:66:83:16:3A:AC:F3:F6:EA:C6:F3:F1:D3:A6:E2:36:F0 X509v3 Authority Key Identifier: keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/4jXqzmaDFjqs8_bqxvPx06biNvA.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 143.125.212.0/22 Signature Algorithm: sha256WithRSAEncryption 1e:e1:c7:2b:4d:72:b0:e6:2c:e7:2b:e2:c3:47:83:0f:0e:71: 31:35:57:5c:12:8c:a0:6d:ce:d5:9f:33:86:6c:91:b9:64:1e: ac:66:38:ad:b0:b3:8a:d8:38:be:4b:2c:d8:b0:9b:2d:52:58: 1e:df:63:f8:72:47:15:2d:37:8f:f2:ec:1a:0b:72:c9:73:0a: 27:a4:75:6f:e5:0b:84:26:72:2e:74:c1:4c:08:fc:11:d2:72: 4a:76:63:03:3b:e1:2d:1a:f9:33:64:e2:ed:bf:9e:27:d5:ae: fb:4c:08:bd:3d:9e:85:2d:44:06:ec:27:8d:fc:bd:90:d2:55: 74:f5:2d:dc:84:ce:de:f9:10:e2:16:42:49:79:90:02:26:1d: 11:0b:ae:83:c7:b4:62:65:0e:87:15:da:a1:0b:59:ed:49:da: 2b:b0:44:ed:83:59:0a:ea:32:a1:a2:b3:13:a9:b0:70:63:10: 76:66:09:63:b6:16:48:7e:21:36:b7:ef:b8:ee:d8:cd:89:54: 9a:ab:c1:86:ec:9e:d1:b7:a2:d0:de:9d:86:4b:2e:45:ea:1e: 28:89:80:ee:c9:86:39:64:33:12:50:32:a8:64:6b:e9:fc:40: 17:a1:a8:01:47:09:e5:2f:66:86:ba:36:6b:0a:31:d6:7a:20: 05:2e:46:15 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIBGTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhEMTQw MEFCODlCNkQ3MkY3REI0MjRGNEFBQThDQ0ZGNjQzOEQzRDRBMB4XDTI0MDExMDAw NTkwN1oXDTI0MTIxNDAxMzAwM1owMzExMC8GA1UEAxMoRTIzNUVBQ0U2NjgzMTYz QUFDRjNGNkVBQzZGM0YxRDNBNkUyMzZGMDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAN6/UydmeA8VFVV0D/1lBKX3qJ1tC2BPRSUhfNoNr0rvGs5pgz+c ILmtEItrW5H8CjgVBPG2JQ9xwa6wZ7UhQRtrS65qgDLwTiL0SQ75QeL0AkjNvtL8 OwYCvuuwkmUqCde3uKr4xDNf9VX745uClhSVnVz3CcoOIm6qGbCUenqVATJYiAEA 3/zLWhAqr4fBGhDenSF/JxpLZMnpsa872T9rm8DH5gWJGmDAdwlcAlkqKrNzDf0K PA5B6fEqI6eytrd1lORbWAi0i3+F4eeRJZkOVmfI2Tta0Fz6kedNPjO0f0buMF8n cfd+PkYCkxxh1DM2qln6hqZSTF7KLxgmAlECAwEAAaOCAiIwggIeMB0GA1UdDgQW BBTiNerOZoMWOqzz9urG8/HTpuI28DAfBgNVHSMEGDAWgBTRQAq4m21y99tCT0qq jM/2Q409SjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGUGA1UdHwReMFwwWqBY oFaGVHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjkvMFVBS3VKdHRjdmZiUWs5S3FvelA5a09OUFVvLmNybDBtBggrBgEF BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvMFVBS3VKdHRjdmZiUWs5S3FvelA5a09O UFVvLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgboGCCsGAQUFBwELBIGtMIGqMGAGCCsG AQUFBzALhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzI5LzRqWHF6bWFERmpxczhfYnF4dlB4MDZiaU52QS5yb2EwRgYI KwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRw L2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAKPfdQwDQYJKoZIhvcNAQELBQADggEBAB7hxytNcrDmLOcr4sNHgw8OcTE1V1wS jKBtztWfM4ZskblkHqxmOK2ws4rYOL5LLNiwmy1SWB7fY/hyRxUtN4/y7BoLcslz CiekdW/lC4Qmci50wUwI/BHSckp2YwM74S0a+TNk4u2/nifVrvtMCL09noUtRAbs J438vZDSVXT1LdyEzt75EOIWQkl5kAImHRELroPHtGJlDocV2qELWe1J2iuwRO2D WQrqMqGisxOpsHBjEHZmCWO2Fkh+ITa377ju2M2JVJqrwYbsntG3otDenYZLLkXq HiiJgO7JhjlkMxJQMqhka+n8QBehqAFHCeUvZoa6NmsKMdZ6IAUuRhU= -----END CERTIFICATE-----Generated at Thu Jun 6 15:06:33 2024 by rpki-client on console-ams.rpki-client.org