$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/YgaXjaQfvnvdZ7hVqmzdECsOZwc.roa File: YgaXjaQfvnvdZ7hVqmzdECsOZwc.roa (raw, json) Hash identifier: XzQkvT+vMp0y/kOPqpbH2fA+D/BlOlesvooZku8oYFY= Subject key identifier: 62:06:97:8D:A4:1F:BE:7B:DD:67:B8:55:AA:6C:DD:10:2B:0E:67:07 Certificate issuer: /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A Certificate serial: 3A Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/YgaXjaQfvnvdZ7hVqmzdECsOZwc.roa Signing time: Thu 25 Jan 2024 01:02:32 +0000 ROA not before: Thu 25 Jan 2024 01:02:32 +0000 ROA not after: Tue 14 Jan 2025 01:30:02 +0000 asID: 2514 IP address blocks: 160.248.200.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 13 Jun 2024 05:56:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58 (0x3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A Validity Not Before: Jan 25 01:02:32 2024 GMT Not After : Jan 14 01:30:02 2025 GMT Subject: CN=6206978DA41FBE7BDD67B855AA6CDD102B0E6707 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d6:8c:6b:57:21:2d:89:ba:2d:c2:b5:93:a3: 6c:b5:ef:20:3c:49:58:81:ef:8a:63:e3:de:88:58: db:1f:d7:5c:c7:5f:ee:ba:2b:19:e5:ac:c8:0b:74: c6:c9:21:1b:bd:15:be:cf:e6:c1:02:c5:78:d6:40: e1:ea:62:bf:3b:95:dd:13:9a:c7:d2:ad:44:44:fa: 7b:3d:52:ea:03:56:03:4f:1f:18:02:2d:eb:37:3b: ff:c5:12:7c:b0:3e:ca:be:bd:d1:97:7a:78:e8:12: 20:68:3a:b0:99:87:89:7e:49:3b:ab:bd:33:05:a9: 2f:c3:09:61:fd:df:cf:68:9c:92:44:cd:85:55:52: a0:a2:2d:53:6e:e7:94:d7:93:ec:72:0a:32:59:57: 85:15:b4:81:f5:81:4e:a4:d8:76:2d:7c:92:6d:98: 87:92:ab:26:97:0a:82:d8:7b:2e:87:ab:a4:6b:e8: 4d:10:f7:2a:a4:0f:63:02:da:9c:26:8a:fc:a3:35: 23:73:c3:45:ec:3b:9b:13:6f:81:49:be:e4:0e:d8: 6a:83:f7:a8:a9:ed:9b:26:2e:97:72:d3:36:18:49: cd:11:38:e1:2d:f3:7b:08:bb:c6:d0:19:ef:81:8f: 8f:49:8f:7d:19:40:02:b5:66:60:17:96:bc:35:98: 6d:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:06:97:8D:A4:1F:BE:7B:DD:67:B8:55:AA:6C:DD:10:2B:0E:67:07 X509v3 Authority Key Identifier: keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/YgaXjaQfvnvdZ7hVqmzdECsOZwc.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.248.200.0/23 Signature Algorithm: sha256WithRSAEncryption 7a:33:ea:7d:bd:4f:0d:6d:8a:b5:cd:0d:69:4d:bb:57:cb:6e: fd:52:25:53:b7:41:7b:c9:0d:7d:9c:0a:06:ad:fa:07:6a:40: a8:8a:64:7a:49:bc:6b:af:37:f8:60:2e:cd:22:dc:5c:3b:48: 08:2b:02:6f:bd:7f:e5:5e:e7:4a:7a:d7:e8:7a:ec:88:e6:07: 02:d3:92:f4:38:9c:91:29:fe:c6:15:14:c8:49:f1:ce:77:7b: 63:ea:74:7c:fd:2d:e3:d8:69:48:df:13:b3:df:c9:8e:03:e1: f1:25:1c:a2:a8:45:83:0b:88:ac:b3:e2:0a:52:47:81:41:20: 73:ee:1d:07:2e:8e:e9:0b:34:bc:2a:12:c2:35:4f:3a:f9:bd: fb:fa:1a:31:fa:eb:76:a1:58:36:f1:15:3f:76:ec:a2:36:cf: 6b:6c:95:e5:e8:ee:69:27:71:6a:1b:7d:68:fa:dc:37:1f:6c: c0:84:1c:3c:bb:b6:65:1b:35:34:0f:1c:8d:02:47:80:ae:f6: 71:35:9c:12:65:d9:aa:7f:fa:15:0d:68:5b:00:6b:a4:f4:05: 86:4f:79:46:b9:aa:f7:9b:00:02:f9:94:99:5a:d8:74:e6:10: 24:f6:74:40:ff:51:7f:aa:96:60:c7:ff:91:16:92:9b:1c:9f: c5:a2:4b:9c -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIBOjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhEMTQw MEFCODlCNkQ3MkY3REI0MjRGNEFBQThDQ0ZGNjQzOEQzRDRBMB4XDTI0MDEyNTAx MDIzMloXDTI1MDExNDAxMzAwMlowMzExMC8GA1UEAxMoNjIwNjk3OERBNDFGQkU3 QkRENjdCODU1QUE2Q0REMTAyQjBFNjcwNzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAK7WjGtXIS2Jui3CtZOjbLXvIDxJWIHvimPj3ohY2x/XXMdf7ror GeWsyAt0xskhG70Vvs/mwQLFeNZA4epivzuV3ROax9KtRET6ez1S6gNWA08fGAIt 6zc7/8USfLA+yr690Zd6eOgSIGg6sJmHiX5JO6u9MwWpL8MJYf3fz2ickkTNhVVS oKItU27nlNeT7HIKMllXhRW0gfWBTqTYdi18km2Yh5KrJpcKgth7LoerpGvoTRD3 KqQPYwLanCaK/KM1I3PDRew7mxNvgUm+5A7YaoP3qKntmyYul3LTNhhJzRE44S3z ewi7xtAZ74GPj0mPfRlAArVmYBeWvDWYbbECAwEAAaOCAiIwggIeMB0GA1UdDgQW BBRiBpeNpB++e91nuFWqbN0QKw5nBzAfBgNVHSMEGDAWgBTRQAq4m21y99tCT0qq jM/2Q409SjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGUGA1UdHwReMFwwWqBY oFaGVHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjkvMFVBS3VKdHRjdmZiUWs5S3FvelA5a09OUFVvLmNybDBtBggrBgEF BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvMFVBS3VKdHRjdmZiUWs5S3FvelA5a09O UFVvLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgboGCCsGAQUFBwELBIGtMIGqMGAGCCsG AQUFBzALhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzI5L1lnYVhqYVFmdm52ZFo3aFZxbXpkRUNzT1p3Yy5yb2EwRgYI KwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRw L2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGg+MgwDQYJKoZIhvcNAQELBQADggEBAHoz6n29Tw1tirXNDWlNu1fLbv1SJVO3 QXvJDX2cCgat+gdqQKiKZHpJvGuvN/hgLs0i3Fw7SAgrAm+9f+Ve50p61+h67Ijm BwLTkvQ4nJEp/sYVFMhJ8c53e2PqdHz9LePYaUjfE7PfyY4D4fElHKKoRYMLiKyz 4gpSR4FBIHPuHQcujukLNLwqEsI1Tzr5vfv6GjH663ahWDbxFT927KI2z2tsleXo 7mkncWobfWj63DcfbMCEHDy7tmUbNTQPHI0CR4Cu9nE1nBJl2ap/+hUNaFsAa6T0 BYZPeUa5qvebAAL5lJla2HTmECT2dED/UX+qlmDH/5EWkpscn8WiS5w= -----END CERTIFICATE-----Generated at Thu Jun 6 15:06:33 2024 by rpki-client on console-ams.rpki-client.org