$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/lBzW-8B8hJ8_yTp9O2V7rfSGYfQ.roa File: lBzW-8B8hJ8_yTp9O2V7rfSGYfQ.roa (raw, json) Hash identifier: +zCikY2fRWiRsrDx7fmRcrhaR2kF0gCO71VglCShll8= Subject key identifier: 94:1C:D6:FB:C0:7C:84:9F:3F:C9:3A:7D:3B:65:7B:AD:F4:86:61:F4 Certificate issuer: /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A Certificate serial: 27 Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/lBzW-8B8hJ8_yTp9O2V7rfSGYfQ.roa Signing time: Wed 10 Jan 2024 01:11:09 +0000 ROA not before: Wed 10 Jan 2024 01:11:09 +0000 ROA not after: Sat 14 Dec 2024 01:30:03 +0000 asID: 2514 IP address blocks: 160.248.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 08:46:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39 (0x27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A Validity Not Before: Jan 10 01:11:09 2024 GMT Not After : Dec 14 01:30:03 2024 GMT Subject: CN=941CD6FBC07C849F3FC93A7D3B657BADF48661F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:6e:67:13:69:73:a0:3d:9f:46:87:50:5b:ef: ba:33:61:03:26:c4:3e:ae:63:02:5c:c1:6e:63:f4: 53:1c:74:44:5f:fa:12:75:5c:d3:3f:7f:f5:af:d7: 58:5c:64:6e:da:de:ab:16:39:81:b7:6c:21:fa:28: 4c:66:88:6d:c4:4a:69:a2:06:0e:cf:8c:6f:41:28: 6f:a6:c7:57:ca:68:ee:8a:27:a1:ab:eb:6f:3d:70: a9:07:8d:01:c6:1c:bd:c6:a7:00:e9:cb:28:cb:0b: 41:23:22:89:ed:23:09:18:14:df:61:91:8f:7b:d4: 99:c0:27:01:7b:63:f2:50:b7:d9:7a:d3:fa:f7:a2: ee:85:47:59:c2:78:e1:bf:4c:7b:a5:75:b7:a4:01: 70:e2:62:c7:28:20:9d:d0:c2:b6:c9:03:ad:aa:73: f9:ff:d8:6a:5e:b3:7d:65:7c:0f:a7:aa:98:6a:e6: 42:c8:60:39:e9:0d:46:b3:c0:39:67:d3:5f:62:e1: e9:c4:50:fc:8c:1c:97:f2:33:85:a0:d0:7d:69:05: 29:2c:3f:c5:3a:a5:52:35:a8:0a:7a:a7:77:5f:7f: b1:21:4f:17:b5:8a:c4:7c:46:1e:34:26:73:a8:31: 5b:61:ec:8e:84:a3:9f:e1:98:b2:6b:48:82:b3:4f: dc:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:1C:D6:FB:C0:7C:84:9F:3F:C9:3A:7D:3B:65:7B:AD:F4:86:61:F4 X509v3 Authority Key Identifier: keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/lBzW-8B8hJ8_yTp9O2V7rfSGYfQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.248.16.0/20 Signature Algorithm: sha256WithRSAEncryption b0:d7:6c:29:ff:b9:7b:98:c8:9d:9f:90:d4:25:41:a7:dd:28: 6e:5f:3b:0c:19:f4:0c:d2:ec:79:6a:14:1f:fc:91:09:9a:64: 5a:71:ca:0f:88:f5:88:00:ec:b4:73:3a:95:cb:17:a0:bc:1c: 49:ae:72:3b:4b:b0:78:ee:46:bc:e3:31:24:be:63:db:61:19: f8:91:ac:9e:eb:47:c6:45:b1:b2:d1:f1:e9:c0:ad:0e:16:45: 3e:ea:5b:3e:f1:7e:8c:96:ce:21:18:fc:74:d4:33:21:58:19: 12:1e:8f:d2:46:85:75:8a:b2:c5:a3:b7:63:5e:77:ba:58:8a: 13:68:41:69:cb:2c:73:69:24:6b:9a:25:8e:6f:11:ac:22:e7: 77:ac:82:18:c7:13:96:cc:75:e2:ba:e1:f6:e7:c3:7b:37:46: da:fd:41:11:2f:73:58:8b:37:be:fc:35:4d:bb:1a:38:7e:ac: 7d:5e:da:f8:35:f6:e5:e2:04:bd:bd:53:78:71:dd:d0:65:a6: f6:7a:09:e1:e0:80:c2:af:7a:c2:fd:91:cf:eb:88:14:ec:d7: 56:b2:59:71:12:42:a9:92:8f:84:76:01:12:b1:c5:16:55:f8: b9:92:06:98:f4:d2:60:be:a3:fb:49:31:29:e3:50:3b:ee:8a: 96:30:32:c9 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIBJzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhEMTQw MEFCODlCNkQ3MkY3REI0MjRGNEFBQThDQ0ZGNjQzOEQzRDRBMB4XDTI0MDExMDAx MTEwOVoXDTI0MTIxNDAxMzAwM1owMzExMC8GA1UEAxMoOTQxQ0Q2RkJDMDdDODQ5 RjNGQzkzQTdEM0I2NTdCQURGNDg2NjFGNDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAPRuZxNpc6A9n0aHUFvvujNhAybEPq5jAlzBbmP0Uxx0RF/6EnVc 0z9/9a/XWFxkbtreqxY5gbdsIfooTGaIbcRKaaIGDs+Mb0Eob6bHV8po7oonoavr bz1wqQeNAcYcvcanAOnLKMsLQSMiie0jCRgU32GRj3vUmcAnAXtj8lC32XrT+vei 7oVHWcJ44b9Me6V1t6QBcOJixyggndDCtskDrapz+f/Yal6zfWV8D6eqmGrmQshg OekNRrPAOWfTX2Lh6cRQ/Iwcl/IzhaDQfWkFKSw/xTqlUjWoCnqnd19/sSFPF7WK xHxGHjQmc6gxW2HsjoSjn+GYsmtIgrNP3JsCAwEAAaOCAiIwggIeMB0GA1UdDgQW BBSUHNb7wHyEnz/JOn07ZXut9IZh9DAfBgNVHSMEGDAWgBTRQAq4m21y99tCT0qq jM/2Q409SjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGUGA1UdHwReMFwwWqBY oFaGVHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjkvMFVBS3VKdHRjdmZiUWs5S3FvelA5a09OUFVvLmNybDBtBggrBgEF BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvMFVBS3VKdHRjdmZiUWs5S3FvelA5a09O UFVvLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgboGCCsGAQUFBwELBIGtMIGqMGAGCCsG AQUFBzALhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzI5L2xCelctOEI4aEo4X3lUcDlPMlY3cmZTR1lmUS5yb2EwRgYI KwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRw L2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BASg+BAwDQYJKoZIhvcNAQELBQADggEBALDXbCn/uXuYyJ2fkNQlQafdKG5fOwwZ 9AzS7HlqFB/8kQmaZFpxyg+I9YgA7LRzOpXLF6C8HEmucjtLsHjuRrzjMSS+Y9th GfiRrJ7rR8ZFsbLR8enArQ4WRT7qWz7xfoyWziEY/HTUMyFYGRIej9JGhXWKssWj t2Ned7pYihNoQWnLLHNpJGuaJY5vEawi53esghjHE5bMdeK64fbnw3s3Rtr9QREv c1iLN778NU27Gjh+rH1e2vg19uXiBL29U3hx3dBlpvZ6CeHggMKvesL9kc/riBTs 11ayWXESQqmSj4R2ARKxxRZV+LmSBpj00mC+o/tJMSnjUDvuipYwMsk= -----END CERTIFICATE-----Generated at Sat Jun 1 13:38:44 2024 by rpki-client on console-fra.rpki-client.org