$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/xA7Og52LRk3WoSwkq_9hy9Zy0K4.roa File: xA7Og52LRk3WoSwkq_9hy9Zy0K4.roa (raw, json) Hash identifier: cALE/y/2k7VtsD3MjxWR1HCZ8sGi5roNPJVuJ6mMcN0= Subject key identifier: C4:0E:CE:83:9D:8B:46:4D:D6:A1:2C:24:AB:FF:61:CB:D6:72:D0:AE Certificate issuer: /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A Certificate serial: 1E Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/xA7Og52LRk3WoSwkq_9hy9Zy0K4.roa Signing time: Wed 10 Jan 2024 01:03:00 +0000 ROA not before: Wed 10 Jan 2024 01:03:00 +0000 ROA not after: Sat 14 Dec 2024 01:30:03 +0000 asID: 2514 IP address blocks: 157.65.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 13 Jun 2024 05:56:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30 (0x1e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A Validity Not Before: Jan 10 01:03:00 2024 GMT Not After : Dec 14 01:30:03 2024 GMT Subject: CN=C40ECE839D8B464DD6A12C24ABFF61CBD672D0AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:89:d4:26:d9:c5:a6:ef:95:d1:e5:a2:5f:6d: 32:98:ab:7b:48:f6:59:e8:18:00:d0:f2:57:85:51: 94:84:94:29:2b:5a:d4:ca:a9:fc:2e:22:32:bf:f3: 19:97:14:92:b3:d3:e7:85:e8:57:8e:61:d7:28:1b: 64:8a:6d:95:84:38:46:7f:92:5a:57:ff:c1:78:be: ac:f2:4b:03:09:5e:1b:ef:96:69:55:3f:2e:cf:29: ea:2f:98:42:51:3a:bc:f9:4d:1a:09:51:1d:1d:3a: c3:73:db:3f:1f:44:e5:f8:dc:29:ff:ec:4d:24:ad: 00:32:13:6c:c0:d7:94:93:ed:e5:b8:8c:72:c4:02: 46:cb:cc:1e:18:0a:98:e7:08:f2:78:f0:fc:6c:cf: 74:88:20:a5:d6:b5:1e:2c:15:b0:35:28:4e:f8:51: 37:ed:61:65:73:fa:dd:b3:81:6c:2b:79:a0:26:65: 3f:3c:e3:b6:07:dc:bb:b0:e7:0b:33:a1:d5:3a:17: fa:09:96:66:ee:39:89:35:7d:27:40:9f:9a:9e:c6: 5c:f5:98:93:4b:d5:73:e4:72:69:72:54:ce:76:c9: 3d:0a:01:46:7f:3f:3b:7d:fd:d3:32:5e:2a:bf:45: bf:09:10:19:76:e4:c7:55:3b:9a:29:a9:b0:cf:d2: 5b:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:0E:CE:83:9D:8B:46:4D:D6:A1:2C:24:AB:FF:61:CB:D6:72:D0:AE X509v3 Authority Key Identifier: keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/xA7Og52LRk3WoSwkq_9hy9Zy0K4.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.65.32.0/19 Signature Algorithm: sha256WithRSAEncryption 54:4f:69:2e:40:d2:85:e8:1e:c2:bd:1d:09:73:bc:6a:d3:59: a7:8a:d2:a3:e1:01:0c:b3:85:04:21:ad:ee:a2:4c:93:5e:fd: 16:03:cf:de:7e:2f:f2:2d:fb:25:7a:fa:28:86:7d:68:82:e8: 06:ef:2c:eb:b1:4c:49:2a:a2:b0:e7:6f:f5:c1:04:ee:79:e4: 49:10:d5:c7:75:70:69:0f:33:e6:5a:1b:eb:55:94:7d:82:b9: d8:2b:d7:13:da:05:b1:ed:30:fc:ee:7c:55:8a:cd:d8:59:75: da:fc:3b:91:da:8f:d8:bd:ec:52:9d:bf:f8:5d:9e:89:59:91: 38:f1:54:ba:e1:c2:c0:e1:92:ec:08:ef:c5:9d:b2:a0:23:82: 16:ea:9b:6b:b7:75:4c:f2:80:75:13:36:09:ec:db:50:fa:db: d5:82:f9:d1:48:41:dd:b5:16:14:c0:bd:a5:75:b7:24:66:a9: 7a:46:a5:68:2d:5a:de:f9:3d:ba:61:e9:bd:73:a9:76:c5:86: 37:cb:d1:68:bf:be:3a:ae:15:20:25:65:5f:b4:72:25:8b:64: 99:b4:f0:db:fe:0a:7b:69:d4:a5:f9:e2:d4:dd:8d:93:b3:6b: a9:6c:28:5b:ad:a9:db:16:e7:3b:ca:5b:3f:94:25:33:c1:f9: fe:a6:54:4d -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIBHjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhEMTQw MEFCODlCNkQ3MkY3REI0MjRGNEFBQThDQ0ZGNjQzOEQzRDRBMB4XDTI0MDExMDAx MDMwMFoXDTI0MTIxNDAxMzAwM1owMzExMC8GA1UEAxMoQzQwRUNFODM5RDhCNDY0 REQ2QTEyQzI0QUJGRjYxQ0JENjcyRDBBRTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAPOJ1CbZxabvldHlol9tMpire0j2WegYANDyV4VRlISUKSta1Mqp /C4iMr/zGZcUkrPT54XoV45h1ygbZIptlYQ4Rn+SWlf/wXi+rPJLAwleG++WaVU/ Ls8p6i+YQlE6vPlNGglRHR06w3PbPx9E5fjcKf/sTSStADITbMDXlJPt5biMcsQC RsvMHhgKmOcI8njw/GzPdIggpda1HiwVsDUoTvhRN+1hZXP63bOBbCt5oCZlPzzj tgfcu7DnCzOh1ToX+gmWZu45iTV9J0Cfmp7GXPWYk0vVc+RyaXJUznbJPQoBRn8/ O3390zJeKr9FvwkQGXbkx1U7mimpsM/SW4MCAwEAAaOCAiIwggIeMB0GA1UdDgQW BBTEDs6DnYtGTdahLCSr/2HL1nLQrjAfBgNVHSMEGDAWgBTRQAq4m21y99tCT0qq jM/2Q409SjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGUGA1UdHwReMFwwWqBY oFaGVHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjkvMFVBS3VKdHRjdmZiUWs5S3FvelA5a09OUFVvLmNybDBtBggrBgEF BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvMFVBS3VKdHRjdmZiUWs5S3FvelA5a09O UFVvLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgboGCCsGAQUFBwELBIGtMIGqMGAGCCsG AQUFBzALhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzI5L3hBN09nNTJMUmszV29Td2txXzloeTlaeTBLNC5yb2EwRgYI KwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRw L2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAWdQSAwDQYJKoZIhvcNAQELBQADggEBAFRPaS5A0oXoHsK9HQlzvGrTWaeK0qPh AQyzhQQhre6iTJNe/RYDz95+L/It+yV6+iiGfWiC6AbvLOuxTEkqorDnb/XBBO55 5EkQ1cd1cGkPM+ZaG+tVlH2Cudgr1xPaBbHtMPzufFWKzdhZddr8O5Haj9i97FKd v/hdnolZkTjxVLrhwsDhkuwI78WdsqAjghbqm2u3dUzygHUTNgns21D629WC+dFI Qd21FhTAvaV1tyRmqXpGpWgtWt75Pbph6b1zqXbFhjfL0Wi/vjquFSAlZV+0ciWL ZJm08Nv+Cntp1KX54tTdjZOza6lsKFutqdsW5zvKWz+UJTPB+f6mVE0= -----END CERTIFICATE-----Generated at Thu Jun 6 14:56:15 2024 by rpki-client on console-fra.rpki-client.org