$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/307/D2Ajmq6TS_ywDjmuEnG28fe2kFs.roa File: D2Ajmq6TS_ywDjmuEnG28fe2kFs.roa (raw, json) Hash identifier: uUWTvRG53x1CaNCrNgtvAPRwLCzlOJKmkwRtCsrWJuI= Subject key identifier: 0F:60:23:9A:AE:93:4B:FC:B0:0E:39:AE:12:71:B6:F1:F7:B6:90:5B Certificate issuer: /CN=6D1ED16D8C6D3BA40BF42CB3A29652ADAB76D061 Certificate serial: 12 Authority key identifier: 6D:1E:D1:6D:8C:6D:3B:A4:0B:F4:2C:B3:A2:96:52:AD:AB:76:D0:61 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bR7RbYxtO6QL9CyzopZSrat20GE.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/D2Ajmq6TS_ywDjmuEnG28fe2kFs.roa Signing time: Thu 16 Nov 2023 02:56:44 +0000 ROA not before: Thu 16 Nov 2023 02:56:44 +0000 ROA not after: Thu 14 Nov 2024 01:30:03 +0000 asID: 23783 IP address blocks: 219.124.104.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/bR7RbYxtO6QL9CyzopZSrat20GE.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/bR7RbYxtO6QL9CyzopZSrat20GE.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bR7RbYxtO6QL9CyzopZSrat20GE.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Jun 2024 02:39:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18 (0x12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D1ED16D8C6D3BA40BF42CB3A29652ADAB76D061 Validity Not Before: Nov 16 02:56:44 2023 GMT Not After : Nov 14 01:30:03 2024 GMT Subject: CN=0F60239AAE934BFCB00E39AE1271B6F1F7B6905B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:07:ad:69:f9:95:85:a5:ca:35:2a:40:b0:62: fe:a7:c6:c6:d9:f2:c1:1f:d9:ac:5c:0b:d9:d4:32: d1:00:96:67:53:59:af:6d:d4:36:ca:51:c0:41:d9: 0d:1d:14:ca:92:e2:e2:6f:f6:d4:15:88:5a:ae:17: 25:ce:34:26:56:5a:88:86:75:8d:94:9d:46:a2:68: 44:2e:28:ca:5f:b6:37:cd:f7:ff:4e:cb:bf:d8:8b: e7:3c:20:13:83:69:36:eb:10:47:de:3d:92:0d:b4: 12:85:3a:84:99:b8:86:50:fc:62:92:89:e6:89:9e: 5e:7a:7f:ca:db:90:72:df:3a:2a:2a:35:83:55:3d: 01:ec:cc:69:14:cb:5a:27:05:42:63:b1:91:04:96: 48:f5:10:bd:86:fc:90:c4:3f:27:7d:d2:e5:b3:ce: c2:48:f3:14:14:72:4a:37:5b:57:46:c1:4b:a1:df: f1:f7:97:e7:d1:2d:65:69:8e:05:00:11:4c:6e:7b: 74:6d:0e:77:36:64:cb:b9:a6:06:72:64:2c:38:46: e6:9f:47:56:02:4f:1c:03:83:af:c5:d5:d5:83:14: 90:75:1b:b6:9c:c8:36:9f:9c:fc:d7:13:ff:3b:91: a7:40:5e:a1:7b:ff:60:ce:c2:f1:9f:4a:56:a6:43: d8:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:60:23:9A:AE:93:4B:FC:B0:0E:39:AE:12:71:B6:F1:F7:B6:90:5B X509v3 Authority Key Identifier: keyid:6D:1E:D1:6D:8C:6D:3B:A4:0B:F4:2C:B3:A2:96:52:AD:AB:76:D0:61 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/bR7RbYxtO6QL9CyzopZSrat20GE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bR7RbYxtO6QL9CyzopZSrat20GE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/D2Ajmq6TS_ywDjmuEnG28fe2kFs.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 219.124.104.0/21 Signature Algorithm: sha256WithRSAEncryption a6:37:be:00:5d:ea:5a:f8:94:6c:61:f7:c9:a7:bc:b1:f2:53: b3:82:19:06:27:3b:4c:78:39:35:32:e5:bb:bb:96:40:88:9a: 7f:2a:16:89:23:6b:5d:12:6a:27:b1:e0:fd:44:1d:66:2a:38: 59:70:3f:ae:fa:a4:a8:ce:92:e9:e7:8a:66:4a:4a:c0:e2:23: 49:48:5b:b4:5c:06:57:fc:77:05:cd:62:a4:5c:ce:e0:50:c7: 8e:17:d5:04:c4:61:cb:8d:b3:1f:4d:ba:ec:f8:31:c0:6a:cd: 62:ba:6c:74:21:dc:ca:68:b9:2d:ac:0e:35:f2:82:a7:90:48: 0d:01:07:dd:59:63:8a:10:02:d0:79:ce:03:e1:a3:da:83:9f: 6f:7e:85:93:be:4f:ae:0b:d3:28:28:96:d1:02:e6:2c:7a:c4: e4:79:20:04:68:f2:21:45:a6:4e:82:a4:1b:f5:67:59:be:54: 27:0c:ea:30:e6:e1:ac:31:ac:55:01:0b:66:85:cd:3f:ba:c7: 3b:17:de:45:6d:35:46:b4:ee:0e:a8:c4:e5:30:84:45:48:43: a1:76:aa:6e:ae:de:86:a6:83:3a:6c:fd:4a:6b:68:6e:64:fb: 41:e5:9c:75:40:a4:3d:a4:42:70:60:a7:12:f7:6a:2c:9a:53: 6f:0a:c8:11 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBEjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2RDFF RDE2RDhDNkQzQkE0MEJGNDJDQjNBMjk2NTJBREFCNzZEMDYxMB4XDTIzMTExNjAy NTY0NFoXDTI0MTExNDAxMzAwM1owMzExMC8GA1UEAxMoMEY2MDIzOUFBRTkzNEJG Q0IwMEUzOUFFMTI3MUI2RjFGN0I2OTA1QjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMQHrWn5lYWlyjUqQLBi/qfGxtnywR/ZrFwL2dQy0QCWZ1NZr23U NspRwEHZDR0UypLi4m/21BWIWq4XJc40JlZaiIZ1jZSdRqJoRC4oyl+2N833/07L v9iL5zwgE4NpNusQR949kg20EoU6hJm4hlD8YpKJ5omeXnp/ytuQct86Kio1g1U9 AezMaRTLWicFQmOxkQSWSPUQvYb8kMQ/J33S5bPOwkjzFBRySjdbV0bBS6Hf8feX 59EtZWmOBQARTG57dG0OdzZky7mmBnJkLDhG5p9HVgJPHAODr8XV1YMUkHUbtpzI Np+c/NcT/zuRp0BeoXv/YM7C8Z9KVqZD2HsCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBQPYCOarpNL/LAOOa4Scbbx97aQWzAfBgNVHSMEGDAWgBRtHtFtjG07pAv0LLOi llKtq3bQYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzA3L2JSN1JiWXh0TzZRTDlDeXpvcFpTcmF0MjBHRS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2JSN1JiWXh0TzZRTDlDeXpvcFpTcmF0 MjBHRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8zMDcvRDJBam1xNlRTX3l3RGptdUVuRzI4ZmUya0ZzLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEA9t8aDANBgkqhkiG9w0BAQsFAAOCAQEApje+AF3qWviUbGH3yae8sfJTs4IZ Bic7THg5NTLlu7uWQIiafyoWiSNrXRJqJ7Hg/UQdZio4WXA/rvqkqM6S6eeKZkpK wOIjSUhbtFwGV/x3Bc1ipFzO4FDHjhfVBMRhy42zH0267PgxwGrNYrpsdCHcymi5 LawONfKCp5BIDQEH3VljihAC0HnOA+Gj2oOfb36Fk75PrgvTKCiW0QLmLHrE5Hkg BGjyIUWmToKkG/VnWb5UJwzqMObhrDGsVQELZoXNP7rHOxfeRW01RrTuDqjE5TCE RUhDoXaqbq7ehqaDOmz9SmtobmT7QeWcdUCkPaRCcGCnEvdqLJpTbwrIEQ== -----END CERTIFICATE-----Generated at Thu May 30 03:38:45 2024 by rpki-client on console-ams.rpki-client.org