$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/307/LeKvZzpAhfY-lqnKmkcZ_JbjyQM.roa File: LeKvZzpAhfY-lqnKmkcZ_JbjyQM.roa (raw, json) Hash identifier: ON3l8CdUPzCL8+ffTIxC4Vx2dWsAqkbuEHFa9BwXWo4= Subject key identifier: 2D:E2:AF:67:3A:40:85:F6:3E:96:A9:CA:9A:47:19:FC:96:E3:C9:03 Certificate issuer: /CN=6D1ED16D8C6D3BA40BF42CB3A29652ADAB76D061 Certificate serial: 0D Authority key identifier: 6D:1E:D1:6D:8C:6D:3B:A4:0B:F4:2C:B3:A2:96:52:AD:AB:76:D0:61 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bR7RbYxtO6QL9CyzopZSrat20GE.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/LeKvZzpAhfY-lqnKmkcZ_JbjyQM.roa Signing time: Thu 16 Nov 2023 02:48:40 +0000 ROA not before: Thu 16 Nov 2023 02:48:40 +0000 ROA not after: Thu 14 Nov 2024 01:30:03 +0000 asID: 18266 IP address blocks: 210.143.112.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/bR7RbYxtO6QL9CyzopZSrat20GE.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/bR7RbYxtO6QL9CyzopZSrat20GE.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bR7RbYxtO6QL9CyzopZSrat20GE.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 13 Jun 2024 14:03:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13 (0xd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D1ED16D8C6D3BA40BF42CB3A29652ADAB76D061 Validity Not Before: Nov 16 02:48:40 2023 GMT Not After : Nov 14 01:30:03 2024 GMT Subject: CN=2DE2AF673A4085F63E96A9CA9A4719FC96E3C903 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b5:d8:cf:ad:8a:c0:a3:c4:c3:aa:c3:e0:aa: a6:ea:96:67:58:4b:37:b0:e9:53:f0:eb:dc:0d:5f: e7:69:9a:e9:ea:38:ed:e9:6f:f6:0f:48:a1:04:90: de:2c:35:8c:16:36:cd:0b:94:0c:22:70:05:b7:42: 48:71:f3:23:f1:0e:6a:dd:0f:b6:da:e2:fc:f6:c6: a1:b4:bd:df:15:ab:2f:13:b9:25:9f:53:93:f8:a4: 7b:47:65:29:4a:5a:e5:e7:8c:7b:5d:99:e7:4f:06: 63:c3:43:69:95:a6:78:18:46:a6:7b:21:12:b3:55: b2:c3:57:b5:5d:6c:d0:5c:77:26:f5:03:49:cb:bb: f5:2b:37:74:bb:66:38:07:18:d3:7c:f2:2a:72:5a: f8:31:ad:9e:8f:b7:2a:3c:f7:0b:ad:e7:13:da:14: fb:df:54:f7:17:27:e7:7e:6c:88:8e:63:90:58:ef: 1e:1a:fc:90:e0:d4:00:b0:da:e6:d9:da:9b:ab:04: c3:df:bb:b1:79:b7:e0:2a:ec:d9:dc:04:7f:4a:07: 0f:7f:c9:b7:ef:7d:23:7b:7d:19:7b:b8:8b:f7:a7: be:ed:4a:f0:ac:90:64:97:ae:0f:27:96:e3:3c:d3: cd:a2:9a:31:4b:63:a4:4e:fc:6f:5f:88:96:37:fd: 44:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:E2:AF:67:3A:40:85:F6:3E:96:A9:CA:9A:47:19:FC:96:E3:C9:03 X509v3 Authority Key Identifier: keyid:6D:1E:D1:6D:8C:6D:3B:A4:0B:F4:2C:B3:A2:96:52:AD:AB:76:D0:61 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/bR7RbYxtO6QL9CyzopZSrat20GE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bR7RbYxtO6QL9CyzopZSrat20GE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/LeKvZzpAhfY-lqnKmkcZ_JbjyQM.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.143.112.0/20 Signature Algorithm: sha256WithRSAEncryption d2:5e:a9:a8:03:b0:a9:53:dc:08:cb:d6:3f:4e:43:2f:a4:1b: 37:5b:87:f4:fa:21:72:b6:23:73:3a:88:43:2e:8c:68:71:46: 30:3f:ca:7c:8f:5e:72:3f:f0:64:fc:ee:d3:7a:c1:79:06:51: e6:41:34:2a:3f:4f:fd:15:48:e8:0f:4b:bf:22:03:49:a6:fb: b7:9b:f9:04:68:ac:9c:29:9b:30:4a:74:8c:58:e6:aa:5f:c8: 68:5c:bb:06:86:08:7c:97:9a:e7:2d:63:90:3b:4d:e3:08:e0: 85:91:91:5b:bc:3a:1c:1d:0c:f1:ad:57:2b:db:bb:16:21:d3: b3:ff:9e:35:ce:1b:b1:ed:46:06:b7:01:8f:f2:1e:6d:71:b1: 63:5a:00:d0:aa:cc:11:e5:8a:97:42:fc:1a:a0:d7:af:82:94: b9:d0:a1:5a:b8:f7:0f:70:88:b8:b8:93:18:bc:2b:93:f0:cb: 9f:96:ae:26:d5:2f:ec:4f:a1:9a:65:a6:c8:d2:b3:a4:50:d1: 1f:2d:9e:93:c8:c5:1f:32:34:20:01:36:07:88:a1:c2:59:7a: da:a3:a2:34:03:4e:80:1e:c6:6f:ac:e6:18:68:a1:8d:7d:7b: c8:b8:6a:bc:e3:2a:7e:42:f0:b4:a3:a5:ca:b5:7a:c1:87:a0: 56:66:6d:7a -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBDTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2RDFF RDE2RDhDNkQzQkE0MEJGNDJDQjNBMjk2NTJBREFCNzZEMDYxMB4XDTIzMTExNjAy NDg0MFoXDTI0MTExNDAxMzAwM1owMzExMC8GA1UEAxMoMkRFMkFGNjczQTQwODVG NjNFOTZBOUNBOUE0NzE5RkM5NkUzQzkwMzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAK612M+tisCjxMOqw+CqpuqWZ1hLN7DpU/Dr3A1f52ma6eo47elv 9g9IoQSQ3iw1jBY2zQuUDCJwBbdCSHHzI/EOat0Pttri/PbGobS93xWrLxO5JZ9T k/ike0dlKUpa5eeMe12Z508GY8NDaZWmeBhGpnshErNVssNXtV1s0Fx3JvUDScu7 9Ss3dLtmOAcY03zyKnJa+DGtno+3Kjz3C63nE9oU+99U9xcn535siI5jkFjvHhr8 kODUALDa5tnam6sEw9+7sXm34Crs2dwEf0oHD3/Jt+99I3t9GXu4i/envu1K8KyQ ZJeuDyeW4zzTzaKaMUtjpE78b1+Iljf9RHUCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBQt4q9nOkCF9j6WqcqaRxn8luPJAzAfBgNVHSMEGDAWgBRtHtFtjG07pAv0LLOi llKtq3bQYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzA3L2JSN1JiWXh0TzZRTDlDeXpvcFpTcmF0MjBHRS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2JSN1JiWXh0TzZRTDlDeXpvcFpTcmF0 MjBHRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8zMDcvTGVLdlp6cEFoZlktbHFuS21rY1pfSmJqeVFNLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBNKPcDANBgkqhkiG9w0BAQsFAAOCAQEA0l6pqAOwqVPcCMvWP05DL6QbN1uH 9PohcrYjczqIQy6MaHFGMD/KfI9ecj/wZPzu03rBeQZR5kE0Kj9P/RVI6A9LvyID Sab7t5v5BGisnCmbMEp0jFjmql/IaFy7BoYIfJea5y1jkDtN4wjghZGRW7w6HB0M 8a1XK9u7FiHTs/+eNc4bse1GBrcBj/IebXGxY1oA0KrMEeWKl0L8GqDXr4KUudCh Wrj3D3CIuLiTGLwrk/DLn5auJtUv7E+hmmWmyNKzpFDRHy2ek8jFHzI0IAE2B4ih wll62qOiNANOgB7Gb6zmGGihjX17yLhqvOMqfkLwtKOlyrV6wYegVmZteg== -----END CERTIFICATE-----Generated at Thu Jun 6 15:06:35 2024 by rpki-client on console-ams.rpki-client.org