$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/8P9Wjj4ZU1FSgDWsL88mP7vsKME.roa File: 8P9Wjj4ZU1FSgDWsL88mP7vsKME.roa (raw, json) Hash identifier: fwWD3qqk1EDw7EnwS0VhEYv/wpZcgb12Tw5OZKIcIi4= Subject key identifier: F0:FF:56:8E:3E:19:53:51:52:80:35:AC:2F:CF:26:3F:BB:EC:28:C1 Certificate issuer: /CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E Certificate serial: 46 Authority key identifier: F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/8P9Wjj4ZU1FSgDWsL88mP7vsKME.roa Signing time: Wed 15 May 2024 08:35:38 +0000 ROA not before: Wed 15 May 2024 08:35:38 +0000 ROA not after: Thu 15 May 2025 01:30:03 +0000 asID: 9605 IP address blocks: 160.249.88.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 08:46:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70 (0x46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E Validity Not Before: May 15 08:35:38 2024 GMT Not After : May 15 01:30:03 2025 GMT Subject: CN=F0FF568E3E195351528035AC2FCF263FBBEC28C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:90:ac:ad:0a:5d:de:48:60:3c:93:cf:b0:9e: 69:22:39:cf:68:42:7d:df:fb:23:06:9b:ed:22:b7: 91:f7:c5:b4:e6:bc:8f:7a:80:b0:96:b2:05:f4:83: 65:c7:5e:c9:23:f8:c2:31:28:d8:f4:4c:01:db:3f: b7:a2:5e:a1:fe:a8:59:8e:a3:91:d9:2c:17:6e:f8: 39:84:8f:7c:1a:a4:ca:04:c7:e8:4b:61:54:1e:37: 6c:3e:8a:c9:e7:0a:d5:a6:b1:85:da:a7:30:19:31: e8:4f:27:df:50:a1:01:89:ae:cf:bc:58:82:22:f6: bb:f0:a9:53:7f:cd:37:97:a0:88:68:88:43:4b:0f: 2e:b0:64:f4:ed:02:76:b2:68:51:ed:22:a3:8d:6a: ce:d2:72:a9:66:09:10:80:ec:92:40:e3:5b:cb:58: ca:8a:08:72:a7:40:c5:6f:39:fc:7f:d3:ce:6d:9a: f1:da:07:bd:dc:7e:af:30:18:5f:a8:fa:f7:3d:b1: 27:80:4c:d6:9f:5a:7f:57:ff:1f:3b:17:2d:5c:31: 61:9d:c2:e9:af:92:df:a9:9e:1c:b2:f3:4d:5e:f3: 00:88:a8:f4:ac:91:9a:be:6e:cb:33:2e:e1:df:90: 65:f5:c0:a3:b7:bb:46:21:3f:06:1d:67:2a:a7:56: d1:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:FF:56:8E:3E:19:53:51:52:80:35:AC:2F:CF:26:3F:BB:EC:28:C1 X509v3 Authority Key Identifier: keyid:F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/8P9Wjj4ZU1FSgDWsL88mP7vsKME.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.249.88.0/22 Signature Algorithm: sha256WithRSAEncryption 19:11:48:08:fb:4d:d7:0a:10:2a:f5:e3:79:99:a2:ed:9e:8c: 20:d3:ca:e7:f6:ce:20:52:a6:ee:ef:92:3c:5f:08:1d:fd:32: e0:17:eb:7d:af:4b:85:17:f8:17:43:e5:3a:6e:5c:c3:20:70: ec:9a:4c:6c:9e:8d:f3:45:15:5b:b5:cf:01:3c:ac:a3:1e:7a: d3:b6:a1:ad:c9:e1:18:be:3f:ef:b8:55:28:c0:3d:64:e8:f1: 23:e7:c7:12:27:37:0f:5e:14:9f:b2:6c:3a:6a:7e:f4:69:4d: a7:c6:f5:8f:77:f2:fe:fe:9a:2a:97:d7:0f:13:d4:c2:0f:2f: 73:e8:aa:71:46:44:11:fe:b9:0b:fc:bf:b5:9e:39:be:b4:c0: a9:83:96:48:11:fa:48:55:95:7c:4d:f7:30:76:94:ab:17:d7: 0a:80:95:43:c8:74:4d:f4:ae:cd:5e:eb:c7:a2:33:09:37:34: bf:ac:85:33:54:a7:9a:c1:cc:10:c0:31:ba:69:b7:38:1f:21: 2a:27:ec:b6:c7:cc:95:88:d2:f6:3f:34:ca:26:e1:0a:dc:cb: c1:0d:3f:f8:29:1b:3e:a1:e2:ea:42:a3:65:4a:69:a9:24:39: 5f:fc:4c:e3:4a:b7:a4:5a:d3:66:5e:0d:41:17:39:c7:32:19: 72:af:c7:a3 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBRjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGODlF MEYxNUMxRTIwRTE5MUFBRjE3Mjg4RjZFMzBGRjAxODY5QTZFMB4XDTI0MDUxNTA4 MzUzOFoXDTI1MDUxNTAxMzAwM1owMzExMC8GA1UEAxMoRjBGRjU2OEUzRTE5NTM1 MTUyODAzNUFDMkZDRjI2M0ZCQkVDMjhDMTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKmQrK0KXd5IYDyTz7CeaSI5z2hCfd/7Iwab7SK3kffFtOa8j3qA sJayBfSDZcdeySP4wjEo2PRMAds/t6Jeof6oWY6jkdksF274OYSPfBqkygTH6Eth VB43bD6KyecK1aaxhdqnMBkx6E8n31ChAYmuz7xYgiL2u/CpU3/NN5egiGiIQ0sP LrBk9O0CdrJoUe0io41qztJyqWYJEIDskkDjW8tYyooIcqdAxW85/H/Tzm2a8doH vdx+rzAYX6j69z2xJ4BM1p9af1f/HzsXLVwxYZ3C6a+S36meHLLzTV7zAIio9KyR mr5uyzMu4d+QZfXAo7e7RiE/Bh1nKqdW0bsCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBTw/1aOPhlTUVKANawvzyY/u+wowTAfBgNVHSMEGDAWgBT4ng8VweIOGRqvFyiP bjD/AYaabjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzA5Ly1KNFBGY0hpRGhrYXJ4Y29qMjR3X3dHR21tNC5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLy1KNFBGY0hpRGhrYXJ4Y29qMjR3X3dH R21tNC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8zMDkvOFA5V2pqNFpVMUZTZ0RXc0w4OG1QN3ZzS01FLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAqD5WDANBgkqhkiG9w0BAQsFAAOCAQEAGRFICPtN1woQKvXjeZmi7Z6MINPK 5/bOIFKm7u+SPF8IHf0y4Bfrfa9LhRf4F0PlOm5cwyBw7JpMbJ6N80UVW7XPATys ox5607ahrcnhGL4/77hVKMA9ZOjxI+fHEic3D14Un7JsOmp+9GlNp8b1j3fy/v6a KpfXDxPUwg8vc+iqcUZEEf65C/y/tZ45vrTAqYOWSBH6SFWVfE33MHaUqxfXCoCV Q8h0TfSuzV7rx6IzCTc0v6yFM1SnmsHMEMAxumm3OB8hKifstsfMlYjS9j80yibh CtzLwQ0/+CkbPqHi6kKjZUppqSQ5X/xM40q3pFrTZl4NQRc5xzIZcq/How== -----END CERTIFICATE-----Generated at Sat Jun 1 13:38:46 2024 by rpki-client on console-fra.rpki-client.org