$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/vHjiHtTZLUsNJujUJpEoR2Mkwak.roa File: vHjiHtTZLUsNJujUJpEoR2Mkwak.roa (raw, json) Hash identifier: Wa+6ixGf+c/yHMC0SPO8pUjMuW4Y4dSaJh1GO0Njng4= Subject key identifier: BC:78:E2:1E:D4:D9:2D:4B:0D:26:E8:D4:26:91:28:47:63:24:C1:A9 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0884 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/vHjiHtTZLUsNJujUJpEoR2Mkwak.roa Signing time: Tue 30 Apr 2024 02:20:30 +0000 ROA not before: Tue 30 Apr 2024 02:20:30 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 220.210.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2180 (0x884) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 30 02:20:30 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=BC78E21ED4D92D4B0D26E8D4269128476324C1A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:27:b7:54:69:c1:bc:b7:e4:52:60:c3:69:a7: d5:f4:58:48:d4:e7:a5:b5:21:22:b1:c0:e8:1a:81: 47:f0:01:48:ed:25:63:a4:c0:50:5a:b4:e6:77:d3: 0b:89:c9:ae:3e:99:0b:a5:ec:53:69:c2:74:b7:48: 8f:75:b2:05:30:47:b9:62:a4:1e:f5:55:53:fa:57: 9a:af:2d:4d:c1:19:ac:e4:10:14:78:41:b5:58:b9: 3a:02:d8:71:11:f7:df:02:8d:0c:ee:cb:bb:ba:51: f4:34:cf:f3:fd:82:70:d6:79:d1:34:37:3f:fa:20: 39:14:88:12:13:f6:fd:aa:7b:78:12:c6:d1:0d:6e: 3a:ff:78:07:d3:28:b4:9b:cd:e4:d6:f9:76:cd:03: a2:f6:28:0c:eb:54:d6:f7:bb:2e:05:78:3a:25:54: 29:da:80:9b:16:24:ca:93:f0:88:94:c6:eb:7b:f1: a2:25:cd:d4:b7:c0:1f:13:2e:10:25:94:ae:dc:af: c2:53:b6:de:2a:7e:09:68:d0:5c:32:d2:c3:8d:62: ab:1e:b2:8a:90:17:8c:a0:f6:8a:85:93:94:38:4e: 2d:14:d1:fe:42:ed:95:df:17:c4:0f:88:83:dc:6b: 5b:97:06:c5:72:37:a8:82:8f:c5:e5:e5:a0:64:4e: fd:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:78:E2:1E:D4:D9:2D:4B:0D:26:E8:D4:26:91:28:47:63:24:C1:A9 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/vHjiHtTZLUsNJujUJpEoR2Mkwak.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 220.210.0.0/20 Signature Algorithm: sha256WithRSAEncryption 84:af:a8:5a:cc:f2:84:ef:bb:e0:19:c4:41:bb:f2:2a:3b:b5: aa:ca:02:1f:59:7a:b6:f0:8a:84:6d:bf:ff:0e:ff:74:13:b4: 3d:49:fb:e5:f5:d6:52:1a:e2:45:5a:71:60:e1:ea:07:8e:4a: 18:ca:2d:d1:9e:ef:99:49:23:4b:70:ab:83:b1:6a:be:66:43: 5e:f9:e2:fc:fb:a1:70:09:bc:39:2d:95:41:6b:51:ce:9e:41: 2f:cc:4c:ca:aa:a0:38:c1:cd:8c:c0:f6:36:fe:bd:a3:81:3c: f5:89:31:b9:d4:fd:5d:0d:e0:bc:66:71:62:92:cc:ea:16:18: 15:c4:50:e4:b8:c4:cc:e4:d0:55:80:8c:2c:68:76:a1:f3:a6: fc:70:c7:fc:cc:9b:e9:2d:57:25:32:ff:45:c5:4a:dc:89:64: 41:cf:86:e4:65:9f:be:6f:14:42:55:fe:66:55:7b:7e:41:2d: 2b:b7:ff:e3:ab:ea:87:04:64:5a:bf:d6:95:69:19:06:07:49: 42:77:7d:db:92:65:57:52:a3:5f:d1:24:65:16:7a:e2:b9:a6: ea:42:73:da:c9:bc:a1:ac:43:7a:85:ed:2e:2d:20:df:a2:33: 9d:56:3a:0d:8e:6b:c3:74:bd:e5:31:cc:ca:b5:39:57:53:e5: ec:80:1a:4e -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCIQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw MjIwMzBaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEJDNzhFMjFFRDREOTJE NEIwRDI2RThENDI2OTEyODQ3NjMyNEMxQTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDkJ7dUacG8t+RSYMNpp9X0WEjU56W1ISKxwOgagUfwAUjtJWOk wFBatOZ30wuJya4+mQul7FNpwnS3SI91sgUwR7lipB71VVP6V5qvLU3BGazkEBR4 QbVYuToC2HER998CjQzuy7u6UfQ0z/P9gnDWedE0Nz/6IDkUiBIT9v2qe3gSxtEN bjr/eAfTKLSbzeTW+XbNA6L2KAzrVNb3uy4FeDolVCnagJsWJMqT8IiUxut78aIl zdS3wB8TLhAllK7cr8JTtt4qfglo0Fwy0sONYqsesoqQF4yg9oqFk5Q4Ti0U0f5C 7ZXfF8QPiIPca1uXBsVyN6iCj8Xl5aBkTv1rAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUvHjiHtTZLUsNJujUJpEoR2MkwakwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3ZIamlIdFRaTFVzTkp1alVKcEVvUjJNa3dhay5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBATc0gAwDQYJKoZIhvcNAQELBQADggEBAISvqFrM8oTvu+AZxEG78io7tarK Ah9ZerbwioRtv/8O/3QTtD1J++X11lIa4kVacWDh6geOShjKLdGe75lJI0twq4Ox ar5mQ1754vz7oXAJvDktlUFrUc6eQS/MTMqqoDjBzYzA9jb+vaOBPPWJMbnU/V0N 4LxmcWKSzOoWGBXEUOS4xMzk0FWAjCxodqHzpvxwx/zMm+ktVyUy/0XFStyJZEHP huRln75vFEJV/mZVe35BLSu3/+Or6ocEZFq/1pVpGQYHSUJ3fduSZVdSo1/RJGUW euK5pupCc9rJvKGsQ3qF7S4tIN+iM51WOg2Oa8N0veUxzMq1OVdT5eyAGk4= -----END CERTIFICATE-----Generated at Sat Jun 1 15:54:37 2024 by rpki-client on console-ams.rpki-client.org