$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/373/CIvDASyPmadFbj3ROVSXTBidzSs.roa File: CIvDASyPmadFbj3ROVSXTBidzSs.roa (raw, json) Hash identifier: 7FB8CvMaT0h2h/I8aLXaRqI+tHyYTJZOzZcD8pxakb8= Subject key identifier: 08:8B:C3:01:2C:8F:99:A7:45:6E:3D:D1:39:54:97:4C:18:9D:CD:2B Certificate issuer: /CN=89CF5C2AFA5B576577351C4199018D44CDC2D6DA Certificate serial: 1B Authority key identifier: 89:CF:5C:2A:FA:5B:57:65:77:35:1C:41:99:01:8D:44:CD:C2:D6:DA Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ic9cKvpbV2V3NRxBmQGNRM3C1to.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/CIvDASyPmadFbj3ROVSXTBidzSs.roa Signing time: Fri 11 Aug 2023 07:39:15 +0000 ROA not before: Fri 11 Aug 2023 07:39:15 +0000 ROA not after: Sun 14 Jul 2024 01:30:03 +0000 asID: 9615 IP address blocks: 202.216.128.0/19 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/ic9cKvpbV2V3NRxBmQGNRM3C1to.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/ic9cKvpbV2V3NRxBmQGNRM3C1to.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ic9cKvpbV2V3NRxBmQGNRM3C1to.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 13 Jun 2024 14:03:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27 (0x1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89CF5C2AFA5B576577351C4199018D44CDC2D6DA Validity Not Before: Aug 11 07:39:15 2023 GMT Not After : Jul 14 01:30:03 2024 GMT Subject: CN=088BC3012C8F99A7456E3DD13954974C189DCD2B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:23:04:13:77:16:a1:10:41:32:19:a7:2e:86: d0:a7:52:29:c2:8e:d1:72:cd:6b:cf:61:b1:9d:b6: ee:c1:d6:f5:f5:b1:fc:1d:71:1b:66:bf:7c:54:aa: 95:a7:df:74:18:c9:d4:07:cb:3e:bb:37:30:2c:68: aa:2f:7f:91:83:89:b1:dd:49:ec:a5:79:70:8b:7e: 2a:72:fd:f8:92:6e:f0:bf:0b:40:09:a2:26:d4:22: bf:39:d2:57:b6:79:0d:03:11:ab:0f:28:e3:3f:52: bb:2a:aa:6c:4c:bc:96:51:0e:35:50:ea:f4:62:36: 21:d6:b0:1f:39:f3:5c:59:a3:89:78:57:de:33:6c: 4f:b2:ab:ff:20:73:d7:2b:ff:8c:fc:a8:ac:49:69: e8:d8:2b:5f:3a:c1:c1:e0:c9:6e:74:ed:3f:ef:f5: 94:94:0d:be:c5:9f:ad:5d:f7:2b:d6:d2:db:9d:ca: f8:0d:e5:57:b8:d5:68:85:20:2b:e0:ba:51:75:92: 0f:30:82:a5:22:a5:d2:3a:68:66:70:00:61:1f:e6: 7e:5f:5d:b5:1e:b6:9a:16:21:62:ac:3c:af:eb:14: 00:91:0f:63:3f:0c:57:22:4d:20:23:88:c1:b1:e3: 94:d2:91:d8:3e:18:5a:75:ba:ff:05:c9:f5:f4:01: 4d:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:8B:C3:01:2C:8F:99:A7:45:6E:3D:D1:39:54:97:4C:18:9D:CD:2B X509v3 Authority Key Identifier: keyid:89:CF:5C:2A:FA:5B:57:65:77:35:1C:41:99:01:8D:44:CD:C2:D6:DA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/ic9cKvpbV2V3NRxBmQGNRM3C1to.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ic9cKvpbV2V3NRxBmQGNRM3C1to.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/CIvDASyPmadFbj3ROVSXTBidzSs.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.216.128.0/19 Signature Algorithm: sha256WithRSAEncryption 11:df:ce:99:f9:c2:25:b9:c1:66:10:43:82:93:f6:58:e1:f8: 70:1f:31:8f:93:61:81:dd:83:72:7b:5b:d5:94:4d:19:1f:b2: b2:cb:d7:ae:d3:64:60:cb:60:bd:13:7d:75:3c:12:c6:bd:29: cd:1a:96:83:46:fa:33:15:ca:d0:33:e7:74:1d:79:86:06:1b: 6f:5b:8f:d6:eb:56:e5:4a:94:7a:f7:ce:6b:a7:d0:5a:27:64: e4:3e:d0:f8:4e:89:9d:e2:55:c0:31:d9:77:a2:d9:29:51:f6: 91:13:9e:5f:5f:f7:7f:9e:06:3d:0d:9f:98:1e:7e:62:6c:fa: 52:f6:03:2d:03:1a:15:ee:6c:5b:1b:8b:4b:f3:9b:8a:01:56: 2e:13:05:7e:e0:44:d7:ec:8c:a2:df:2b:a0:62:90:ef:e0:60: 4d:d2:46:27:cb:f0:34:81:63:b0:b6:b8:dc:bf:b4:c9:79:c4: ee:c1:24:d5:0e:15:b5:29:e5:87:a0:41:73:8e:0e:34:8a:eb: 95:32:1b:20:96:b8:f1:d8:59:b2:7a:32:e1:19:15:99:32:ff: 3a:0f:d6:c5:9e:a7:1f:33:95:42:33:2c:62:f4:5f:eb:1a:09: 3f:c7:02:da:de:20:7e:05:09:db:95:d7:14:f6:62:26:28:45: e7:25:34:d0 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBGzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4OUNG NUMyQUZBNUI1NzY1NzczNTFDNDE5OTAxOEQ0NENEQzJENkRBMB4XDTIzMDgxMTA3 MzkxNVoXDTI0MDcxNDAxMzAwM1owMzExMC8GA1UEAxMoMDg4QkMzMDEyQzhGOTlB NzQ1NkUzREQxMzk1NDk3NEMxODlEQ0QyQjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALwjBBN3FqEQQTIZpy6G0KdSKcKO0XLNa89hsZ227sHW9fWx/B1x G2a/fFSqlaffdBjJ1AfLPrs3MCxoqi9/kYOJsd1J7KV5cIt+KnL9+JJu8L8LQAmi JtQivznSV7Z5DQMRqw8o4z9SuyqqbEy8llEONVDq9GI2IdawHznzXFmjiXhX3jNs T7Kr/yBz1yv/jPyorElp6NgrXzrBweDJbnTtP+/1lJQNvsWfrV33K9bS253K+A3l V7jVaIUgK+C6UXWSDzCCpSKl0jpoZnAAYR/mfl9dtR62mhYhYqw8r+sUAJEPYz8M VyJNICOIwbHjlNKR2D4YWnW6/wXJ9fQBTekCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBQIi8MBLI+Zp0VuPdE5VJdMGJ3NKzAfBgNVHSMEGDAWgBSJz1wq+ltXZXc1HEGZ AY1EzcLW2jAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzczL2ljOWNLdnBiVjJWM05SeEJtUUdOUk0zQzF0by5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2ljOWNLdnBiVjJWM05SeEJtUUdOUk0z QzF0by5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8zNzMvQ0l2REFTeVBtYWRGYmozUk9WU1hUQmlkelNzLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBcrYgDANBgkqhkiG9w0BAQsFAAOCAQEAEd/OmfnCJbnBZhBDgpP2WOH4cB8x j5Nhgd2Dcntb1ZRNGR+yssvXrtNkYMtgvRN9dTwSxr0pzRqWg0b6MxXK0DPndB15 hgYbb1uP1utW5UqUevfOa6fQWidk5D7Q+E6JneJVwDHZd6LZKVH2kROeX1/3f54G PQ2fmB5+Ymz6UvYDLQMaFe5sWxuLS/ObigFWLhMFfuBE1+yMot8roGKQ7+BgTdJG J8vwNIFjsLa43L+0yXnE7sEk1Q4VtSnlh6BBc44ONIrrlTIbIJa48dhZsnoy4RkV mTL/Og/WxZ6nHzOVQjMsYvRf6xoJP8cC2t4gfgUJ25XXFPZiJihF5yU00A== -----END CERTIFICATE-----Generated at Thu Jun 6 15:06:43 2024 by rpki-client on console-ams.rpki-client.org