$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/3818/UxyxBhv9rwWVpK8YH7LphqJ_Cxw.roa File: UxyxBhv9rwWVpK8YH7LphqJ_Cxw.roa (raw, json) Hash identifier: YASir9zgYzXVrNybAfYvi6nRAFhTTbaYpo+RpVkiahw= Subject key identifier: 53:1C:B1:06:1B:FD:AF:05:95:A4:AF:18:1F:B2:E9:86:A2:7F:0B:1C Certificate issuer: /CN=185B557EF3BE81985C5E6CD9624761CAA4F936CE Certificate serial: 2D Authority key identifier: 18:5B:55:7E:F3:BE:81:98:5C:5E:6C:D9:62:47:61:CA:A4:F9:36:CE Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GFtVfvO-gZhcXmzZYkdhyqT5Ns4.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3818/UxyxBhv9rwWVpK8YH7LphqJ_Cxw.roa Signing time: Thu 29 Feb 2024 01:34:02 +0000 ROA not before: Thu 29 Feb 2024 01:34:02 +0000 ROA not after: Fri 14 Feb 2025 01:30:03 +0000 asID: 16509 IP address blocks: 202.244.140.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3818/GFtVfvO-gZhcXmzZYkdhyqT5Ns4.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3818/GFtVfvO-gZhcXmzZYkdhyqT5Ns4.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GFtVfvO-gZhcXmzZYkdhyqT5Ns4.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 10:14:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45 (0x2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=185B557EF3BE81985C5E6CD9624761CAA4F936CE Validity Not Before: Feb 29 01:34:02 2024 GMT Not After : Feb 14 01:30:03 2025 GMT Subject: CN=531CB1061BFDAF0595A4AF181FB2E986A27F0B1C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d4:74:1c:6d:44:24:61:11:d6:20:f4:9d:79: 79:81:f5:28:0f:71:65:e2:76:f3:3f:92:97:fb:a8: 47:e6:d2:a0:67:b2:12:f6:4f:e8:db:8b:0f:35:1c: 8b:37:0a:32:be:63:b4:8c:78:31:a3:99:cc:f3:fc: 1e:02:1f:32:52:19:70:c9:8e:13:02:d5:15:23:2c: da:97:82:00:18:b6:fb:d1:37:fd:ce:30:b2:b1:11: 34:77:76:3c:2e:47:1f:14:46:7a:04:a2:6a:47:89: 63:6c:3a:dd:16:85:8e:49:83:f7:b4:e7:a0:79:04: c0:4c:02:9b:65:3f:6c:34:d8:a2:6c:ac:d5:0e:aa: 71:8d:d2:c2:3e:a2:d6:3e:4b:23:88:a9:20:e8:d3: 51:d7:3f:9e:81:ef:f3:bd:f7:fc:ff:49:d6:d9:5c: 08:1c:33:ad:50:04:58:2b:4d:83:91:49:47:77:70: e1:0a:c1:aa:7b:63:79:14:42:00:b8:0c:50:91:f3: 23:f0:4f:98:78:b9:00:3c:66:bf:00:f9:17:2c:f3: 84:63:b1:6e:cd:5b:e3:90:31:68:c9:da:17:b9:6c: ea:d1:e5:c5:81:d9:8e:d1:05:d6:59:49:e3:e3:e3: 3f:2a:a6:70:f0:a5:8f:93:2f:0a:a8:d6:85:1d:68: f6:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:1C:B1:06:1B:FD:AF:05:95:A4:AF:18:1F:B2:E9:86:A2:7F:0B:1C X509v3 Authority Key Identifier: keyid:18:5B:55:7E:F3:BE:81:98:5C:5E:6C:D9:62:47:61:CA:A4:F9:36:CE X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3818/GFtVfvO-gZhcXmzZYkdhyqT5Ns4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GFtVfvO-gZhcXmzZYkdhyqT5Ns4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3818/UxyxBhv9rwWVpK8YH7LphqJ_Cxw.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.244.140.0/22 Signature Algorithm: sha256WithRSAEncryption 59:72:20:05:ab:1e:20:94:d8:48:cb:3c:97:32:cf:49:dd:51: bb:b9:e6:7e:a8:78:c8:29:61:ac:a3:f1:d2:94:55:d1:40:91: ff:23:7f:61:d8:f2:ee:9a:0d:78:21:c9:61:9e:f9:13:33:97: c9:a1:91:23:17:c6:73:e9:c1:82:3f:8a:6f:e6:6e:b5:ea:41: 0f:ba:ac:d1:ac:66:40:ac:7c:bb:f7:bb:7b:ca:26:6d:f0:8a: f2:de:91:1e:b7:01:26:7b:b6:f6:bd:9a:7d:6d:ea:f0:4f:7f: 8e:10:1c:78:73:08:e8:ba:01:6a:a3:99:95:89:1d:58:ca:f3: b4:9d:10:77:09:59:3d:52:c8:02:bd:ab:b2:a4:51:4a:c4:24: f1:b5:f0:fe:27:0e:6f:ef:b2:fd:a6:a9:69:e6:27:af:af:eb: ff:79:c6:24:9a:74:8c:c3:f1:70:00:3f:91:b6:d9:6b:00:86: 7a:c7:0c:f8:1a:4d:06:f5:a2:ff:62:ce:91:a8:14:5c:45:10: 2d:6b:67:5b:2f:6f:34:92:10:46:4c:07:a7:02:45:d7:14:67: 87:9f:2e:b0:61:a3:4c:3c:a8:5d:64:1d:f3:22:0f:cf:25:af: 04:57:e8:ed:71:a1:a9:f9:1c:72:22:64:f8:91:54:46:37:98: f5:4d:cf:46 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgIBLTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxODVC NTU3RUYzQkU4MTk4NUM1RTZDRDk2MjQ3NjFDQUE0RjkzNkNFMB4XDTI0MDIyOTAx MzQwMloXDTI1MDIxNDAxMzAwM1owMzExMC8GA1UEAxMoNTMxQ0IxMDYxQkZEQUYw NTk1QTRBRjE4MUZCMkU5ODZBMjdGMEIxQzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALXUdBxtRCRhEdYg9J15eYH1KA9xZeJ28z+Sl/uoR+bSoGeyEvZP 6NuLDzUcizcKMr5jtIx4MaOZzPP8HgIfMlIZcMmOEwLVFSMs2peCABi2+9E3/c4w srERNHd2PC5HHxRGegSiakeJY2w63RaFjkmD97TnoHkEwEwCm2U/bDTYomys1Q6q cY3Swj6i1j5LI4ipIOjTUdc/noHv8733/P9J1tlcCBwzrVAEWCtNg5FJR3dw4QrB qntjeRRCALgMUJHzI/BPmHi5ADxmvwD5FyzzhGOxbs1b45AxaMnaF7ls6tHlxYHZ jtEF1llJ4+PjPyqmcPClj5MvCqjWhR1o9mUCAwEAAaOCAiYwggIiMB0GA1UdDgQW BBRTHLEGG/2vBZWkrxgfsumGon8LHDAfBgNVHSMEGDAWgBQYW1V+876BmFxebNli R2HKpPk2zjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzgxOC9HRnRWZnZPLWdaaGNYbXpaWWtkaHlxVDVOczQuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9HRnRWZnZPLWdaaGNYbXpaWWtkaHlx VDVOczQuY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzgxOC9VeHl4Qmh2OXJ3V1ZwSzhZSDdMcGhxSl9DeHcucm9h MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQCyvSMMA0GCSqGSIb3DQEBCwUAA4IBAQBZciAFqx4glNhIyzyXMs9J3VG7 ueZ+qHjIKWGso/HSlFXRQJH/I39h2PLumg14IclhnvkTM5fJoZEjF8Zz6cGCP4pv 5m616kEPuqzRrGZArHy797t7yiZt8Iry3pEetwEme7b2vZp9berwT3+OEBx4cwjo ugFqo5mViR1YyvO0nRB3CVk9UsgCvauypFFKxCTxtfD+Jw5v77L9pqlp5ievr+v/ ecYkmnSMw/FwAD+RttlrAIZ6xwz4Gk0G9aL/Ys6RqBRcRRAta2dbL280khBGTAen AkXXFGeHny6wYaNMPKhdZB3zIg/PJa8EV+jtcaGp+RxyImT4kVRGN5j1Tc9G -----END CERTIFICATE-----Generated at Thu May 2 12:22:51 2024 by rpki-client on console-ams.rpki-client.org