$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/4cGKS4xi4AihLm5Kw-cLKQdpiUI.roa File: 4cGKS4xi4AihLm5Kw-cLKQdpiUI.roa (raw, json) Hash identifier: EOPfYlCcPST67Dkbriz3GhEkT+nzYPDzYGeddpEAEEw= Subject key identifier: E1:C1:8A:4B:8C:62:E0:08:A1:2E:6E:4A:C3:E7:0B:29:07:69:89:42 Certificate issuer: /CN=095A182FA18D458233284AA8DC88BD075E5D702D Certificate serial: 0124 Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/4cGKS4xi4AihLm5Kw-cLKQdpiUI.roa Signing time: Fri 01 Dec 2023 01:31:58 +0000 ROA not before: Fri 01 Dec 2023 01:31:58 +0000 ROA not after: Thu 14 Nov 2024 01:30:03 +0000 asID: 2527 IP address blocks: 211.10.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Jul 2024 10:51:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 292 (0x124) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D Validity Not Before: Dec 1 01:31:58 2023 GMT Not After : Nov 14 01:30:03 2024 GMT Subject: CN=E1C18A4B8C62E008A12E6E4AC3E70B2907698942 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:0a:61:d9:1b:b3:92:63:80:0c:f7:d7:a0:b9: 1c:fa:ec:33:03:1b:fc:58:db:4c:cb:3c:aa:16:24: 4f:22:d1:c1:6c:c6:51:04:27:00:53:67:15:6b:e6: c7:43:00:54:db:9a:0e:42:ef:ec:0f:77:ba:39:bb: 59:29:e6:bc:30:9b:7c:6f:25:a2:d5:c1:59:a4:cb: 45:5e:7e:ad:bf:f2:c1:9b:c9:43:ca:74:1a:cb:52: dd:c9:28:54:b0:0f:25:93:8a:66:19:89:42:68:1c: 02:dc:09:42:a6:b7:89:2d:85:59:1b:5c:34:c7:13: a3:59:af:ae:7c:16:60:81:b8:23:98:14:f0:31:0d: 72:44:0b:4e:0a:f8:f9:37:c8:a8:2b:fb:32:31:b7: e6:88:89:7d:06:c4:08:cd:ec:f3:aa:8d:7e:85:62: 4f:54:48:24:48:92:9a:53:1c:55:fc:45:b2:08:b6: 0f:82:16:97:a2:4e:ac:c2:29:5b:fd:0b:cb:15:e5: 54:3b:31:8e:5a:ef:b5:42:ae:24:59:e5:42:48:77: 7b:7e:9e:70:62:92:2e:c6:67:83:95:5a:a0:85:5f: 23:b7:78:78:ac:c2:c7:75:c8:b1:ba:96:59:b8:b9: cd:70:83:85:96:1f:f2:d8:96:8e:ac:6c:05:a2:10: c2:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:C1:8A:4B:8C:62:E0:08:A1:2E:6E:4A:C3:E7:0B:29:07:69:89:42 X509v3 Authority Key Identifier: keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/4cGKS4xi4AihLm5Kw-cLKQdpiUI.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 211.10.32.0/19 Signature Algorithm: sha256WithRSAEncryption 40:94:e9:ed:d1:c2:d0:ee:85:f1:88:7c:94:b8:6b:1e:96:56: f2:cf:77:31:1e:56:ee:81:55:f2:bd:cd:cc:69:b0:89:0a:88: 2f:b7:9c:63:16:ca:3a:0d:b9:5d:3a:b1:73:e8:8d:7f:36:ea: ab:42:c9:82:77:51:da:03:ab:89:58:7c:9d:ab:46:8c:dc:91: df:7c:91:83:1a:7b:4e:fb:bb:55:9e:8a:98:5d:aa:46:0a:2c: 0d:d7:91:43:fa:de:65:bf:a2:24:dd:d9:41:b2:28:99:65:9f: bf:84:66:7e:13:bf:ed:ff:5d:98:b8:98:30:3a:92:b3:1d:dd: 21:9c:c1:5c:1c:5a:65:0f:ce:02:6e:10:6a:6e:fa:ff:23:71: e6:b2:39:58:eb:1c:b2:64:fa:6b:2b:62:0b:52:8a:e1:63:80: 35:e5:34:2f:d5:6d:d9:a1:b7:2c:b6:41:f0:ac:e5:80:60:0f: d3:23:d5:f6:8e:84:43:71:89:24:a5:78:65:26:94:1e:ff:58: 60:88:20:1b:40:7a:d7:4f:74:c7:2e:d3:40:7e:af:32:d7:5b: e8:47:06:6b:9a:57:07:1b:83:e8:00:ea:2b:18:48:8e:c4:d5: 14:53:6f:1f:40:87:f2:86:d1:ee:11:b6:60:e1:14:15:91:db: 6d:b7:20:e5 -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgICASQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDk1 QTE4MkZBMThENDU4MjMzMjg0QUE4REM4OEJEMDc1RTVENzAyRDAeFw0yMzEyMDEw MTMxNThaFw0yNDExMTQwMTMwMDNaMDMxMTAvBgNVBAMTKEUxQzE4QTRCOEM2MkUw MDhBMTJFNkU0QUMzRTcwQjI5MDc2OTg5NDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDeCmHZG7OSY4AM99eguRz67DMDG/xY20zLPKoWJE8i0cFsxlEE JwBTZxVr5sdDAFTbmg5C7+wPd7o5u1kp5rwwm3xvJaLVwVmky0Vefq2/8sGbyUPK dBrLUt3JKFSwDyWTimYZiUJoHALcCUKmt4kthVkbXDTHE6NZr658FmCBuCOYFPAx DXJEC04K+Pk3yKgr+zIxt+aIiX0GxAjN7POqjX6FYk9USCRIkppTHFX8RbIItg+C FpeiTqzCKVv9C8sV5VQ7MY5a77VCriRZ5UJId3t+nnBiki7GZ4OVWqCFXyO3eHis wsd1yLG6llm4uc1wg4WWH/LYlo6sbAWiEML9AgMBAAGjggIiMIICHjAdBgNVHQ4E FgQU4cGKS4xi4AihLm5Kw+cLKQdpiUIwHwYDVR0jBBgwFoAUCVoYL6GNRYIzKEqo 3Ii9B15dcC0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzQzL0NWb1lMNkdOUllJektFcW8zSWk5QjE1ZGNDMC5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0NWb1lMNkdOUllJektFcW8zSWk5QjE1 ZGNDMC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG6BggrBgEFBQcBCwSBrTCBqjBgBggr BgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC80My80Y0dLUzR4aTRBaWhMbTVLdy1jTEtRZHBpVUkucm9hMEYG CCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJk cC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQF0wogMA0GCSqGSIb3DQEBCwUAA4IBAQBAlOnt0cLQ7oXxiHyUuGsellbyz3cx HlbugVXyvc3MabCJCogvt5xjFso6DbldOrFz6I1/NuqrQsmCd1HaA6uJWHydq0aM 3JHffJGDGntO+7tVnoqYXapGCiwN15FD+t5lv6Ik3dlBsiiZZZ+/hGZ+E7/t/12Y uJgwOpKzHd0hnMFcHFplD84CbhBqbvr/I3HmsjlY6xyyZPprK2ILUorhY4A15TQv 1W3ZobcstkHwrOWAYA/TI9X2joRDcYkkpXhlJpQe/1hgiCAbQHrXT3THLtNAfq8y 11voRwZrmlcHG4PoAOorGEiOxNUUU28fQIfyhtHuEbZg4RQVkdtttyDl -----END CERTIFICATE-----Generated at Fri Jun 28 04:55:52 2024 by rpki-client on console-fra.rpki-client.org