$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/W_V-ILQ5vKsk3UU9FecZnOWRgOU.roa File: W_V-ILQ5vKsk3UU9FecZnOWRgOU.roa (raw, json) Hash identifier: ehJpVuEQfTt5wJGmzfE6XWWzV0kw6ZSqavu59X5sB64= Subject key identifier: 5B:F5:7E:20:B4:39:BC:AB:24:DD:45:3D:15:E7:19:9C:E5:91:80:E5 Certificate issuer: /CN=095A182FA18D458233284AA8DC88BD075E5D702D Certificate serial: 0130 Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/W_V-ILQ5vKsk3UU9FecZnOWRgOU.roa Signing time: Mon 01 Jan 2024 01:30:25 +0000 ROA not before: Mon 01 Jan 2024 01:30:25 +0000 ROA not after: Sat 14 Dec 2024 01:30:03 +0000 asID: 2527 IP address blocks: 211.2.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Jul 2024 10:51:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 304 (0x130) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D Validity Not Before: Jan 1 01:30:25 2024 GMT Not After : Dec 14 01:30:03 2024 GMT Subject: CN=5BF57E20B439BCAB24DD453D15E7199CE59180E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ef:dc:c1:f2:9b:1b:62:f8:60:d3:7b:f2:6c: 7f:7c:0e:d7:30:73:8a:8d:cb:15:5f:ce:9f:55:17: 4f:c6:42:c0:43:81:50:f0:0f:e6:87:93:81:93:96: 11:f2:c4:d2:36:55:aa:12:34:f1:59:06:99:5c:02: 26:cc:cd:45:d4:61:3d:2b:77:e9:bd:2f:f0:25:d5: b3:dc:77:9e:98:e1:6a:b7:cf:ad:d4:fb:f1:b6:53: fb:c0:5a:98:b8:86:4e:7e:68:aa:2c:41:ef:fc:7f: 64:0d:82:bf:47:a0:1c:2b:6d:26:23:58:74:16:70: 38:82:63:cb:07:79:64:46:a1:f2:84:af:ee:df:8a: 4c:9e:cd:9f:a4:67:d7:74:86:1a:51:9e:2c:da:94: 0c:ba:b2:60:84:88:bb:f3:20:20:89:06:93:c3:ed: 17:4c:45:49:60:74:b9:a9:53:46:62:db:e3:7a:cf: 34:3e:bb:e4:0c:ec:ea:5e:04:10:20:bd:75:1a:d5: 27:d1:5b:c7:48:7b:91:d4:0c:2c:18:14:a7:cf:98: 63:f1:d0:bb:b6:f3:35:1c:6f:84:dd:d5:ad:e6:34: 7f:70:e5:56:b3:a1:35:62:af:7e:0a:ac:2a:68:9b: 47:58:b3:4a:ce:7e:09:fa:b3:27:88:6f:f8:b2:80: 57:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:F5:7E:20:B4:39:BC:AB:24:DD:45:3D:15:E7:19:9C:E5:91:80:E5 X509v3 Authority Key Identifier: keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/W_V-ILQ5vKsk3UU9FecZnOWRgOU.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 211.2.0.0/18 Signature Algorithm: sha256WithRSAEncryption b3:51:8d:65:33:a7:de:8a:1f:a9:65:42:56:72:22:7a:c4:4c: 41:09:0e:09:62:87:2f:c6:4f:2d:fd:a4:80:27:23:23:53:74: d3:bf:f0:10:4a:cf:12:3a:8d:3a:c2:0d:ba:f9:32:5c:70:cf: 0f:96:bb:87:b4:fe:66:02:8f:27:f3:0b:27:46:59:6f:da:74: cc:39:b9:3f:25:a4:cc:40:8c:2a:e0:a8:c0:36:23:78:2c:69: cd:97:c2:f1:59:18:10:6f:3b:73:53:cd:c9:dc:7f:d0:d9:d9: 9b:b3:42:74:df:26:a1:c2:c9:f1:ab:0c:74:42:84:07:a5:a7: 5f:bd:12:b6:be:a0:fe:05:b3:45:43:f2:9c:75:b5:96:db:d2: fb:3b:83:09:35:88:79:c5:a5:91:37:60:a2:6f:af:f9:76:a9: e4:05:37:35:61:02:7b:f8:d6:e5:59:79:4e:c0:79:7c:cb:4a: 41:6d:b3:4f:ef:f5:ac:6d:29:af:b3:3a:82:1d:1b:94:86:59: 2c:1d:6c:71:93:2d:81:9f:0f:a3:08:3d:22:2e:eb:71:93:73: 9d:c5:9c:55:67:ed:3e:af:27:58:76:aa:91:49:af:26:96:d0: c3:75:51:02:b2:76:2b:94:e4:e5:62:e6:c3:0c:21:3f:44:a5: 95:de:cc:4d -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgICATAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDk1 QTE4MkZBMThENDU4MjMzMjg0QUE4REM4OEJEMDc1RTVENzAyRDAeFw0yNDAxMDEw MTMwMjVaFw0yNDEyMTQwMTMwMDNaMDMxMTAvBgNVBAMTKDVCRjU3RTIwQjQzOUJD QUIyNERENDUzRDE1RTcxOTlDRTU5MTgwRTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCy79zB8psbYvhg03vybH98Dtcwc4qNyxVfzp9VF0/GQsBDgVDw D+aHk4GTlhHyxNI2VaoSNPFZBplcAibMzUXUYT0rd+m9L/Al1bPcd56Y4Wq3z63U +/G2U/vAWpi4hk5+aKosQe/8f2QNgr9HoBwrbSYjWHQWcDiCY8sHeWRGofKEr+7f ikyezZ+kZ9d0hhpRnizalAy6smCEiLvzICCJBpPD7RdMRUlgdLmpU0Zi2+N6zzQ+ u+QM7OpeBBAgvXUa1SfRW8dIe5HUDCwYFKfPmGPx0Lu28zUcb4Td1a3mNH9w5Vaz oTVir34KrCpom0dYs0rOfgn6syeIb/iygFdFAgMBAAGjggIiMIICHjAdBgNVHQ4E FgQUW/V+ILQ5vKsk3UU9FecZnOWRgOUwHwYDVR0jBBgwFoAUCVoYL6GNRYIzKEqo 3Ii9B15dcC0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzQzL0NWb1lMNkdOUllJektFcW8zSWk5QjE1ZGNDMC5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0NWb1lMNkdOUllJektFcW8zSWk5QjE1 ZGNDMC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG6BggrBgEFBQcBCwSBrTCBqjBgBggr BgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC80My9XX1YtSUxRNXZLc2szVVU5RmVjWm5PV1JnT1Uucm9hMEYG CCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJk cC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQG0wIAMA0GCSqGSIb3DQEBCwUAA4IBAQCzUY1lM6feih+pZUJWciJ6xExBCQ4J Yocvxk8t/aSAJyMjU3TTv/AQSs8SOo06wg26+TJccM8PlruHtP5mAo8n8wsnRllv 2nTMObk/JaTMQIwq4KjANiN4LGnNl8LxWRgQbztzU83J3H/Q2dmbs0J03yahwsnx qwx0QoQHpadfvRK2vqD+BbNFQ/KcdbWW29L7O4MJNYh5xaWRN2Cib6/5dqnkBTc1 YQJ7+NblWXlOwHl8y0pBbbNP7/WsbSmvszqCHRuUhlksHWxxky2Bnw+jCD0iLutx k3OdxZxVZ+0+rydYdqqRSa8mltDDdVECsnYrlOTlYubDDCE/RKWV3sxN -----END CERTIFICATE-----Generated at Fri Jun 28 05:29:00 2024 by rpki-client on console-ams.rpki-client.org