$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/cKK4CLenNG3lLzo2fNgcvLskfno.roa File: cKK4CLenNG3lLzo2fNgcvLskfno.roa (raw, json) Hash identifier: YhjlIUwcnyG9ENvfwTjyp0YpK9lWS4fcFfih+9GHRCE= Subject key identifier: 70:A2:B8:08:B7:A7:34:6D:E5:2F:3A:36:7C:D8:1C:BC:BB:24:7E:7A Certificate issuer: /CN=095A182FA18D458233284AA8DC88BD075E5D702D Certificate serial: 011E Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/cKK4CLenNG3lLzo2fNgcvLskfno.roa Signing time: Fri 01 Dec 2023 01:31:55 +0000 ROA not before: Fri 01 Dec 2023 01:31:55 +0000 ROA not after: Thu 14 Nov 2024 01:30:03 +0000 asID: 2527 IP address blocks: 211.128.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Jul 2024 10:51:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 286 (0x11e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D Validity Not Before: Dec 1 01:31:55 2023 GMT Not After : Nov 14 01:30:03 2024 GMT Subject: CN=70A2B808B7A7346DE52F3A367CD81CBCBB247E7A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f7:1c:87:4c:16:a0:62:7c:4f:88:98:dc:97: 2b:ed:b4:00:11:ff:36:c7:cb:d4:32:cb:ba:ed:fc: 88:10:7b:2a:3f:a9:a1:bd:40:70:56:37:80:0c:d6: a0:f0:7c:c6:f6:cf:5a:5b:ab:25:af:5d:6f:5a:81: b7:01:91:99:d5:b3:68:dc:15:ff:09:c1:7b:4a:7c: 34:15:18:a8:0c:67:b4:94:d7:35:7b:3f:99:65:4d: 3a:5f:f5:7b:3d:70:ba:58:82:4c:79:29:61:b4:32: cc:4f:54:85:5e:da:0d:68:a4:e2:76:3a:f7:aa:49: f8:22:2e:44:36:94:1a:72:0d:b0:4f:7f:45:79:3f: 47:94:0a:07:05:be:c5:85:10:32:18:51:f1:38:6d: 9b:bb:44:70:f8:39:be:5c:44:ee:cb:2a:71:5a:f4: 55:eb:14:c2:56:fc:db:b2:93:91:2c:91:92:52:48: b2:35:d5:3f:11:ec:3d:96:87:ef:25:c0:02:6f:31: 28:1d:2e:45:a3:90:08:6f:38:03:56:86:40:16:ec: ae:59:04:66:86:d5:d5:f0:c2:61:86:a6:34:ce:ce: 05:00:ba:b3:e4:54:f2:12:7b:24:f1:f4:c1:8a:91: 28:47:ad:f6:6f:7d:93:cb:c2:3d:d7:da:ca:e6:79: 62:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:A2:B8:08:B7:A7:34:6D:E5:2F:3A:36:7C:D8:1C:BC:BB:24:7E:7A X509v3 Authority Key Identifier: keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/cKK4CLenNG3lLzo2fNgcvLskfno.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 211.128.32.0/19 Signature Algorithm: sha256WithRSAEncryption 4c:1f:d9:42:46:c5:83:d1:5e:18:f2:b0:9d:5b:0c:a4:fe:ab: a1:a3:64:f8:f1:fe:e9:65:ad:48:f0:38:3f:08:c6:5e:d9:1f: 7e:e9:93:64:49:74:51:c6:48:a5:61:45:8b:34:92:4d:15:5a: 52:c9:11:9c:da:dd:d3:7d:9e:d3:3c:fd:4a:1b:ba:97:7a:a7: cf:87:e6:b1:c7:0c:6b:56:6f:b1:3f:b3:ce:61:27:02:41:a8: 82:06:75:f2:56:4c:4f:88:cd:79:00:66:fd:fc:c2:35:ad:32: 34:60:b9:e8:f5:10:f7:d0:68:58:3c:e5:a3:e0:6f:13:dc:e7: d7:31:68:88:3e:53:e8:79:c5:14:d4:fe:92:8e:31:ee:50:3e: 10:50:27:f0:a4:81:8d:51:20:f8:fa:a9:89:8c:9f:a7:a3:9f: b2:7d:60:28:23:bd:03:a4:fd:66:ea:95:d4:07:9f:1e:4e:99: 47:47:9d:ae:b6:f4:cf:36:7d:1f:55:38:ed:a2:cd:b2:7d:b6: 04:fb:a3:e7:4d:65:31:3d:f1:9d:28:29:cf:8e:52:a7:7e:c8: 5e:cd:7f:f3:da:db:e6:ab:bb:93:44:46:38:b2:00:c5:a9:55: d1:d0:44:77:a5:68:e5:7c:db:98:7f:0c:7a:f2:0b:31:3f:09: 48:26:16:92 -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgICAR4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDk1 QTE4MkZBMThENDU4MjMzMjg0QUE4REM4OEJEMDc1RTVENzAyRDAeFw0yMzEyMDEw MTMxNTVaFw0yNDExMTQwMTMwMDNaMDMxMTAvBgNVBAMTKDcwQTJCODA4QjdBNzM0 NkRFNTJGM0EzNjdDRDgxQ0JDQkIyNDdFN0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC89xyHTBagYnxPiJjclyvttAAR/zbHy9Qyy7rt/IgQeyo/qaG9 QHBWN4AM1qDwfMb2z1pbqyWvXW9agbcBkZnVs2jcFf8JwXtKfDQVGKgMZ7SU1zV7 P5llTTpf9Xs9cLpYgkx5KWG0MsxPVIVe2g1opOJ2OveqSfgiLkQ2lBpyDbBPf0V5 P0eUCgcFvsWFEDIYUfE4bZu7RHD4Ob5cRO7LKnFa9FXrFMJW/Nuyk5EskZJSSLI1 1T8R7D2Wh+8lwAJvMSgdLkWjkAhvOANWhkAW7K5ZBGaG1dXwwmGGpjTOzgUAurPk VPISeyTx9MGKkShHrfZvfZPLwj3X2srmeWJfAgMBAAGjggIiMIICHjAdBgNVHQ4E FgQUcKK4CLenNG3lLzo2fNgcvLskfnowHwYDVR0jBBgwFoAUCVoYL6GNRYIzKEqo 3Ii9B15dcC0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzQzL0NWb1lMNkdOUllJektFcW8zSWk5QjE1ZGNDMC5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0NWb1lMNkdOUllJektFcW8zSWk5QjE1 ZGNDMC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG6BggrBgEFBQcBCwSBrTCBqjBgBggr BgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC80My9jS0s0Q0xlbk5HM2xMem8yZk5nY3ZMc2tmbm8ucm9hMEYG CCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJk cC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQF04AgMA0GCSqGSIb3DQEBCwUAA4IBAQBMH9lCRsWD0V4Y8rCdWwyk/quho2T4 8f7pZa1I8Dg/CMZe2R9+6ZNkSXRRxkilYUWLNJJNFVpSyRGc2t3TfZ7TPP1KG7qX eqfPh+axxwxrVm+xP7POYScCQaiCBnXyVkxPiM15AGb9/MI1rTI0YLno9RD30GhY POWj4G8T3OfXMWiIPlPoecUU1P6SjjHuUD4QUCfwpIGNUSD4+qmJjJ+no5+yfWAo I70DpP1m6pXUB58eTplHR52utvTPNn0fVTjtos2yfbYE+6PnTWUxPfGdKCnPjlKn fshezX/z2tvmq7uTREY4sgDFqVXR0ER3pWjlfNuYfwx68gsxPwlIJhaS -----END CERTIFICATE-----Generated at Fri Jun 28 05:29:00 2024 by rpki-client on console-ams.rpki-client.org