$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/k0g2Mi11FjjQHZgz9LMqirpgP0I.roa File: k0g2Mi11FjjQHZgz9LMqirpgP0I.roa (raw, json) Hash identifier: lT1MYpqk9Of6W0nUmOwR2hsAL0CPedQvQqs3B0/+x0M= Subject key identifier: 93:48:36:32:2D:75:16:38:D0:1D:98:33:F4:B3:2A:8A:BA:60:3F:42 Certificate issuer: /CN=095A182FA18D458233284AA8DC88BD075E5D702D Certificate serial: 0111 Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/k0g2Mi11FjjQHZgz9LMqirpgP0I.roa Signing time: Fri 01 Dec 2023 01:31:48 +0000 ROA not before: Fri 01 Dec 2023 01:31:48 +0000 ROA not after: Thu 14 Nov 2024 01:30:03 +0000 asID: 2527 IP address blocks: 58.87.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Jul 2024 10:51:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 273 (0x111) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D Validity Not Before: Dec 1 01:31:48 2023 GMT Not After : Nov 14 01:30:03 2024 GMT Subject: CN=934836322D751638D01D9833F4B32A8ABA603F42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b0:45:f0:d4:8d:7a:98:72:42:ae:14:cb:36: 2e:28:f2:93:eb:f8:4a:c7:ba:02:2c:9c:f3:b6:46: 3a:ef:12:0f:53:e0:f5:68:f4:5f:79:4b:3e:d8:66: e2:e1:2f:5b:b0:8b:5c:71:f8:85:b6:67:d4:b5:7f: c3:66:f1:2d:b9:0f:31:ad:6c:ab:2e:f2:51:e7:a7: fe:fd:d5:b8:1e:7c:8d:8f:0a:e6:9b:1c:f5:ea:dd: 4a:2c:14:0e:cd:ba:29:22:1f:32:3b:33:14:4f:34: d6:57:b2:33:ca:c8:42:94:8b:d2:88:00:4e:7b:7e: 0c:d7:78:a3:2b:92:54:93:7f:a4:38:8d:6e:ab:40: cb:b3:a4:22:47:2b:29:ed:52:d8:7f:3d:82:fe:bb: 29:78:f5:8c:6d:10:c8:80:9a:4a:c1:94:52:0a:3b: a6:2a:f3:63:aa:bb:05:f5:7e:b4:3f:02:e6:6b:71: f3:dc:cf:1f:b4:65:cd:72:50:60:00:77:44:c2:1d: fc:a6:79:b1:79:18:ea:6e:80:5a:75:fe:99:cd:ba: 2a:ef:f9:ee:22:64:ce:bf:d7:18:6e:f2:63:a3:a6: a2:eb:83:9d:a6:ac:32:83:ad:a5:13:f0:ae:37:c7: 10:6e:d3:8b:29:f4:af:23:a6:39:cf:19:1d:8a:f0: b3:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:48:36:32:2D:75:16:38:D0:1D:98:33:F4:B3:2A:8A:BA:60:3F:42 X509v3 Authority Key Identifier: keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/k0g2Mi11FjjQHZgz9LMqirpgP0I.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 58.87.128.0/17 Signature Algorithm: sha256WithRSAEncryption 0c:e0:fc:e4:c2:9e:7a:62:03:04:34:00:d6:5e:ee:c7:75:df: e3:c8:48:7c:ab:37:f1:76:a2:0d:17:14:7c:ca:fa:c5:a6:79: a7:4d:18:d8:87:f0:73:6c:da:84:77:ee:7e:0d:df:f5:74:cf: 32:6e:f9:33:0e:34:5c:2c:70:38:2a:34:d0:e4:2c:26:b0:66: bf:11:ac:0e:89:0b:52:91:70:a3:75:2d:32:64:7c:f9:d0:04: fe:42:b9:5c:e1:83:23:31:0f:30:08:3f:1d:56:2f:27:2c:70: b3:e3:26:72:e0:56:3f:ca:d0:9f:49:41:f5:ba:33:b8:00:59: 53:5a:69:ce:84:b7:43:bc:31:30:2e:f3:90:1a:d3:aa:d4:de: 36:c5:d0:6f:99:9f:a8:d3:f2:0e:0e:a4:b0:c0:da:1c:e1:45: 92:e5:5d:b2:e9:8c:8d:b3:22:6f:10:d3:4b:af:71:a8:f0:d6: 3a:93:9a:e9:a6:8a:52:14:a1:52:52:00:b4:3c:62:3e:dd:aa: b3:60:8a:4c:9a:62:3c:0e:73:89:af:d2:ae:4f:39:e4:65:09: ba:69:9e:13:04:9c:a0:a1:9a:9b:0f:78:14:83:72:0b:84:55: d4:8f:9a:1a:4a:68:48:c4:e9:2c:89:22:be:1a:cb:0f:df:9a: f5:78:6d:4b -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgICAREwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDk1 QTE4MkZBMThENDU4MjMzMjg0QUE4REM4OEJEMDc1RTVENzAyRDAeFw0yMzEyMDEw MTMxNDhaFw0yNDExMTQwMTMwMDNaMDMxMTAvBgNVBAMTKDkzNDgzNjMyMkQ3NTE2 MzhEMDFEOTgzM0Y0QjMyQThBQkE2MDNGNDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+sEXw1I16mHJCrhTLNi4o8pPr+ErHugIsnPO2RjrvEg9T4PVo 9F95Sz7YZuLhL1uwi1xx+IW2Z9S1f8Nm8S25DzGtbKsu8lHnp/791bgefI2PCuab HPXq3UosFA7NuikiHzI7MxRPNNZXsjPKyEKUi9KIAE57fgzXeKMrklSTf6Q4jW6r QMuzpCJHKyntUth/PYL+uyl49YxtEMiAmkrBlFIKO6Yq82OquwX1frQ/AuZrcfPc zx+0Zc1yUGAAd0TCHfymebF5GOpugFp1/pnNuirv+e4iZM6/1xhu8mOjpqLrg52m rDKDraUT8K43xxBu04sp9K8jpjnPGR2K8LM7AgMBAAGjggIiMIICHjAdBgNVHQ4E FgQUk0g2Mi11FjjQHZgz9LMqirpgP0IwHwYDVR0jBBgwFoAUCVoYL6GNRYIzKEqo 3Ii9B15dcC0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzQzL0NWb1lMNkdOUllJektFcW8zSWk5QjE1ZGNDMC5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0NWb1lMNkdOUllJektFcW8zSWk5QjE1 ZGNDMC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG6BggrBgEFBQcBCwSBrTCBqjBgBggr BgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC80My9rMGcyTWkxMUZqalFIWmd6OUxNcWlycGdQMEkucm9hMEYG CCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJk cC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQHOleAMA0GCSqGSIb3DQEBCwUAA4IBAQAM4Pzkwp56YgMENADWXu7Hdd/jyEh8 qzfxdqINFxR8yvrFpnmnTRjYh/BzbNqEd+5+Dd/1dM8ybvkzDjRcLHA4KjTQ5Cwm sGa/EawOiQtSkXCjdS0yZHz50AT+Qrlc4YMjMQ8wCD8dVi8nLHCz4yZy4FY/ytCf SUH1ujO4AFlTWmnOhLdDvDEwLvOQGtOq1N42xdBvmZ+o0/IODqSwwNoc4UWS5V2y 6YyNsyJvENNLr3Go8NY6k5rppopSFKFSUgC0PGI+3aqzYIpMmmI8DnOJr9KuTznk ZQm6aZ4TBJygoZqbD3gUg3ILhFXUj5oaSmhIxOksiSK+GssP35r1eG1L -----END CERTIFICATE-----Generated at Fri Jun 28 04:55:52 2024 by rpki-client on console-fra.rpki-client.org