$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/xOkQ0SHNZXoSNypuZvSppfdtnIU.roa File: xOkQ0SHNZXoSNypuZvSppfdtnIU.roa (raw, json) Hash identifier: q4rn2H+dol/GFvPrRcVgqZmJ06wi9Dv2KcsyEHCTA68= Subject key identifier: C4:E9:10:D1:21:CD:65:7A:12:37:2A:6E:66:F4:A9:A5:F7:6D:9C:85 Certificate issuer: /CN=095A182FA18D458233284AA8DC88BD075E5D702D Certificate serial: 0105 Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/xOkQ0SHNZXoSNypuZvSppfdtnIU.roa Signing time: Fri 01 Dec 2023 01:30:05 +0000 ROA not before: Fri 01 Dec 2023 01:30:05 +0000 ROA not after: Thu 14 Nov 2024 01:30:03 +0000 asID: 2527 IP address blocks: 223.132.0.0/14 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Jul 2024 10:51:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 261 (0x105) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D Validity Not Before: Dec 1 01:30:05 2023 GMT Not After : Nov 14 01:30:03 2024 GMT Subject: CN=C4E910D121CD657A12372A6E66F4A9A5F76D9C85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d0:d5:c0:b4:83:93:99:6a:6e:38:3a:f3:82: f6:3c:ea:d2:7f:7e:39:a7:1b:a3:63:f9:e3:9e:19: ca:df:4e:ec:fd:e3:9c:99:2f:8f:14:fa:e7:7e:5f: 00:90:68:44:58:98:37:af:f1:be:08:85:fc:64:7b: 50:fc:38:63:75:d4:d8:e1:59:03:2e:0c:bc:ba:e5: 42:2d:f5:25:0b:15:85:b5:e2:b0:9d:9a:6f:ad:72: b7:d7:fa:87:87:a5:a9:b9:43:80:d5:50:54:bf:99: e6:d2:1c:fb:b4:17:84:98:77:1d:9a:10:1e:2a:c3: 69:87:0d:41:93:3b:a2:e5:38:e2:bc:46:f2:4a:a7: 9a:37:df:a3:95:bb:ee:76:6b:d4:46:f7:2a:88:dc: 33:21:89:57:75:a5:bd:de:4a:c8:02:84:24:de:6c: cb:2a:62:5b:aa:9f:b9:3c:8e:03:f1:d2:12:33:76: 28:31:89:c0:dd:6b:88:e8:99:7a:73:7a:60:5d:ff: 3a:8f:ed:74:68:ed:db:8d:a9:c7:c1:9e:a7:eb:e0: da:13:67:7b:4f:c4:cf:b0:d8:c7:59:4f:e8:df:eb: 6e:3f:e5:25:a1:9e:b8:8f:2c:66:d6:da:09:99:9a: 6a:96:2d:cf:4e:07:ec:10:32:3e:6e:65:35:48:8a: 95:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:E9:10:D1:21:CD:65:7A:12:37:2A:6E:66:F4:A9:A5:F7:6D:9C:85 X509v3 Authority Key Identifier: keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/xOkQ0SHNZXoSNypuZvSppfdtnIU.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 223.132.0.0/14 Signature Algorithm: sha256WithRSAEncryption 61:f3:8d:61:64:3e:5f:cb:64:3a:95:f9:13:86:e5:22:15:3e: 2f:c8:65:82:b3:1f:31:0f:5b:e9:26:0d:4d:ef:09:62:f3:dc: f3:da:ff:18:06:50:10:21:7e:4e:f6:de:18:4f:9a:5c:75:7b: b4:af:e2:9a:d4:cb:d3:07:df:03:a2:be:0a:fa:1c:37:77:99: aa:de:9b:dc:48:a4:a7:aa:f1:ff:f1:a4:ad:80:e0:0f:ca:a0: b9:46:b9:fb:54:9d:ae:bf:ce:a2:b8:a6:b0:94:6a:14:b1:97: 94:c5:9e:d0:fe:5d:be:8b:9f:27:2f:c9:8d:f1:9f:a7:6e:fe: 60:2f:54:d4:6c:d5:bc:83:77:f4:c2:b8:11:aa:ef:95:26:2a: bb:91:8b:57:77:8b:5c:0a:88:2d:b3:1d:43:34:f6:1f:af:ac: 9e:44:6c:bc:07:8d:85:39:ab:56:f1:6c:72:5a:54:a5:93:d2: e2:ef:64:61:61:24:d4:0f:bf:6f:82:bb:b6:7d:5e:f0:c6:be: fc:fa:a5:3b:f8:1e:97:34:ba:e6:c3:9c:4f:1f:cf:9b:c2:e2: be:5f:97:30:44:c8:de:62:e1:b7:fe:68:0b:6c:57:15:56:60: 8e:74:b4:9e:17:9d:be:89:7a:f5:2b:f8:e4:05:99:f1:65:d3: 74:ce:43:af -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgICAQUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDk1 QTE4MkZBMThENDU4MjMzMjg0QUE4REM4OEJEMDc1RTVENzAyRDAeFw0yMzEyMDEw MTMwMDVaFw0yNDExMTQwMTMwMDNaMDMxMTAvBgNVBAMTKEM0RTkxMEQxMjFDRDY1 N0ExMjM3MkE2RTY2RjRBOUE1Rjc2RDlDODUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDC0NXAtIOTmWpuODrzgvY86tJ/fjmnG6Nj+eOeGcrfTuz945yZ L48U+ud+XwCQaERYmDev8b4Ihfxke1D8OGN11NjhWQMuDLy65UIt9SULFYW14rCd mm+tcrfX+oeHpam5Q4DVUFS/mebSHPu0F4SYdx2aEB4qw2mHDUGTO6LlOOK8RvJK p5o336OVu+52a9RG9yqI3DMhiVd1pb3eSsgChCTebMsqYluqn7k8jgPx0hIzdigx icDda4jomXpzemBd/zqP7XRo7duNqcfBnqfr4NoTZ3tPxM+w2MdZT+jf624/5SWh nriPLGbW2gmZmmqWLc9OB+wQMj5uZTVIipXXAgMBAAGjggIhMIICHTAdBgNVHQ4E FgQUxOkQ0SHNZXoSNypuZvSppfdtnIUwHwYDVR0jBBgwFoAUCVoYL6GNRYIzKEqo 3Ii9B15dcC0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzQzL0NWb1lMNkdOUllJektFcW8zSWk5QjE1ZGNDMC5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0NWb1lMNkdOUllJektFcW8zSWk5QjE1 ZGNDMC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG6BggrBgEFBQcBCwSBrTCBqjBgBggr BgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC80My94T2tRMFNITlpYb1NOeXB1WnZTcHBmZHRuSVUucm9hMEYG CCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJk cC9hcC9ub3RpZmljYXRpb24ueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAF AwMC34QwDQYJKoZIhvcNAQELBQADggEBAGHzjWFkPl/LZDqV+ROG5SIVPi/IZYKz HzEPW+kmDU3vCWLz3PPa/xgGUBAhfk723hhPmlx1e7Sv4prUy9MH3wOivgr6HDd3 marem9xIpKeq8f/xpK2A4A/KoLlGuftUna6/zqK4prCUahSxl5TFntD+Xb6Lnycv yY3xn6du/mAvVNRs1byDd/TCuBGq75UmKruRi1d3i1wKiC2zHUM09h+vrJ5EbLwH jYU5q1bxbHJaVKWT0uLvZGFhJNQPv2+Cu7Z9XvDGvvz6pTv4Hpc0uubDnE8fz5vC 4r5flzBEyN5i4bf+aAtsVxVWYI50tJ4Xnb6JevUr+OQFmfFl03TOQ68= -----END CERTIFICATE-----Generated at Fri Jun 28 04:55:52 2024 by rpki-client on console-fra.rpki-client.org