$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/440/XcrkASALmvjPGO_8uGh2Jlj9y9c.roa File: XcrkASALmvjPGO_8uGh2Jlj9y9c.roa (raw, json) Hash identifier: imMX5WsATNjpIso364ZJOBORmqOc95adXnfLAAGOt5c= Subject key identifier: 5D:CA:E4:01:20:0B:9A:F8:CF:18:EF:FC:B8:68:76:26:58:FD:CB:D7 Certificate issuer: /CN=E62338DE332C6F4B9E2596EE5DC379A25EFE58CF Certificate serial: 4A Authority key identifier: E6:23:38:DE:33:2C:6F:4B:9E:25:96:EE:5D:C3:79:A2:5E:FE:58:CF Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/XcrkASALmvjPGO_8uGh2Jlj9y9c.roa Signing time: Mon 01 Jan 2024 01:30:53 +0000 ROA not before: Mon 01 Jan 2024 01:30:53 +0000 ROA not after: Sat 14 Dec 2024 01:30:03 +0000 asID: 17676 IP address blocks: 61.122.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/5iM43jMsb0ueJZbuXcN5ol7-WM8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/5iM43jMsb0ueJZbuXcN5ol7-WM8.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74 (0x4a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E62338DE332C6F4B9E2596EE5DC379A25EFE58CF Validity Not Before: Jan 1 01:30:53 2024 GMT Not After : Dec 14 01:30:03 2024 GMT Subject: CN=5DCAE401200B9AF8CF18EFFCB868762658FDCBD7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:04:ce:ed:96:98:b4:b9:f3:75:62:57:0f:9e: 47:6e:ec:fc:05:0d:a5:95:ad:a7:e8:9a:c8:5f:69: 00:72:e3:94:bd:48:65:33:25:36:b2:14:43:eb:cf: e3:3a:a3:6f:2d:77:39:14:09:51:40:0a:3d:88:1d: c0:e5:46:cc:ee:d7:25:fe:c2:b9:de:f6:07:db:af: 1d:e9:4e:0f:8e:c7:e1:60:0e:fe:02:60:a1:21:b2: ee:8c:16:69:af:27:37:96:b9:f1:29:02:b7:de:9d: 2d:0f:3c:15:fc:7f:48:43:37:ed:f8:31:2f:3e:ff: 2a:73:34:39:d1:71:7d:b2:9a:ed:1c:2a:99:cd:8b: bc:6a:13:7c:e5:a4:9a:57:46:5f:6a:9a:df:ff:5d: f5:e4:02:8f:ef:3e:fa:68:a9:f4:e4:be:c0:7a:d6: f5:01:ba:7d:3c:1e:6a:f5:b1:df:ab:0a:1f:2f:30: ff:05:be:06:35:6b:17:d9:1c:14:c5:01:a0:57:c8: 27:d8:2e:14:d7:41:42:4f:b5:86:12:d5:18:73:83: 40:5e:c6:19:c3:af:88:53:cc:56:70:35:8c:54:70: dc:8f:b6:63:7a:e1:51:c6:8b:e2:97:8b:3d:1d:c5: fa:c6:62:18:2e:16:8b:e9:58:2c:18:1f:2e:2f:ef: 98:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:CA:E4:01:20:0B:9A:F8:CF:18:EF:FC:B8:68:76:26:58:FD:CB:D7 X509v3 Authority Key Identifier: keyid:E6:23:38:DE:33:2C:6F:4B:9E:25:96:EE:5D:C3:79:A2:5E:FE:58:CF X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/5iM43jMsb0ueJZbuXcN5ol7-WM8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/XcrkASALmvjPGO_8uGh2Jlj9y9c.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 61.122.32.0/20 Signature Algorithm: sha256WithRSAEncryption 20:ba:2b:cc:52:fd:cd:42:26:05:fb:39:d6:9d:65:2c:3d:97: 02:da:2f:3a:3c:f8:7c:a5:8c:a6:da:74:a0:9a:61:2e:7a:f1: 80:51:49:27:9c:ce:64:0f:77:70:e2:6b:66:0a:ad:5a:01:a3: 9d:b1:10:e8:35:06:c6:2f:03:a9:c9:ed:0d:a7:81:8e:e2:c6: c9:aa:3b:b7:4d:b9:55:cb:87:5b:31:dc:6d:ae:dc:67:47:b5: 05:f3:92:b7:79:d1:bf:8f:64:e0:18:76:dd:0d:49:cb:00:bd: 51:21:9e:25:88:0b:f5:2b:03:1d:17:48:39:5f:5d:37:1f:4c: f8:c0:6d:37:e0:3f:46:76:23:20:97:78:6c:6d:ef:98:3c:55: 21:cd:eb:d7:cf:fa:2e:43:5f:d3:87:04:da:55:8a:76:59:a8: 46:54:27:c9:bd:b4:40:90:6b:8f:d9:09:ad:68:fa:1b:b5:71: 0c:12:b3:38:5f:b9:1d:07:19:3f:03:8a:7e:7d:06:d1:24:ea: 14:5a:0b:2e:ad:5d:c0:fa:9f:7a:c9:ed:83:06:40:61:f3:39: d4:f2:43:3b:03:26:cf:16:55:b6:30:61:dc:4c:d8:50:a9:83: bb:b2:66:31:cc:ff:bb:39:47:e9:15:6c:f4:04:fc:f2:df:b3: eb:b3:1a:99 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBSjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFNjIz MzhERTMzMkM2RjRCOUUyNTk2RUU1REMzNzlBMjVFRkU1OENGMB4XDTI0MDEwMTAx MzA1M1oXDTI0MTIxNDAxMzAwM1owMzExMC8GA1UEAxMoNURDQUU0MDEyMDBCOUFG OENGMThFRkZDQjg2ODc2MjY1OEZEQ0JENzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMYEzu2WmLS583ViVw+eR27s/AUNpZWtp+iayF9pAHLjlL1IZTMl NrIUQ+vP4zqjby13ORQJUUAKPYgdwOVGzO7XJf7Cud72B9uvHelOD47H4WAO/gJg oSGy7owWaa8nN5a58SkCt96dLQ88Ffx/SEM37fgxLz7/KnM0OdFxfbKa7Rwqmc2L vGoTfOWkmldGX2qa3/9d9eQCj+8++mip9OS+wHrW9QG6fTweavWx36sKHy8w/wW+ BjVrF9kcFMUBoFfIJ9guFNdBQk+1hhLVGHODQF7GGcOviFPMVnA1jFRw3I+2Y3rh UcaL4peLPR3F+sZiGC4Wi+lYLBgfLi/vmLECAwEAAaOCAiQwggIgMB0GA1UdDgQW BBRdyuQBIAua+M8Y7/y4aHYmWP3L1zAfBgNVHSMEGDAWgBTmIzjeMyxvS54llu5d w3miXv5YzzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNDQwLzVpTTQzak1zYjB1ZUpaYnVYY041b2w3LVdNOC5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzVpTTQzak1zYjB1ZUpaYnVYY041b2w3 LVdNOC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC80NDAvWGNya0FTQUxtdmpQR09fOHVHaDJKbGo5eTljLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBD16IDANBgkqhkiG9w0BAQsFAAOCAQEAILorzFL9zUImBfs51p1lLD2XAtov Ojz4fKWMptp0oJphLnrxgFFJJ5zOZA93cOJrZgqtWgGjnbEQ6DUGxi8DqcntDaeB juLGyao7t025VcuHWzHcba7cZ0e1BfOSt3nRv49k4Bh23Q1JywC9USGeJYgL9SsD HRdIOV9dNx9M+MBtN+A/RnYjIJd4bG3vmDxVIc3r18/6LkNf04cE2lWKdlmoRlQn yb20QJBrj9kJrWj6G7VxDBKzOF+5HQcZPwOKfn0G0STqFFoLLq1dwPqfesntgwZA YfM51PJDOwMmzxZVtjBh3EzYUKmDu7JmMcz/uzlH6RVs9AT88t+z67MamQ== -----END CERTIFICATE-----Generated at Sat Jun 1 15:54:39 2024 by rpki-client on console-ams.rpki-client.org