$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/447/2sbHGSOc-wRzVS20q6WKaM0pnm0.roa File: 2sbHGSOc-wRzVS20q6WKaM0pnm0.roa (raw, json) Hash identifier: b1ZDdYAweYXkSPTIAYUYrLt44tWJ+CRghIJv4JZ4dKw= Subject key identifier: DA:C6:C7:19:23:9C:FB:04:73:55:2D:B4:AB:A5:8A:68:CD:29:9E:6D Certificate issuer: /CN=C5034FBBCE0799A0F28683BD3BA339A9BD645BDC Certificate serial: 02 Authority key identifier: C5:03:4F:BB:CE:07:99:A0:F2:86:83:BD:3B:A3:39:A9:BD:64:5B:DC Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xQNPu84HmaDyhoO9O6M5qb1kW9w.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/447/2sbHGSOc-wRzVS20q6WKaM0pnm0.roa Signing time: Tue 16 Apr 2024 04:05:43 +0000 ROA not before: Tue 16 Apr 2024 04:05:43 +0000 ROA not after: Wed 16 Apr 2025 03:56:56 +0000 asID: 10002 IP address blocks: 61.114.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/447/xQNPu84HmaDyhoO9O6M5qb1kW9w.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/447/xQNPu84HmaDyhoO9O6M5qb1kW9w.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xQNPu84HmaDyhoO9O6M5qb1kW9w.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 13 Jun 2024 14:03:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C5034FBBCE0799A0F28683BD3BA339A9BD645BDC Validity Not Before: Apr 16 04:05:43 2024 GMT Not After : Apr 16 03:56:56 2025 GMT Subject: CN=DAC6C719239CFB0473552DB4ABA58A68CD299E6D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:96:5a:32:51:39:e6:af:dc:d0:60:11:0d:10: bd:12:f2:59:ca:27:98:6e:20:be:c3:53:83:de:07: 73:3a:f3:31:43:c9:8d:8c:fb:60:e4:fe:21:fe:63: 76:a3:21:78:10:ec:f0:9c:86:b6:9f:44:86:f2:94: 35:e0:2c:45:af:5b:78:4c:d2:8e:9e:04:1c:26:fb: 58:03:27:1c:25:89:d7:c7:7c:cc:18:37:8c:3d:a8: c2:e8:ac:a3:ab:e3:ac:59:86:b0:ae:21:72:24:84: 6c:f1:e5:37:35:bc:89:19:0d:ae:f0:62:5f:7b:88: 12:99:e2:f5:e3:8c:e6:05:f2:20:37:5a:7b:8c:0a: 6a:d1:63:a8:59:c3:10:c5:9b:d3:82:5e:20:be:32: 4e:a8:dd:18:86:0f:66:b8:c2:fb:be:ab:91:5e:73: 5d:1c:61:99:26:e9:02:1e:2b:ef:36:e8:d2:2e:06: c6:18:db:c7:47:9a:f3:d3:7e:2e:82:c9:c1:46:1d: 5c:35:5d:8e:a0:ba:07:a1:a4:07:61:74:54:88:4d: a2:f1:5f:6a:b5:6b:a8:cb:ff:8d:26:3c:9c:cf:12: 33:cc:a9:60:09:2d:7f:95:ae:38:c4:6b:14:6e:e9: e9:7b:f4:a0:3b:0c:d5:2e:ce:38:61:8b:c7:77:7b: 16:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:C6:C7:19:23:9C:FB:04:73:55:2D:B4:AB:A5:8A:68:CD:29:9E:6D X509v3 Authority Key Identifier: keyid:C5:03:4F:BB:CE:07:99:A0:F2:86:83:BD:3B:A3:39:A9:BD:64:5B:DC X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/447/xQNPu84HmaDyhoO9O6M5qb1kW9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xQNPu84HmaDyhoO9O6M5qb1kW9w.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/447/2sbHGSOc-wRzVS20q6WKaM0pnm0.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 61.114.64.0/20 Signature Algorithm: sha256WithRSAEncryption 1b:79:ba:18:be:04:6f:1a:9e:ed:c0:a9:29:87:e9:70:09:d4: 05:d0:d5:ae:58:7e:04:d0:a7:73:d3:c2:9c:71:6f:2c:22:d2: b4:da:6e:44:8b:74:32:d0:df:12:c7:12:5e:9b:68:83:78:fc: c4:2d:e5:77:3e:35:d3:4d:c3:be:3e:34:e2:17:a9:6d:93:fd: c1:1e:5d:bf:33:2d:92:c8:14:b7:2d:d4:92:41:a0:4e:29:56: 3d:09:29:aa:55:1a:de:68:f9:19:a3:68:32:7b:85:6f:85:ca: e5:af:05:0c:cb:f3:ed:36:3e:e3:5d:a0:b1:41:de:eb:43:22: a3:de:48:cb:c8:e1:1f:10:a6:cd:b9:14:df:c7:33:74:9b:e3: b0:55:af:64:23:ec:1c:64:ef:99:a6:f3:c6:51:49:45:27:e6: db:44:dd:3c:ca:a6:06:65:39:c2:d0:20:ca:60:4b:7e:a2:82: d8:c8:28:bb:8b:5f:5a:48:ec:b8:de:0a:a7:e5:57:61:6a:12: 91:ae:0b:42:6f:a0:d2:dd:b9:89:de:d8:3c:af:bb:e9:59:7a: 41:3b:d0:30:44:ca:b2:5c:1b:98:db:01:cc:ec:aa:88:4c:5c: 8e:86:d5:3d:51:a8:2b:18:77:fc:1b:4b:8f:d8:53:1e:6e:60: 59:25:b3:3e -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBAjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDNTAz NEZCQkNFMDc5OUEwRjI4NjgzQkQzQkEzMzlBOUJENjQ1QkRDMB4XDTI0MDQxNjA0 MDU0M1oXDTI1MDQxNjAzNTY1NlowMzExMC8GA1UEAxMoREFDNkM3MTkyMzlDRkIw NDczNTUyREI0QUJBNThBNjhDRDI5OUU2RDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAJuWWjJROeav3NBgEQ0QvRLyWconmG4gvsNTg94HczrzMUPJjYz7 YOT+If5jdqMheBDs8JyGtp9EhvKUNeAsRa9beEzSjp4EHCb7WAMnHCWJ18d8zBg3 jD2owuiso6vjrFmGsK4hciSEbPHlNzW8iRkNrvBiX3uIEpni9eOM5gXyIDdae4wK atFjqFnDEMWb04JeIL4yTqjdGIYPZrjC+76rkV5zXRxhmSbpAh4r7zbo0i4Gxhjb x0ea89N+LoLJwUYdXDVdjqC6B6GkB2F0VIhNovFfarVrqMv/jSY8nM8SM8ypYAkt f5WuOMRrFG7p6Xv0oDsM1S7OOGGLx3d7FlkCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBTaxscZI5z7BHNVLbSrpYpozSmebTAfBgNVHSMEGDAWgBTFA0+7zgeZoPKGg707 ozmpvWRb3DAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNDQ3L3hRTlB1ODRIbWFEeWhvTzlPNk01cWIxa1c5dy5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3hRTlB1ODRIbWFEeWhvTzlPNk01cWIx a1c5dy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC80NDcvMnNiSEdTT2Mtd1J6VlMyMHE2V0thTTBwbm0wLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBD1yQDANBgkqhkiG9w0BAQsFAAOCAQEAG3m6GL4Ebxqe7cCpKYfpcAnUBdDV rlh+BNCnc9PCnHFvLCLStNpuRIt0MtDfEscSXptog3j8xC3ldz41003Dvj404hep bZP9wR5dvzMtksgUty3UkkGgTilWPQkpqlUa3mj5GaNoMnuFb4XK5a8FDMvz7TY+ 412gsUHe60Mio95Iy8jhHxCmzbkU38czdJvjsFWvZCPsHGTvmabzxlFJRSfm20Td PMqmBmU5wtAgymBLfqKC2Mgou4tfWkjsuN4Kp+VXYWoSka4LQm+g0t25id7YPK+7 6Vl6QTvQMETKslwbmNsBzOyqiExcjobVPVGoKxh3/BtLj9hTHm5gWSWzPg== -----END CERTIFICATE-----Generated at Thu Jun 6 14:56:22 2024 by rpki-client on console-fra.rpki-client.org