$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/447/TRKU6bMXRtZmonm45Sf4V8zqGu8.roa File: TRKU6bMXRtZmonm45Sf4V8zqGu8.roa (raw, json) Hash identifier: PNN1NTq0WFwtuyQKrZ1VCdw2v5cSdMHuS4biQMmZigY= Subject key identifier: 4D:12:94:E9:B3:17:46:D6:66:A2:79:B8:E5:27:F8:57:CC:EA:1A:EF Certificate issuer: /CN=C5034FBBCE0799A0F28683BD3BA339A9BD645BDC Certificate serial: 05 Authority key identifier: C5:03:4F:BB:CE:07:99:A0:F2:86:83:BD:3B:A3:39:A9:BD:64:5B:DC Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xQNPu84HmaDyhoO9O6M5qb1kW9w.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/447/TRKU6bMXRtZmonm45Sf4V8zqGu8.roa Signing time: Tue 16 Apr 2024 04:09:45 +0000 ROA not before: Tue 16 Apr 2024 04:09:45 +0000 ROA not after: Wed 16 Apr 2025 03:56:56 +0000 asID: 10002 IP address blocks: 120.72.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/447/xQNPu84HmaDyhoO9O6M5qb1kW9w.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/447/xQNPu84HmaDyhoO9O6M5qb1kW9w.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xQNPu84HmaDyhoO9O6M5qb1kW9w.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5 (0x5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C5034FBBCE0799A0F28683BD3BA339A9BD645BDC Validity Not Before: Apr 16 04:09:45 2024 GMT Not After : Apr 16 03:56:56 2025 GMT Subject: CN=4D1294E9B31746D666A279B8E527F857CCEA1AEF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:80:62:ff:e2:f9:00:17:99:af:15:e8:8b:1b: 80:de:b7:3c:8b:e6:cb:3e:69:a3:c4:12:6c:bd:e7: 11:26:ea:5c:4c:5f:e0:8a:11:5a:27:87:6d:0e:14: ca:0d:13:f3:4b:3f:5b:26:c9:d6:4f:02:27:88:a8: 2d:53:22:9f:d4:4e:54:d4:6a:ed:b1:a7:95:d5:9a: e5:87:2d:23:4c:8a:c4:95:af:07:1b:fd:6f:41:9b: 85:ed:3d:02:d7:4f:c0:6f:69:7e:be:26:78:4d:7c: b1:81:d2:09:8f:2c:97:55:1c:87:4f:00:cc:a3:9e: d3:8b:4b:e1:c8:04:27:42:2f:b6:86:6b:1c:01:30: ec:39:ad:5a:8f:2d:3d:98:67:f9:0a:dd:7a:dd:23: 7f:3d:72:04:47:96:99:58:1a:2d:a6:50:0f:22:2b: 99:40:93:5e:19:4a:35:44:18:50:ef:db:b5:3b:55: 6b:d7:64:0a:56:91:44:d2:6a:6e:d8:ad:63:8e:73: 02:ee:1e:72:31:b4:14:15:b8:8c:ab:65:eb:58:cc: 0e:49:20:bc:5d:83:63:6c:ca:cf:18:4a:7f:3a:f9: 71:d7:d6:06:15:bc:6f:9c:86:b9:a1:75:bf:a6:7a: df:79:d0:22:f6:e1:95:4f:c1:63:8e:82:29:67:e4: 2d:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:12:94:E9:B3:17:46:D6:66:A2:79:B8:E5:27:F8:57:CC:EA:1A:EF X509v3 Authority Key Identifier: keyid:C5:03:4F:BB:CE:07:99:A0:F2:86:83:BD:3B:A3:39:A9:BD:64:5B:DC X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/447/xQNPu84HmaDyhoO9O6M5qb1kW9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xQNPu84HmaDyhoO9O6M5qb1kW9w.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/447/TRKU6bMXRtZmonm45Sf4V8zqGu8.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 120.72.0.0/20 Signature Algorithm: sha256WithRSAEncryption 10:77:61:2c:04:f8:c4:34:96:75:b4:d1:84:e1:8d:44:41:08: dd:2b:a4:1e:1e:2b:f2:11:57:fb:fc:74:3f:cb:60:d3:a2:03: 52:d1:fc:3d:e6:bb:bc:bf:9d:18:a6:4a:01:e4:c9:3c:3e:81: 6d:3a:3a:16:45:48:c6:26:c7:07:17:fd:d4:81:4c:f7:e8:86: 10:3d:d6:76:bd:e4:24:8f:d6:5b:eb:7c:db:96:02:9b:ca:98: 7b:15:1b:5e:57:6d:d5:ef:e2:4a:df:ca:1d:db:80:25:5d:d8: 1b:22:ca:f8:d2:05:32:44:7f:0f:6f:17:a2:e2:4f:c7:6d:14: f3:e1:9d:e8:db:78:3f:72:fc:0f:42:3a:c8:78:3d:f6:2c:07: 6b:2b:12:da:72:83:af:e1:61:dd:89:c7:29:d4:b0:f5:c0:e8: 11:63:e7:70:e0:f8:50:13:03:7a:2d:e5:3d:0d:bd:37:da:b6: d2:02:09:bc:d8:55:91:eb:2a:f3:9c:60:ac:59:1a:38:b1:65: 00:17:ea:a2:b8:3a:6e:63:d6:dd:1a:c0:71:ea:11:d9:07:02: c7:fa:f7:cf:00:26:3d:14:15:8f:98:10:d8:4b:eb:4f:36:f8: 01:39:91:4c:33:81:f1:95:5e:16:e5:c5:da:4f:41:ce:01:6f: 2f:47:4d:df -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBBTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDNTAz NEZCQkNFMDc5OUEwRjI4NjgzQkQzQkEzMzlBOUJENjQ1QkRDMB4XDTI0MDQxNjA0 MDk0NVoXDTI1MDQxNjAzNTY1NlowMzExMC8GA1UEAxMoNEQxMjk0RTlCMzE3NDZE NjY2QTI3OUI4RTUyN0Y4NTdDQ0VBMUFFRjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAM+AYv/i+QAXma8V6IsbgN63PIvmyz5po8QSbL3nESbqXExf4IoR WieHbQ4Uyg0T80s/WybJ1k8CJ4ioLVMin9ROVNRq7bGnldWa5YctI0yKxJWvBxv9 b0Gbhe09AtdPwG9pfr4meE18sYHSCY8sl1Uch08AzKOe04tL4cgEJ0IvtoZrHAEw 7DmtWo8tPZhn+Qrdet0jfz1yBEeWmVgaLaZQDyIrmUCTXhlKNUQYUO/btTtVa9dk ClaRRNJqbtitY45zAu4ecjG0FBW4jKtl61jMDkkgvF2DY2zKzxhKfzr5cdfWBhW8 b5yGuaF1v6Z633nQIvbhlU/BY46CKWfkLckCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBRNEpTpsxdG1maiebjlJ/hXzOoa7zAfBgNVHSMEGDAWgBTFA0+7zgeZoPKGg707 ozmpvWRb3DAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNDQ3L3hRTlB1ODRIbWFEeWhvTzlPNk01cWIxa1c5dy5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3hRTlB1ODRIbWFEeWhvTzlPNk01cWIx a1c5dy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC80NDcvVFJLVTZiTVhSdFptb25tNDVTZjRWOHpxR3U4LnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBHhIADANBgkqhkiG9w0BAQsFAAOCAQEAEHdhLAT4xDSWdbTRhOGNREEI3Suk Hh4r8hFX+/x0P8tg06IDUtH8Pea7vL+dGKZKAeTJPD6BbTo6FkVIxibHBxf91IFM 9+iGED3Wdr3kJI/WW+t825YCm8qYexUbXldt1e/iSt/KHduAJV3YGyLK+NIFMkR/ D28XouJPx20U8+Gd6Nt4P3L8D0I6yHg99iwHaysS2nKDr+Fh3YnHKdSw9cDoEWPn cOD4UBMDei3lPQ29N9q20gIJvNhVkesq85xgrFkaOLFlABfqorg6bmPW3RrAceoR 2QcCx/r3zwAmPRQVj5gQ2EvrTzb4ATmRTDOB8ZVeFuXF2k9BzgFvL0dN3w== -----END CERTIFICATE-----Generated at Sat Jun 1 13:38:50 2024 by rpki-client on console-fra.rpki-client.org