$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/454/oHq-BNLg0ZfiubH8MoFrIBO7NBY.roa File: oHq-BNLg0ZfiubH8MoFrIBO7NBY.roa (raw, json) Hash identifier: e+2BaBiDKQZei2mb8XDvfGhTYzOftirEh7YhSIebahc= Subject key identifier: A0:7A:BE:04:D2:E0:D1:97:E2:B9:B1:FC:32:81:6B:20:13:BB:34:16 Certificate issuer: /CN=AD4741F0349FBC15A708E28A2CE307906CAC5DE0 Certificate serial: 31 Authority key identifier: AD:47:41:F0:34:9F:BC:15:A7:08:E2:8A:2C:E3:07:90:6C:AC:5D:E0 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/oHq-BNLg0ZfiubH8MoFrIBO7NBY.roa Signing time: Fri 29 Sep 2023 06:36:57 +0000 ROA not before: Fri 29 Sep 2023 06:36:57 +0000 ROA not after: Sat 14 Sep 2024 01:30:03 +0000 asID: 10000 IP address blocks: 202.169.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Jun 2024 02:39:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49 (0x31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD4741F0349FBC15A708E28A2CE307906CAC5DE0 Validity Not Before: Sep 29 06:36:57 2023 GMT Not After : Sep 14 01:30:03 2024 GMT Subject: CN=A07ABE04D2E0D197E2B9B1FC32816B2013BB3416 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:58:34:9e:f8:b5:0a:40:77:e1:32:54:93:d7: 54:61:91:d0:60:f0:3b:93:96:1b:20:12:d6:4c:85: 7a:64:80:00:7d:73:db:a8:1d:a5:b0:ef:00:f0:96: 0b:f7:60:83:53:b6:40:a0:d8:2c:59:23:4e:d4:ce: e0:60:8e:3c:6c:a0:3e:af:63:15:11:ef:9c:67:be: 18:c6:12:6d:8c:8d:3d:74:7c:b7:35:76:b1:8c:16: b7:00:0b:1f:1c:45:be:e6:be:49:3d:99:7d:b7:8a: 13:6b:33:61:69:eb:75:45:f5:fb:ab:42:0f:db:2c: e7:7a:c4:65:e3:3e:50:6f:04:8e:62:fa:c4:bd:10: e6:bf:9b:40:fc:ec:b9:94:ee:17:73:27:9b:64:74: fa:33:5e:ab:15:28:37:26:c6:f7:f2:96:3b:91:6b: f1:72:61:c8:53:c8:6e:f9:65:41:d1:23:5a:b3:5f: 28:7c:66:e6:b1:ad:dd:02:ad:f2:26:d8:28:ab:9b: 97:28:47:8e:01:30:5d:bf:8f:cd:93:6a:69:77:8b: 08:9d:92:79:08:30:ef:bb:cb:bc:31:1f:11:5e:70: 2b:4e:33:d5:59:29:45:a1:73:b6:c9:80:b7:60:3f: c5:ed:43:11:ac:d6:64:87:54:6f:35:78:46:6d:a9: a0:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:7A:BE:04:D2:E0:D1:97:E2:B9:B1:FC:32:81:6B:20:13:BB:34:16 X509v3 Authority Key Identifier: keyid:AD:47:41:F0:34:9F:BC:15:A7:08:E2:8A:2C:E3:07:90:6C:AC:5D:E0 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/oHq-BNLg0ZfiubH8MoFrIBO7NBY.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.169.64.0/20 Signature Algorithm: sha256WithRSAEncryption 2c:81:0b:56:65:45:23:41:db:12:d2:83:f3:7f:ba:47:d6:e0: 6f:fc:15:48:be:25:d0:64:99:ff:0c:8b:a9:88:37:ba:f5:6a: 41:1e:82:53:50:89:2f:b0:ba:ab:c2:52:f3:9d:50:32:b7:5b: b3:8f:72:cc:af:48:4c:70:d0:10:59:f2:40:f6:82:f3:b6:c5: 11:68:b4:4b:43:8b:e9:1f:b9:8a:9b:f0:36:55:2e:45:40:fe: 7f:0c:05:89:d2:f5:fa:9e:86:b6:e7:a0:aa:c3:80:8b:c2:87: 13:cf:97:31:81:04:18:b8:2e:2e:39:b2:c5:40:9b:7e:a8:ba: 6b:d0:60:83:1f:df:b6:cc:4b:b2:cb:8e:dc:d5:62:d1:fe:c6: a2:0d:40:89:e2:96:1e:ee:4a:ca:33:f7:43:81:30:8b:c6:9a: 4c:41:c8:ee:8d:dc:4b:82:36:d6:88:9a:67:2e:a4:36:a3:31: 64:9e:4e:02:0f:4b:ce:be:4a:0a:fe:e1:21:82:f6:ed:1b:0d: 3f:40:0a:eb:a1:2d:d9:bb:e8:7f:e6:10:22:95:16:0d:c3:77: 41:36:ed:59:00:c5:3d:95:30:29:e6:49:4e:3f:f9:0d:1c:1b: 84:63:dd:ce:06:2f:2a:c8:24:50:07:e7:c4:24:18:52:9e:c3: 7f:01:3d:9c -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBMTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhBRDQ3 NDFGMDM0OUZCQzE1QTcwOEUyOEEyQ0UzMDc5MDZDQUM1REUwMB4XDTIzMDkyOTA2 MzY1N1oXDTI0MDkxNDAxMzAwM1owMzExMC8GA1UEAxMoQTA3QUJFMDREMkUwRDE5 N0UyQjlCMUZDMzI4MTZCMjAxM0JCMzQxNjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALRYNJ74tQpAd+EyVJPXVGGR0GDwO5OWGyAS1kyFemSAAH1z26gd pbDvAPCWC/dgg1O2QKDYLFkjTtTO4GCOPGygPq9jFRHvnGe+GMYSbYyNPXR8tzV2 sYwWtwALHxxFvua+ST2ZfbeKE2szYWnrdUX1+6tCD9ss53rEZeM+UG8EjmL6xL0Q 5r+bQPzsuZTuF3Mnm2R0+jNeqxUoNybG9/KWO5Fr8XJhyFPIbvllQdEjWrNfKHxm 5rGt3QKt8ibYKKublyhHjgEwXb+PzZNqaXeLCJ2SeQgw77vLvDEfEV5wK04z1Vkp RaFztsmAt2A/xe1DEazWZIdUbzV4Rm2poPMCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBSger4E0uDRl+K5sfwygWsgE7s0FjAfBgNVHSMEGDAWgBStR0HwNJ+8FacI4oos 4weQbKxd4DAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNDU0L3JVZEI4RFNmdkJXbkNPS0tMT01Ia0d5c1hlQS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3JVZEI4RFNmdkJXbkNPS0tMT01Ia0d5 c1hlQS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC80NTQvb0hxLUJOTGcwWmZpdWJIOE1vRnJJQk83TkJZLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBMqpQDANBgkqhkiG9w0BAQsFAAOCAQEALIELVmVFI0HbEtKD83+6R9bgb/wV SL4l0GSZ/wyLqYg3uvVqQR6CU1CJL7C6q8JS851QMrdbs49yzK9ITHDQEFnyQPaC 87bFEWi0S0OL6R+5ipvwNlUuRUD+fwwFidL1+p6GtuegqsOAi8KHE8+XMYEEGLgu LjmyxUCbfqi6a9Bggx/ftsxLssuO3NVi0f7Gog1AieKWHu5KyjP3Q4Ewi8aaTEHI 7o3cS4I21oiaZy6kNqMxZJ5OAg9Lzr5KCv7hIYL27RsNP0AK66Et2bvof+YQIpUW DcN3QTbtWQDFPZUwKeZJTj/5DRwbhGPdzgYvKsgkUAfnxCQYUp7DfwE9nA== -----END CERTIFICATE-----Generated at Thu May 30 03:08:54 2024 by rpki-client on console-fra.rpki-client.org