$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/462/DQEb4JjEZooK2dxR-vl3PpMYUGA.roa File: DQEb4JjEZooK2dxR-vl3PpMYUGA.roa (raw, json) Hash identifier: Hex4NOdLxQgX/tsW8pX3TRhP2gb96tmj3k6KQVKqJx0= Subject key identifier: 0D:01:1B:E0:98:C4:66:8A:0A:D9:DC:51:FA:F9:77:3E:93:18:50:60 Certificate issuer: /CN=43917B23074524E9E6EA8E40FA4A0672C9620318 Certificate serial: 55 Authority key identifier: 43:91:7B:23:07:45:24:E9:E6:EA:8E:40:FA:4A:06:72:C9:62:03:18 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5F7IwdFJOnm6o5A-koGcsliAxg.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/DQEb4JjEZooK2dxR-vl3PpMYUGA.roa Signing time: Sun 31 Mar 2024 01:30:05 +0000 ROA not before: Sun 31 Mar 2024 01:30:05 +0000 ROA not after: Sat 15 Mar 2025 01:30:02 +0000 asID: 10019 IP address blocks: 219.100.20.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/Q5F7IwdFJOnm6o5A-koGcsliAxg.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/Q5F7IwdFJOnm6o5A-koGcsliAxg.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5F7IwdFJOnm6o5A-koGcsliAxg.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 85 (0x55) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43917B23074524E9E6EA8E40FA4A0672C9620318 Validity Not Before: Mar 31 01:30:05 2024 GMT Not After : Mar 15 01:30:02 2025 GMT Subject: CN=0D011BE098C4668A0AD9DC51FAF9773E93185060 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:67:12:a1:83:e4:63:77:69:85:ea:2b:9f:ea: 76:ff:1e:e1:d5:5b:4a:9a:4d:c4:91:58:42:1b:74: 5f:f1:db:4a:3c:6b:2b:21:90:8d:20:dc:3b:a2:d9: 63:74:bc:f4:98:9b:4e:35:96:4f:05:68:85:ba:8f: e8:c4:7a:6f:ba:5e:e3:45:a0:c6:a7:98:ad:19:62: 95:ee:38:76:7a:5d:12:c3:59:94:a8:7c:8c:15:bd: 49:8f:9e:40:7e:12:e2:fe:48:e5:bc:b6:94:03:65: 8a:dd:47:0b:bd:34:d5:fd:ac:22:89:f6:43:79:09: 00:1f:ee:a1:0e:d1:34:0b:0c:02:dd:97:4e:a2:38: d4:b6:8f:98:1e:4e:79:62:c5:82:8d:30:1e:22:52: 92:cf:39:0a:0e:d7:a9:bd:7f:2e:6b:ee:9b:c8:62: 18:b9:c3:a1:17:6d:8f:63:e3:c5:3d:81:e8:40:f2: 83:11:3b:76:59:ce:22:91:ec:0a:62:eb:71:a1:18: 00:62:0d:19:05:db:1d:f6:41:87:c8:d4:b9:d7:c6: dc:d2:0e:6e:4c:6b:91:37:82:e9:4e:70:3a:90:25: 20:54:d0:91:64:fe:d5:ef:40:d0:74:1b:8b:91:33: e5:a4:3c:e4:1b:2f:4a:f9:8f:f2:ff:b5:06:8c:bd: ca:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:01:1B:E0:98:C4:66:8A:0A:D9:DC:51:FA:F9:77:3E:93:18:50:60 X509v3 Authority Key Identifier: keyid:43:91:7B:23:07:45:24:E9:E6:EA:8E:40:FA:4A:06:72:C9:62:03:18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/Q5F7IwdFJOnm6o5A-koGcsliAxg.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5F7IwdFJOnm6o5A-koGcsliAxg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/DQEb4JjEZooK2dxR-vl3PpMYUGA.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 219.100.20.0/22 Signature Algorithm: sha256WithRSAEncryption 77:33:b9:4d:2c:ac:d6:ff:d1:1f:0c:80:3e:59:e0:f9:23:15: d2:2d:98:25:da:75:e4:dc:65:44:df:c2:29:70:16:fc:6f:92: 33:b0:e5:78:30:d1:0e:5c:1c:9a:dd:96:22:8d:83:31:b8:e0: 2c:66:4f:0d:f6:14:8f:1a:6e:cd:5b:cd:eb:3e:45:54:df:3c: 26:c1:75:9b:83:6c:59:d4:d5:c4:23:fb:a5:e9:09:79:d2:d0: ef:f4:bd:5a:2d:94:cd:62:90:43:e3:3e:d2:24:37:76:82:58: 1f:e9:72:af:74:a6:38:40:16:02:37:7a:65:70:73:22:c0:2e: e9:c2:bb:37:69:6c:46:a7:12:63:14:b3:83:37:da:3d:f8:b2: 8f:a9:9f:bb:87:41:5d:5c:20:ba:84:e4:0d:b6:90:7a:05:80: fa:f4:90:ab:46:71:ae:de:57:cc:3a:c8:a9:d4:91:ad:e0:e0: cf:01:ff:2a:ae:30:7d:01:46:d6:46:97:45:e2:da:cb:31:bd: 7d:df:69:51:10:d9:b6:a8:29:0c:10:d8:b9:16:2f:5b:02:4a: e7:ef:26:19:33:b8:f1:1e:21:5d:fa:c2:00:9e:e0:21:6c:2a: ba:a0:44:ff:fa:6a:b2:7e:39:57:4c:05:5c:15:6a:e5:8d:33: d0:c6:50:81 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBVTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0Mzkx N0IyMzA3NDUyNEU5RTZFQThFNDBGQTRBMDY3MkM5NjIwMzE4MB4XDTI0MDMzMTAx MzAwNVoXDTI1MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoMEQwMTFCRTA5OEM0NjY4 QTBBRDlEQzUxRkFGOTc3M0U5MzE4NTA2MDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANxnEqGD5GN3aYXqK5/qdv8e4dVbSppNxJFYQht0X/HbSjxrKyGQ jSDcO6LZY3S89JibTjWWTwVohbqP6MR6b7pe40WgxqeYrRlile44dnpdEsNZlKh8 jBW9SY+eQH4S4v5I5by2lANlit1HC7001f2sIon2Q3kJAB/uoQ7RNAsMAt2XTqI4 1LaPmB5OeWLFgo0wHiJSks85Cg7Xqb1/Lmvum8hiGLnDoRdtj2PjxT2B6EDygxE7 dlnOIpHsCmLrcaEYAGINGQXbHfZBh8jUudfG3NIObkxrkTeC6U5wOpAlIFTQkWT+ 1e9A0HQbi5Ez5aQ85BsvSvmP8v+1Boy9ygUCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBQNARvgmMRmigrZ3FH6+Xc+kxhQYDAfBgNVHSMEGDAWgBRDkXsjB0Uk6ebqjkD6 SgZyyWIDGDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNDYyL1E1RjdJd2RGSk9ubTZvNUEta29HY3NsaUF4Zy5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1E1RjdJd2RGSk9ubTZvNUEta29HY3Ns aUF4Zy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC80NjIvRFFFYjRKakVab29LMmR4Ui12bDNQcE1ZVUdBLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAttkFDANBgkqhkiG9w0BAQsFAAOCAQEAdzO5TSys1v/RHwyAPlng+SMV0i2Y Jdp15NxlRN/CKXAW/G+SM7DleDDRDlwcmt2WIo2DMbjgLGZPDfYUjxpuzVvN6z5F VN88JsF1m4NsWdTVxCP7pekJedLQ7/S9Wi2UzWKQQ+M+0iQ3doJYH+lyr3SmOEAW Ajd6ZXBzIsAu6cK7N2lsRqcSYxSzgzfaPfiyj6mfu4dBXVwguoTkDbaQegWA+vSQ q0Zxrt5XzDrIqdSRreDgzwH/Kq4wfQFG1kaXReLayzG9fd9pURDZtqgpDBDYuRYv WwJK5+8mGTO48R4hXfrCAJ7gIWwquqBE//pqsn45V0wFXBVq5Y0z0MZQgQ== -----END CERTIFICATE-----Generated at Sat Jun 1 15:54:39 2024 by rpki-client on console-ams.rpki-client.org