$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/465/TB3r_dIrDea6oAHUrFDcxmTllfg.roa File: TB3r_dIrDea6oAHUrFDcxmTllfg.roa (raw, json) Hash identifier: uOQwAe9Q/drXvmJM34IYYTF5UXEWftuDN5KGmDBKQpE= Subject key identifier: 4C:1D:EB:FD:D2:2B:0D:E6:BA:A0:01:D4:AC:50:DC:C6:64:E5:95:F8 Certificate issuer: /CN=47A27188E214C396304497DB571B23F93EBFBDC6 Certificate serial: 4B Authority key identifier: 47:A2:71:88:E2:14:C3:96:30:44:97:DB:57:1B:23:F9:3E:BF:BD:C6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/R6JxiOIUw5YwRJfbVxsj-T6_vcY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/465/TB3r_dIrDea6oAHUrFDcxmTllfg.roa Signing time: Mon 01 Jan 2024 01:30:33 +0000 ROA not before: Mon 01 Jan 2024 01:30:33 +0000 ROA not after: Sat 14 Dec 2024 01:30:03 +0000 asID: 10011 IP address blocks: 61.121.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/465/R6JxiOIUw5YwRJfbVxsj-T6_vcY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/465/R6JxiOIUw5YwRJfbVxsj-T6_vcY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/R6JxiOIUw5YwRJfbVxsj-T6_vcY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jul 2024 06:55:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75 (0x4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47A27188E214C396304497DB571B23F93EBFBDC6 Validity Not Before: Jan 1 01:30:33 2024 GMT Not After : Dec 14 01:30:03 2024 GMT Subject: CN=4C1DEBFDD22B0DE6BAA001D4AC50DCC664E595F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:46:56:af:0a:63:9a:d6:b5:43:f5:b8:0f:fd: 09:8a:11:d4:d9:25:a7:0f:95:8f:9e:e4:74:dd:26: 9c:a4:d3:96:76:5d:e5:7d:53:5a:a2:c4:cb:7c:e7: ae:45:84:76:b2:0b:ad:1d:45:56:84:4c:00:c0:e3: 56:35:64:c3:9b:c2:dc:86:09:fc:f6:98:5c:71:b1: 56:d5:10:88:78:ce:50:b0:10:e3:0f:5f:2a:f4:df: 95:31:1a:3d:65:7b:9f:33:83:0d:6a:57:b8:3b:26: c2:d6:f5:ae:c6:42:18:c8:34:22:96:6c:67:d2:9b: f0:77:65:ed:33:e3:ff:31:a5:a1:21:33:f8:dc:eb: 0d:44:1a:15:23:6e:c9:71:23:c0:b2:f8:b8:72:24: e0:3d:40:65:68:77:8b:84:ee:ea:b4:f8:15:1c:5a: 1f:2d:ac:51:16:60:fc:31:19:23:8c:9e:b9:e2:96: be:df:cf:37:29:bb:77:27:8e:c3:1f:21:15:93:c9: c0:54:c8:ef:af:f2:e8:83:52:d9:14:72:c5:ca:9a: 37:1c:77:88:f7:b9:3d:e5:72:0b:d8:e4:f1:6c:80: a8:a9:80:11:ab:da:c0:48:48:cc:86:67:ec:bc:f3: 8c:c8:3f:a6:6b:60:0a:84:d5:1f:d0:cc:79:6a:31: 80:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:1D:EB:FD:D2:2B:0D:E6:BA:A0:01:D4:AC:50:DC:C6:64:E5:95:F8 X509v3 Authority Key Identifier: keyid:47:A2:71:88:E2:14:C3:96:30:44:97:DB:57:1B:23:F9:3E:BF:BD:C6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/465/R6JxiOIUw5YwRJfbVxsj-T6_vcY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/R6JxiOIUw5YwRJfbVxsj-T6_vcY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/465/TB3r_dIrDea6oAHUrFDcxmTllfg.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 61.121.224.0/20 Signature Algorithm: sha256WithRSAEncryption 69:48:10:3a:31:15:68:a2:b1:ef:3c:73:5e:ae:f0:cb:61:43: eb:60:94:ed:78:f5:db:92:16:0e:fa:59:57:41:ab:4e:19:4c: 0b:3f:09:46:a2:f5:18:21:78:7e:c4:de:26:76:27:f0:2d:5b: 4b:45:c1:95:c7:7c:a4:b3:07:50:de:27:65:19:14:a2:2a:68: ee:a3:00:af:3c:a0:f4:45:b5:44:da:25:a5:20:21:94:17:a5: a9:3e:db:09:57:b1:7c:eb:c1:37:02:a0:b6:3c:7c:e2:6e:68: dc:db:f9:e2:e8:b6:85:55:81:f4:2e:df:e8:ab:00:63:97:67: 58:c7:4d:c8:63:cf:92:8c:ef:18:05:fa:7e:f4:4f:7a:63:e5: 28:49:72:30:02:7f:e2:10:8c:99:20:14:82:70:21:64:a3:26: 00:73:f0:1a:6d:a7:68:3e:c5:e4:2e:f0:c9:12:85:31:f9:d8: f1:9c:08:cb:31:d4:c5:70:a7:f5:9e:30:0d:61:55:84:01:a3: 26:fb:96:c3:e0:7e:6b:52:d5:b6:73:0f:b4:b5:8f:c7:c6:85: 2e:59:f8:ad:58:eb:34:e4:06:37:a5:36:26:f1:34:08:c1:b0: 07:aa:ce:03:89:ae:db:77:48:e7:f1:ec:dc:db:82:89:dc:ec: ed:d4:99:d7 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBSzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0N0Ey NzE4OEUyMTRDMzk2MzA0NDk3REI1NzFCMjNGOTNFQkZCREM2MB4XDTI0MDEwMTAx MzAzM1oXDTI0MTIxNDAxMzAwM1owMzExMC8GA1UEAxMoNEMxREVCRkREMjJCMERF NkJBQTAwMUQ0QUM1MERDQzY2NEU1OTVGODCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANdGVq8KY5rWtUP1uA/9CYoR1Nklpw+Vj57kdN0mnKTTlnZd5X1T WqLEy3znrkWEdrILrR1FVoRMAMDjVjVkw5vC3IYJ/PaYXHGxVtUQiHjOULAQ4w9f KvTflTEaPWV7nzODDWpXuDsmwtb1rsZCGMg0IpZsZ9Kb8Hdl7TPj/zGloSEz+Nzr DUQaFSNuyXEjwLL4uHIk4D1AZWh3i4Tu6rT4FRxaHy2sURZg/DEZI4yeueKWvt/P Nym7dyeOwx8hFZPJwFTI76/y6INS2RRyxcqaNxx3iPe5PeVyC9jk8WyAqKmAEava wEhIzIZn7LzzjMg/pmtgCoTVH9DMeWoxgM8CAwEAAaOCAiQwggIgMB0GA1UdDgQW BBRMHev90isN5rqgAdSsUNzGZOWV+DAfBgNVHSMEGDAWgBRHonGI4hTDljBEl9tX GyP5Pr+9xjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNDY1L1I2SnhpT0lVdzVZd1JKZmJWeHNqLVQ2X3ZjWS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1I2SnhpT0lVdzVZd1JKZmJWeHNqLVQ2 X3ZjWS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC80NjUvVEIzcl9kSXJEZWE2b0FIVXJGRGN4bVRsbGZnLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBD154DANBgkqhkiG9w0BAQsFAAOCAQEAaUgQOjEVaKKx7zxzXq7wy2FD62CU 7Xj125IWDvpZV0GrThlMCz8JRqL1GCF4fsTeJnYn8C1bS0XBlcd8pLMHUN4nZRkU oipo7qMArzyg9EW1RNolpSAhlBelqT7bCVexfOvBNwKgtjx84m5o3Nv54ui2hVWB 9C7f6KsAY5dnWMdNyGPPkozvGAX6fvRPemPlKElyMAJ/4hCMmSAUgnAhZKMmAHPw Gm2naD7F5C7wyRKFMfnY8ZwIyzHUxXCn9Z4wDWFVhAGjJvuWw+B+a1LVtnMPtLWP x8aFLln4rVjrNOQGN6U2JvE0CMGwB6rOA4mu23dI5/Hs3NuCidzs7dSZ1w== -----END CERTIFICATE-----Generated at Wed Jun 26 08:13:00 2024 by rpki-client on console-ams.rpki-client.org