$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/iJ5hmH2RIYAC5tF_yZ5GsvQe65s.roa File: iJ5hmH2RIYAC5tF_yZ5GsvQe65s.roa (raw, json) Hash identifier: 2/yv2XPYzJPdOqtlYRYWhIY8dnSsd5jvCw/t0d0i9Y0= Subject key identifier: 88:9E:61:98:7D:91:21:80:02:E6:D1:7F:C9:9E:46:B2:F4:1E:EB:9B Certificate issuer: /CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736 Certificate serial: 46 Authority key identifier: 1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/iJ5hmH2RIYAC5tF_yZ5GsvQe65s.roa Signing time: Wed 27 Dec 2023 02:10:31 +0000 ROA not before: Wed 27 Dec 2023 02:10:31 +0000 ROA not after: Sat 14 Dec 2024 01:30:03 +0000 asID: 4685 IP address blocks: 210.155.192.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 13 Jun 2024 14:03:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70 (0x46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736 Validity Not Before: Dec 27 02:10:31 2023 GMT Not After : Dec 14 01:30:03 2024 GMT Subject: CN=889E61987D91218002E6D17FC99E46B2F41EEB9B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:25:4f:c8:66:ba:97:09:85:08:8d:21:3f:42: 7c:41:e7:3f:02:91:08:c6:c3:be:98:f6:86:12:51: d4:e0:2c:d9:cb:72:d2:f9:45:48:ce:29:01:cc:41: 32:dc:b0:05:f1:de:eb:f4:c0:d8:36:8a:36:ca:19: 97:c5:56:d8:86:55:bd:a3:0f:15:4a:cd:6d:a7:25: 09:b0:aa:ef:82:1f:5c:e6:89:bc:11:5d:10:f8:9b: bc:15:75:af:9d:7d:ca:bc:d5:a1:49:cb:40:d2:5d: 42:37:e0:10:ec:10:1f:5a:a6:7a:a9:cd:4e:c9:8f: 57:03:72:d9:4f:7b:46:c4:54:ec:d0:00:aa:d4:f5: 18:1c:b3:af:1b:d4:f1:7d:f3:1b:d6:e9:e9:b2:c2: 08:57:59:c9:27:ed:ca:ae:86:73:4b:e0:4a:07:42: 86:89:69:c0:c6:8e:81:4f:68:5f:98:77:1e:b3:44: 3e:bd:32:37:28:8a:e2:e2:40:0f:d2:52:9f:e2:73: 11:be:92:74:2a:ef:ea:2a:91:eb:67:81:cd:05:60: 43:a4:90:f6:fd:1c:ac:f2:ed:33:2e:cf:45:ba:93: 37:81:47:ac:04:a2:ca:40:c4:78:c6:a6:df:8b:16: 53:df:fc:b9:43:a5:cf:d4:2c:15:f7:13:71:20:94: 5d:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:9E:61:98:7D:91:21:80:02:E6:D1:7F:C9:9E:46:B2:F4:1E:EB:9B X509v3 Authority Key Identifier: keyid:1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/iJ5hmH2RIYAC5tF_yZ5GsvQe65s.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.155.192.0/19 Signature Algorithm: sha256WithRSAEncryption aa:e1:3f:2d:c4:92:39:fc:79:07:19:30:5a:71:e5:98:cc:7e: 0a:a9:45:f5:5f:c8:fe:ca:8c:56:a1:dd:b6:91:ec:dd:d4:07: 4f:32:ce:c2:2b:c5:c5:93:d1:59:18:f3:eb:fc:79:1e:f0:3f: ef:b0:77:46:a9:52:cd:f7:1e:21:aa:bd:32:e6:d2:e2:43:c4: 31:75:0e:ae:2b:1e:5e:79:13:fd:ed:d3:13:a2:ee:50:69:36: 33:aa:89:54:c2:be:7c:79:ba:8a:a4:72:7a:74:db:a7:1c:28: 91:78:ba:ec:4f:ef:c8:33:10:c6:ea:c0:91:3a:99:b3:bc:24: 96:89:7d:3e:b4:1b:ee:db:7d:de:4e:de:f3:af:eb:d5:32:a1: 7b:56:b4:24:0c:98:8e:a8:8a:23:29:79:b4:49:18:1a:3d:9f: 63:14:cf:6f:37:78:d0:8d:e2:2a:24:db:b7:9d:89:fa:13:66: 5a:a8:7a:cc:cf:c8:9d:4b:33:2e:84:af:80:30:50:f1:ea:c3: 6a:64:e5:52:94:fd:b5:f6:bc:a6:3a:60:25:f2:21:74:14:ea: 7c:23:d0:7d:5f:bd:3c:74:5f:a5:19:e8:39:c3:5d:a8:47:2f: 90:40:dd:48:45:34:ed:e3:f8:52:30:dd:5f:cc:1c:b5:a6:46: 25:5c:80:82 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIBRjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxQkUz QUIwRjhEQjI2NUFCQjIyODdFNzUxNTFFN0Y1QTkzQjJDNzM2MB4XDTIzMTIyNzAy MTAzMVoXDTI0MTIxNDAxMzAwM1owMzExMC8GA1UEAxMoODg5RTYxOTg3RDkxMjE4 MDAyRTZEMTdGQzk5RTQ2QjJGNDFFRUI5QjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALElT8hmupcJhQiNIT9CfEHnPwKRCMbDvpj2hhJR1OAs2cty0vlF SM4pAcxBMtywBfHe6/TA2DaKNsoZl8VW2IZVvaMPFUrNbaclCbCq74IfXOaJvBFd EPibvBV1r519yrzVoUnLQNJdQjfgEOwQH1qmeqnNTsmPVwNy2U97RsRU7NAAqtT1 GByzrxvU8X3zG9bp6bLCCFdZySftyq6Gc0vgSgdCholpwMaOgU9oX5h3HrNEPr0y NyiK4uJAD9JSn+JzEb6SdCrv6iqR62eBzQVgQ6SQ9v0crPLtMy7PRbqTN4FHrASi ykDEeMam34sWU9/8uUOlz9QsFfcTcSCUXeECAwEAAaOCAiIwggIeMB0GA1UdDgQW BBSInmGYfZEhgALm0X/Jnkay9B7rmzAfBgNVHSMEGDAWgBQb46sPjbJlq7IofnUV Hn9ak7LHNjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGUGA1UdHwReMFwwWqBY oFaGVHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNTAvRy1PckQ0MnlaYXV5S0g1MUZSNV9XcE95eHpZLmNybDBtBggrBgEF BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvRy1PckQ0MnlaYXV5S0g1MUZSNV9XcE95 eHpZLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgboGCCsGAQUFBwELBIGtMIGqMGAGCCsG AQUFBzALhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzUwL2lKNWhtSDJSSVlBQzV0Rl95WjVHc3ZRZTY1cy5yb2EwRgYI KwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRw L2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAXSm8AwDQYJKoZIhvcNAQELBQADggEBAKrhPy3Ekjn8eQcZMFpx5ZjMfgqpRfVf yP7KjFah3baR7N3UB08yzsIrxcWT0VkY8+v8eR7wP++wd0apUs33HiGqvTLm0uJD xDF1Dq4rHl55E/3t0xOi7lBpNjOqiVTCvnx5uoqkcnp026ccKJF4uuxP78gzEMbq wJE6mbO8JJaJfT60G+7bfd5O3vOv69UyoXtWtCQMmI6oiiMpebRJGBo9n2MUz283 eNCN4iok27edifoTZlqoeszPyJ1LMy6Er4AwUPHqw2pk5VKU/bX2vKY6YCXyIXQU 6nwj0H1fvTx0X6UZ6DnDXahHL5BA3UhFNO3j+FIw3V/MHLWmRiVcgII= -----END CERTIFICATE-----Generated at Thu Jun 6 14:56:22 2024 by rpki-client on console-fra.rpki-client.org