$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/530/doumaF7KF7f41JHor3y-nhuVTwo.roa File: doumaF7KF7f41JHor3y-nhuVTwo.roa (raw, json) Hash identifier: D3pBiRXhvR3i7ighU+0B9RjH+p01SHrJG8U+VLnCGVA= Subject key identifier: 76:8B:A6:68:5E:CA:17:B7:F8:D4:91:E8:AF:7C:BE:9E:1B:95:4F:0A Certificate issuer: /CN=40D220B9E4A6358E03CD47864517D9D300B06FF0 Certificate serial: 36 Authority key identifier: 40:D2:20:B9:E4:A6:35:8E:03:CD:47:86:45:17:D9:D3:00:B0:6F:F0 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QNIgueSmNY4DzUeGRRfZ0wCwb_A.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/doumaF7KF7f41JHor3y-nhuVTwo.roa Signing time: Fri 01 Dec 2023 08:19:26 +0000 ROA not before: Fri 01 Dec 2023 08:19:26 +0000 ROA not after: Thu 14 Nov 2024 01:30:03 +0000 asID: 131925 IP address blocks: 160.237.160.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/QNIgueSmNY4DzUeGRRfZ0wCwb_A.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/QNIgueSmNY4DzUeGRRfZ0wCwb_A.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QNIgueSmNY4DzUeGRRfZ0wCwb_A.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Jun 2024 02:07:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54 (0x36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40D220B9E4A6358E03CD47864517D9D300B06FF0 Validity Not Before: Dec 1 08:19:26 2023 GMT Not After : Nov 14 01:30:03 2024 GMT Subject: CN=768BA6685ECA17B7F8D491E8AF7CBE9E1B954F0A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:28:b6:76:c3:af:79:18:ea:d9:23:40:bd:0a: eb:f4:eb:d1:21:78:d5:ea:c7:90:7e:2b:73:3d:4b: 7b:03:a3:a3:ee:23:ca:3f:e3:dd:62:16:d3:a6:30: 27:7a:a9:34:9d:61:f8:49:39:66:dc:f8:49:e9:d0: e7:73:cd:ad:44:e9:c0:2a:fb:35:82:10:2b:5e:12: 9b:2b:28:fc:78:19:81:06:5f:63:11:44:2d:b1:6b: 7a:97:9d:e1:cf:44:56:de:2e:e0:5b:98:ba:04:a5: 7a:76:9a:f1:8b:c4:2a:a1:5d:bd:73:af:d7:df:a0: 51:08:1e:70:32:f2:85:f1:29:09:aa:dc:c2:f8:7b: ce:a9:4c:97:57:76:bb:01:72:75:df:e5:c5:e6:5d: fb:46:ec:85:a1:f2:85:48:15:86:aa:a2:9a:42:37: 94:5a:10:75:84:81:68:0e:1e:39:3f:42:4a:ea:27: d7:70:7a:99:26:fc:b1:a2:3c:16:05:94:c9:74:ba: 83:5c:d5:95:37:1e:77:d2:6f:c9:6d:21:00:cd:a5: 64:46:04:ba:bd:52:e7:10:ba:0d:8a:63:69:28:5b: 8c:9e:a5:cd:6b:0a:0d:5d:68:76:f3:f1:75:af:9f: 62:02:bf:36:3c:e5:f8:83:c2:16:a1:e7:41:f9:d6: 37:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:8B:A6:68:5E:CA:17:B7:F8:D4:91:E8:AF:7C:BE:9E:1B:95:4F:0A X509v3 Authority Key Identifier: keyid:40:D2:20:B9:E4:A6:35:8E:03:CD:47:86:45:17:D9:D3:00:B0:6F:F0 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/QNIgueSmNY4DzUeGRRfZ0wCwb_A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QNIgueSmNY4DzUeGRRfZ0wCwb_A.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/doumaF7KF7f41JHor3y-nhuVTwo.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.237.160.0/20 Signature Algorithm: sha256WithRSAEncryption 10:42:47:42:74:76:13:f4:0d:32:23:e9:94:5a:e9:90:69:aa: 5e:79:cb:ea:a6:6f:27:d1:99:f7:d5:4f:c1:0b:82:59:47:62: 98:4a:4b:55:24:27:25:5c:52:fd:ef:88:21:80:b4:80:84:79: b0:42:6e:40:46:03:6a:1c:29:bc:2c:9d:d6:a1:55:cd:3c:ac: 13:e9:e8:2f:b8:e9:2f:4b:b6:b5:7a:aa:05:4d:52:83:0e:c3: 63:8f:c5:2f:08:37:3d:e8:3b:de:cc:ab:3a:62:01:a3:27:f0: 66:bc:51:81:53:0c:e4:99:82:06:11:f1:0f:bb:f8:e4:94:00: 9f:3d:f0:fa:b2:74:16:48:ce:f4:6e:bb:c0:fd:92:dc:f2:c8: cf:7a:04:a2:82:b9:11:21:bc:90:82:b2:71:eb:48:df:a1:90: 2c:76:2f:9d:3a:b0:74:a2:dd:58:64:0f:15:19:b7:4b:12:38: 35:0a:48:8b:15:eb:e5:aa:ec:e5:d2:b4:02:ed:3f:ed:5b:b3: b4:98:f8:fc:d6:c1:ed:7e:54:27:5c:17:e8:63:d4:9e:28:74: 56:6d:70:8f:cb:92:fb:dc:3e:9e:d1:10:fd:ad:04:34:1b:b4: ef:ff:5c:cc:f4:78:07:7c:68:ce:87:9a:ac:ed:01:31:79:3c: 2a:7a:18:2a -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBNjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0MEQy MjBCOUU0QTYzNThFMDNDRDQ3ODY0NTE3RDlEMzAwQjA2RkYwMB4XDTIzMTIwMTA4 MTkyNloXDTI0MTExNDAxMzAwM1owMzExMC8GA1UEAxMoNzY4QkE2Njg1RUNBMTdC N0Y4RDQ5MUU4QUY3Q0JFOUUxQjk1NEYwQTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALsotnbDr3kY6tkjQL0K6/Tr0SF41erHkH4rcz1LewOjo+4jyj/j 3WIW06YwJ3qpNJ1h+Ek5Ztz4SenQ53PNrUTpwCr7NYIQK14Smyso/HgZgQZfYxFE LbFreped4c9EVt4u4FuYugSlenaa8YvEKqFdvXOv19+gUQgecDLyhfEpCarcwvh7 zqlMl1d2uwFydd/lxeZd+0bshaHyhUgVhqqimkI3lFoQdYSBaA4eOT9CSuon13B6 mSb8saI8FgWUyXS6g1zVlTced9JvyW0hAM2lZEYEur1S5xC6DYpjaShbjJ6lzWsK DV1odvPxda+fYgK/Njzl+IPCFqHnQfnWNysCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBR2i6ZoXsoXt/jUkeivfL6eG5VPCjAfBgNVHSMEGDAWgBRA0iC55KY1jgPNR4ZF F9nTALBv8DAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNTMwL1FOSWd1ZVNtTlk0RHpVZUdSUmZaMHdDd2JfQS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1FOSWd1ZVNtTlk0RHpVZUdSUmZaMHdD d2JfQS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC81MzAvZG91bWFGN0tGN2Y0MUpIb3IzeS1uaHVWVHdvLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBKDtoDANBgkqhkiG9w0BAQsFAAOCAQEAEEJHQnR2E/QNMiPplFrpkGmqXnnL 6qZvJ9GZ99VPwQuCWUdimEpLVSQnJVxS/e+IIYC0gIR5sEJuQEYDahwpvCyd1qFV zTysE+noL7jpL0u2tXqqBU1Sgw7DY4/FLwg3Peg73syrOmIBoyfwZrxRgVMM5JmC BhHxD7v45JQAnz3w+rJ0FkjO9G67wP2S3PLIz3oEooK5ESG8kIKycetI36GQLHYv nTqwdKLdWGQPFRm3SxI4NQpIixXr5ars5dK0Au0/7VuztJj4/NbB7X5UJ1wX6GPU nih0Vm1wj8uS+9w+ntEQ/a0ENBu07/9czPR4B3xozoearO0BMXk8KnoYKg== -----END CERTIFICATE-----Generated at Thu May 30 03:08:55 2024 by rpki-client on console-fra.rpki-client.org