$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/539/KgHIcOXmy_Inp9kWV7A6IoYYonc.roa File: KgHIcOXmy_Inp9kWV7A6IoYYonc.roa (raw, json) Hash identifier: 9MtEkMb96LS5oSweilVGtUu+zObXjkA8nFoPSQQgT2s= Subject key identifier: 2A:01:C8:70:E5:E6:CB:F2:27:A7:D9:16:57:B0:3A:22:86:18:A2:77 Certificate issuer: /CN=D0F562FF36F711A3EDF99FC81DB54ED36634D8B1 Certificate serial: 38 Authority key identifier: D0:F5:62:FF:36:F7:11:A3:ED:F9:9F:C8:1D:B5:4E:D3:66:34:D8:B1 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0PVi_zb3EaPt-Z_IHbVO02Y02LE.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/KgHIcOXmy_Inp9kWV7A6IoYYonc.roa Signing time: Tue 01 Aug 2023 01:28:22 +0000 ROA not before: Tue 01 Aug 2023 01:28:22 +0000 ROA not after: Sun 14 Jul 2024 01:30:03 +0000 asID: 55900 IP address blocks: 137.220.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/0PVi_zb3EaPt-Z_IHbVO02Y02LE.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/0PVi_zb3EaPt-Z_IHbVO02Y02LE.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0PVi_zb3EaPt-Z_IHbVO02Y02LE.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 14 Jun 2024 14:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56 (0x38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0F562FF36F711A3EDF99FC81DB54ED36634D8B1 Validity Not Before: Aug 1 01:28:22 2023 GMT Not After : Jul 14 01:30:03 2024 GMT Subject: CN=2A01C870E5E6CBF227A7D91657B03A228618A277 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:eb:c2:1e:a7:db:78:d8:69:f3:8b:09:e5:61: f9:a1:d5:44:c5:7f:a9:b4:5e:5c:4c:66:b1:8d:52: 82:6b:28:a2:6e:2e:18:e0:ac:09:8b:55:e8:99:d1: fc:21:74:eb:20:81:13:e3:5e:d2:51:e5:10:5e:05: 1e:aa:a8:05:a1:84:8c:a5:da:45:55:76:c1:1a:99: 48:ce:5d:a8:11:66:70:05:90:fd:6a:9e:b3:10:2b: a8:16:d2:61:e4:4e:5d:ae:87:2c:d7:a4:e5:45:1d: 9c:86:4f:4e:c5:42:65:ca:82:e8:78:b0:23:16:43: b1:2a:95:04:b0:26:83:c5:51:1b:97:f7:15:f3:e7: 93:d7:f1:55:6a:7f:99:93:d1:32:cb:7e:6b:7f:53: 88:eb:5d:60:82:a0:7b:5a:77:7b:7d:c2:71:7e:35: ac:fc:86:3c:e2:e7:34:2e:c0:5a:b0:9e:36:2e:60: 25:fe:9b:8c:48:02:59:4a:9c:d9:57:c6:34:f4:22: 61:52:cc:9c:79:99:91:10:d5:2a:fa:13:2b:79:26: c8:3e:d8:2c:ec:60:eb:27:83:3e:73:25:7c:61:c0: d1:8e:44:74:df:5c:8e:e7:ad:a2:c3:2e:a5:88:83: 0c:eb:a5:a8:6c:5a:31:f4:03:8a:f7:fe:56:16:b1: 87:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:01:C8:70:E5:E6:CB:F2:27:A7:D9:16:57:B0:3A:22:86:18:A2:77 X509v3 Authority Key Identifier: keyid:D0:F5:62:FF:36:F7:11:A3:ED:F9:9F:C8:1D:B5:4E:D3:66:34:D8:B1 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/0PVi_zb3EaPt-Z_IHbVO02Y02LE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0PVi_zb3EaPt-Z_IHbVO02Y02LE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/KgHIcOXmy_Inp9kWV7A6IoYYonc.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 137.220.16.0/20 Signature Algorithm: sha256WithRSAEncryption ab:ff:c1:08:09:70:0c:7d:8b:26:8b:0b:73:b5:d0:9e:af:38: 38:75:9e:21:77:4c:55:c3:8f:74:f4:da:ce:01:92:cb:a9:c5: 8d:49:57:22:2a:3c:94:db:48:f6:92:2e:ef:8a:20:1a:5e:7b: b6:fb:34:af:d9:de:02:e0:ee:81:68:1f:4b:25:83:10:06:7c: b0:bd:60:0f:3b:93:8d:f2:12:29:dc:51:f4:72:72:d5:54:9b: ea:15:fb:cd:9d:6d:aa:f7:8b:ff:0e:32:a3:61:78:22:10:64: d8:62:96:c7:53:1d:10:65:b4:84:39:d5:c3:14:c3:e3:b6:23: 18:6f:1d:a2:bb:4f:ce:e1:f8:28:ec:b0:89:8e:a1:03:87:7b: 97:92:72:4f:ca:14:70:0b:1f:b8:a9:7e:32:88:21:d4:0b:d5: 0c:74:08:6f:3c:33:4b:f2:36:1e:bb:a9:b0:71:a1:04:b6:f8: 13:b7:3b:43:e6:e6:d0:50:52:10:29:9c:24:8e:04:f3:28:98: a2:31:3d:8b:da:6e:eb:d1:45:90:f5:c8:5e:72:e5:a1:9b:5d: 53:ce:45:e5:65:a3:63:ab:1e:5b:b7:5e:d1:73:f4:8c:24:00: c5:62:ce:03:8c:84:c7:c6:d8:6a:f9:e0:b7:56:32:61:23:ca: 09:b2:ce:35 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBODANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhEMEY1 NjJGRjM2RjcxMUEzRURGOTlGQzgxREI1NEVEMzY2MzREOEIxMB4XDTIzMDgwMTAx MjgyMloXDTI0MDcxNDAxMzAwM1owMzExMC8GA1UEAxMoMkEwMUM4NzBFNUU2Q0JG MjI3QTdEOTE2NTdCMDNBMjI4NjE4QTI3NzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKjrwh6n23jYafOLCeVh+aHVRMV/qbReXExmsY1Sgmsoom4uGOCs CYtV6JnR/CF06yCBE+Ne0lHlEF4FHqqoBaGEjKXaRVV2wRqZSM5dqBFmcAWQ/Wqe sxArqBbSYeROXa6HLNek5UUdnIZPTsVCZcqC6HiwIxZDsSqVBLAmg8VRG5f3FfPn k9fxVWp/mZPRMst+a39TiOtdYIKge1p3e33CcX41rPyGPOLnNC7AWrCeNi5gJf6b jEgCWUqc2VfGNPQiYVLMnHmZkRDVKvoTK3kmyD7YLOxg6yeDPnMlfGHA0Y5EdN9c juetosMupYiDDOulqGxaMfQDivf+Vhaxh7kCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBQqAchw5ebL8ien2RZXsDoihhiidzAfBgNVHSMEGDAWgBTQ9WL/NvcRo+35n8gd tU7TZjTYsTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNTM5LzBQVmlfemIzRWFQdC1aX0lIYlZPMDJZMDJMRS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzBQVmlfemIzRWFQdC1aX0lIYlZPMDJZ MDJMRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC81MzkvS2dISWNPWG15X0lucDlrV1Y3QTZJb1lZb25jLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBIncEDANBgkqhkiG9w0BAQsFAAOCAQEAq//BCAlwDH2LJosLc7XQnq84OHWe IXdMVcOPdPTazgGSy6nFjUlXIio8lNtI9pIu74ogGl57tvs0r9neAuDugWgfSyWD EAZ8sL1gDzuTjfISKdxR9HJy1VSb6hX7zZ1tqveL/w4yo2F4IhBk2GKWx1MdEGW0 hDnVwxTD47YjGG8dortPzuH4KOywiY6hA4d7l5JyT8oUcAsfuKl+Mogh1AvVDHQI bzwzS/I2HrupsHGhBLb4E7c7Q+bm0FBSECmcJI4E8yiYojE9i9pu69FFkPXIXnLl oZtdU85F5WWjY6seW7de0XP0jCQAxWLOA4yEx8bYavngt1YyYSPKCbLONQ== -----END CERTIFICATE-----Generated at Fri Jun 7 15:50:38 2024 by rpki-client on console-ams.rpki-client.org