$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/3A04XJFSmROaiVLVk2YOJHRs2e0.roa File: 3A04XJFSmROaiVLVk2YOJHRs2e0.roa (raw, json) Hash identifier: FEaqz04Y6Aa08C1NM8d+3Ho8C38MWOjWPDvTAdpAQ1Q= Subject key identifier: DC:0D:38:5C:91:52:99:13:9A:89:52:D5:93:66:0E:24:74:6C:D9:ED Certificate issuer: /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A Certificate serial: 04C0 Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/3A04XJFSmROaiVLVk2YOJHRs2e0.roa Signing time: Thu 29 Feb 2024 01:33:09 +0000 ROA not before: Thu 29 Feb 2024 01:33:09 +0000 ROA not after: Fri 14 Feb 2025 01:30:03 +0000 asID: 10010 IP address blocks: 202.136.192.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 13 Jun 2024 14:03:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1216 (0x4c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A Validity Not Before: Feb 29 01:33:09 2024 GMT Not After : Feb 14 01:30:03 2025 GMT Subject: CN=DC0D385C915299139A8952D593660E24746CD9ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:56:4f:f5:f9:7c:fc:6c:c6:52:07:0e:f9:cd: b4:5c:e2:76:dd:b6:db:79:6f:74:7c:68:81:5c:79: 7d:0c:d6:77:3d:1c:03:51:66:9b:c7:1a:ae:ea:fe: 3b:7a:e7:73:9f:89:f0:d1:ec:9f:db:ff:6b:ce:ed: b6:2d:80:46:4e:60:60:e7:45:54:72:84:ec:14:66: b9:7b:74:e6:92:51:38:1c:5c:7a:99:71:31:64:6f: b1:32:f5:e6:b1:c3:cd:a8:55:48:f7:8c:ff:a2:58: 69:f9:82:c2:e5:f4:55:66:f5:ca:bd:60:07:16:73: a0:19:53:31:a6:9c:26:0f:94:c4:bd:7f:80:4f:4b: 23:04:d1:7e:78:89:a0:e1:82:d2:bd:25:51:49:4d: 53:9b:54:fc:cd:03:e3:98:9d:d9:50:c1:60:46:d7: 7e:75:3d:e7:f1:64:10:61:b7:d5:f3:f2:15:59:7c: 5f:c6:eb:c6:f5:e1:b6:81:5a:dd:d5:39:df:0d:07: ef:16:55:28:c8:be:7e:71:e7:85:8b:fd:cd:68:37: 91:0f:84:d8:4e:ad:37:f6:01:d2:5e:93:23:8b:d4: b9:f4:28:23:0c:43:1b:8d:6b:db:ad:95:bc:5f:6b: 06:bf:7b:36:34:ae:b6:e3:04:15:9d:84:84:b6:78: 82:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:0D:38:5C:91:52:99:13:9A:89:52:D5:93:66:0E:24:74:6C:D9:ED X509v3 Authority Key Identifier: keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/3A04XJFSmROaiVLVk2YOJHRs2e0.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.136.192.0/20 Signature Algorithm: sha256WithRSAEncryption 7a:3b:3d:87:be:b7:ed:f3:ce:0b:4d:b2:c5:aa:df:88:fb:2d: a8:92:c0:6c:82:b3:05:cb:3a:87:38:ff:b7:91:f0:6f:d3:07: 7e:60:a8:89:8b:5e:9b:64:5d:26:61:e4:ab:13:f3:ed:31:b8: 86:d6:3c:46:84:b9:5a:42:1f:5e:d4:bd:0f:3b:e9:ec:38:6f: d3:15:97:02:33:5f:60:bc:8a:df:90:c5:ed:08:8d:ce:a7:00: 5f:77:ed:f8:1e:a8:26:80:c0:61:67:d6:be:21:7a:74:e6:39: 03:55:76:a9:fe:8b:93:b6:68:b9:f4:38:ab:77:70:f5:17:b9: 86:19:3b:f5:c7:5e:09:23:6e:74:9e:15:54:9f:3d:74:34:b6: 94:ae:7b:c9:53:66:54:05:45:d4:bf:a8:1d:c8:4d:8c:a2:db: 60:22:cd:a3:cd:b8:4c:78:c8:2d:a3:ec:68:fd:dd:b8:41:ab: 53:91:71:a7:08:e0:40:92:41:aa:20:07:c5:39:ec:a3:dc:30: c5:ef:56:e1:96:77:e1:ed:44:70:9b:e6:87:ec:31:b5:05:48: 85:12:00:67:ae:f6:ba:78:a3:58:a3:76:9d:63:93:8a:91:72: 63:1e:e2:7d:4e:0c:ff:32:06:4c:fc:b1:9d:ca:ec:89:38:91: 91:41:0a:3e -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBMAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkJE Q0Q1MjZCMDlFNzg5N0Y3MUZFMDQ4NThCRTc1QzA2RUM0RjEzQTAeFw0yNDAyMjkw MTMzMDlaFw0yNTAyMTQwMTMwMDNaMDMxMTAvBgNVBAMTKERDMEQzODVDOTE1Mjk5 MTM5QTg5NTJENTkzNjYwRTI0NzQ2Q0Q5RUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC5Vk/1+Xz8bMZSBw75zbRc4nbdttt5b3R8aIFceX0M1nc9HANR ZpvHGq7q/jt653OfifDR7J/b/2vO7bYtgEZOYGDnRVRyhOwUZrl7dOaSUTgcXHqZ cTFkb7Ey9eaxw82oVUj3jP+iWGn5gsLl9FVm9cq9YAcWc6AZUzGmnCYPlMS9f4BP SyME0X54iaDhgtK9JVFJTVObVPzNA+OYndlQwWBG1351PefxZBBht9Xz8hVZfF/G 68b14baBWt3VOd8NB+8WVSjIvn5x54WL/c1oN5EPhNhOrTf2AdJekyOL1Ln0KCMM QxuNa9utlbxfawa/ezY0rrbjBBWdhIS2eII1AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU3A04XJFSmROaiVLVk2YOJHRs2e0wHwYDVR0jBBgwFoAUu9zVJrCeeJf3H+BI WL51wG7E8TowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzU0NS91OXpWSnJDZWVKZjNILUJJV0w1MXdHN0U4VG8uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC91OXpWSnJDZWVKZjNILUJJV0w1MXdH N0U4VG8uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNTQ1LzNBMDRYSkZTbVJPYWlWTFZrMllPSkhSczJlMC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBATKiMAwDQYJKoZIhvcNAQELBQADggEBAHo7PYe+t+3zzgtNssWq34j7LaiS wGyCswXLOoc4/7eR8G/TB35gqImLXptkXSZh5KsT8+0xuIbWPEaEuVpCH17UvQ87 6ew4b9MVlwIzX2C8it+Qxe0Ijc6nAF937fgeqCaAwGFn1r4henTmOQNVdqn+i5O2 aLn0OKt3cPUXuYYZO/XHXgkjbnSeFVSfPXQ0tpSue8lTZlQFRdS/qB3ITYyi22Ai zaPNuEx4yC2j7Gj93bhBq1ORcacI4ECSQaogB8U57KPcMMXvVuGWd+HtRHCb5ofs MbUFSIUSAGeu9rp4o1ijdp1jk4qRcmMe4n1ODP8yBkz8sZ3K7Ik4kZFBCj4= -----END CERTIFICATE-----Generated at Thu Jun 6 15:06:48 2024 by rpki-client on console-ams.rpki-client.org