$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/4AdT3yIPuR7vvSoeMRj4FGX916w.roa File: 4AdT3yIPuR7vvSoeMRj4FGX916w.roa (raw, json) Hash identifier: 9G1Wm/xyukJrqoERlrf8FBKB37k/NpKgCWW3kV/K3RM= Subject key identifier: E0:07:53:DF:22:0F:B9:1E:EF:BD:2A:1E:31:18:F8:14:65:FD:D7:AC Certificate issuer: /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A Certificate serial: 048A Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/4AdT3yIPuR7vvSoeMRj4FGX916w.roa Signing time: Sun 01 Oct 2023 01:28:04 +0000 ROA not before: Sun 01 Oct 2023 01:28:04 +0000 ROA not after: Sat 14 Sep 2024 01:30:03 +0000 asID: 10010 IP address blocks: 133.186.0.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 13 Jun 2024 14:03:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1162 (0x48a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A Validity Not Before: Oct 1 01:28:04 2023 GMT Not After : Sep 14 01:30:03 2024 GMT Subject: CN=E00753DF220FB91EEFBD2A1E3118F81465FDD7AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:f2:17:09:62:b0:bc:0b:d2:f5:10:b5:57:59: 89:e4:42:4b:2c:5d:f4:60:77:08:f7:b2:c4:77:d9: 4c:96:b9:4e:bf:72:4b:4f:fd:8a:b4:d8:49:07:fd: 53:5e:f7:bf:17:09:14:91:f8:5d:66:4a:53:63:72: be:f8:a4:f9:56:dc:2b:50:5b:df:d8:13:14:6d:f1: f9:b7:fb:b7:17:9d:2f:35:07:32:73:87:ed:ec:57: 28:78:43:18:dd:61:c3:a8:53:b0:07:13:15:b8:df: 33:75:f6:02:ad:4d:b7:bc:40:96:b2:4e:60:58:53: 57:df:cd:dd:89:84:89:21:0e:f7:28:5c:4a:dc:5a: 54:75:7d:60:91:bb:2d:d1:ff:a3:5d:3b:86:2f:1b: 27:88:83:bd:2f:97:a0:58:7c:34:7d:e9:61:ab:0d: bc:ab:9f:1e:e7:22:1f:4e:e0:11:91:7e:55:7c:85: d4:6a:09:de:04:9f:d0:7c:7f:d9:19:e7:2e:c6:6c: 3c:3a:53:11:bd:7a:b4:af:e6:5f:4e:0a:a6:32:ff: ed:6e:63:13:54:92:fc:36:5e:bc:2d:84:be:08:ea: 32:68:57:f4:09:85:10:c6:95:7d:5a:31:75:7f:21: 28:e7:79:ec:8c:6f:5c:c1:fa:8c:8f:e7:42:1d:b0: c4:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:07:53:DF:22:0F:B9:1E:EF:BD:2A:1E:31:18:F8:14:65:FD:D7:AC X509v3 Authority Key Identifier: keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/4AdT3yIPuR7vvSoeMRj4FGX916w.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 133.186.0.0/20 Signature Algorithm: sha256WithRSAEncryption 78:82:f8:2c:4e:34:23:fd:88:8b:10:58:0d:63:c3:7a:bf:bf: d1:da:9c:f6:e9:f4:33:85:1c:ee:08:2b:5b:39:af:55:76:51: 35:ad:50:a9:e9:e8:fc:db:ed:16:0a:f4:bc:ad:35:c1:6d:27: ed:4f:03:d2:3e:87:7d:04:6b:18:0c:cf:57:eb:03:b3:37:09: 3b:97:e2:b3:8d:10:9e:84:19:48:5c:88:22:09:c5:86:20:e2: 4d:70:e9:df:dd:12:d8:9d:c8:f3:9e:35:34:56:cd:46:22:34: 3c:08:89:1b:79:7d:a6:5a:fe:01:36:b0:b8:08:19:6f:f7:3e: 87:89:8e:77:4f:e3:b7:6f:aa:f0:3c:c7:29:e4:58:5d:69:45: ec:a7:90:0d:78:26:b5:bc:cc:9f:cb:00:0d:2f:bf:f0:ad:4d: 73:86:e2:f4:d2:29:c0:73:51:11:8b:ed:53:8a:85:7c:ad:f1: 3a:43:29:c3:a1:1a:57:bd:57:81:21:db:9c:79:c8:bb:cf:51: df:fc:49:d2:94:08:a1:e2:49:9d:20:46:fb:62:a4:23:8c:e0: 7f:d2:43:54:85:2d:1d:e4:78:ed:f0:d9:d8:e6:1a:f7:00:4b: 7d:9e:73:73:9d:86:80:62:3f:ed:46:ca:c3:7a:f9:d1:69:6b: 06:85:c1:e6 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBIowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkJE Q0Q1MjZCMDlFNzg5N0Y3MUZFMDQ4NThCRTc1QzA2RUM0RjEzQTAeFw0yMzEwMDEw MTI4MDRaFw0yNDA5MTQwMTMwMDNaMDMxMTAvBgNVBAMTKEUwMDc1M0RGMjIwRkI5 MUVFRkJEMkExRTMxMThGODE0NjVGREQ3QUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCR8hcJYrC8C9L1ELVXWYnkQkssXfRgdwj3ssR32UyWuU6/cktP /Yq02EkH/VNe978XCRSR+F1mSlNjcr74pPlW3CtQW9/YExRt8fm3+7cXnS81BzJz h+3sVyh4QxjdYcOoU7AHExW43zN19gKtTbe8QJayTmBYU1ffzd2JhIkhDvcoXErc WlR1fWCRuy3R/6NdO4YvGyeIg70vl6BYfDR96WGrDbyrnx7nIh9O4BGRflV8hdRq Cd4En9B8f9kZ5y7GbDw6UxG9erSv5l9OCqYy/+1uYxNUkvw2XrwthL4I6jJoV/QJ hRDGlX1aMXV/ISjneeyMb1zB+oyP50IdsMRdAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU4AdT3yIPuR7vvSoeMRj4FGX916wwHwYDVR0jBBgwFoAUu9zVJrCeeJf3H+BI WL51wG7E8TowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzU0NS91OXpWSnJDZWVKZjNILUJJV0w1MXdHN0U4VG8uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC91OXpWSnJDZWVKZjNILUJJV0w1MXdH N0U4VG8uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNTQ1LzRBZFQzeUlQdVI3dnZTb2VNUmo0RkdYOTE2dy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBASFugAwDQYJKoZIhvcNAQELBQADggEBAHiC+CxONCP9iIsQWA1jw3q/v9Ha nPbp9DOFHO4IK1s5r1V2UTWtUKnp6Pzb7RYK9LytNcFtJ+1PA9I+h30EaxgMz1fr A7M3CTuX4rONEJ6EGUhciCIJxYYg4k1w6d/dEtidyPOeNTRWzUYiNDwIiRt5faZa /gE2sLgIGW/3PoeJjndP47dvqvA8xynkWF1pReynkA14JrW8zJ/LAA0vv/CtTXOG 4vTSKcBzURGL7VOKhXyt8TpDKcOhGle9V4Eh25x5yLvPUd/8SdKUCKHiSZ0gRvti pCOM4H/SQ1SFLR3keO3w2djmGvcAS32ec3OdhoBiP+1GysN6+dFpawaFweY= -----END CERTIFICATE-----Generated at Thu Jun 6 14:56:22 2024 by rpki-client on console-fra.rpki-client.org