$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/6pxVuNh2UFvejGwo2H6lJzeLfMY.roa File: 6pxVuNh2UFvejGwo2H6lJzeLfMY.roa (raw, json) Hash identifier: 9H+ohbOOZ3CpwaklP0yA89fg6tOq4pOnndytqXcLe0s= Subject key identifier: EA:9C:55:B8:D8:76:50:5B:DE:8C:6C:28:D8:7E:A5:27:37:8B:7C:C6 Certificate issuer: /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A Certificate serial: 049D Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/6pxVuNh2UFvejGwo2H6lJzeLfMY.roa Signing time: Thu 29 Feb 2024 01:28:58 +0000 ROA not before: Thu 29 Feb 2024 01:28:58 +0000 ROA not after: Fri 14 Feb 2025 01:30:03 +0000 asID: 10010 IP address blocks: 61.200.96.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 13 Jun 2024 14:03:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1181 (0x49d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A Validity Not Before: Feb 29 01:28:58 2024 GMT Not After : Feb 14 01:30:03 2025 GMT Subject: CN=EA9C55B8D876505BDE8C6C28D87EA527378B7CC6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:92:0f:1f:d8:16:c1:b3:04:8e:f2:44:f9:13: 07:5f:7e:6d:17:9f:cb:a1:a2:d8:35:77:1e:ae:2b: c6:f6:21:b0:04:a0:6c:cb:5c:ee:d1:84:b3:ee:7a: c4:40:e0:22:fd:93:08:ae:fc:ff:bd:46:a5:12:16: 39:61:d3:85:30:20:4d:2e:c1:c5:66:33:20:cd:c4: ba:7f:79:60:0a:7d:fb:c9:fa:95:8f:31:c2:c1:3d: f6:c9:3e:2b:f9:e9:93:43:5c:da:8b:7d:8a:7e:38: 4b:b4:ac:cc:c5:e4:30:36:f9:f4:68:cb:d8:ad:84: 56:6d:ab:54:cc:12:4c:94:fb:1a:12:c8:56:4d:dd: 0c:11:d9:2c:7b:4e:c7:b2:45:11:78:8a:23:b1:95: 28:dd:b8:49:79:b7:1a:09:32:94:9d:12:52:b5:54: d3:78:59:e2:4b:6a:ff:38:07:f8:2f:be:40:8c:53: 11:3f:c0:86:71:ae:af:68:e8:44:ce:19:02:cc:25: 1c:bb:1f:7a:40:42:f4:18:94:8f:05:93:8e:45:c5: 34:c0:94:13:4e:c6:95:92:8c:52:c0:5d:63:ea:7a: 8e:d8:46:be:5d:23:7a:e4:34:d7:2f:e2:94:7c:80: 7e:42:ce:c7:26:a6:4c:3e:cf:43:e3:98:3c:37:4c: 1c:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:9C:55:B8:D8:76:50:5B:DE:8C:6C:28:D8:7E:A5:27:37:8B:7C:C6 X509v3 Authority Key Identifier: keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/6pxVuNh2UFvejGwo2H6lJzeLfMY.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 61.200.96.0/19 Signature Algorithm: sha256WithRSAEncryption 8c:94:ed:57:b0:50:8a:39:00:cd:7f:01:3e:96:c4:2f:49:24: 00:f0:72:87:1b:44:a3:db:7e:d6:5f:71:72:28:62:27:b4:a7: 1c:ce:11:8b:e1:0b:7e:54:a8:78:01:48:e5:89:0b:9a:79:8e: 40:0a:4b:4d:93:fe:32:70:eb:69:45:05:83:28:bb:e2:1c:01: 60:21:70:18:46:a2:f5:5e:94:5e:0a:31:fa:a2:41:f1:98:18: 60:1f:a8:41:32:ff:86:07:04:4b:9a:f2:40:e8:1f:71:43:72: a6:f6:99:7d:d1:16:42:74:55:6b:95:53:b5:21:67:e0:e0:51: d1:6d:fb:18:89:9d:15:f1:84:03:a5:3e:17:e8:10:78:e8:cd: 3d:3e:e5:29:c1:b9:85:9f:b4:37:09:08:ad:e3:a9:75:7f:3c: ca:7e:23:b8:0f:49:40:1b:bb:d0:e0:98:88:9a:96:74:79:a0: 7f:04:27:09:77:30:4a:cb:4e:c8:90:ab:92:c3:f8:6d:9f:51: 8a:c6:5b:56:e7:4b:fe:79:fe:f5:5f:53:09:60:c1:22:55:13: b4:a5:58:8c:5c:ae:5f:9e:ad:22:57:cd:26:c9:fa:39:8b:cc: 2e:8f:e6:a1:cc:bf:62:eb:4d:18:ca:5d:3f:59:00:ec:1e:a1: de:19:3c:96 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBJ0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkJE Q0Q1MjZCMDlFNzg5N0Y3MUZFMDQ4NThCRTc1QzA2RUM0RjEzQTAeFw0yNDAyMjkw MTI4NThaFw0yNTAyMTQwMTMwMDNaMDMxMTAvBgNVBAMTKEVBOUM1NUI4RDg3NjUw NUJERThDNkMyOEQ4N0VBNTI3Mzc4QjdDQzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDPkg8f2BbBswSO8kT5Ewdffm0Xn8uhotg1dx6uK8b2IbAEoGzL XO7RhLPuesRA4CL9kwiu/P+9RqUSFjlh04UwIE0uwcVmMyDNxLp/eWAKffvJ+pWP McLBPfbJPiv56ZNDXNqLfYp+OEu0rMzF5DA2+fRoy9ithFZtq1TMEkyU+xoSyFZN 3QwR2Sx7TseyRRF4iiOxlSjduEl5txoJMpSdElK1VNN4WeJLav84B/gvvkCMUxE/ wIZxrq9o6ETOGQLMJRy7H3pAQvQYlI8Fk45FxTTAlBNOxpWSjFLAXWPqeo7YRr5d I3rkNNcv4pR8gH5Czscmpkw+z0PjmDw3TBwzAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU6pxVuNh2UFvejGwo2H6lJzeLfMYwHwYDVR0jBBgwFoAUu9zVJrCeeJf3H+BI WL51wG7E8TowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzU0NS91OXpWSnJDZWVKZjNILUJJV0w1MXdHN0U4VG8uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC91OXpWSnJDZWVKZjNILUJJV0w1MXdH N0U4VG8uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNTQ1LzZweFZ1TmgyVUZ2ZWpHd28ySDZsSnplTGZNWS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAU9yGAwDQYJKoZIhvcNAQELBQADggEBAIyU7VewUIo5AM1/AT6WxC9JJADw cocbRKPbftZfcXIoYie0pxzOEYvhC35UqHgBSOWJC5p5jkAKS02T/jJw62lFBYMo u+IcAWAhcBhGovVelF4KMfqiQfGYGGAfqEEy/4YHBEua8kDoH3FDcqb2mX3RFkJ0 VWuVU7UhZ+DgUdFt+xiJnRXxhAOlPhfoEHjozT0+5SnBuYWftDcJCK3jqXV/PMp+ I7gPSUAbu9DgmIialnR5oH8EJwl3MErLTsiQq5LD+G2fUYrGW1bnS/55/vVfUwlg wSJVE7SlWIxcrl+erSJXzSbJ+jmLzC6P5qHMv2LrTRjKXT9ZAOweod4ZPJY= -----END CERTIFICATE-----Generated at Thu Jun 6 15:06:48 2024 by rpki-client on console-ams.rpki-client.org