$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/TsnPuJqXRaO3Y5f2PHcPQmCf0G8.roa File: TsnPuJqXRaO3Y5f2PHcPQmCf0G8.roa (raw, json) Hash identifier: jKWOHVPLvSnJHA5YU292Irz+K2Yjls7LF6qcAW2m0vA= Subject key identifier: 4E:C9:CF:B8:9A:97:45:A3:B7:63:97:F6:3C:77:0F:42:60:9F:D0:6F Certificate issuer: /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A Certificate serial: 04D9 Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/TsnPuJqXRaO3Y5f2PHcPQmCf0G8.roa Signing time: Thu 29 Feb 2024 01:33:19 +0000 ROA not before: Thu 29 Feb 2024 01:33:19 +0000 ROA not after: Fri 14 Feb 2025 01:30:03 +0000 asID: 10010 IP address blocks: 61.206.64.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 13 Jun 2024 14:03:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1241 (0x4d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A Validity Not Before: Feb 29 01:33:19 2024 GMT Not After : Feb 14 01:30:03 2025 GMT Subject: CN=4EC9CFB89A9745A3B76397F63C770F42609FD06F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:7c:1e:02:f0:17:52:7f:19:4a:c6:72:43:ab: 46:06:f4:b0:b0:4c:5d:59:da:7d:e1:b8:57:e7:4d: 4e:4b:73:8c:18:89:4c:02:2d:24:0f:e0:1d:16:8d: 69:38:bc:4c:f7:09:cf:85:e6:19:c1:ab:c5:7c:76: 1b:cf:c3:d1:72:eb:27:cd:3f:a9:17:14:37:87:d7: 7b:68:94:9b:41:cf:18:d7:97:ae:b1:00:f3:7f:ff: a3:14:f7:21:91:03:f3:03:a6:21:81:40:2b:43:47: c3:07:4b:49:de:36:a8:54:af:21:5d:2e:53:f7:12: a0:6b:cf:4c:4e:0d:0e:dc:7b:f4:f6:f5:e9:10:01: 04:75:74:13:4d:a9:0f:81:f1:84:17:e8:91:88:4b: 1d:80:47:6f:b9:10:e9:9b:bc:3d:99:d4:b5:74:97: 23:2b:5a:36:2b:22:21:89:d5:ef:06:20:f1:8b:cf: c1:4f:7d:3f:8e:61:6f:58:f0:16:37:db:f4:ca:01: 2b:f9:4c:e1:bd:14:fe:56:1d:01:fd:1c:f5:25:60: 32:3b:0e:e7:f0:0b:e4:79:cf:a2:73:03:0f:46:6c: 31:40:09:3d:67:2b:3a:c3:9d:cf:45:d7:db:ef:fa: 24:65:cf:67:fa:a3:dc:09:27:7c:17:a7:f6:ad:8e: 1f:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:C9:CF:B8:9A:97:45:A3:B7:63:97:F6:3C:77:0F:42:60:9F:D0:6F X509v3 Authority Key Identifier: keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/TsnPuJqXRaO3Y5f2PHcPQmCf0G8.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 61.206.64.0/20 Signature Algorithm: sha256WithRSAEncryption 86:01:41:71:75:6e:99:9f:6b:60:e6:09:03:53:c7:19:0f:e9: cc:3a:74:a0:be:94:40:7e:f8:a6:0f:f6:22:f8:e5:57:b4:ef: 7f:61:83:23:12:7c:d5:25:75:af:37:0d:41:89:fa:32:7e:23: d0:02:c4:d6:e0:a0:91:0d:bb:00:b4:38:a7:55:2f:80:94:23: 7f:97:12:f9:fa:a4:4a:68:5b:f9:bc:84:27:02:e5:8a:ba:3b: 06:4b:e6:05:4e:77:7e:78:83:54:cd:55:0d:57:fb:ed:3d:85: 53:a9:ef:75:c7:62:bc:dd:2f:db:6f:1a:53:a3:52:f3:84:fe: 37:7f:d9:44:5c:ec:ee:20:db:9b:c8:5a:43:82:39:36:ac:85: a9:66:d7:73:1d:74:b0:33:c8:13:00:cd:45:fd:fc:40:59:be: 62:8f:92:65:4f:7a:fa:c3:65:6b:12:26:8d:e1:e9:b1:9f:2b: e4:dd:9e:c2:25:1f:ca:b8:64:69:49:8b:39:24:50:bc:c0:8c: 85:35:11:90:e4:1e:7b:ba:97:ca:3a:b8:31:91:96:d6:2c:35: f7:80:41:5c:fd:7b:ee:40:07:73:89:09:16:27:8a:58:e8:35: 28:d5:8a:3a:67:5c:dd:0f:b8:38:91:0e:9b:25:6c:02:f9:5c: 9a:1f:9b:5e -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBNkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkJE Q0Q1MjZCMDlFNzg5N0Y3MUZFMDQ4NThCRTc1QzA2RUM0RjEzQTAeFw0yNDAyMjkw MTMzMTlaFw0yNTAyMTQwMTMwMDNaMDMxMTAvBgNVBAMTKDRFQzlDRkI4OUE5NzQ1 QTNCNzYzOTdGNjNDNzcwRjQyNjA5RkQwNkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCyfB4C8BdSfxlKxnJDq0YG9LCwTF1Z2n3huFfnTU5Lc4wYiUwC LSQP4B0WjWk4vEz3Cc+F5hnBq8V8dhvPw9Fy6yfNP6kXFDeH13tolJtBzxjXl66x APN//6MU9yGRA/MDpiGBQCtDR8MHS0neNqhUryFdLlP3EqBrz0xODQ7ce/T29ekQ AQR1dBNNqQ+B8YQX6JGISx2AR2+5EOmbvD2Z1LV0lyMrWjYrIiGJ1e8GIPGLz8FP fT+OYW9Y8BY32/TKASv5TOG9FP5WHQH9HPUlYDI7DufwC+R5z6JzAw9GbDFACT1n KzrDnc9F19vv+iRlz2f6o9wJJ3wXp/atjh9LAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUTsnPuJqXRaO3Y5f2PHcPQmCf0G8wHwYDVR0jBBgwFoAUu9zVJrCeeJf3H+BI WL51wG7E8TowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzU0NS91OXpWSnJDZWVKZjNILUJJV0w1MXdHN0U4VG8uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC91OXpWSnJDZWVKZjNILUJJV0w1MXdH N0U4VG8uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNTQ1L1RzblB1SnFYUmFPM1k1ZjJQSGNQUW1DZjBHOC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQ9zkAwDQYJKoZIhvcNAQELBQADggEBAIYBQXF1bpmfa2DmCQNTxxkP6cw6 dKC+lEB++KYP9iL45Ve0739hgyMSfNUlda83DUGJ+jJ+I9ACxNbgoJENuwC0OKdV L4CUI3+XEvn6pEpoW/m8hCcC5Yq6OwZL5gVOd354g1TNVQ1X++09hVOp73XHYrzd L9tvGlOjUvOE/jd/2URc7O4g25vIWkOCOTashalm13MddLAzyBMAzUX9/EBZvmKP kmVPevrDZWsSJo3h6bGfK+TdnsIlH8q4ZGlJizkkULzAjIU1EZDkHnu6l8o6uDGR ltYsNfeAQVz9e+5AB3OJCRYniljoNSjVijpnXN0PuDiRDpslbAL5XJofm14= -----END CERTIFICATE-----Generated at Thu Jun 6 14:56:22 2024 by rpki-client on console-fra.rpki-client.org