$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/U5feJmRjrUluGmms5DTDtExh3to.roa File: U5feJmRjrUluGmms5DTDtExh3to.roa (raw, json) Hash identifier: oK0mY0mcl1roj9MvW7nFqutWsAmxWv+MH80TP+mpZQo= Subject key identifier: 53:97:DE:26:64:63:AD:49:6E:1A:69:AC:E4:34:C3:B4:4C:61:DE:DA Certificate issuer: /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A Certificate serial: 04D4 Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/U5feJmRjrUluGmms5DTDtExh3to.roa Signing time: Thu 29 Feb 2024 01:33:17 +0000 ROA not before: Thu 29 Feb 2024 01:33:17 +0000 ROA not after: Fri 14 Feb 2025 01:30:03 +0000 asID: 10010 IP address blocks: 112.139.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1236 (0x4d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A Validity Not Before: Feb 29 01:33:17 2024 GMT Not After : Feb 14 01:30:03 2025 GMT Subject: CN=5397DE266463AD496E1A69ACE434C3B44C61DEDA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f1:88:c7:4b:b6:17:da:cc:a6:d3:fb:3a:e9: ff:4b:93:f9:71:71:a5:0d:91:c9:2b:94:95:4c:d7: 78:83:13:4e:8a:35:5a:10:82:b1:bb:aa:78:4a:31: 3a:ac:b3:8a:a4:32:b1:16:e9:cf:2c:37:63:a1:45: 40:94:a3:78:be:87:bf:69:76:36:d6:6a:58:7d:7f: 5c:7f:18:e6:80:05:88:85:c0:07:af:dc:31:57:04: a9:cf:c7:d3:d4:bd:92:29:11:3b:4f:72:05:e7:94: e4:ca:cc:81:f5:29:04:82:c8:03:4f:5d:ec:7d:a5: 81:44:ca:3c:53:ed:b9:f3:fa:2b:92:07:e6:1a:28: a7:cb:39:3e:05:d6:f2:8f:ff:90:db:85:d5:94:52: 3e:52:0c:2a:e8:be:10:ab:b8:95:40:0c:31:2b:83: 2e:01:29:c7:bd:84:0d:bd:f3:94:eb:f5:99:ee:5e: c4:d5:34:d2:07:8c:09:d8:c8:d4:66:9d:d5:70:37: f4:66:12:56:d1:a5:23:00:22:30:df:46:d3:17:36: e6:a4:cd:18:0f:50:1e:8c:67:4e:a1:c6:ff:c8:52: 28:cb:93:ea:1b:eb:26:39:8b:73:7a:0b:77:de:8b: 35:4d:00:ca:c8:17:b5:b6:cd:03:6e:d7:06:c8:e3: 41:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:97:DE:26:64:63:AD:49:6E:1A:69:AC:E4:34:C3:B4:4C:61:DE:DA X509v3 Authority Key Identifier: keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/U5feJmRjrUluGmms5DTDtExh3to.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 112.139.128.0/17 Signature Algorithm: sha256WithRSAEncryption 1a:6b:14:cd:01:49:1a:7f:36:86:93:87:0e:6c:9c:15:1c:38: 7f:cd:96:fa:50:b9:52:8b:3d:a1:41:b9:37:79:d0:a7:3c:03: 35:73:52:6b:96:b8:5c:13:06:00:fa:ac:36:48:67:1f:af:4f: 10:98:91:f5:26:32:80:d5:06:95:c7:43:17:d5:5d:7f:5d:aa: 18:17:b3:6b:0a:6a:d0:1c:c6:1c:e4:c9:ce:fe:c1:e9:70:dd: 60:f5:48:e0:dd:2c:7c:b6:4a:b4:2e:c2:15:2c:fe:4e:64:9b: 05:4d:3c:5b:0d:31:4b:fa:17:c9:d4:53:4e:f4:34:11:75:dc: 98:8a:08:e9:bc:33:2b:f2:f0:49:09:86:1f:98:b3:c2:ca:93: 8b:3d:b5:1b:47:ca:a0:c2:9f:b9:f9:dd:36:5e:af:92:7c:c0: 31:22:b0:89:f5:ce:ca:52:f2:6c:fa:9b:a0:e7:5c:f1:dc:31: 91:35:a6:7c:cd:21:0f:bc:65:60:c7:f1:dd:73:df:be:69:b7: 1c:6d:03:c7:a9:4b:35:79:69:b3:d3:e8:10:cf:3d:03:68:cb: e9:26:78:f5:f4:ef:89:67:14:8f:2f:9e:2a:4a:3a:9f:5e:7c: ed:c0:92:3c:5b:b2:da:5a:1c:20:53:93:9c:ce:e2:fa:47:3c: 9b:54:56:03 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBNQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkJE Q0Q1MjZCMDlFNzg5N0Y3MUZFMDQ4NThCRTc1QzA2RUM0RjEzQTAeFw0yNDAyMjkw MTMzMTdaFw0yNTAyMTQwMTMwMDNaMDMxMTAvBgNVBAMTKDUzOTdERTI2NjQ2M0FE NDk2RTFBNjlBQ0U0MzRDM0I0NEM2MURFREEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+8YjHS7YX2sym0/s66f9Lk/lxcaUNkckrlJVM13iDE06KNVoQ grG7qnhKMTqss4qkMrEW6c8sN2OhRUCUo3i+h79pdjbWalh9f1x/GOaABYiFwAev 3DFXBKnPx9PUvZIpETtPcgXnlOTKzIH1KQSCyANPXex9pYFEyjxT7bnz+iuSB+Ya KKfLOT4F1vKP/5DbhdWUUj5SDCrovhCruJVADDErgy4BKce9hA2985Tr9ZnuXsTV NNIHjAnYyNRmndVwN/RmElbRpSMAIjDfRtMXNuakzRgPUB6MZ06hxv/IUijLk+ob 6yY5i3N6C3feizVNAMrIF7W2zQNu1wbI40HPAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUU5feJmRjrUluGmms5DTDtExh3towHwYDVR0jBBgwFoAUu9zVJrCeeJf3H+BI WL51wG7E8TowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzU0NS91OXpWSnJDZWVKZjNILUJJV0w1MXdHN0U4VG8uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC91OXpWSnJDZWVKZjNILUJJV0w1MXdH N0U4VG8uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNTQ1L1U1ZmVKbVJqclVsdUdtbXM1RFREdEV4aDN0by5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAdwi4AwDQYJKoZIhvcNAQELBQADggEBABprFM0BSRp/NoaThw5snBUcOH/N lvpQuVKLPaFBuTd50Kc8AzVzUmuWuFwTBgD6rDZIZx+vTxCYkfUmMoDVBpXHQxfV XX9dqhgXs2sKatAcxhzkyc7+welw3WD1SODdLHy2SrQuwhUs/k5kmwVNPFsNMUv6 F8nUU070NBF13JiKCOm8Myvy8EkJhh+Ys8LKk4s9tRtHyqDCn7n53TZer5J8wDEi sIn1zspS8mz6m6DnXPHcMZE1pnzNIQ+8ZWDH8d1z375ptxxtA8epSzV5abPT6BDP PQNoy+kmePX074lnFI8vnipKOp9efO3AkjxbstpaHCBTk5zO4vpHPJtUVgM= -----END CERTIFICATE-----Generated at Sat Jun 1 13:38:50 2024 by rpki-client on console-fra.rpki-client.org