$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/YUMDUpmggjmNeR8QArtHSq8-lnA.roa File: YUMDUpmggjmNeR8QArtHSq8-lnA.roa (raw, json) Hash identifier: Fa6Vvhmp0dbIWid9mKg8E1Qx4Ycl95426x67iYtb2xs= Subject key identifier: 61:43:03:52:99:A0:82:39:8D:79:1F:10:02:BB:47:4A:AF:3E:96:70 Certificate issuer: /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A Certificate serial: 04D3 Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/YUMDUpmggjmNeR8QArtHSq8-lnA.roa Signing time: Thu 29 Feb 2024 01:33:17 +0000 ROA not before: Thu 29 Feb 2024 01:33:17 +0000 ROA not after: Fri 14 Feb 2025 01:30:03 +0000 asID: 10010 IP address blocks: 220.216.100.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 13 Jun 2024 14:03:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1235 (0x4d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A Validity Not Before: Feb 29 01:33:17 2024 GMT Not After : Feb 14 01:30:03 2025 GMT Subject: CN=6143035299A082398D791F1002BB474AAF3E9670 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:48:a2:e9:e5:17:8e:1f:fb:a9:ff:42:52:2e: df:cd:71:e4:31:dd:78:04:eb:96:86:fc:fe:9c:60: bc:c8:71:f8:bc:91:12:f0:ad:c0:a2:fb:c0:f4:bf: 87:fe:19:82:44:53:38:b5:16:9f:e1:68:f7:cd:dc: e7:ca:ce:fc:d0:24:92:83:b1:67:64:a5:66:6f:61: 8b:31:9e:df:41:ef:b2:6d:df:95:44:12:82:3c:a9: 84:31:f0:e4:cb:0d:b2:86:5f:3c:54:6e:2f:2f:1d: da:40:d4:76:ba:0d:9f:7f:43:fa:96:22:27:52:ba: f0:de:22:58:d6:c8:6b:5f:97:ed:66:39:0e:43:b3: e8:5e:f1:3f:90:f7:31:c8:5e:cf:42:ca:9b:4e:d6: 98:a6:a8:2e:c4:3e:f2:3a:59:ae:dc:6b:3e:36:7b: bc:aa:e1:b9:ab:e1:76:ca:87:76:45:46:d9:2b:9d: 8b:22:e4:02:e3:04:80:fd:4f:3a:21:d9:bc:b8:8f: 7c:0b:12:ce:cf:57:61:6c:ac:36:79:ea:6e:8c:a3: 53:a6:f5:6f:83:cf:22:21:41:d7:dd:9f:32:31:c4: 06:c3:39:f9:74:7e:e8:ef:a2:ea:f7:24:b2:0d:8a: d7:65:42:7d:06:b0:67:ae:84:b7:26:12:98:4b:bb: 4f:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:43:03:52:99:A0:82:39:8D:79:1F:10:02:BB:47:4A:AF:3E:96:70 X509v3 Authority Key Identifier: keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/YUMDUpmggjmNeR8QArtHSq8-lnA.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 220.216.100.0/23 Signature Algorithm: sha256WithRSAEncryption 3a:37:a0:22:09:87:53:24:68:c3:d4:8c:ad:f7:41:65:f0:21: b4:1c:9a:41:8e:09:66:03:e7:ac:66:d8:da:cb:4e:28:0b:66: 3c:a0:2f:7d:6c:b9:50:09:3e:69:33:a3:ef:6a:ae:f1:ac:69: 8c:20:03:af:12:82:f7:cf:ee:c7:4e:5b:98:b5:29:be:7c:15: 09:7d:47:b4:a4:6b:92:0e:a8:51:6c:76:6c:b4:de:15:e1:3a: c9:67:c5:99:40:39:e5:39:ff:21:20:01:be:5f:83:e9:3b:d7: ec:a5:b3:27:eb:1a:95:87:c7:ef:ab:ff:00:24:aa:a0:64:5a: 61:b2:1f:65:59:c3:28:dc:7f:5f:b7:3f:87:a1:88:4b:dc:f4: 5e:f0:9f:d4:f4:77:c1:65:ed:f9:60:63:62:08:b9:e5:4b:cd: 65:2e:21:18:63:69:a0:29:77:09:db:5c:69:c1:bd:c8:0d:c7: 06:a0:c6:52:36:cc:bf:22:5f:a6:72:0e:67:9e:7e:a2:86:73: 79:6c:bf:11:03:66:04:b0:b5:8b:4b:42:47:af:2b:0d:4a:1e: d0:e8:76:15:3a:d0:7f:08:74:e3:06:84:1e:c2:35:c1:e8:01: 04:e5:b0:7f:14:14:84:95:8f:2c:9e:a2:95:70:05:91:bb:ba: 7d:bf:df:97 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBNMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkJE Q0Q1MjZCMDlFNzg5N0Y3MUZFMDQ4NThCRTc1QzA2RUM0RjEzQTAeFw0yNDAyMjkw MTMzMTdaFw0yNTAyMTQwMTMwMDNaMDMxMTAvBgNVBAMTKDYxNDMwMzUyOTlBMDgy Mzk4RDc5MUYxMDAyQkI0NzRBQUYzRTk2NzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCWSKLp5ReOH/up/0JSLt/NceQx3XgE65aG/P6cYLzIcfi8kRLw rcCi+8D0v4f+GYJEUzi1Fp/haPfN3OfKzvzQJJKDsWdkpWZvYYsxnt9B77Jt35VE EoI8qYQx8OTLDbKGXzxUbi8vHdpA1Ha6DZ9/Q/qWIidSuvDeIljWyGtfl+1mOQ5D s+he8T+Q9zHIXs9CyptO1pimqC7EPvI6Wa7caz42e7yq4bmr4XbKh3ZFRtkrnYsi 5ALjBID9Tzoh2by4j3wLEs7PV2FsrDZ56m6Mo1Om9W+DzyIhQdfdnzIxxAbDOfl0 fujvour3JLINitdlQn0GsGeuhLcmEphLu09XAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUYUMDUpmggjmNeR8QArtHSq8+lnAwHwYDVR0jBBgwFoAUu9zVJrCeeJf3H+BI WL51wG7E8TowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzU0NS91OXpWSnJDZWVKZjNILUJJV0w1MXdHN0U4VG8uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC91OXpWSnJDZWVKZjNILUJJV0w1MXdH N0U4VG8uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNTQ1L1lVTURVcG1nZ2ptTmVSOFFBcnRIU3E4LWxuQS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAHc2GQwDQYJKoZIhvcNAQELBQADggEBADo3oCIJh1MkaMPUjK33QWXwIbQc mkGOCWYD56xm2NrLTigLZjygL31suVAJPmkzo+9qrvGsaYwgA68SgvfP7sdOW5i1 Kb58FQl9R7Ska5IOqFFsdmy03hXhOslnxZlAOeU5/yEgAb5fg+k71+ylsyfrGpWH x++r/wAkqqBkWmGyH2VZwyjcf1+3P4ehiEvc9F7wn9T0d8Fl7flgY2IIueVLzWUu IRhjaaApdwnbXGnBvcgNxwagxlI2zL8iX6ZyDmeefqKGc3lsvxEDZgSwtYtLQkev Kw1KHtDodhU60H8IdOMGhB7CNcHoAQTlsH8UFISVjyyeopVwBZG7un2/35c= -----END CERTIFICATE-----Generated at Thu Jun 6 14:56:22 2024 by rpki-client on console-fra.rpki-client.org