$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/iijop03_XzHo3vwpkLTYNg5RZzI.roa File: iijop03_XzHo3vwpkLTYNg5RZzI.roa (raw, json) Hash identifier: XVc49XroNNrfNvIn6mwvZUWeKo3GuX/yO+gMVOt5HmU= Subject key identifier: 8A:28:E8:A7:4D:FF:5F:31:E8:DE:FC:29:90:B4:D8:36:0E:51:67:32 Certificate issuer: /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A Certificate serial: 04C9 Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/iijop03_XzHo3vwpkLTYNg5RZzI.roa Signing time: Thu 29 Feb 2024 01:33:13 +0000 ROA not before: Thu 29 Feb 2024 01:33:13 +0000 ROA not after: Fri 14 Feb 2025 01:30:03 +0000 asID: 10010 IP address blocks: 203.114.228.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1225 (0x4c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A Validity Not Before: Feb 29 01:33:13 2024 GMT Not After : Feb 14 01:30:03 2025 GMT Subject: CN=8A28E8A74DFF5F31E8DEFC2990B4D8360E516732 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:11:eb:54:6f:04:e9:99:d8:07:04:a7:0e:48: c7:4f:11:27:32:2c:59:bc:96:3f:65:ad:5c:45:a7: b4:45:e7:48:da:5b:fd:e1:60:b5:50:a9:95:ea:92: 89:ed:8f:eb:e8:98:06:dd:f1:29:e3:09:4a:f8:49: 0c:86:96:96:83:98:e1:9e:8d:68:f0:fb:6a:6a:67: f0:7b:f8:b1:ae:89:ef:8e:51:cb:df:a9:be:5a:36: 98:42:e4:9b:4e:48:85:59:0a:2d:fe:4c:e6:82:bc: fb:69:2e:89:04:e1:6e:60:2e:8e:75:e4:53:08:50: fc:cc:c4:da:fb:d7:28:75:b8:ab:89:1f:20:6a:90: ca:93:19:ab:64:28:90:e0:58:f8:c9:a4:ae:73:d3: 32:bd:3a:33:dd:c7:0a:f8:5c:c3:e6:c5:b8:6f:21: 1e:4d:4a:d1:28:94:53:74:6f:8e:56:3a:ce:80:8c: b3:a5:62:70:3b:58:db:09:84:9f:94:84:f1:3e:d6: b5:c6:57:94:70:b2:68:ec:c7:ea:37:7d:b9:21:0e: aa:13:4b:a6:4f:ed:43:7f:f7:27:be:09:f0:f7:bf: 91:c1:fd:59:95:cd:67:d9:8c:a4:bd:1e:8b:41:da: b0:98:2c:0f:93:6e:b8:ad:e5:83:5d:75:0e:60:24: 65:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:28:E8:A7:4D:FF:5F:31:E8:DE:FC:29:90:B4:D8:36:0E:51:67:32 X509v3 Authority Key Identifier: keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/iijop03_XzHo3vwpkLTYNg5RZzI.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.114.228.0/22 Signature Algorithm: sha256WithRSAEncryption c0:83:cc:5b:17:e1:f6:a6:81:53:ec:43:1e:51:48:98:13:58: c0:50:fc:00:2e:6a:ff:4d:ff:e7:6f:8f:55:e8:a6:cd:3d:95: 50:09:38:51:73:54:5c:e1:62:b2:b5:3d:c1:ea:fc:5e:8b:55: 0f:73:c6:2d:2c:40:dc:63:b3:e4:4f:f1:c7:18:6a:dc:86:a0: 63:c7:05:89:c3:00:19:ab:6f:54:e2:50:e0:53:69:ed:06:47: f4:5a:d1:47:26:29:79:6b:40:10:ee:fb:b4:ce:ba:11:c9:e5: 6a:84:6b:d0:85:9d:42:a0:3e:21:44:43:47:b4:f0:17:21:ff: d9:df:52:fc:6d:ef:1a:11:39:03:b9:d1:4d:64:6f:76:ef:e9: f6:ce:c8:36:a5:b0:22:96:fe:05:8b:d8:1f:c4:32:d4:d2:30: 95:63:16:1c:d7:c1:70:f1:5b:9f:1f:cc:c4:b0:be:59:8f:85: 11:7f:b6:e6:6a:01:46:2e:89:49:2c:63:79:0a:72:54:f1:49: f4:6c:5a:68:e7:55:1e:d8:37:43:24:7a:a0:b2:ed:bc:ed:8e: 7e:06:1e:1c:ee:73:27:59:d7:89:06:a4:df:cf:ee:5d:b6:87: 5b:7d:fe:a4:12:f2:c6:bb:13:59:28:d4:00:99:e6:15:2f:86: 05:50:ab:38 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBMkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkJE Q0Q1MjZCMDlFNzg5N0Y3MUZFMDQ4NThCRTc1QzA2RUM0RjEzQTAeFw0yNDAyMjkw MTMzMTNaFw0yNTAyMTQwMTMwMDNaMDMxMTAvBgNVBAMTKDhBMjhFOEE3NERGRjVG MzFFOERFRkMyOTkwQjREODM2MEU1MTY3MzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCwEetUbwTpmdgHBKcOSMdPEScyLFm8lj9lrVxFp7RF50jaW/3h YLVQqZXqkontj+vomAbd8SnjCUr4SQyGlpaDmOGejWjw+2pqZ/B7+LGuie+OUcvf qb5aNphC5JtOSIVZCi3+TOaCvPtpLokE4W5gLo515FMIUPzMxNr71yh1uKuJHyBq kMqTGatkKJDgWPjJpK5z0zK9OjPdxwr4XMPmxbhvIR5NStEolFN0b45WOs6AjLOl YnA7WNsJhJ+UhPE+1rXGV5Rwsmjsx+o3fbkhDqoTS6ZP7UN/9ye+CfD3v5HB/VmV zWfZjKS9HotB2rCYLA+Tbrit5YNddQ5gJGWbAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUiijop03/XzHo3vwpkLTYNg5RZzIwHwYDVR0jBBgwFoAUu9zVJrCeeJf3H+BI WL51wG7E8TowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzU0NS91OXpWSnJDZWVKZjNILUJJV0w1MXdHN0U4VG8uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC91OXpWSnJDZWVKZjNILUJJV0w1MXdH N0U4VG8uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNTQ1L2lpam9wMDNfWHpIbzN2d3BrTFRZTmc1Ulp6SS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBALLcuQwDQYJKoZIhvcNAQELBQADggEBAMCDzFsX4famgVPsQx5RSJgTWMBQ /AAuav9N/+dvj1Xops09lVAJOFFzVFzhYrK1PcHq/F6LVQ9zxi0sQNxjs+RP8ccY atyGoGPHBYnDABmrb1TiUOBTae0GR/Ra0UcmKXlrQBDu+7TOuhHJ5WqEa9CFnUKg PiFEQ0e08Bch/9nfUvxt7xoROQO50U1kb3bv6fbOyDalsCKW/gWL2B/EMtTSMJVj FhzXwXDxW58fzMSwvlmPhRF/tuZqAUYuiUksY3kKclTxSfRsWmjnVR7YN0MkeqCy 7bztjn4GHhzucydZ14kGpN/P7l22h1t9/qQS8sa7E1ko1ACZ5hUvhgVQqzg= -----END CERTIFICATE-----Generated at Sat Jun 1 13:38:51 2024 by rpki-client on console-fra.rpki-client.org