$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/y1fPuBRJj3qXaYF-jpQ0lFqX3BU.roa File: y1fPuBRJj3qXaYF-jpQ0lFqX3BU.roa (raw, json) Hash identifier: 1v2KU/G1H9nxe3c3bMcBEFG1lFyOCGqTjAS8zIsGAIQ= Subject key identifier: CB:57:CF:B8:14:49:8F:7A:97:69:81:7E:8E:94:34:94:5A:97:DC:15 Certificate issuer: /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A Certificate serial: 049A Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/y1fPuBRJj3qXaYF-jpQ0lFqX3BU.roa Signing time: Thu 29 Feb 2024 01:28:56 +0000 ROA not before: Thu 29 Feb 2024 01:28:56 +0000 ROA not after: Fri 14 Feb 2025 01:30:03 +0000 asID: 10010 IP address blocks: 220.216.84.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 13 Jun 2024 14:03:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1178 (0x49a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A Validity Not Before: Feb 29 01:28:56 2024 GMT Not After : Feb 14 01:30:03 2025 GMT Subject: CN=CB57CFB814498F7A9769817E8E9434945A97DC15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:84:11:1a:ef:64:08:6e:a3:b8:05:25:1f:c2: 59:c1:37:f6:56:e0:34:0c:e2:ff:a9:47:dc:44:83: fb:d8:9b:18:3d:a0:b1:9d:be:19:db:94:30:29:f6: a3:70:57:e2:aa:d7:bd:ff:6d:67:42:62:b8:18:5c: 15:4c:31:78:e7:16:25:6a:22:0a:10:2d:dc:a0:14: 0b:d3:d7:23:cd:0c:ec:aa:aa:e2:68:4f:b5:ef:6d: c7:8a:9b:cc:3b:02:a8:cb:bf:bc:95:6e:eb:04:7b: d1:4a:c9:4f:a6:0a:a1:e2:0e:a0:ee:58:92:8a:61: ae:5e:a5:46:40:45:bc:c8:87:53:f9:25:db:7d:74: 53:a0:b5:38:f4:3e:7d:0e:20:28:5e:2f:9f:a0:39: 2e:a5:b8:1e:57:18:04:fa:c3:18:1c:0b:07:87:e2: 72:1a:92:3f:a9:e3:aa:8e:ac:e4:d8:f2:a3:34:3c: e7:75:fe:0b:05:9e:47:1c:37:50:73:3f:46:b0:9d: 38:04:97:a1:fe:34:fc:5f:10:69:bc:4c:f8:63:17: 62:4c:81:c5:28:77:59:ea:54:44:f3:f4:5d:3d:43: 51:8c:a5:8e:26:57:86:0c:7e:7b:97:43:4a:8c:a9: 5a:67:96:31:8c:24:5c:a2:34:b8:55:c6:12:98:40: ef:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:57:CF:B8:14:49:8F:7A:97:69:81:7E:8E:94:34:94:5A:97:DC:15 X509v3 Authority Key Identifier: keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/y1fPuBRJj3qXaYF-jpQ0lFqX3BU.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 220.216.84.0/22 Signature Algorithm: sha256WithRSAEncryption c1:78:51:f5:45:4b:30:47:7f:17:43:7e:6a:4e:10:bc:f3:1e: fd:7f:3e:e4:7a:cb:f3:d8:58:90:22:17:d2:3f:5e:99:01:e7: 60:83:8b:8b:e0:d4:77:f3:a3:0e:97:45:07:25:21:c9:90:44: f8:81:20:b8:ff:0c:62:3d:fe:d9:13:3f:5c:6f:ba:13:91:22: f7:c7:0f:49:0e:16:56:9b:36:ee:dc:b9:9d:5d:2e:1e:06:45: d8:1b:be:d4:2b:6a:37:75:40:fc:94:81:e0:db:e8:b2:3a:c1: 00:b3:f9:38:79:44:8b:40:74:27:2c:92:6c:95:1a:29:2e:16: 2a:7a:09:74:3b:60:1b:2c:64:ff:84:c8:80:ad:35:19:9c:ff: 6a:be:75:c6:f4:8a:4b:2a:70:a0:dd:84:a0:bd:90:51:0e:e7: 0d:ea:60:54:fd:66:e3:57:9d:cb:fd:90:dc:da:7a:00:45:26: b6:7d:d9:3e:7c:70:43:b1:23:af:b0:34:b8:73:b4:2f:6e:92: b0:5a:96:31:4f:4d:8c:09:68:74:f0:13:4d:0e:3a:76:0e:04: c8:49:cc:d9:1d:b5:65:ce:12:8d:4f:a1:7f:6b:a0:f4:03:c9: de:fe:6d:fc:fe:22:aa:e2:23:1f:d1:5a:15:95:f2:74:b3:69: 90:3d:ff:a4 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBJowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkJE Q0Q1MjZCMDlFNzg5N0Y3MUZFMDQ4NThCRTc1QzA2RUM0RjEzQTAeFw0yNDAyMjkw MTI4NTZaFw0yNTAyMTQwMTMwMDNaMDMxMTAvBgNVBAMTKENCNTdDRkI4MTQ0OThG N0E5NzY5ODE3RThFOTQzNDk0NUE5N0RDMTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+hBEa72QIbqO4BSUfwlnBN/ZW4DQM4v+pR9xEg/vYmxg9oLGd vhnblDAp9qNwV+Kq173/bWdCYrgYXBVMMXjnFiVqIgoQLdygFAvT1yPNDOyqquJo T7XvbceKm8w7AqjLv7yVbusEe9FKyU+mCqHiDqDuWJKKYa5epUZARbzIh1P5Jdt9 dFOgtTj0Pn0OICheL5+gOS6luB5XGAT6wxgcCweH4nIakj+p46qOrOTY8qM0POd1 /gsFnkccN1BzP0awnTgEl6H+NPxfEGm8TPhjF2JMgcUod1nqVETz9F09Q1GMpY4m V4YMfnuXQ0qMqVpnljGMJFyiNLhVxhKYQO/JAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUy1fPuBRJj3qXaYF+jpQ0lFqX3BUwHwYDVR0jBBgwFoAUu9zVJrCeeJf3H+BI WL51wG7E8TowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzU0NS91OXpWSnJDZWVKZjNILUJJV0w1MXdHN0U4VG8uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC91OXpWSnJDZWVKZjNILUJJV0w1MXdH N0U4VG8uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNTQ1L3kxZlB1QlJKajNxWGFZRi1qcFEwbEZxWDNCVS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBALc2FQwDQYJKoZIhvcNAQELBQADggEBAMF4UfVFSzBHfxdDfmpOELzzHv1/ PuR6y/PYWJAiF9I/XpkB52CDi4vg1Hfzow6XRQclIcmQRPiBILj/DGI9/tkTP1xv uhORIvfHD0kOFlabNu7cuZ1dLh4GRdgbvtQrajd1QPyUgeDb6LI6wQCz+Th5RItA dCcskmyVGikuFip6CXQ7YBssZP+EyICtNRmc/2q+dcb0iksqcKDdhKC9kFEO5w3q YFT9ZuNXncv9kNzaegBFJrZ92T58cEOxI6+wNLhztC9ukrBaljFPTYwJaHTwE00O OnYOBMhJzNkdtWXOEo1PoX9roPQDyd7+bfz+IqriIx/RWhWV8nSzaZA9/6Q= -----END CERTIFICATE-----Generated at Thu Jun 6 14:56:23 2024 by rpki-client on console-fra.rpki-client.org