$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/kTNX4c2EYXetEYLnh_CpKZpWMbs.roa File: kTNX4c2EYXetEYLnh_CpKZpWMbs.roa (raw, json) Hash identifier: sOUSkkBPZ8YzP+0F+J4Mz1yqZzUsVWSXMJg5hydS6FY= Subject key identifier: 91:33:57:E1:CD:84:61:77:AD:11:82:E7:87:F0:A9:29:9A:56:31:BB Certificate issuer: /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9 Certificate serial: 0134 Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/kTNX4c2EYXetEYLnh_CpKZpWMbs.roa Signing time: Wed 01 Nov 2023 01:29:31 +0000 ROA not before: Wed 01 Nov 2023 01:29:31 +0000 ROA not after: Mon 14 Oct 2024 01:30:03 +0000 asID: 32787 IP address blocks: 210.130.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Jun 2024 13:34:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 308 (0x134) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9 Validity Not Before: Nov 1 01:29:31 2023 GMT Not After : Oct 14 01:30:03 2024 GMT Subject: CN=913357E1CD846177AD1182E787F0A9299A5631BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:73:c8:ff:54:76:88:4f:13:36:84:b7:b7:15: 64:19:5a:fc:d8:4f:6d:f6:1b:11:92:de:42:73:ff: 7d:b7:36:f8:90:c4:ee:7d:e6:26:f3:23:bb:f2:7a: 1f:b7:c9:40:b2:16:3d:cd:35:05:a4:43:a1:6a:9d: 32:86:e2:cf:5e:69:f3:e2:a3:40:ca:c1:b1:f8:55: 6a:24:b8:76:43:a9:04:36:15:90:9c:ab:4a:87:a1: a1:4a:7e:d6:d8:e4:eb:41:0b:ba:c9:99:83:5d:ab: fd:e2:bc:e2:f4:cf:46:62:d2:be:db:9e:d8:e3:91: be:31:fb:8e:6b:76:1d:33:95:b9:b3:06:6f:e4:a3: 79:ef:90:c4:7f:fe:b8:43:14:fe:41:eb:d1:bc:11: 0a:35:f8:67:7a:13:99:c5:d5:46:41:0f:6f:46:e7: 2c:d5:0e:c2:c0:15:44:7b:ce:f9:19:6f:0e:db:1a: f8:e7:3e:95:57:04:3e:7b:84:8c:f0:95:7d:a7:6f: b4:f8:ff:ca:1c:e1:e4:64:8c:bd:06:fb:6b:d4:fa: 75:23:cf:da:cf:35:44:af:85:cf:bc:6b:8e:eb:2c: 14:53:e4:22:c5:5f:b3:89:a6:46:97:79:25:b7:3b: bd:cf:db:3f:30:b7:c8:7c:5d:12:1a:79:a4:4e:26: f6:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:33:57:E1:CD:84:61:77:AD:11:82:E7:87:F0:A9:29:9A:56:31:BB X509v3 Authority Key Identifier: keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/kTNX4c2EYXetEYLnh_CpKZpWMbs.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.130.209.0/24 Signature Algorithm: sha256WithRSAEncryption 37:e3:cd:52:cd:45:16:83:c1:94:64:72:0a:b2:fc:4b:50:ea: 2a:ab:77:10:3d:fe:dc:e0:e2:32:b7:2a:c2:7e:12:88:81:1a: 54:8d:19:0c:54:10:04:8a:3e:16:bd:23:16:7b:42:bf:12:75: 6c:c7:7a:9b:7f:ad:2e:8b:28:00:f7:e3:03:b5:65:d0:bd:0a: 93:c9:09:65:14:81:29:b6:53:2b:21:e8:17:58:0f:6d:82:3b: 46:59:81:78:f2:80:12:72:98:ca:6c:55:c7:7c:d8:01:d3:44: 79:94:39:32:b6:30:df:8e:e9:ab:c7:4a:ba:08:f7:a7:82:22: 80:c8:ea:d6:76:33:e2:83:90:50:9b:86:74:cd:79:83:8b:6f: 72:68:ee:23:02:ca:42:13:c4:f3:d4:bf:99:db:49:06:eb:f6: 66:bf:d1:6c:01:5e:a2:02:c8:e4:eb:e9:0d:ea:af:53:c1:ae: c0:7d:13:4f:57:42:c1:58:b4:d2:2a:25:6c:1c:a5:d8:3b:1e: 1d:93:3e:41:d1:e9:1d:ad:8f:94:43:c9:79:4e:f1:96:88:4b: c8:ec:4a:85:00:4d:4d:18:4a:0e:e5:c2:1f:09:c6:56:09:e2: 8a:c8:b2:62:75:e2:05:64:14:88:30:29:e1:d6:aa:a9:e0:d6: ff:24:0c:17 -----BEGIN CERTIFICATE----- MIIFBDCCA+ygAwIBAgICATQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjk4 M0NGRDVGOENBRkEwMDY4RDJFQkEyNUVEMEY3MDEyNDRCMTJGOTAeFw0yMzExMDEw MTI5MzFaFw0yNDEwMTQwMTMwMDNaMDMxMTAvBgNVBAMTKDkxMzM1N0UxQ0Q4NDYx NzdBRDExODJFNzg3RjBBOTI5OUE1NjMxQkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDJc8j/VHaITxM2hLe3FWQZWvzYT232GxGS3kJz/323NviQxO59 5ibzI7vyeh+3yUCyFj3NNQWkQ6FqnTKG4s9eafPio0DKwbH4VWokuHZDqQQ2FZCc q0qHoaFKftbY5OtBC7rJmYNdq/3ivOL0z0Zi0r7bntjjkb4x+45rdh0zlbmzBm/k o3nvkMR//rhDFP5B69G8EQo1+Gd6E5nF1UZBD29G5yzVDsLAFUR7zvkZbw7bGvjn PpVXBD57hIzwlX2nb7T4/8oc4eRkjL0G+2vU+nUjz9rPNUSvhc+8a47rLBRT5CLF X7OJpkaXeSW3O73P2z8wt8h8XRIaeaROJva/AgMBAAGjggIgMIICHDAdBgNVHQ4E FgQUkTNX4c2EYXetEYLnh/CpKZpWMbswHwYDVR0jBBgwFoAUKYPP1fjK+gBo0uui XtD3ASRLEvkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzYvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JMRXZrLmNybDBtBggrBgEF BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JM RXZrLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgbkGCCsGAQUFBwELBIGsMIGpMF8GCCsG AQUFBzALhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzYva1ROWDRjMkVZWGV0RVlMbmhfQ3BLWnBXTWJzLnJvYTBGBggr BgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3JyZHAv YXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME ANKC0TANBgkqhkiG9w0BAQsFAAOCAQEAN+PNUs1FFoPBlGRyCrL8S1DqKqt3ED3+ 3ODiMrcqwn4SiIEaVI0ZDFQQBIo+Fr0jFntCvxJ1bMd6m3+tLosoAPfjA7Vl0L0K k8kJZRSBKbZTKyHoF1gPbYI7RlmBePKAEnKYymxVx3zYAdNEeZQ5MrYw347pq8dK ugj3p4IigMjq1nYz4oOQUJuGdM15g4tvcmjuIwLKQhPE89S/mdtJBuv2Zr/RbAFe ogLI5OvpDeqvU8GuwH0TT1dCwVi00iolbByl2DseHZM+QdHpHa2PlEPJeU7xlohL yOxKhQBNTRhKDuXCHwnGVgniisiyYnXiBWQUiDAp4daqqeDW/yQMFw== -----END CERTIFICATE-----Generated at Sat May 25 23:57:33 2024 by rpki-client on console-ams.rpki-client.org