$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/655/2Tw7EnBa5Rtk2dcMiORHdHsnXUE.roa File: 2Tw7EnBa5Rtk2dcMiORHdHsnXUE.roa (raw, json) Hash identifier: 3JVBwQRBxXkp+bidb45oYiKa2HP5ukrotC9IJppGXsk= Subject key identifier: D9:3C:3B:12:70:5A:E5:1B:64:D9:D7:0C:88:E4:47:74:7B:27:5D:41 Certificate issuer: /CN=67AE21A3C7D4782B45B6BDC14B8A120D0617AB42 Certificate serial: 03 Authority key identifier: 67:AE:21:A3:C7:D4:78:2B:45:B6:BD:C1:4B:8A:12:0D:06:17:AB:42 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z64ho8fUeCtFtr3BS4oSDQYXq0I.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/655/2Tw7EnBa5Rtk2dcMiORHdHsnXUE.roa Signing time: Mon 15 Apr 2024 23:49:41 +0000 ROA not before: Mon 15 Apr 2024 23:49:41 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 7690 IP address blocks: 158.199.112.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/655/Z64ho8fUeCtFtr3BS4oSDQYXq0I.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/655/Z64ho8fUeCtFtr3BS4oSDQYXq0I.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z64ho8fUeCtFtr3BS4oSDQYXq0I.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 16 Jun 2024 02:07:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67AE21A3C7D4782B45B6BDC14B8A120D0617AB42 Validity Not Before: Apr 15 23:49:41 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=D93C3B12705AE51B64D9D70C88E447747B275D41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:8b:ab:e4:96:f1:03:41:c4:19:2c:14:b8:c4: 8d:ea:a3:1c:c9:73:57:4a:c5:c1:4a:8a:7c:82:69: 11:87:4f:ce:7f:f4:73:f8:6d:4e:3d:dd:7e:8a:9b: ab:cc:ba:1d:8d:d0:dc:4d:45:c6:9a:44:8f:40:22: 91:22:a8:0f:47:bf:b8:39:82:cb:63:2b:68:75:a2: 1c:cc:1d:d0:9a:47:d3:20:4f:47:b1:e5:de:41:30: 43:86:96:8c:2c:97:49:de:cf:11:9a:72:ab:27:42: f0:60:18:b1:9e:41:4c:7f:39:df:8c:8f:92:f9:5b: 0d:d2:42:60:94:7b:31:f8:94:a0:81:c5:95:5b:bb: f1:26:41:f6:16:57:69:0f:1c:d8:c0:2c:1a:a9:2f: eb:41:79:e0:e2:f4:bc:23:9f:01:dd:1e:38:06:49: d4:88:c4:1f:c4:8c:f5:30:58:e6:7d:26:4d:55:16: 0c:b1:b9:54:fb:68:ac:61:12:ea:3b:03:22:6c:d4: d4:2d:9e:f1:4f:0b:c5:69:62:7e:2e:a7:e4:d3:a4: 80:c4:74:e8:be:22:22:85:d3:e1:f0:01:bc:9b:a2: 9d:2c:cb:af:47:15:cd:1f:cf:5c:b5:95:52:7f:f6: 00:1a:ee:24:a4:a6:0a:05:d6:7a:f0:be:10:b2:ca: 8f:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:3C:3B:12:70:5A:E5:1B:64:D9:D7:0C:88:E4:47:74:7B:27:5D:41 X509v3 Authority Key Identifier: keyid:67:AE:21:A3:C7:D4:78:2B:45:B6:BD:C1:4B:8A:12:0D:06:17:AB:42 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/655/Z64ho8fUeCtFtr3BS4oSDQYXq0I.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z64ho8fUeCtFtr3BS4oSDQYXq0I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/655/2Tw7EnBa5Rtk2dcMiORHdHsnXUE.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 158.199.112.0/20 Signature Algorithm: sha256WithRSAEncryption 7c:ab:e4:c8:6b:4c:e5:c7:2f:6c:f6:c0:b5:4f:7a:c3:85:88: 75:fa:a2:ff:62:74:ef:f7:7c:92:3e:d9:9f:57:67:6a:a1:82: 16:bc:0a:6a:a0:0f:69:68:a4:7f:c0:ce:70:55:1a:1f:c9:91: a3:9f:0e:43:26:e0:6f:eb:40:b2:e7:a3:bf:f1:db:6b:94:d5: a3:68:4c:55:c4:41:4d:5a:bf:9d:4b:24:84:8d:84:a6:bc:5f: 8c:27:77:61:1e:14:78:b8:ad:07:0a:51:cc:80:0f:e0:32:53: d4:e9:22:f4:a5:a2:26:9e:f3:d2:57:32:bf:95:3f:53:d3:2d: 86:a7:02:df:7c:c1:51:5a:c4:17:45:7f:1e:d6:8e:bb:1f:d2: 91:3c:65:83:fd:9c:d6:a8:98:ef:f5:07:ca:df:6d:2b:4f:9e: a9:e2:c3:74:cd:4b:c5:4a:da:80:89:af:df:54:59:49:84:74: f8:ab:3e:1b:0e:a1:d5:9c:ac:44:79:3f:bd:18:06:a2:fc:e0: 5b:2f:11:8e:7a:08:3d:67:b5:88:aa:0b:1b:ab:54:4a:67:33: 91:fc:31:6e:50:ef:f1:c1:2e:a0:f6:ee:43:3c:66:c0:5f:f5: 06:61:b9:5d:db:81:b4:8f:d4:99:b6:9b:a5:f5:b8:06:34:cc: 8e:ce:4e:4a -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBAzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2N0FF MjFBM0M3RDQ3ODJCNDVCNkJEQzE0QjhBMTIwRDA2MTdBQjQyMB4XDTI0MDQxNTIz NDk0MVoXDTI1MDQxNTAxMzAwMlowMzExMC8GA1UEAxMoRDkzQzNCMTI3MDVBRTUx QjY0RDlENzBDODhFNDQ3NzQ3QjI3NUQ0MTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMSLq+SW8QNBxBksFLjEjeqjHMlzV0rFwUqKfIJpEYdPzn/0c/ht Tj3dfoqbq8y6HY3Q3E1FxppEj0AikSKoD0e/uDmCy2MraHWiHMwd0JpH0yBPR7Hl 3kEwQ4aWjCyXSd7PEZpyqydC8GAYsZ5BTH8534yPkvlbDdJCYJR7MfiUoIHFlVu7 8SZB9hZXaQ8c2MAsGqkv60F54OL0vCOfAd0eOAZJ1IjEH8SM9TBY5n0mTVUWDLG5 VPtorGES6jsDImzU1C2e8U8LxWlifi6n5NOkgMR06L4iIoXT4fABvJuinSzLr0cV zR/PXLWVUn/2ABruJKSmCgXWevC+ELLKj5sCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBTZPDsScFrlG2TZ1wyI5Ed0eyddQTAfBgNVHSMEGDAWgBRnriGjx9R4K0W2vcFL ihINBherQjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNjU1L1o2NGhvOGZVZUN0RnRyM0JTNG9TRFFZWHEwSS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1o2NGhvOGZVZUN0RnRyM0JTNG9TRFFZ WHEwSS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC82NTUvMlR3N0VuQmE1UnRrMmRjTWlPUkhkSHNuWFVFLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBJ7HcDANBgkqhkiG9w0BAQsFAAOCAQEAfKvkyGtM5ccvbPbAtU96w4WIdfqi /2J07/d8kj7Zn1dnaqGCFrwKaqAPaWikf8DOcFUaH8mRo58OQybgb+tAsuejv/Hb a5TVo2hMVcRBTVq/nUskhI2EprxfjCd3YR4UeLitBwpRzIAP4DJT1Oki9KWiJp7z 0lcyv5U/U9MthqcC33zBUVrEF0V/HtaOux/SkTxlg/2c1qiY7/UHyt9tK0+eqeLD dM1LxUragImv31RZSYR0+Ks+Gw6h1ZysRHk/vRgGovzgWy8RjnoIPWe1iKoLG6tU SmczkfwxblDv8cEuoPbuQzxmwF/1BmG5XduBtI/UmbabpfW4BjTMjs5OSg== -----END CERTIFICATE-----Generated at Mon Jun 10 10:26:16 2024 by rpki-client on console-fra.rpki-client.org