$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/731/1ORYZd7fDeqgy7dw0IULyHPF54Y.roa File: 1ORYZd7fDeqgy7dw0IULyHPF54Y.roa (raw, json) Hash identifier: TbpExPQitSh1TN6naYL48FTxWxxciyOueL5YD2nmZM4= Subject key identifier: D4:E4:58:65:DE:DF:0D:EA:A0:CB:B7:70:D0:85:0B:C8:73:C5:E7:86 Certificate issuer: /CN=91ACA44275EC0572BC6921502B241C14D44A9AA1 Certificate serial: 56 Authority key identifier: 91:AC:A4:42:75:EC:05:72:BC:69:21:50:2B:24:1C:14:D4:4A:9A:A1 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/1ORYZd7fDeqgy7dw0IULyHPF54Y.roa Signing time: Thu 29 Feb 2024 01:30:49 +0000 ROA not before: Thu 29 Feb 2024 01:30:49 +0000 ROA not after: Fri 14 Feb 2025 01:30:03 +0000 asID: 18260 IP address blocks: 27.106.224.0/19 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kaykQnXsBXK8aSFQKyQcFNRKmqE.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kaykQnXsBXK8aSFQKyQcFNRKmqE.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 86 (0x56) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91ACA44275EC0572BC6921502B241C14D44A9AA1 Validity Not Before: Feb 29 01:30:49 2024 GMT Not After : Feb 14 01:30:03 2025 GMT Subject: CN=D4E45865DEDF0DEAA0CBB770D0850BC873C5E786 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:ec:6d:e7:1b:04:66:55:c3:21:3a:aa:5c:7d: b4:47:17:2a:ec:17:d1:b0:5a:18:62:87:65:f4:99: 9e:c9:8f:df:2b:b4:d0:09:7a:16:4a:d1:08:19:2e: c9:1e:5e:ce:ca:13:17:cb:6c:ef:3c:01:67:51:a2: 82:5b:a0:18:63:fe:85:d1:94:41:ea:cf:80:70:f8: fd:94:ec:b0:ae:b9:01:8c:c8:6f:3f:53:b1:cf:15: 9b:f9:49:e9:97:3f:69:9d:6a:82:9d:db:91:e1:e2: 89:d4:2a:c6:6e:5e:b2:81:21:9a:60:70:ee:9b:46: 1c:89:c2:b9:74:c0:bf:fe:f9:34:31:68:8c:eb:1d: 92:39:bd:1c:f6:9d:de:1a:1b:49:1e:4c:6f:91:26: 3b:b4:15:78:33:09:db:02:48:82:70:f7:09:9e:e9: 62:03:69:12:c2:7f:42:6c:ce:44:d3:bf:08:ad:f7: 8f:34:31:db:f1:58:a9:74:ed:43:16:46:c4:ca:ba: a9:e6:cd:dd:a3:8d:6f:4d:bf:43:a8:e4:2e:7c:3d: f6:39:c8:91:d1:58:5f:6d:95:b5:f8:ce:cc:78:b0: 62:bd:68:67:7a:d9:03:a2:a1:0e:0b:92:e9:c4:9e: 03:49:9c:50:9a:18:ab:4c:48:b5:68:22:c9:1a:47: 01:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:E4:58:65:DE:DF:0D:EA:A0:CB:B7:70:D0:85:0B:C8:73:C5:E7:86 X509v3 Authority Key Identifier: keyid:91:AC:A4:42:75:EC:05:72:BC:69:21:50:2B:24:1C:14:D4:4A:9A:A1 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kaykQnXsBXK8aSFQKyQcFNRKmqE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/1ORYZd7fDeqgy7dw0IULyHPF54Y.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.106.224.0/19 Signature Algorithm: sha256WithRSAEncryption a3:ab:b2:4a:9d:c6:00:da:03:59:09:5b:4f:20:0e:99:18:dd: 4d:60:83:d4:92:8c:9b:d0:92:72:33:fd:3b:47:e7:04:61:f9: 48:64:25:d4:db:b4:33:ce:7d:6b:9e:42:22:bf:d8:62:2a:12: f1:98:74:27:27:9d:fa:15:59:20:aa:2d:75:92:51:ff:b7:9c: 7e:f0:2c:2a:3b:ce:77:42:e5:3b:fb:62:f3:a0:c2:e7:11:ca: 69:77:7a:c0:b7:f4:a1:14:7b:df:30:30:c4:b2:19:a1:72:c4: 63:e5:76:00:8d:1e:48:58:da:65:62:a2:ad:e8:5f:bf:08:7a: b3:90:6d:80:23:91:d9:29:ee:14:c0:79:fd:07:eb:0a:79:fa: 70:d2:a0:b1:94:b7:3e:95:f8:9c:07:64:39:f5:4a:27:33:c8: ba:a1:db:60:29:92:ce:d0:2d:56:6a:60:2d:34:91:91:b0:21: 1b:73:e3:61:ed:ed:41:d9:75:39:b3:4c:f9:9f:cc:45:94:fe: 55:83:08:32:6e:7e:b7:46:4f:a8:b0:67:fc:ba:c6:23:08:7b: 01:c0:53:af:ca:18:f5:f5:3e:85:55:71:48:cf:02:ad:24:2b: a1:da:51:e9:4d:a2:52:59:b4:59:20:9d:51:9c:8a:cc:22:d0: 2b:03:90:da -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBVjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5MUFD QTQ0Mjc1RUMwNTcyQkM2OTIxNTAyQjI0MUMxNEQ0NEE5QUExMB4XDTI0MDIyOTAx MzA0OVoXDTI1MDIxNDAxMzAwM1owMzExMC8GA1UEAxMoRDRFNDU4NjVERURGMERF QUEwQ0JCNzcwRDA4NTBCQzg3M0M1RTc4NjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAOnsbecbBGZVwyE6qlx9tEcXKuwX0bBaGGKHZfSZnsmP3yu00Al6 FkrRCBkuyR5ezsoTF8ts7zwBZ1GiglugGGP+hdGUQerPgHD4/ZTssK65AYzIbz9T sc8Vm/lJ6Zc/aZ1qgp3bkeHiidQqxm5esoEhmmBw7ptGHInCuXTAv/75NDFojOsd kjm9HPad3hobSR5Mb5EmO7QVeDMJ2wJIgnD3CZ7pYgNpEsJ/QmzORNO/CK33jzQx 2/FYqXTtQxZGxMq6qebN3aONb02/Q6jkLnw99jnIkdFYX22VtfjOzHiwYr1oZ3rZ A6KhDguS6cSeA0mcUJoYq0xItWgiyRpHAb0CAwEAAaOCAiQwggIgMB0GA1UdDgQW BBTU5Fhl3t8N6qDLt3DQhQvIc8XnhjAfBgNVHSMEGDAWgBSRrKRCdewFcrxpIVAr JBwU1EqaoTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNzMxL2theWtRblhzQlhLOGFTRlFLeVFjRk5SS21xRS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2theWtRblhzQlhLOGFTRlFLeVFjRk5S S21xRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC83MzEvMU9SWVpkN2ZEZXFneTdkdzBJVUx5SFBGNTRZLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBRtq4DANBgkqhkiG9w0BAQsFAAOCAQEAo6uySp3GANoDWQlbTyAOmRjdTWCD 1JKMm9CScjP9O0fnBGH5SGQl1Nu0M859a55CIr/YYioS8Zh0Jyed+hVZIKotdZJR /7ecfvAsKjvOd0LlO/ti86DC5xHKaXd6wLf0oRR73zAwxLIZoXLEY+V2AI0eSFja ZWKirehfvwh6s5BtgCOR2SnuFMB5/QfrCnn6cNKgsZS3PpX4nAdkOfVKJzPIuqHb YCmSztAtVmpgLTSRkbAhG3PjYe3tQdl1ObNM+Z/MRZT+VYMIMm5+t0ZPqLBn/LrG Iwh7AcBTr8oY9fU+hVVxSM8CrSQrodpR6U2iUlm0WSCdUZyKzCLQKwOQ2g== -----END CERTIFICATE-----Generated at Sat Jun 1 15:54:43 2024 by rpki-client on console-ams.rpki-client.org