$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/731/y0iToY8prQxBoXc-qAf_zs0zP0E.roa File: y0iToY8prQxBoXc-qAf_zs0zP0E.roa (raw, json) Hash identifier: EP/Nrrh1peEm+g4nIvgBH842W0WWTyBL/n0NwTLEC7U= Subject key identifier: CB:48:93:A1:8F:29:AD:0C:41:A1:77:3E:A8:07:FF:CE:CD:33:3F:41 Certificate issuer: /CN=91ACA44275EC0572BC6921502B241C14D44A9AA1 Certificate serial: 61 Authority key identifier: 91:AC:A4:42:75:EC:05:72:BC:69:21:50:2B:24:1C:14:D4:4A:9A:A1 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/y0iToY8prQxBoXc-qAf_zs0zP0E.roa Signing time: Thu 29 Feb 2024 01:30:55 +0000 ROA not before: Thu 29 Feb 2024 01:30:55 +0000 ROA not after: Fri 14 Feb 2025 01:30:03 +0000 asID: 18260 IP address blocks: 210.87.224.0/20 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kaykQnXsBXK8aSFQKyQcFNRKmqE.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kaykQnXsBXK8aSFQKyQcFNRKmqE.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 13 Jun 2024 14:03:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 97 (0x61) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91ACA44275EC0572BC6921502B241C14D44A9AA1 Validity Not Before: Feb 29 01:30:55 2024 GMT Not After : Feb 14 01:30:03 2025 GMT Subject: CN=CB4893A18F29AD0C41A1773EA807FFCECD333F41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:23:84:76:33:a1:e5:9c:80:a7:3c:1d:17:a5: de:21:bf:39:c4:3e:b9:48:e1:50:ce:f3:cd:57:1c: 68:d5:8b:29:62:c5:1a:61:14:65:24:d0:2c:6c:65: af:de:3b:6b:27:49:95:e0:e6:83:0d:ba:8d:49:ae: 86:83:ca:92:4d:7d:47:a5:42:0b:79:b3:50:0c:f2: ba:11:fd:c6:2e:74:f2:e7:40:45:9d:1c:61:3b:c3: b7:a3:aa:31:02:a6:51:74:bc:9e:01:06:47:3d:88: 54:33:3e:20:c5:95:a8:b2:82:40:ad:c1:c1:34:07: e7:7e:5b:c1:ef:a1:fd:69:d8:c8:e8:74:8e:d9:bd: 51:3b:e4:28:8a:ba:2c:8e:a0:0b:f7:75:7e:d6:18: e9:0e:d0:f6:41:33:54:01:b9:1d:95:39:c6:0c:ad: 46:28:3f:99:49:d4:ce:f0:c9:5a:8e:50:31:1b:4c: 11:b0:1f:12:94:9f:b4:ee:27:ad:ce:93:eb:f0:71: 3d:da:9e:f9:67:6d:9b:59:d7:d9:80:40:a9:5c:53: bd:f3:e7:af:c5:8f:4f:20:ba:df:0d:42:8f:bd:34: 5c:8c:86:d1:6f:f3:b9:42:ad:f2:35:29:bb:e4:12: 88:9b:41:c3:c6:ad:2a:55:4a:ce:9c:bc:5a:18:9d: 65:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:48:93:A1:8F:29:AD:0C:41:A1:77:3E:A8:07:FF:CE:CD:33:3F:41 X509v3 Authority Key Identifier: keyid:91:AC:A4:42:75:EC:05:72:BC:69:21:50:2B:24:1C:14:D4:4A:9A:A1 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kaykQnXsBXK8aSFQKyQcFNRKmqE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/y0iToY8prQxBoXc-qAf_zs0zP0E.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.87.224.0/20 Signature Algorithm: sha256WithRSAEncryption 1f:6d:d8:2f:85:ae:b7:53:28:9f:30:94:e3:70:a6:41:9d:2d: 8f:bb:c8:67:67:b4:0e:6e:92:5f:8d:dd:32:80:42:24:68:83: aa:74:c9:49:25:74:18:87:67:fd:61:da:23:86:4b:f4:bc:33: f5:68:9e:f2:23:31:e6:b6:44:2d:b5:24:0b:63:f9:e7:32:ac: 01:03:b6:d0:a6:ed:83:e6:5f:0c:ef:1f:73:a4:ce:04:d5:a9: 1c:ec:42:b8:a9:c3:41:32:0b:f9:20:58:de:ae:df:7f:6a:a7: 14:b2:6d:b9:4d:33:e8:76:70:60:12:76:02:a0:0e:73:f7:3e: b9:96:2b:34:fc:16:64:48:08:a3:57:9d:43:dd:67:01:a9:47: 9f:ed:09:e2:b0:44:2d:7a:0b:bd:20:6f:9d:b5:34:af:ac:69: 01:fa:b4:ee:ab:ee:f2:91:bb:d9:a6:4d:ee:38:a4:84:09:a8: 34:e0:31:2c:d8:ad:6d:d9:34:eb:06:09:1d:82:a8:6a:43:89: 20:c1:df:3b:13:77:31:09:8b:3c:65:c3:53:7e:91:87:27:04: bf:bc:ab:90:58:90:14:fb:d5:c1:ec:06:23:3f:39:6f:a1:73: 93:22:0f:90:63:df:6d:ed:1f:3e:02:cd:95:15:c2:6c:b6:24: 1f:eb:37:32 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBYTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5MUFD QTQ0Mjc1RUMwNTcyQkM2OTIxNTAyQjI0MUMxNEQ0NEE5QUExMB4XDTI0MDIyOTAx MzA1NVoXDTI1MDIxNDAxMzAwM1owMzExMC8GA1UEAxMoQ0I0ODkzQTE4RjI5QUQw QzQxQTE3NzNFQTgwN0ZGQ0VDRDMzM0Y0MTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALUjhHYzoeWcgKc8HRel3iG/OcQ+uUjhUM7zzVccaNWLKWLFGmEU ZSTQLGxlr947aydJleDmgw26jUmuhoPKkk19R6VCC3mzUAzyuhH9xi508udARZ0c YTvDt6OqMQKmUXS8ngEGRz2IVDM+IMWVqLKCQK3BwTQH535bwe+h/WnYyOh0jtm9 UTvkKIq6LI6gC/d1ftYY6Q7Q9kEzVAG5HZU5xgytRig/mUnUzvDJWo5QMRtMEbAf EpSftO4nrc6T6/BxPdqe+Wdtm1nX2YBAqVxTvfPnr8WPTyC63w1Cj700XIyG0W/z uUKt8jUpu+QSiJtBw8atKlVKzpy8WhidZScCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBTLSJOhjymtDEGhdz6oB//OzTM/QTAfBgNVHSMEGDAWgBSRrKRCdewFcrxpIVAr JBwU1EqaoTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNzMxL2theWtRblhzQlhLOGFTRlFLeVFjRk5SS21xRS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2theWtRblhzQlhLOGFTRlFLeVFjRk5S S21xRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC83MzEveTBpVG9ZOHByUXhCb1hjLXFBZl96czB6UDBFLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBNJX4DANBgkqhkiG9w0BAQsFAAOCAQEAH23YL4Wut1MonzCU43CmQZ0tj7vI Z2e0Dm6SX43dMoBCJGiDqnTJSSV0GIdn/WHaI4ZL9Lwz9Wie8iMx5rZELbUkC2P5 5zKsAQO20Kbtg+ZfDO8fc6TOBNWpHOxCuKnDQTIL+SBY3q7ff2qnFLJtuU0z6HZw YBJ2AqAOc/c+uZYrNPwWZEgIo1edQ91nAalHn+0J4rBELXoLvSBvnbU0r6xpAfq0 7qvu8pG72aZN7jikhAmoNOAxLNitbdk06wYJHYKoakOJIMHfOxN3MQmLPGXDU36R hycEv7yrkFiQFPvVwewGIz85b6FzkyIPkGPfbe0fPgLNlRXCbLYkH+s3Mg== -----END CERTIFICATE-----Generated at Thu Jun 6 15:06:49 2024 by rpki-client on console-ams.rpki-client.org