$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/751/NxIUfod6OGPUezwdAKEQ-DV7pSM.roa File: NxIUfod6OGPUezwdAKEQ-DV7pSM.roa (raw, json) Hash identifier: wLFQDoTzVnMCftQSPqTIYQVMTy65n7yJ/GQAgl/X8Bw= Subject key identifier: 37:12:14:7E:87:7A:38:63:D4:7B:3C:1D:00:A1:10:F8:35:7B:A5:23 Certificate issuer: /CN=7B49A8775994827975AB37E6DF96064C924783F1 Certificate serial: 0A Authority key identifier: 7B:49:A8:77:59:94:82:79:75:AB:37:E6:DF:96:06:4C:92:47:83:F1 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/e0mod1mUgnl1qzfm35YGTJJHg_E.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/751/NxIUfod6OGPUezwdAKEQ-DV7pSM.roa Signing time: Fri 12 Apr 2024 06:15:36 +0000 ROA not before: Fri 12 Apr 2024 06:15:36 +0000 ROA not after: Sat 12 Apr 2025 05:59:48 +0000 asID: 18129 IP address blocks: 219.111.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/751/e0mod1mUgnl1qzfm35YGTJJHg_E.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/751/e0mod1mUgnl1qzfm35YGTJJHg_E.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/e0mod1mUgnl1qzfm35YGTJJHg_E.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 13 Jun 2024 14:03:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10 (0xa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7B49A8775994827975AB37E6DF96064C924783F1 Validity Not Before: Apr 12 06:15:36 2024 GMT Not After : Apr 12 05:59:48 2025 GMT Subject: CN=3712147E877A3863D47B3C1D00A110F8357BA523 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:e8:c5:4a:06:01:82:5d:2e:c4:04:0c:ce:61: 4a:f3:5d:30:e2:84:41:04:fa:6f:66:a9:e7:79:0a: 2d:47:50:d2:d9:a5:84:46:42:86:68:3e:07:7a:77: af:44:4b:0b:74:e6:14:57:06:13:c9:d4:a6:5a:7f: 5d:e8:54:13:cc:43:47:8f:5f:c7:4e:61:22:e2:37: 58:77:b6:c4:2c:ac:a0:34:03:3f:5f:27:92:bd:12: 98:de:e5:2a:42:f1:59:8a:04:8b:82:60:4b:68:31: 94:83:39:78:ba:2b:b4:d3:a0:43:cb:d1:42:4a:3c: 7b:ae:bd:2a:f9:0e:c2:79:b0:25:6d:66:25:14:69: e0:f6:8d:57:07:5d:2b:8e:20:19:51:0f:41:03:fa: 30:b9:fa:77:89:09:29:44:4a:84:11:36:5e:ca:f8: 0c:81:9b:68:93:b6:f6:0f:eb:73:21:cd:99:80:4b: 77:c3:c2:c9:c7:5d:1e:a5:85:b2:e1:0d:5d:35:06: 09:34:e2:e4:a3:49:21:7d:8e:89:e8:c7:76:14:2e: 6c:f0:13:f4:57:7b:ec:ea:f5:b9:bb:18:30:e7:f6: b2:b7:72:be:07:31:39:b1:69:35:27:25:9d:ea:67: 2a:08:cf:a6:2d:e4:1b:e0:09:b9:69:72:8a:af:08: a5:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:12:14:7E:87:7A:38:63:D4:7B:3C:1D:00:A1:10:F8:35:7B:A5:23 X509v3 Authority Key Identifier: keyid:7B:49:A8:77:59:94:82:79:75:AB:37:E6:DF:96:06:4C:92:47:83:F1 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/751/e0mod1mUgnl1qzfm35YGTJJHg_E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/e0mod1mUgnl1qzfm35YGTJJHg_E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/751/NxIUfod6OGPUezwdAKEQ-DV7pSM.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 219.111.208.0/20 Signature Algorithm: sha256WithRSAEncryption 32:9c:4c:85:93:21:c9:4a:37:f0:3d:a6:a7:76:87:39:74:33: f0:0a:c4:c8:8b:e5:71:1c:db:d8:8a:67:b7:15:5d:aa:d6:e4: 81:1a:df:8c:2f:7a:a6:af:2d:ff:05:df:6f:4b:04:24:98:c7: 5b:d9:7a:75:56:62:5f:2b:bc:5d:d4:8a:93:84:38:36:e6:18: bc:3f:d2:2d:98:54:17:50:d2:07:c7:59:3a:5f:61:53:a0:15: 25:3d:67:57:5f:0e:b8:a5:6a:60:ec:4a:6d:83:0b:c6:68:55: d1:00:9e:c7:db:87:42:bd:d0:1e:7a:47:5a:bf:2f:81:d7:ad: 1d:d3:7b:57:c0:62:fc:2d:d2:96:18:c2:19:b4:1c:7a:62:e0: dc:e5:90:10:9a:c7:3d:1f:58:0b:0f:cf:c7:95:0e:ce:e8:9a: 4c:11:c9:05:43:00:62:f8:d7:2e:71:df:77:d5:a1:c1:cc:e4: 36:ce:f3:dc:b9:48:27:f1:e2:59:c5:9d:49:ae:34:52:98:0f: b8:4d:7a:ac:5e:73:39:06:a7:dc:33:58:0e:4f:85:76:09:11: 68:8e:2a:d9:87:75:13:d2:6e:c2:b2:cd:96:63:36:ab:e0:78: 8b:48:af:43:e8:6a:69:04:6b:05:b1:d5:ea:ca:e0:b9:35:1c: 0e:5c:ef:2c -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBCjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3QjQ5 QTg3NzU5OTQ4Mjc5NzVBQjM3RTZERjk2MDY0QzkyNDc4M0YxMB4XDTI0MDQxMjA2 MTUzNloXDTI1MDQxMjA1NTk0OFowMzExMC8GA1UEAxMoMzcxMjE0N0U4NzdBMzg2 M0Q0N0IzQzFEMDBBMTEwRjgzNTdCQTUyMzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAODoxUoGAYJdLsQEDM5hSvNdMOKEQQT6b2ap53kKLUdQ0tmlhEZC hmg+B3p3r0RLC3TmFFcGE8nUplp/XehUE8xDR49fx05hIuI3WHe2xCysoDQDP18n kr0SmN7lKkLxWYoEi4JgS2gxlIM5eLortNOgQ8vRQko8e669KvkOwnmwJW1mJRRp 4PaNVwddK44gGVEPQQP6MLn6d4kJKURKhBE2Xsr4DIGbaJO29g/rcyHNmYBLd8PC ycddHqWFsuENXTUGCTTi5KNJIX2OiejHdhQubPAT9Fd77Or1ubsYMOf2srdyvgcx ObFpNSclnepnKgjPpi3kG+AJuWlyiq8IpUECAwEAAaOCAiQwggIgMB0GA1UdDgQW BBQ3EhR+h3o4Y9R7PB0AoRD4NXulIzAfBgNVHSMEGDAWgBR7Sah3WZSCeXWrN+bf lgZMkkeD8TAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNzUxL2UwbW9kMW1VZ25sMXF6Zm0zNVlHVEpKSGdfRS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2UwbW9kMW1VZ25sMXF6Zm0zNVlHVEpK SGdfRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC83NTEvTnhJVWZvZDZPR1BVZXp3ZEFLRVEtRFY3cFNNLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBNtv0DANBgkqhkiG9w0BAQsFAAOCAQEAMpxMhZMhyUo38D2mp3aHOXQz8ArE yIvlcRzb2IpntxVdqtbkgRrfjC96pq8t/wXfb0sEJJjHW9l6dVZiXyu8XdSKk4Q4 NuYYvD/SLZhUF1DSB8dZOl9hU6AVJT1nV18OuKVqYOxKbYMLxmhV0QCex9uHQr3Q HnpHWr8vgdetHdN7V8Bi/C3SlhjCGbQcemLg3OWQEJrHPR9YCw/Px5UOzuiaTBHJ BUMAYvjXLnHfd9WhwczkNs7z3LlIJ/HiWcWdSa40UpgPuE16rF5zOQan3DNYDk+F dgkRaI4q2Yd1E9JuwrLNlmM2q+B4i0ivQ+hqaQRrBbHV6srguTUcDlzvLA== -----END CERTIFICATE-----Generated at Thu Jun 6 15:06:49 2024 by rpki-client on console-ams.rpki-client.org