$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/783/ljs3k2zWsuOYn9B6e0olIEv3QLA.roa File: ljs3k2zWsuOYn9B6e0olIEv3QLA.roa (raw, json) Hash identifier: i4VJsuQi3e0JjQEHg1lvAYDC8jON7S+yEF7gGnKa8IA= Subject key identifier: 96:3B:37:93:6C:D6:B2:E3:98:9F:D0:7A:7B:4A:25:20:4B:F7:40:B0 Certificate issuer: /CN=CB8300B20659BB951060F60B1F4BC6091AF27639 Certificate serial: 2A Authority key identifier: CB:83:00:B2:06:59:BB:95:10:60:F6:0B:1F:4B:C6:09:1A:F2:76:39 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/ljs3k2zWsuOYn9B6e0olIEv3QLA.roa Signing time: Fri 15 Sep 2023 06:36:36 +0000 ROA not before: Fri 15 Sep 2023 06:36:36 +0000 ROA not after: Sat 14 Sep 2024 01:30:03 +0000 asID: 18144 IP address blocks: 36.52.160.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 16 Jun 2024 13:39:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42 (0x2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB8300B20659BB951060F60B1F4BC6091AF27639 Validity Not Before: Sep 15 06:36:36 2023 GMT Not After : Sep 14 01:30:03 2024 GMT Subject: CN=963B37936CD6B2E3989FD07A7B4A25204BF740B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a7:82:85:f4:92:50:d9:c2:81:b7:48:30:98: 61:45:0b:d5:23:d1:fd:66:72:cd:0e:c3:d1:1a:80: e1:7f:00:b6:83:f0:72:07:ed:c8:35:eb:2c:7a:f1: d9:89:3f:0c:87:38:61:c4:77:4b:a2:09:4a:5b:bc: d8:7b:42:95:4c:c2:82:4b:34:d9:6e:b4:b4:bd:06: 43:3d:b9:b1:6a:4b:48:f2:aa:8f:df:b2:ce:31:b6: 28:aa:6c:77:08:14:0f:f5:1a:47:cf:41:c6:73:5c: 6a:e9:ea:e9:32:24:dd:bc:e4:be:01:f0:07:a9:86: a7:73:53:9b:66:39:48:55:c1:ad:97:1a:14:2a:f9: a8:a5:01:ea:07:62:87:97:47:d3:88:6f:33:75:51: 7d:97:b3:53:00:39:9a:eb:f4:af:4d:d2:02:bb:55: fa:1a:bc:68:77:22:a5:aa:55:ae:5e:6c:02:14:94: 7e:62:3c:86:d5:ca:19:06:3a:ca:a8:2d:9f:22:7d: cf:7d:dd:ed:73:a8:ca:a9:7e:f2:f6:34:bf:ae:48: f6:5f:75:02:9a:07:47:ef:69:b0:6f:cd:d0:15:f3: 0d:be:09:a4:94:94:07:23:d6:c3:72:01:49:f4:f4: 2c:84:00:11:ac:e8:34:9f:d1:06:4f:1f:e4:73:c7: ba:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:3B:37:93:6C:D6:B2:E3:98:9F:D0:7A:7B:4A:25:20:4B:F7:40:B0 X509v3 Authority Key Identifier: keyid:CB:83:00:B2:06:59:BB:95:10:60:F6:0B:1F:4B:C6:09:1A:F2:76:39 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/ljs3k2zWsuOYn9B6e0olIEv3QLA.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 36.52.160.0/21 Signature Algorithm: sha256WithRSAEncryption 93:b3:bd:03:ec:86:c5:b7:24:26:4b:d8:50:6f:ce:06:b9:dc: 84:71:70:73:1f:a6:08:21:8b:77:14:b2:81:60:b2:57:0d:99: 28:38:08:30:37:03:9a:2f:28:92:69:f6:4c:d0:b8:39:46:90: f0:ca:cf:72:e7:f5:9c:cd:2c:1b:59:40:d7:b7:19:5c:e3:7e: fe:ec:6b:66:7f:ca:4f:f7:05:7e:cd:0c:f9:d8:b7:15:72:a0: eb:8c:b5:b4:b9:69:10:f2:3c:b4:c5:02:8e:fa:d1:51:d0:7a: 6c:fb:f1:ca:40:87:df:e2:5d:4a:52:a8:c6:50:64:fe:7b:9c: 07:fb:47:bd:4c:20:13:6d:a9:18:aa:51:fe:04:25:53:59:d4: da:5e:a3:3e:21:cd:f0:5b:83:ad:5c:76:c4:1d:c7:c0:c5:a9: 80:f9:2a:70:4c:6b:a5:9e:1d:5b:24:21:c7:fe:8d:d8:4b:c9: a2:04:9a:a0:e5:ea:a5:d6:5d:c0:a5:1b:00:5f:ed:84:16:6e: c1:e8:a7:3d:91:01:37:b7:6e:26:24:a3:2f:33:69:0d:41:49: 1f:b0:50:48:ad:a4:51:2e:30:9a:8b:1c:9c:bd:0d:29:a2:3a: d9:8b:7d:b1:df:83:65:1c:51:42:ed:47:07:37:13:ef:d7:26: 84:18:7d:fb -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBKjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDQjgz MDBCMjA2NTlCQjk1MTA2MEY2MEIxRjRCQzYwOTFBRjI3NjM5MB4XDTIzMDkxNTA2 MzYzNloXDTI0MDkxNDAxMzAwM1owMzExMC8GA1UEAxMoOTYzQjM3OTM2Q0Q2QjJF Mzk4OUZEMDdBN0I0QTI1MjA0QkY3NDBCMDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKingoX0klDZwoG3SDCYYUUL1SPR/WZyzQ7D0RqA4X8AtoPwcgft yDXrLHrx2Yk/DIc4YcR3S6IJSlu82HtClUzCgks02W60tL0GQz25sWpLSPKqj9+y zjG2KKpsdwgUD/UaR89BxnNcaunq6TIk3bzkvgHwB6mGp3NTm2Y5SFXBrZcaFCr5 qKUB6gdih5dH04hvM3VRfZezUwA5muv0r03SArtV+hq8aHcipapVrl5sAhSUfmI8 htXKGQY6yqgtnyJ9z33d7XOoyql+8vY0v65I9l91ApoHR+9psG/N0BXzDb4JpJSU ByPWw3IBSfT0LIQAEazoNJ/RBk8f5HPHujsCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBSWOzeTbNay45if0Hp7SiUgS/dAsDAfBgNVHSMEGDAWgBTLgwCyBlm7lRBg9gsf S8YJGvJ2OTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNzgzL3k0TUFzZ1padTVVUVlQWUxIMHZHQ1JyeWRqay5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3k0TUFzZ1padTVVUVlQWUxIMHZHQ1Jy eWRqay5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC83ODMvbGpzM2syeldzdU9ZbjlCNmUwb2xJRXYzUUxBLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAyQ0oDANBgkqhkiG9w0BAQsFAAOCAQEAk7O9A+yGxbckJkvYUG/OBrnchHFw cx+mCCGLdxSygWCyVw2ZKDgIMDcDmi8okmn2TNC4OUaQ8MrPcuf1nM0sG1lA17cZ XON+/uxrZn/KT/cFfs0M+di3FXKg64y1tLlpEPI8tMUCjvrRUdB6bPvxykCH3+Jd SlKoxlBk/nucB/tHvUwgE22pGKpR/gQlU1nU2l6jPiHN8FuDrVx2xB3HwMWpgPkq cExrpZ4dWyQhx/6N2EvJogSaoOXqpdZdwKUbAF/thBZuweinPZEBN7duJiSjLzNp DUFJH7BQSK2kUS4wmoscnL0NKaI62Yt9sd+DZRxRQu1HBzcT79cmhBh9+w== -----END CERTIFICATE-----Generated at Thu Jun 13 17:53:42 2024 by rpki-client on console-ams.rpki-client.org