$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/793/8t1DowhHMDmbWp6eMNNi5dtNw1k.roa File: 8t1DowhHMDmbWp6eMNNi5dtNw1k.roa (raw, json) Hash identifier: 8qXUM3hjD99qEbcdy/iZ6TcTYSSHlvf9Kd6LIXSSThI= Subject key identifier: F2:DD:43:A3:08:47:30:39:9B:5A:9E:9E:30:D3:62:E5:DB:4D:C3:59 Certificate issuer: /CN=8D8D2658815CA3C4EE5A53F91BA61268E3F4C0E1 Certificate serial: 17 Authority key identifier: 8D:8D:26:58:81:5C:A3:C4:EE:5A:53:F9:1B:A6:12:68:E3:F4:C0:E1 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jY0mWIFco8TuWlP5G6YSaOP0wOE.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/793/8t1DowhHMDmbWp6eMNNi5dtNw1k.roa Signing time: Mon 18 Sep 2023 04:18:08 +0000 ROA not before: Mon 18 Sep 2023 04:18:08 +0000 ROA not after: Sat 14 Sep 2024 01:30:03 +0000 asID: 18274 IP address blocks: 210.236.112.0/20 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/793/jY0mWIFco8TuWlP5G6YSaOP0wOE.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/793/jY0mWIFco8TuWlP5G6YSaOP0wOE.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jY0mWIFco8TuWlP5G6YSaOP0wOE.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23 (0x17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D8D2658815CA3C4EE5A53F91BA61268E3F4C0E1 Validity Not Before: Sep 18 04:18:08 2023 GMT Not After : Sep 14 01:30:03 2024 GMT Subject: CN=F2DD43A3084730399B5A9E9E30D362E5DB4DC359 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:81:d4:05:29:7d:b0:83:b5:59:29:c9:91:95: d3:21:49:dd:c1:e2:21:83:53:fa:4f:2a:12:c5:04: 59:f9:14:8a:5d:9e:37:ee:ac:b8:30:45:57:8c:d1: 12:f2:ad:fb:0b:fa:48:b7:f1:67:75:d7:32:72:b3: 92:92:e5:2d:92:c8:8f:16:a1:4b:9a:54:25:e3:35: 19:ce:d5:21:0e:9f:62:d2:b0:be:5f:70:d9:cc:f8: 5f:8f:d6:fd:3f:c4:7d:2a:80:5a:74:e9:4d:e6:0a: 8d:bb:47:0d:da:04:1c:b7:86:72:d2:52:35:84:0c: 23:9e:8e:47:0b:7b:bf:c5:a1:10:27:31:fe:60:60: f6:53:8b:8d:82:9b:b7:c7:32:df:66:05:27:a2:6d: 69:95:2b:22:d7:41:e3:d1:8c:e9:78:15:29:68:41: d5:90:2c:25:f2:18:53:9f:53:86:23:2e:91:32:02: 02:81:a3:41:0a:96:7c:a2:20:de:a9:94:b1:30:26: eb:4e:78:2a:6f:ae:ec:76:f3:e5:16:26:11:5b:14: f4:63:d2:62:0b:9c:7a:c8:15:ed:6a:7f:31:2d:24: 2e:e1:66:08:2e:d7:9a:a7:0e:b0:dc:b7:06:80:73: 0b:17:5d:cb:68:d3:54:6f:b9:ba:ee:c5:c8:bb:e9: dd:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:DD:43:A3:08:47:30:39:9B:5A:9E:9E:30:D3:62:E5:DB:4D:C3:59 X509v3 Authority Key Identifier: keyid:8D:8D:26:58:81:5C:A3:C4:EE:5A:53:F9:1B:A6:12:68:E3:F4:C0:E1 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/793/jY0mWIFco8TuWlP5G6YSaOP0wOE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jY0mWIFco8TuWlP5G6YSaOP0wOE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/793/8t1DowhHMDmbWp6eMNNi5dtNw1k.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.236.112.0/20 Signature Algorithm: sha256WithRSAEncryption 29:9f:41:be:c9:8b:82:72:58:cd:9c:d3:c3:34:b4:af:eb:c2: 76:a6:08:48:3b:03:5a:36:dd:94:a1:3c:47:fc:ca:ad:82:d0: e6:3f:51:2c:2e:d2:3c:57:fb:51:cf:5f:53:f3:68:9d:3f:ea: fd:a0:15:49:df:91:a6:7e:6f:8d:62:0c:08:10:15:3d:86:71: 82:f3:c5:07:2f:c5:58:2d:b2:7f:5a:ce:fe:83:e0:e6:03:6d: bf:2a:21:66:77:48:3f:2c:d6:26:be:a4:a5:32:49:8e:33:ce: dd:2d:be:ca:7d:12:99:fe:9b:52:11:65:4c:80:f9:41:18:f5: f9:5b:39:da:5c:b8:d7:8e:2c:53:0a:83:cc:9d:eb:1e:95:67: 35:d0:f9:1c:69:02:da:bf:5a:93:0a:ef:04:0a:22:ca:09:e8: a0:ec:7d:34:1e:fa:de:34:e0:f6:85:19:48:74:6c:33:6c:95: 13:44:42:f8:26:0f:27:2b:1c:4d:6d:4c:93:8b:38:23:75:de: 48:58:38:ab:b5:73:6c:df:11:28:22:41:16:bd:12:4e:26:06: 57:08:0e:0a:b1:2d:61:9b:58:64:4b:4f:32:bd:36:9f:5d:ca: 1f:c2:78:1e:99:b0:85:41:bb:37:45:26:8a:f6:57:c4:d8:28: b9:21:9f:17 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBFzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4RDhE MjY1ODgxNUNBM0M0RUU1QTUzRjkxQkE2MTI2OEUzRjRDMEUxMB4XDTIzMDkxODA0 MTgwOFoXDTI0MDkxNDAxMzAwM1owMzExMC8GA1UEAxMoRjJERDQzQTMwODQ3MzAz OTlCNUE5RTlFMzBEMzYyRTVEQjREQzM1OTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALOB1AUpfbCDtVkpyZGV0yFJ3cHiIYNT+k8qEsUEWfkUil2eN+6s uDBFV4zREvKt+wv6SLfxZ3XXMnKzkpLlLZLIjxahS5pUJeM1Gc7VIQ6fYtKwvl9w 2cz4X4/W/T/EfSqAWnTpTeYKjbtHDdoEHLeGctJSNYQMI56ORwt7v8WhECcx/mBg 9lOLjYKbt8cy32YFJ6JtaZUrItdB49GM6XgVKWhB1ZAsJfIYU59ThiMukTICAoGj QQqWfKIg3qmUsTAm6054Km+u7Hbz5RYmEVsU9GPSYgucesgV7Wp/MS0kLuFmCC7X mqcOsNy3BoBzCxddy2jTVG+5uu7FyLvp3RsCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBTy3UOjCEcwOZtanp4w02Ll203DWTAfBgNVHSMEGDAWgBSNjSZYgVyjxO5aU/kb phJo4/TA4TAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNzkzL2pZMG1XSUZjbzhUdVdsUDVHNllTYU9QMHdPRS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2pZMG1XSUZjbzhUdVdsUDVHNllTYU9Q MHdPRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC83OTMvOHQxRG93aEhNRG1iV3A2ZU1OTmk1ZHROdzFrLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBNLscDANBgkqhkiG9w0BAQsFAAOCAQEAKZ9BvsmLgnJYzZzTwzS0r+vCdqYI SDsDWjbdlKE8R/zKrYLQ5j9RLC7SPFf7Uc9fU/NonT/q/aAVSd+Rpn5vjWIMCBAV PYZxgvPFBy/FWC2yf1rO/oPg5gNtvyohZndIPyzWJr6kpTJJjjPO3S2+yn0Smf6b UhFlTID5QRj1+Vs52ly4144sUwqDzJ3rHpVnNdD5HGkC2r9akwrvBAoiygnooOx9 NB763jTg9oUZSHRsM2yVE0RC+CYPJyscTW1Mk4s4I3XeSFg4q7VzbN8RKCJBFr0S TiYGVwgOCrEtYZtYZEtPMr02n13KH8J4HpmwhUG7N0UmivZXxNgouSGfFw== -----END CERTIFICATE-----Generated at Sat Jun 1 13:38:52 2024 by rpki-client on console-fra.rpki-client.org