$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/793/XQhH5mBgtqBZ_MVSp8eRzzpqVG8.roa File: XQhH5mBgtqBZ_MVSp8eRzzpqVG8.roa (raw, json) Hash identifier: ykTu8ZW9MZrziaSrmN/KPF9cgfrdp+PEyLaY4UrSBCQ= Subject key identifier: 5D:08:47:E6:60:60:B6:A0:59:FC:C5:52:A7:C7:91:CF:3A:6A:54:6F Certificate issuer: /CN=8D8D2658815CA3C4EE5A53F91BA61268E3F4C0E1 Certificate serial: 19 Authority key identifier: 8D:8D:26:58:81:5C:A3:C4:EE:5A:53:F9:1B:A6:12:68:E3:F4:C0:E1 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jY0mWIFco8TuWlP5G6YSaOP0wOE.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/793/XQhH5mBgtqBZ_MVSp8eRzzpqVG8.roa Signing time: Mon 18 Sep 2023 04:18:09 +0000 ROA not before: Mon 18 Sep 2023 04:18:09 +0000 ROA not after: Sat 14 Sep 2024 01:30:03 +0000 asID: 18274 IP address blocks: 219.122.96.0/20 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/793/jY0mWIFco8TuWlP5G6YSaOP0wOE.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/793/jY0mWIFco8TuWlP5G6YSaOP0wOE.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jY0mWIFco8TuWlP5G6YSaOP0wOE.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 13 Jun 2024 14:03:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25 (0x19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D8D2658815CA3C4EE5A53F91BA61268E3F4C0E1 Validity Not Before: Sep 18 04:18:09 2023 GMT Not After : Sep 14 01:30:03 2024 GMT Subject: CN=5D0847E66060B6A059FCC552A7C791CF3A6A546F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:5c:b2:38:7f:33:16:0b:dd:b7:ae:ad:86:1f: e4:c7:bd:97:1e:4e:a8:34:15:ba:43:51:04:19:ec: 9b:80:d1:9f:4e:03:6f:d2:06:03:c2:9a:8d:5f:8c: c7:79:6e:3a:c3:3a:a5:2a:f2:10:d2:a3:7a:a0:04: a0:3b:ee:fa:40:fa:e7:25:bf:7c:cc:48:d4:93:c7: 13:ee:e1:67:93:0e:1c:50:5f:4f:17:cc:48:f2:7d: db:9b:7a:46:d0:6a:dd:62:e2:65:9d:d6:b2:6f:a8: 9c:86:f9:68:a6:da:f1:5a:8c:d0:66:23:74:d4:13: bd:f7:5f:92:88:42:09:ec:dd:81:56:19:bf:cf:76: 7c:09:71:14:a4:0c:47:7d:b3:bb:78:45:81:a9:f7: 66:c6:c1:98:42:f5:cf:c1:80:34:e9:d9:53:9b:b1: a3:1a:00:53:2f:f6:e5:8d:cc:ef:1d:ec:01:6a:16: 66:e1:5d:a3:08:13:e6:62:bb:f3:33:79:fb:2a:0d: 28:83:22:fc:da:91:91:f0:7a:fe:3b:a7:e3:d0:f5: f7:c1:df:53:20:90:6b:9b:df:37:94:5a:e3:34:b8: 8d:ee:15:8e:f7:01:89:49:ff:6f:12:e0:10:19:b4: 2f:a6:bb:52:9c:77:62:17:4d:dd:96:8b:ac:56:cb: 51:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:08:47:E6:60:60:B6:A0:59:FC:C5:52:A7:C7:91:CF:3A:6A:54:6F X509v3 Authority Key Identifier: keyid:8D:8D:26:58:81:5C:A3:C4:EE:5A:53:F9:1B:A6:12:68:E3:F4:C0:E1 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/793/jY0mWIFco8TuWlP5G6YSaOP0wOE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jY0mWIFco8TuWlP5G6YSaOP0wOE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/793/XQhH5mBgtqBZ_MVSp8eRzzpqVG8.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 219.122.96.0/20 Signature Algorithm: sha256WithRSAEncryption a0:74:77:89:bd:d0:04:5c:9b:57:e7:01:6b:25:3d:4b:1b:9f: 89:8b:df:c0:8f:35:36:bb:3a:96:1d:6a:5c:af:5b:87:5a:7e: 23:f3:f6:73:9f:8e:e9:7e:14:d5:4c:68:2d:80:cf:69:3a:a9: 4a:8a:7a:82:95:8c:a7:e2:a6:81:7d:bc:48:67:4c:58:70:82: 34:f4:46:d2:a2:0a:85:ac:7f:45:ed:e5:95:5f:0c:83:91:22: b5:3c:88:fe:9f:b8:14:e9:1a:95:cf:74:00:45:25:3c:d7:d2: 19:0d:e2:29:9c:45:23:ea:c3:b5:4b:fa:9b:52:5b:9e:f9:ca: 28:be:7a:be:fd:ec:d6:76:22:b0:ee:8e:b7:d6:cd:19:21:a4: 54:70:45:55:df:2f:ef:59:54:29:81:07:5b:4c:d0:97:dd:50: f4:56:a7:82:49:51:fa:61:be:5a:61:25:d5:30:81:97:9a:35: 5a:98:2a:92:b3:8d:50:b2:29:ae:f3:b9:29:c2:be:13:ed:dc: 11:d4:07:e2:d4:ea:e6:3f:ed:f4:98:fd:c2:c0:d1:81:a8:37: 00:ae:35:dc:30:82:bc:4b:5d:22:23:71:91:db:72:77:cb:32: aa:98:00:20:17:f2:ef:a6:14:26:03:18:77:96:8a:7f:67:b9: 6e:e3:a3:bb -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBGTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4RDhE MjY1ODgxNUNBM0M0RUU1QTUzRjkxQkE2MTI2OEUzRjRDMEUxMB4XDTIzMDkxODA0 MTgwOVoXDTI0MDkxNDAxMzAwM1owMzExMC8GA1UEAxMoNUQwODQ3RTY2MDYwQjZB MDU5RkNDNTUyQTdDNzkxQ0YzQTZBNTQ2RjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMdcsjh/MxYL3beurYYf5Me9lx5OqDQVukNRBBnsm4DRn04Db9IG A8KajV+Mx3luOsM6pSryENKjeqAEoDvu+kD65yW/fMxI1JPHE+7hZ5MOHFBfTxfM SPJ925t6RtBq3WLiZZ3Wsm+onIb5aKba8VqM0GYjdNQTvfdfkohCCezdgVYZv892 fAlxFKQMR32zu3hFgan3ZsbBmEL1z8GANOnZU5uxoxoAUy/25Y3M7x3sAWoWZuFd owgT5mK78zN5+yoNKIMi/NqRkfB6/jun49D198HfUyCQa5vfN5Ra4zS4je4VjvcB iUn/bxLgEBm0L6a7Upx3YhdN3ZaLrFbLUfECAwEAAaOCAiQwggIgMB0GA1UdDgQW BBRdCEfmYGC2oFn8xVKnx5HPOmpUbzAfBgNVHSMEGDAWgBSNjSZYgVyjxO5aU/kb phJo4/TA4TAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNzkzL2pZMG1XSUZjbzhUdVdsUDVHNllTYU9QMHdPRS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2pZMG1XSUZjbzhUdVdsUDVHNllTYU9Q MHdPRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC83OTMvWFFoSDVtQmd0cUJaX01WU3A4ZVJ6enBxVkc4LnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBNt6YDANBgkqhkiG9w0BAQsFAAOCAQEAoHR3ib3QBFybV+cBayU9SxufiYvf wI81Nrs6lh1qXK9bh1p+I/P2c5+O6X4U1UxoLYDPaTqpSop6gpWMp+KmgX28SGdM WHCCNPRG0qIKhax/Re3llV8Mg5EitTyI/p+4FOkalc90AEUlPNfSGQ3iKZxFI+rD tUv6m1JbnvnKKL56vv3s1nYisO6Ot9bNGSGkVHBFVd8v71lUKYEHW0zQl91Q9Fan gklR+mG+WmEl1TCBl5o1WpgqkrONULIprvO5KcK+E+3cEdQH4tTq5j/t9Jj9wsDR gag3AK413DCCvEtdIiNxkdtyd8syqpgAIBfy76YUJgMYd5aKf2e5buOjuw== -----END CERTIFICATE-----Generated at Thu Jun 6 14:56:24 2024 by rpki-client on console-fra.rpki-client.org