$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/822/l2ALdwC7BH0fjGsqhGESH0m3tlY.roa File: l2ALdwC7BH0fjGsqhGESH0m3tlY.roa (raw, json) Hash identifier: uwLm2X+MZd3Sxr0WhoXzVWCDu0AzoXxFrWMrGUeuW6c= Subject key identifier: 97:60:0B:77:00:BB:04:7D:1F:8C:6B:2A:84:61:12:1F:49:B7:B6:56 Certificate issuer: /CN=55061B7BA6111F230BDB61E29781E46D0165E99E Certificate serial: 30 Authority key identifier: 55:06:1B:7B:A6:11:1F:23:0B:DB:61:E2:97:81:E4:6D:01:65:E9:9E Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VQYbe6YRHyML22Hil4HkbQFl6Z4.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/822/l2ALdwC7BH0fjGsqhGESH0m3tlY.roa Signing time: Tue 09 Jan 2024 05:03:57 +0000 ROA not before: Tue 09 Jan 2024 05:03:57 +0000 ROA not after: Sat 14 Dec 2024 01:30:03 +0000 asID: 9354 IP address blocks: 219.100.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/822/VQYbe6YRHyML22Hil4HkbQFl6Z4.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/822/VQYbe6YRHyML22Hil4HkbQFl6Z4.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VQYbe6YRHyML22Hil4HkbQFl6Z4.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48 (0x30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55061B7BA6111F230BDB61E29781E46D0165E99E Validity Not Before: Jan 9 05:03:57 2024 GMT Not After : Dec 14 01:30:03 2024 GMT Subject: CN=97600B7700BB047D1F8C6B2A8461121F49B7B656 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ff:24:be:19:cb:4c:69:50:bd:ea:3b:70:74: c6:98:cc:c8:43:56:e2:89:fd:18:5c:2f:68:bd:0d: c6:c1:44:66:07:83:65:3b:e3:fc:f6:6a:3e:b8:21: af:44:f5:8f:d9:99:8a:ea:99:e0:2d:28:03:eb:a4: ff:e0:41:48:4f:e7:b5:4b:1a:96:21:aa:0f:25:f3: d4:81:b3:d6:42:f3:78:96:55:3a:80:32:47:c7:63: b6:84:d6:2d:35:32:d4:32:0e:13:2d:9a:01:57:fc: bf:e6:af:1e:a6:40:d8:90:05:88:1f:e8:12:96:2a: 11:af:8c:cd:c7:36:6a:3f:8f:be:2c:51:19:6e:e5: d8:18:21:3d:c1:ce:d8:3c:ba:61:00:7e:a3:91:d3: bb:25:6f:53:05:71:fb:8f:b7:d2:0f:87:51:19:8c: 80:53:27:20:8a:ba:da:6a:3f:a7:df:0e:82:fa:66: 22:34:57:1b:50:20:53:85:be:44:f8:0c:3f:47:c8: c3:4f:bf:3f:f0:f8:9d:66:70:61:15:a2:ef:48:cc: a8:92:4c:d2:8e:30:3d:42:1f:07:c3:04:50:7c:91: b8:57:c5:df:e3:73:0d:6f:ba:0b:1a:58:1f:4a:37: cf:df:70:e5:71:d7:9f:f5:02:1b:b7:3a:ae:21:39: 0b:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:60:0B:77:00:BB:04:7D:1F:8C:6B:2A:84:61:12:1F:49:B7:B6:56 X509v3 Authority Key Identifier: keyid:55:06:1B:7B:A6:11:1F:23:0B:DB:61:E2:97:81:E4:6D:01:65:E9:9E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/822/VQYbe6YRHyML22Hil4HkbQFl6Z4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VQYbe6YRHyML22Hil4HkbQFl6Z4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/822/l2ALdwC7BH0fjGsqhGESH0m3tlY.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 219.100.224.0/22 Signature Algorithm: sha256WithRSAEncryption 48:a9:66:4e:15:8f:9d:4a:41:14:98:4d:13:94:e9:c4:79:2e: e8:e4:b9:56:a7:ef:17:2e:d2:3b:32:60:63:48:55:8a:88:cf: 2f:ba:9d:08:ec:17:79:45:6f:9e:72:54:6a:a0:81:63:8a:1f: f2:57:93:58:f2:1f:24:2d:12:22:30:45:2e:12:b0:45:b7:b1: 8a:8a:87:0b:1b:18:bd:b7:ab:ea:40:3d:a2:6f:4f:28:f2:1a: a8:99:3f:c8:a9:3f:8f:ce:45:82:a6:06:87:e3:ee:04:4a:ef: 23:11:93:63:3e:f8:7d:b5:08:ae:e5:73:f7:db:29:fd:26:e3: 98:c5:28:2e:5f:ff:4b:6f:06:e5:1c:d0:f0:44:b0:b3:fe:9d: 77:f7:53:c0:df:b5:8c:0e:de:bf:80:6e:41:11:40:15:7a:6d: fa:c0:75:43:7c:3b:17:ef:13:f7:d0:87:91:42:23:ee:77:df: 4e:38:d1:f5:ad:ac:d4:57:c0:12:cc:23:13:a8:96:de:e4:c9: 0c:f0:44:72:4e:bf:64:f7:4d:34:69:b0:fb:68:09:67:a9:4a: df:9a:69:b6:bd:b0:e1:31:d3:bb:91:c2:cf:d4:f2:ad:92:1b: f9:57:a2:33:ca:c8:bd:f3:a0:84:97:8b:dc:5c:26:b2:27:3b: 52:88:23:35 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBMDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1NTA2 MUI3QkE2MTExRjIzMEJEQjYxRTI5NzgxRTQ2RDAxNjVFOTlFMB4XDTI0MDEwOTA1 MDM1N1oXDTI0MTIxNDAxMzAwM1owMzExMC8GA1UEAxMoOTc2MDBCNzcwMEJCMDQ3 RDFGOEM2QjJBODQ2MTEyMUY0OUI3QjY1NjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMf/JL4Zy0xpUL3qO3B0xpjMyENW4on9GFwvaL0NxsFEZgeDZTvj /PZqPrghr0T1j9mZiuqZ4C0oA+uk/+BBSE/ntUsaliGqDyXz1IGz1kLzeJZVOoAy R8djtoTWLTUy1DIOEy2aAVf8v+avHqZA2JAFiB/oEpYqEa+Mzcc2aj+PvixRGW7l 2BghPcHO2Dy6YQB+o5HTuyVvUwVx+4+30g+HURmMgFMnIIq62mo/p98OgvpmIjRX G1AgU4W+RPgMP0fIw0+/P/D4nWZwYRWi70jMqJJM0o4wPUIfB8MEUHyRuFfF3+Nz DW+6CxpYH0o3z99w5XHXn/UCG7c6riE5C4cCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBSXYAt3ALsEfR+MayqEYRIfSbe2VjAfBgNVHSMEGDAWgBRVBht7phEfIwvbYeKX geRtAWXpnjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvODIyL1ZRWWJlNllSSHlNTDIySGlsNEhrYlFGbDZaNC5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1ZRWWJlNllSSHlNTDIySGlsNEhrYlFG bDZaNC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC84MjIvbDJBTGR3QzdCSDBmakdzcWhHRVNIMG0zdGxZLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAttk4DANBgkqhkiG9w0BAQsFAAOCAQEASKlmThWPnUpBFJhNE5TpxHku6OS5 VqfvFy7SOzJgY0hViojPL7qdCOwXeUVvnnJUaqCBY4of8leTWPIfJC0SIjBFLhKw RbexioqHCxsYvber6kA9om9PKPIaqJk/yKk/j85FgqYGh+PuBErvIxGTYz74fbUI ruVz99sp/SbjmMUoLl//S28G5RzQ8ESws/6dd/dTwN+1jA7ev4BuQRFAFXpt+sB1 Q3w7F+8T99CHkUIj7nffTjjR9a2s1FfAEswjE6iW3uTJDPBEck6/ZPdNNGmw+2gJ Z6lK35pptr2w4THTu5HCz9TyrZIb+VeiM8rIvfOghJeL3Fwmsic7UogjNQ== -----END CERTIFICATE-----Generated at Sat Jun 1 13:38:53 2024 by rpki-client on console-fra.rpki-client.org