$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/859/wnchU95GGKE-jnv8OgNZ2Uv8dNs.roa File: wnchU95GGKE-jnv8OgNZ2Uv8dNs.roa (raw, json) Hash identifier: cNYtL/hrFYjecl1vwqMN4eH+zfeg5fXV1QtVNy6Paig= Subject key identifier: C2:77:21:53:DE:46:18:A1:3E:8E:7B:FC:3A:03:59:D9:4B:FC:74:DB Certificate issuer: /CN=3F90F2FBCAA2538CA6574FB22D8C6EB3E9CA046B Certificate serial: 3F Authority key identifier: 3F:90:F2:FB:CA:A2:53:8C:A6:57:4F:B2:2D:8C:6E:B3:E9:CA:04:6B Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/P5Dy-8qiU4ymV0-yLYxus-nKBGs.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/859/wnchU95GGKE-jnv8OgNZ2Uv8dNs.roa Signing time: Sun 31 Mar 2024 01:30:25 +0000 ROA not before: Sun 31 Mar 2024 01:30:25 +0000 ROA not after: Sat 15 Mar 2025 01:30:02 +0000 asID: 23778 IP address blocks: 202.58.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/859/P5Dy-8qiU4ymV0-yLYxus-nKBGs.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/859/P5Dy-8qiU4ymV0-yLYxus-nKBGs.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/P5Dy-8qiU4ymV0-yLYxus-nKBGs.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:41:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63 (0x3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3F90F2FBCAA2538CA6574FB22D8C6EB3E9CA046B Validity Not Before: Mar 31 01:30:25 2024 GMT Not After : Mar 15 01:30:02 2025 GMT Subject: CN=C2772153DE4618A13E8E7BFC3A0359D94BFC74DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:8c:31:15:08:30:dd:ac:06:2b:e2:03:3f:57: fc:83:3a:23:8b:0c:5f:a4:a8:34:81:b4:a7:a4:88: 8f:f7:f4:38:10:f9:22:67:9f:4e:c4:fe:fe:e8:5a: eb:f0:5f:a9:3a:e5:55:01:f3:43:32:e9:38:df:ca: 48:72:a2:89:61:5c:6b:a9:77:06:d2:90:5d:f2:c5: d4:06:98:6a:e3:86:a8:6c:33:4b:57:d1:22:4b:13: d6:fd:d3:42:6d:99:8f:c9:ba:91:52:c4:0f:03:1b: 31:88:97:01:a2:46:0a:35:1c:d5:62:bd:91:48:3e: d4:e3:c4:ed:9e:89:a4:9a:7c:6a:ed:2e:34:89:49: 22:d9:74:4e:03:7c:56:4d:de:8f:2e:64:9f:2e:48: 77:fa:e1:49:72:92:9d:d6:76:b2:56:3f:38:eb:a7: 22:e7:16:40:22:73:8b:78:03:21:d1:87:e1:33:bc: d0:d4:88:fb:78:8a:c0:f4:1a:20:14:dc:d1:54:59: fb:62:b1:7d:a1:0e:04:52:8a:b2:96:cd:b3:58:e3: 93:1e:48:b6:87:e9:bb:de:2b:1b:76:b0:4e:57:5d: aa:7f:85:43:4d:c4:07:9f:fc:53:a1:22:d9:f8:5a: 20:1a:5f:93:1b:28:42:1b:ad:d5:e6:e9:af:09:e6: 56:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:77:21:53:DE:46:18:A1:3E:8E:7B:FC:3A:03:59:D9:4B:FC:74:DB X509v3 Authority Key Identifier: keyid:3F:90:F2:FB:CA:A2:53:8C:A6:57:4F:B2:2D:8C:6E:B3:E9:CA:04:6B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/859/P5Dy-8qiU4ymV0-yLYxus-nKBGs.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/P5Dy-8qiU4ymV0-yLYxus-nKBGs.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/859/wnchU95GGKE-jnv8OgNZ2Uv8dNs.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.58.144.0/20 Signature Algorithm: sha256WithRSAEncryption 72:03:71:e2:5e:9b:2b:7e:ff:22:7e:88:5d:71:5f:31:93:d6: 26:99:16:81:82:e7:c5:7f:42:7e:1d:59:87:77:6b:3c:72:74: f6:44:23:ec:c8:5b:20:ad:7d:38:55:75:68:b0:7e:a4:fd:64: 81:a9:7e:48:d9:85:9c:db:5d:53:7a:8c:da:89:de:aa:03:67: 5b:e4:8c:61:07:ee:3f:39:e7:e6:6b:06:51:4d:15:32:e0:fd: 2a:be:3c:24:0a:9f:af:e3:f0:21:6d:06:06:47:d0:65:86:84: d0:c2:43:68:88:c8:be:17:fd:d6:e3:31:1c:ce:25:36:04:43: 7e:ae:2b:0a:72:f0:e1:fc:5e:22:05:d2:80:20:00:b4:87:c7: 39:fa:9f:72:61:c8:03:f0:64:5b:59:44:0d:f9:34:09:6f:e6: 83:47:80:da:6a:da:5c:07:03:31:02:3c:0c:e5:3c:ad:9c:e6: 45:cb:bc:52:12:03:1b:61:e9:16:e2:21:f4:c8:75:61:d5:2e: 89:e8:f1:05:09:60:68:06:4c:0f:fe:d3:8a:fe:91:db:39:14: b0:df:95:84:4f:3f:d2:55:72:30:b1:80:8e:95:8b:9b:3c:8f: b0:2c:96:8b:72:e9:af:6b:20:66:f1:bf:a1:ba:bd:9b:5f:ed: 81:bb:46:c5 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBPzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzRjkw RjJGQkNBQTI1MzhDQTY1NzRGQjIyRDhDNkVCM0U5Q0EwNDZCMB4XDTI0MDMzMTAx MzAyNVoXDTI1MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoQzI3NzIxNTNERTQ2MThB MTNFOEU3QkZDM0EwMzU5RDk0QkZDNzREQjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMyMMRUIMN2sBiviAz9X/IM6I4sMX6SoNIG0p6SIj/f0OBD5Imef TsT+/uha6/BfqTrlVQHzQzLpON/KSHKiiWFca6l3BtKQXfLF1AaYauOGqGwzS1fR IksT1v3TQm2Zj8m6kVLEDwMbMYiXAaJGCjUc1WK9kUg+1OPE7Z6JpJp8au0uNIlJ Itl0TgN8Vk3ejy5kny5Id/rhSXKSndZ2slY/OOunIucWQCJzi3gDIdGH4TO80NSI +3iKwPQaIBTc0VRZ+2KxfaEOBFKKspbNs1jjkx5Itofpu94rG3awTlddqn+FQ03E B5/8U6Ei2fhaIBpfkxsoQhut1ebprwnmViUCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBTCdyFT3kYYoT6Oe/w6A1nZS/x02zAfBgNVHSMEGDAWgBQ/kPL7yqJTjKZXT7It jG6z6coEazAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvODU5L1A1RHktOHFpVTR5bVYwLXlMWXh1cy1uS0JHcy5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1A1RHktOHFpVTR5bVYwLXlMWXh1cy1u S0JHcy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC84NTkvd25jaFU5NUdHS0Utam52OE9nTloyVXY4ZE5zLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBMo6kDANBgkqhkiG9w0BAQsFAAOCAQEAcgNx4l6bK37/In6IXXFfMZPWJpkW gYLnxX9Cfh1Zh3drPHJ09kQj7MhbIK19OFV1aLB+pP1kgal+SNmFnNtdU3qM2one qgNnW+SMYQfuPznn5msGUU0VMuD9Kr48JAqfr+PwIW0GBkfQZYaE0MJDaIjIvhf9 1uMxHM4lNgRDfq4rCnLw4fxeIgXSgCAAtIfHOfqfcmHIA/BkW1lEDfk0CW/mg0eA 2mraXAcDMQI8DOU8rZzmRcu8UhIDG2HpFuIh9Mh1YdUuiejxBQlgaAZMD/7Tiv6R 2zkUsN+VhE8/0lVyMLGAjpWLmzyPsCyWi3Lpr2sgZvG/obq9m1/tgbtGxQ== -----END CERTIFICATE-----Generated at Fri Nov 22 15:24:07 2024 by rpki-client on console-fra.rpki-client.org