$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/881/IVxRex1VddORY_tYEyTslEPsoto.roa File: IVxRex1VddORY_tYEyTslEPsoto.roa (raw, json) Hash identifier: H1yLvgzPPG25Ln99fTUZEzYoibbJr18g6Cxj5S6uypk= Subject key identifier: 21:5C:51:7B:1D:55:75:D3:91:63:FB:58:13:24:EC:94:43:EC:A2:DA Certificate issuer: /CN=D00E08393688B04737874ECD63DD8BE78E5EF2D0 Certificate serial: 35 Authority key identifier: D0:0E:08:39:36:88:B0:47:37:87:4E:CD:63:DD:8B:E7:8E:5E:F2:D0 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0A4IOTaIsEc3h07NY92L545e8tA.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/881/IVxRex1VddORY_tYEyTslEPsoto.roa Signing time: Sun 01 Oct 2023 01:29:45 +0000 ROA not before: Sun 01 Oct 2023 01:29:45 +0000 ROA not after: Sat 14 Sep 2024 01:30:03 +0000 asID: 23805 IP address blocks: 103.42.168.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/881/0A4IOTaIsEc3h07NY92L545e8tA.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/881/0A4IOTaIsEc3h07NY92L545e8tA.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0A4IOTaIsEc3h07NY92L545e8tA.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53 (0x35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D00E08393688B04737874ECD63DD8BE78E5EF2D0 Validity Not Before: Oct 1 01:29:45 2023 GMT Not After : Sep 14 01:30:03 2024 GMT Subject: CN=215C517B1D5575D39163FB581324EC9443ECA2DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b9:b7:8b:3f:9b:14:03:d7:8a:57:e0:9d:64: 4f:d3:bb:b6:3d:00:06:d6:74:a6:da:64:9e:b5:f7: ac:14:f9:92:dc:3f:43:94:c4:ed:3c:e7:4f:68:df: 32:f7:5a:bd:c1:04:1e:99:10:31:d5:d3:48:02:e2: b1:36:5d:f8:57:48:1e:31:c7:cb:ad:b0:e6:e4:4d: 7d:ce:9e:6f:92:a2:83:03:cc:11:a8:31:89:28:bf: 63:dc:ea:69:1e:91:e9:6d:a6:83:32:52:21:29:e9: c5:40:b4:61:b1:05:d6:74:e7:34:72:4a:27:37:8b: 84:bd:6c:2d:59:91:f9:f3:5b:13:55:af:1b:a4:ef: 5d:3a:dc:ef:0c:2a:85:c9:f8:fc:e1:e4:9a:4b:03: f6:fc:27:d8:ca:30:94:4b:11:88:d2:79:74:88:82: 34:16:7e:7b:44:2f:66:fe:95:d8:33:e0:06:76:54: 75:06:ca:d6:39:b4:0d:20:99:55:eb:a9:c3:a7:9a: f9:b9:f2:53:05:02:f5:aa:23:dc:1f:ea:d1:82:cf: 5b:48:7b:cd:26:cd:c8:09:15:58:94:82:4d:c3:c6: 7a:76:27:49:12:88:88:ad:06:b6:5e:41:79:ef:ab: 1a:cd:f9:74:63:88:ac:75:33:66:03:e0:a8:14:cc: 63:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:5C:51:7B:1D:55:75:D3:91:63:FB:58:13:24:EC:94:43:EC:A2:DA X509v3 Authority Key Identifier: keyid:D0:0E:08:39:36:88:B0:47:37:87:4E:CD:63:DD:8B:E7:8E:5E:F2:D0 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/881/0A4IOTaIsEc3h07NY92L545e8tA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0A4IOTaIsEc3h07NY92L545e8tA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/881/IVxRex1VddORY_tYEyTslEPsoto.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.42.168.0/22 Signature Algorithm: sha256WithRSAEncryption 4e:b3:65:0c:4d:5e:ca:54:ea:9b:1d:d6:8e:36:3e:44:83:25: 78:6b:f2:00:3f:93:be:14:5b:4f:eb:6b:42:92:9c:79:68:50: d2:95:b0:5c:94:0c:df:6b:80:65:aa:a5:19:33:f9:b5:91:1a: a6:5f:c1:43:98:0b:5e:0a:47:20:17:b5:4a:80:d3:94:bd:6c: eb:ec:55:b8:29:e2:eb:cf:59:cd:92:e6:e3:51:f4:c4:13:8e: 82:8e:52:7e:68:d1:7d:ac:36:a3:7a:a3:18:c3:e0:0e:ef:bc: 1f:9d:ee:1f:0c:8f:0f:b7:15:fa:bd:c1:07:fa:50:bf:20:90: f8:e3:81:e6:bd:30:24:60:4e:5a:9b:67:43:54:38:45:6d:31: de:78:8c:5d:de:8f:bf:db:ca:f6:65:e8:0d:c1:9e:f5:b8:be: 1b:d6:bb:b2:27:a4:3f:02:1c:0c:93:b1:ce:f3:61:52:c5:f3: a8:a0:77:5f:d3:92:7b:08:07:42:bd:79:2b:95:fe:32:ef:a4: ea:e4:79:06:b7:fa:c0:e2:06:61:d6:66:8b:41:60:f8:22:00: b5:e3:d6:ec:a9:1d:f8:e7:ec:e6:51:f0:41:c6:ac:d6:71:79: 4c:6e:e0:8b:65:b7:35:15:1c:1b:65:db:c8:50:aa:a9:ad:d3: 27:9c:e3:23 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBNTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhEMDBF MDgzOTM2ODhCMDQ3Mzc4NzRFQ0Q2M0REOEJFNzhFNUVGMkQwMB4XDTIzMTAwMTAx Mjk0NVoXDTI0MDkxNDAxMzAwM1owMzExMC8GA1UEAxMoMjE1QzUxN0IxRDU1NzVE MzkxNjNGQjU4MTMyNEVDOTQ0M0VDQTJEQTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKy5t4s/mxQD14pX4J1kT9O7tj0ABtZ0ptpknrX3rBT5ktw/Q5TE 7TznT2jfMvdavcEEHpkQMdXTSALisTZd+FdIHjHHy62w5uRNfc6eb5KigwPMEagx iSi/Y9zqaR6R6W2mgzJSISnpxUC0YbEF1nTnNHJKJzeLhL1sLVmR+fNbE1WvG6Tv XTrc7wwqhcn4/OHkmksD9vwn2MowlEsRiNJ5dIiCNBZ+e0QvZv6V2DPgBnZUdQbK 1jm0DSCZVeupw6ea+bnyUwUC9aoj3B/q0YLPW0h7zSbNyAkVWJSCTcPGenYnSRKI iK0Gtl5Bee+rGs35dGOIrHUzZgPgqBTMY2kCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBQhXFF7HVV105Fj+1gTJOyUQ+yi2jAfBgNVHSMEGDAWgBTQDgg5NoiwRzeHTs1j 3Yvnjl7y0DAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvODgxLzBBNElPVGFJc0VjM2gwN05ZOTJMNTQ1ZTh0QS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzBBNElPVGFJc0VjM2gwN05ZOTJMNTQ1 ZTh0QS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC84ODEvSVZ4UmV4MVZkZE9SWV90WUV5VHNsRVBzb3RvLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAmcqqDANBgkqhkiG9w0BAQsFAAOCAQEATrNlDE1eylTqmx3WjjY+RIMleGvy AD+TvhRbT+trQpKceWhQ0pWwXJQM32uAZaqlGTP5tZEapl/BQ5gLXgpHIBe1SoDT lL1s6+xVuCni689ZzZLm41H0xBOOgo5SfmjRfaw2o3qjGMPgDu+8H53uHwyPD7cV +r3BB/pQvyCQ+OOB5r0wJGBOWptnQ1Q4RW0x3niMXd6Pv9vK9mXoDcGe9bi+G9a7 siekPwIcDJOxzvNhUsXzqKB3X9OSewgHQr15K5X+Mu+k6uR5Brf6wOIGYdZmi0Fg +CIAtePW7Kkd+Ofs5lHwQcas1nF5TG7gi2W3NRUcG2XbyFCqqa3TJ5zjIw== -----END CERTIFICATE-----Generated at Sat Jun 1 15:54:44 2024 by rpki-client on console-ams.rpki-client.org