$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/882/7yRtVkSxfkPURJQ2f1TO_PsNaFU.roa File: 7yRtVkSxfkPURJQ2f1TO_PsNaFU.roa (raw, json) Hash identifier: nG4BsxanNpY5EYZKSqnNyhEeG31jqsfcFpXF85af+6I= Subject key identifier: EF:24:6D:56:44:B1:7E:43:D4:44:94:36:7F:54:CE:FC:FB:0D:68:55 Certificate issuer: /CN=4F2A36BE85AB88338854C5A568CCD44E19E654F1 Certificate serial: 09 Authority key identifier: 4F:2A:36:BE:85:AB:88:33:88:54:C5:A5:68:CC:D4:4E:19:E6:54:F1 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tyo2voWriDOIVMWlaMzUThnmVPE.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/7yRtVkSxfkPURJQ2f1TO_PsNaFU.roa Signing time: Sun 08 Oct 2023 23:27:02 +0000 ROA not before: Sun 08 Oct 2023 23:27:02 +0000 ROA not after: Sat 14 Sep 2024 01:30:03 +0000 asID: 59127 IP address blocks: 216.171.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/Tyo2voWriDOIVMWlaMzUThnmVPE.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/Tyo2voWriDOIVMWlaMzUThnmVPE.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tyo2voWriDOIVMWlaMzUThnmVPE.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Jun 2024 02:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9 (0x9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4F2A36BE85AB88338854C5A568CCD44E19E654F1 Validity Not Before: Oct 8 23:27:02 2023 GMT Not After : Sep 14 01:30:03 2024 GMT Subject: CN=EF246D5644B17E43D44494367F54CEFCFB0D6855 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ea:7c:a7:e1:64:de:aa:b2:ec:e4:e3:27:ba: 25:3a:fa:5c:a4:7c:a5:a6:47:28:e6:d8:36:e7:f1: f2:58:49:0a:ef:39:a3:72:d1:d3:5c:61:6f:bf:9d: 8f:e3:dd:83:2b:3e:29:29:f2:9c:d6:ca:ee:a5:1e: 6a:e2:c5:36:d9:0d:b7:70:73:06:8f:0c:34:22:20: 2b:af:cc:e3:a8:e0:d3:02:f9:3b:3a:da:b8:c0:02: 0d:2e:42:3b:d0:aa:7f:89:c3:48:61:31:c0:48:69: 0c:4e:6c:74:29:77:7b:72:00:bc:6e:3a:80:57:38: 50:b6:1f:ea:02:2b:2a:eb:74:56:d8:25:f6:35:b3: bf:5c:dd:90:eb:d4:a1:8c:c2:4f:a3:f7:8d:db:b9: 28:51:61:4b:b4:52:93:97:da:f4:4d:d7:90:e1:77: 34:c5:b4:f0:fa:78:55:b3:f1:82:82:3c:1b:64:f0: 4c:04:20:f5:68:de:f4:6f:c8:0e:87:16:53:d6:d2: b0:40:2d:1b:7b:18:af:31:cc:e0:a5:a0:44:f5:c4: 70:e3:56:43:17:72:5f:34:9b:91:ad:35:ee:11:a0: 7d:83:55:45:90:0b:24:80:b7:82:77:a8:f3:14:25: 40:bd:2a:b3:11:97:99:df:28:ab:0e:4d:08:79:d8: 2b:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:24:6D:56:44:B1:7E:43:D4:44:94:36:7F:54:CE:FC:FB:0D:68:55 X509v3 Authority Key Identifier: keyid:4F:2A:36:BE:85:AB:88:33:88:54:C5:A5:68:CC:D4:4E:19:E6:54:F1 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/Tyo2voWriDOIVMWlaMzUThnmVPE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tyo2voWriDOIVMWlaMzUThnmVPE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/7yRtVkSxfkPURJQ2f1TO_PsNaFU.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 216.171.112.0/20 Signature Algorithm: sha256WithRSAEncryption 97:f3:e8:c2:3c:24:b8:29:a0:9b:7c:4c:55:07:c2:47:bf:98: d7:c1:f5:f3:e4:ac:3e:b5:19:aa:fc:7b:18:99:59:3c:4d:55: e3:6c:77:a4:6f:a2:64:05:9c:73:3f:19:35:32:dc:7e:15:7e: e8:a3:7c:f3:a0:56:f9:33:c3:f1:f6:35:5d:09:5c:a3:ff:ad: f5:c0:70:74:d4:55:b1:7f:59:2b:18:0e:17:fd:58:79:4b:d4: a1:11:3c:1b:d4:a7:4d:7e:15:b7:91:9b:65:ec:9a:c6:00:7d: 76:8e:c2:b2:12:56:09:9c:bc:9e:f4:eb:01:6c:be:52:45:84: 0c:5f:04:a0:04:d3:07:bc:d2:00:5f:6f:9b:5b:b3:ba:72:f9: 6b:cd:ff:45:da:69:3b:ed:27:c1:d6:5c:ae:61:69:9a:d9:32: 41:d8:ac:5e:af:e5:d9:f7:3a:f1:12:14:31:14:f4:f8:ad:ed: d7:84:21:26:ee:9a:91:ee:29:47:f3:46:72:67:96:5f:b3:41: 70:49:98:a3:a1:45:4c:ce:ae:9e:b2:9e:6d:45:e1:f7:3a:6b: 0b:69:22:9a:21:77:be:a4:ac:bb:21:27:9a:b2:cb:f2:43:17: 44:af:58:83:8f:40:48:58:b2:b0:d1:a1:22:fa:34:48:79:7b: 85:04:f8:dc -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBCTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0RjJB MzZCRTg1QUI4ODMzODg1NEM1QTU2OENDRDQ0RTE5RTY1NEYxMB4XDTIzMTAwODIz MjcwMloXDTI0MDkxNDAxMzAwM1owMzExMC8GA1UEAxMoRUYyNDZENTY0NEIxN0U0 M0Q0NDQ5NDM2N0Y1NENFRkNGQjBENjg1NTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAM3qfKfhZN6qsuzk4ye6JTr6XKR8paZHKObYNufx8lhJCu85o3LR 01xhb7+dj+Pdgys+KSnynNbK7qUeauLFNtkNt3BzBo8MNCIgK6/M46jg0wL5Ozra uMACDS5CO9Cqf4nDSGExwEhpDE5sdCl3e3IAvG46gFc4ULYf6gIrKut0Vtgl9jWz v1zdkOvUoYzCT6P3jdu5KFFhS7RSk5fa9E3XkOF3NMW08Pp4VbPxgoI8G2TwTAQg 9Wje9G/IDocWU9bSsEAtG3sYrzHM4KWgRPXEcONWQxdyXzSbka017hGgfYNVRZAL JIC3gneo8xQlQL0qsxGXmd8oqw5NCHnYK0MCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBTvJG1WRLF+Q9RElDZ/VM78+w1oVTAfBgNVHSMEGDAWgBRPKja+hauIM4hUxaVo zNROGeZU8TAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvODgyL1R5bzJ2b1dyaURPSVZNV2xhTXpVVGhubVZQRS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1R5bzJ2b1dyaURPSVZNV2xhTXpVVGhu bVZQRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC84ODIvN3lSdFZrU3hma1BVUkpRMmYxVE9fUHNOYUZVLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBNircDANBgkqhkiG9w0BAQsFAAOCAQEAl/PowjwkuCmgm3xMVQfCR7+Y18H1 8+SsPrUZqvx7GJlZPE1V42x3pG+iZAWccz8ZNTLcfhV+6KN886BW+TPD8fY1XQlc o/+t9cBwdNRVsX9ZKxgOF/1YeUvUoRE8G9SnTX4Vt5GbZeyaxgB9do7CshJWCZy8 nvTrAWy+UkWEDF8EoATTB7zSAF9vm1uzunL5a83/RdppO+0nwdZcrmFpmtkyQdis Xq/l2fc68RIUMRT0+K3t14QhJu6ake4pR/NGcmeWX7NBcEmYo6FFTM6unrKebUXh 9zprC2kimiF3vqSsuyEnmrLL8kMXRK9Yg49ASFiysNGhIvo0SHl7hQT43A== -----END CERTIFICATE-----Generated at Fri Jun 14 04:10:42 2024 by rpki-client on console-fra.rpki-client.org