$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/882/bOBD40-LJto5eCBMQYi89mclIlQ.roa File: bOBD40-LJto5eCBMQYi89mclIlQ.roa (raw, json) Hash identifier: xV1IdTF0tSRGu+C8mDey07Dhy/HBpXGpihBS6siWXA4= Subject key identifier: 6C:E0:43:E3:4F:8B:26:DA:39:78:20:4C:41:88:BC:F6:67:25:22:54 Certificate issuer: /CN=B3935EEBB426B5FF872B140016A4441CDE239F3F Certificate serial: 0E Authority key identifier: B3:93:5E:EB:B4:26:B5:FF:87:2B:14:00:16:A4:44:1C:DE:23:9F:3F Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s5Ne67Qmtf-HKxQAFqREHN4jnz8.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/bOBD40-LJto5eCBMQYi89mclIlQ.roa Signing time: Sun 08 Oct 2023 23:24:03 +0000 ROA not before: Sun 08 Oct 2023 23:24:03 +0000 ROA not after: Sat 14 Sep 2024 01:30:03 +0000 asID: 59127 IP address blocks: 223.223.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/s5Ne67Qmtf-HKxQAFqREHN4jnz8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/s5Ne67Qmtf-HKxQAFqREHN4jnz8.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s5Ne67Qmtf-HKxQAFqREHN4jnz8.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Jun 2024 17:53:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14 (0xe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3935EEBB426B5FF872B140016A4441CDE239F3F Validity Not Before: Oct 8 23:24:03 2023 GMT Not After : Sep 14 01:30:03 2024 GMT Subject: CN=6CE043E34F8B26DA3978204C4188BCF667252254 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:89:87:04:05:da:f2:58:3e:dc:23:5f:69:ec: b6:9d:01:af:5f:58:7f:5f:52:34:5e:51:18:7a:16: 61:0b:bd:1c:c5:08:32:40:c2:fd:55:a9:90:47:eb: 3c:4d:49:02:c3:cb:53:4e:e3:96:3b:75:ce:39:00: a1:a2:24:9b:7a:1b:c6:2e:10:1c:46:e5:b0:e6:12: 69:6a:85:a6:c3:11:ad:ee:93:b1:e5:15:18:7e:8f: af:97:b2:1e:d4:9a:72:47:00:f2:51:9e:b4:da:16: 1e:4c:c2:b0:b9:7b:67:a1:bb:33:d3:42:1b:49:7b: bb:d9:0d:ef:2f:1c:d2:b2:12:e1:fd:7d:49:87:0e: be:05:61:7e:c9:e2:12:ea:82:b3:98:c1:1c:dd:57: 0f:c2:ba:70:cb:b2:64:53:4f:ae:ee:12:e2:53:28: 8d:61:ee:09:dd:9d:6b:0b:e4:0b:f1:3f:7c:8d:a2: 23:83:7b:f6:3d:15:1b:13:a9:ae:48:10:34:8e:7e: 17:61:55:ac:9b:96:ce:b7:d5:0d:71:65:de:84:90: c6:7b:68:c2:83:f6:4c:9d:e6:36:a9:61:78:3c:04: 76:62:96:81:5c:11:09:ae:43:77:c4:6e:2a:58:82: 3c:68:e3:8d:46:e8:ab:e2:51:d9:68:b7:36:db:59: 39:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:E0:43:E3:4F:8B:26:DA:39:78:20:4C:41:88:BC:F6:67:25:22:54 X509v3 Authority Key Identifier: keyid:B3:93:5E:EB:B4:26:B5:FF:87:2B:14:00:16:A4:44:1C:DE:23:9F:3F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/s5Ne67Qmtf-HKxQAFqREHN4jnz8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s5Ne67Qmtf-HKxQAFqREHN4jnz8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/bOBD40-LJto5eCBMQYi89mclIlQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 223.223.224.0/20 Signature Algorithm: sha256WithRSAEncryption 88:a8:b1:c0:5d:ae:07:38:3b:63:13:6b:c4:41:ad:7f:90:43: d7:f3:a4:05:c2:f4:43:03:49:f3:68:4e:10:e1:76:bb:ab:8a: cf:3a:ee:15:f6:92:b4:2d:1d:9b:92:12:5e:47:4c:c3:0c:5b: ad:d0:f2:66:67:bb:9c:05:e3:96:2c:be:3f:a1:88:0d:ba:94: ef:8c:c0:81:c4:c1:2e:49:0a:3e:d2:18:d9:c8:9d:b0:d5:74: d7:42:2c:1a:d1:2a:3c:10:5a:17:e2:3a:f5:0d:dd:b1:2e:ff: 7d:4b:a5:75:f5:b2:65:02:8a:67:a5:b8:69:b9:c9:5c:4a:c8: e8:26:9d:1c:e0:56:2b:9e:5a:a7:24:a2:06:1d:11:81:09:23: 5c:21:fd:7e:1c:14:eb:02:80:b4:51:84:a2:67:82:5c:8b:bc: a0:60:d8:a7:57:6a:0d:6f:47:02:8b:99:85:83:27:bb:38:24: d0:dd:86:ba:fb:ee:fb:45:a2:a4:95:ef:4b:3f:02:3d:d8:e0: 3f:38:61:7d:a5:d1:c1:b0:fc:32:fa:81:49:33:81:75:a1:ba: c4:ed:4d:65:ce:be:a7:d5:5f:71:5d:0f:da:31:aa:cb:b9:24: 0e:26:5d:97:a1:ae:e1:ca:56:0a:26:9f:a9:a4:12:fa:c3:d0: 25:91:19:be -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBDjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCMzkz NUVFQkI0MjZCNUZGODcyQjE0MDAxNkE0NDQxQ0RFMjM5RjNGMB4XDTIzMTAwODIz MjQwM1oXDTI0MDkxNDAxMzAwM1owMzExMC8GA1UEAxMoNkNFMDQzRTM0RjhCMjZE QTM5NzgyMDRDNDE4OEJDRjY2NzI1MjI1NDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAN+JhwQF2vJYPtwjX2nstp0Br19Yf19SNF5RGHoWYQu9HMUIMkDC /VWpkEfrPE1JAsPLU07jljt1zjkAoaIkm3obxi4QHEblsOYSaWqFpsMRre6TseUV GH6Pr5eyHtSackcA8lGetNoWHkzCsLl7Z6G7M9NCG0l7u9kN7y8c0rIS4f19SYcO vgVhfsniEuqCs5jBHN1XD8K6cMuyZFNPru4S4lMojWHuCd2dawvkC/E/fI2iI4N7 9j0VGxOprkgQNI5+F2FVrJuWzrfVDXFl3oSQxntowoP2TJ3mNqlheDwEdmKWgVwR Ca5Dd8RuKliCPGjjjUboq+JR2Wi3NttZObsCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBRs4EPjT4sm2jl4IExBiLz2ZyUiVDAfBgNVHSMEGDAWgBSzk17rtCa1/4crFAAW pEQc3iOfPzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvODgyL3M1TmU2N1FtdGYtSEt4UUFGcVJFSE40am56OC5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3M1TmU2N1FtdGYtSEt4UUFGcVJFSE40 am56OC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC84ODIvYk9CRDQwLUxKdG81ZUNCTVFZaTg5bWNsSWxRLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBN/f4DANBgkqhkiG9w0BAQsFAAOCAQEAiKixwF2uBzg7YxNrxEGtf5BD1/Ok BcL0QwNJ82hOEOF2u6uKzzruFfaStC0dm5ISXkdMwwxbrdDyZme7nAXjliy+P6GI DbqU74zAgcTBLkkKPtIY2cidsNV010IsGtEqPBBaF+I69Q3dsS7/fUuldfWyZQKK Z6W4abnJXErI6CadHOBWK55apySiBh0RgQkjXCH9fhwU6wKAtFGEomeCXIu8oGDY p1dqDW9HAouZhYMnuzgk0N2Guvvu+0WipJXvSz8CPdjgPzhhfaXRwbD8MvqBSTOB daG6xO1NZc6+p9VfcV0P2jGqy7kkDiZdl6Gu4cpWCiafqaQS+sPQJZEZvg== -----END CERTIFICATE-----Generated at Fri Jun 14 19:06:48 2024 by rpki-client on console-ams.rpki-client.org