$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/897/A-PQaIy7Aj6SGglUStmFTzDNdBA.roa File: A-PQaIy7Aj6SGglUStmFTzDNdBA.roa (raw, json) Hash identifier: u6ufx2yJwR6/IcfmI2n2Pnyp2+1bzKTdMFAsJKhWAlk= Subject key identifier: 03:E3:D0:68:8C:BB:02:3E:92:1A:09:54:4A:D9:85:4F:30:CD:74:10 Certificate issuer: /CN=D6900F1E3126E609EF4F1A0FB855EB4DE4E3A18A Certificate serial: 3D Authority key identifier: D6:90:0F:1E:31:26:E6:09:EF:4F:1A:0F:B8:55:EB:4D:E4:E3:A1:8A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1pAPHjEm5gnvTxoPuFXrTeTjoYo.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/A-PQaIy7Aj6SGglUStmFTzDNdBA.roa Signing time: Sun 01 Oct 2023 01:29:02 +0000 ROA not before: Sun 01 Oct 2023 01:29:02 +0000 ROA not after: Sat 14 Sep 2024 01:30:03 +0000 asID: 9621 IP address blocks: 157.70.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/1pAPHjEm5gnvTxoPuFXrTeTjoYo.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/1pAPHjEm5gnvTxoPuFXrTeTjoYo.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1pAPHjEm5gnvTxoPuFXrTeTjoYo.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 14 Jun 2024 14:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61 (0x3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D6900F1E3126E609EF4F1A0FB855EB4DE4E3A18A Validity Not Before: Oct 1 01:29:02 2023 GMT Not After : Sep 14 01:30:03 2024 GMT Subject: CN=03E3D0688CBB023E921A09544AD9854F30CD7410 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d0:fb:84:d3:72:18:e0:7e:e8:57:89:55:a2: 72:3f:06:4b:4c:0a:4a:17:fc:c1:bd:24:0b:4d:df: 07:dc:6c:ca:75:4e:72:1d:f1:3f:1a:c9:cb:2e:d1: 39:3c:96:51:e1:b9:ae:84:13:7c:d6:20:d4:60:4e: b8:68:98:8c:9f:6d:b1:9b:88:7a:5c:b5:48:83:50: f9:16:40:72:30:c7:5a:63:85:bd:da:1b:f3:9b:d0: 93:ea:eb:c8:46:45:18:e2:28:2b:98:95:83:3e:19: 26:c9:e5:32:45:4e:24:86:42:9e:29:e0:e5:e8:96: 18:e1:79:88:9f:00:58:0d:63:0f:b2:58:5b:14:15: 99:e5:44:84:4a:bb:45:27:7a:ec:66:62:b2:a9:87: 21:bc:d7:1f:4a:a2:bc:57:6b:d9:c7:b8:d5:29:cf: b8:f0:c2:18:a1:7c:e7:cc:6a:63:80:bd:c5:0a:a0: 38:c3:87:eb:6a:86:8c:1e:ab:33:b5:84:2b:f1:c5: f3:2b:8f:ba:01:ff:c1:c5:8e:86:55:40:1b:a2:d1: f7:06:56:e3:98:0d:b6:44:56:7f:2c:93:6c:fd:67: 60:0f:26:c6:c0:15:d6:99:93:cd:3a:ad:d5:31:e0: ab:8d:75:d8:c7:61:73:cc:00:92:52:84:95:7b:41: 93:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:E3:D0:68:8C:BB:02:3E:92:1A:09:54:4A:D9:85:4F:30:CD:74:10 X509v3 Authority Key Identifier: keyid:D6:90:0F:1E:31:26:E6:09:EF:4F:1A:0F:B8:55:EB:4D:E4:E3:A1:8A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/1pAPHjEm5gnvTxoPuFXrTeTjoYo.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1pAPHjEm5gnvTxoPuFXrTeTjoYo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/A-PQaIy7Aj6SGglUStmFTzDNdBA.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.70.224.0/20 Signature Algorithm: sha256WithRSAEncryption 0d:e3:56:4b:83:42:15:c4:a3:69:30:4e:4d:6c:75:89:f1:41: 15:8f:4a:5d:63:7d:bc:78:f7:3c:4c:c8:8c:d6:c5:92:37:82: 9c:c4:b0:be:09:49:47:73:e0:87:97:3c:21:d7:b7:28:0f:30: ed:56:47:15:ef:ab:8f:75:f3:1c:b9:60:32:6f:25:a5:46:14: c4:b5:15:ae:c7:59:af:f5:92:9b:28:5e:3e:e9:f1:82:83:26: 16:1a:ff:1f:52:15:64:6a:63:b5:68:48:d3:34:85:e9:96:f4: e7:1a:60:6f:cc:7e:30:33:b4:4e:f5:d5:0d:10:2d:74:95:af: 32:3c:26:e7:f1:9b:6a:b8:c2:fa:6d:0e:24:15:87:00:80:f7: c7:31:a7:56:d4:34:51:9b:83:27:f5:4e:51:88:5f:cf:59:cd: 13:ee:dd:58:52:b3:ec:c6:4a:a1:22:fa:4b:de:a3:1a:56:4e: 27:62:12:a3:e3:e4:d6:e4:17:2d:00:87:51:3c:c4:89:5e:bf: 58:4a:16:64:22:25:76:a1:02:cc:e7:cb:cb:c0:8b:ac:57:61: 33:11:82:cf:1e:59:73:63:cc:21:06:39:96:d9:42:6f:8c:38: 16:1c:c8:c3:4e:cf:b6:8e:d2:39:f2:3c:64:76:ce:37:83:92: c2:e1:4f:8e -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBPTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhENjkw MEYxRTMxMjZFNjA5RUY0RjFBMEZCODU1RUI0REU0RTNBMThBMB4XDTIzMTAwMTAx MjkwMloXDTI0MDkxNDAxMzAwM1owMzExMC8GA1UEAxMoMDNFM0QwNjg4Q0JCMDIz RTkyMUEwOTU0NEFEOTg1NEYzMENENzQxMDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMTQ+4TTchjgfuhXiVWicj8GS0wKShf8wb0kC03fB9xsynVOch3x PxrJyy7ROTyWUeG5roQTfNYg1GBOuGiYjJ9tsZuIely1SINQ+RZAcjDHWmOFvdob 85vQk+rryEZFGOIoK5iVgz4ZJsnlMkVOJIZCning5eiWGOF5iJ8AWA1jD7JYWxQV meVEhEq7RSd67GZisqmHIbzXH0qivFdr2ce41SnPuPDCGKF858xqY4C9xQqgOMOH 62qGjB6rM7WEK/HF8yuPugH/wcWOhlVAG6LR9wZW45gNtkRWfyyTbP1nYA8mxsAV 1pmTzTqt1THgq4112Mdhc8wAklKElXtBk5kCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBQD49BojLsCPpIaCVRK2YVPMM10EDAfBgNVHSMEGDAWgBTWkA8eMSbmCe9PGg+4 VetN5OOhijAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvODk3LzFwQVBIakVtNWdudlR4b1B1RlhyVGVUam9Zby5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzFwQVBIakVtNWdudlR4b1B1RlhyVGVU am9Zby5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC84OTcvQS1QUWFJeTdBajZTR2dsVVN0bUZUekROZEJBLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBJ1G4DANBgkqhkiG9w0BAQsFAAOCAQEADeNWS4NCFcSjaTBOTWx1ifFBFY9K XWN9vHj3PEzIjNbFkjeCnMSwvglJR3Pgh5c8Ide3KA8w7VZHFe+rj3XzHLlgMm8l pUYUxLUVrsdZr/WSmyhePunxgoMmFhr/H1IVZGpjtWhI0zSF6Zb05xpgb8x+MDO0 TvXVDRAtdJWvMjwm5/GbarjC+m0OJBWHAID3xzGnVtQ0UZuDJ/VOUYhfz1nNE+7d WFKz7MZKoSL6S96jGlZOJ2ISo+Pk1uQXLQCHUTzEiV6/WEoWZCIldqECzOfLy8CL rFdhMxGCzx5Zc2PMIQY5ltlCb4w4FhzIw07Pto7SOfI8ZHbON4OSwuFPjg== -----END CERTIFICATE-----Generated at Fri Jun 7 15:50:38 2024 by rpki-client on console-ams.rpki-client.org