$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/897/DihJrjs9GlSeaVjK1tnC9Q3qubI.roa File: DihJrjs9GlSeaVjK1tnC9Q3qubI.roa (raw, json) Hash identifier: Yc2UbmuTSxuhpv8qd2aUTC6FjoIq5/jb8fLJqPX5i6s= Subject key identifier: 0E:28:49:AE:3B:3D:1A:54:9E:69:58:CA:D6:D9:C2:F5:0D:EA:B9:B2 Certificate issuer: /CN=AA08097C6060710280CDAAA4E7E06C1F13CD16F2 Certificate serial: 60 Authority key identifier: AA:08:09:7C:60:60:71:02:80:CD:AA:A4:E7:E0:6C:1F:13:CD:16:F2 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qggJfGBgcQKAzaqk5-BsHxPNFvI.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/DihJrjs9GlSeaVjK1tnC9Q3qubI.roa Signing time: Fri 01 Sep 2023 01:29:21 +0000 ROA not before: Fri 01 Sep 2023 01:29:21 +0000 ROA not after: Wed 14 Aug 2024 01:30:02 +0000 asID: 9621 IP address blocks: 211.120.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/qggJfGBgcQKAzaqk5-BsHxPNFvI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/qggJfGBgcQKAzaqk5-BsHxPNFvI.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qggJfGBgcQKAzaqk5-BsHxPNFvI.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 96 (0x60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA08097C6060710280CDAAA4E7E06C1F13CD16F2 Validity Not Before: Sep 1 01:29:21 2023 GMT Not After : Aug 14 01:30:02 2024 GMT Subject: CN=0E2849AE3B3D1A549E6958CAD6D9C2F50DEAB9B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:c3:4e:a7:aa:96:86:11:01:4a:35:55:3d:28: 33:b1:67:2a:33:13:c8:1d:cf:f0:70:d1:90:4a:2c: f5:56:87:9d:40:da:2c:f7:94:fe:75:0a:7d:77:0f: c1:91:16:47:5b:6c:33:d5:2f:da:37:80:6a:cd:58: 9c:98:e7:6b:86:64:92:79:e0:a1:b8:35:0f:9d:d4: d3:70:c7:80:b4:ce:b1:bb:4f:8f:25:81:0c:d8:07: fb:53:34:65:91:0f:bb:f2:3c:fb:93:00:ce:5c:94: 59:f2:ea:18:1e:4c:56:37:bf:cd:a5:d8:dd:73:80: 80:75:df:de:f8:f3:9e:f7:f9:78:14:f4:d2:90:bd: 1f:62:ef:ae:e3:6d:51:8a:a2:50:69:a9:d7:d7:de: ca:d1:c4:72:9f:f9:1a:52:38:12:79:8a:56:e8:28: 11:b7:99:07:26:5e:c2:db:95:78:e4:f7:d5:e4:f3: be:e6:2b:e1:7b:37:82:33:cb:e9:a9:8c:7e:41:28: 37:ee:a8:80:4b:2b:c2:66:6e:38:c1:2a:ea:a4:f1: 3e:31:f0:31:a3:41:56:c8:ba:a1:6c:d5:f9:86:7f: 08:e2:90:d5:01:f8:8c:88:ef:f1:e4:36:40:a9:f2: 48:d7:18:37:e7:e2:08:72:1f:f0:81:2a:d1:c4:5a: c7:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:28:49:AE:3B:3D:1A:54:9E:69:58:CA:D6:D9:C2:F5:0D:EA:B9:B2 X509v3 Authority Key Identifier: keyid:AA:08:09:7C:60:60:71:02:80:CD:AA:A4:E7:E0:6C:1F:13:CD:16:F2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/qggJfGBgcQKAzaqk5-BsHxPNFvI.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qggJfGBgcQKAzaqk5-BsHxPNFvI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/DihJrjs9GlSeaVjK1tnC9Q3qubI.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 211.120.224.0/20 Signature Algorithm: sha256WithRSAEncryption 23:da:c8:64:97:10:d1:ac:b5:fb:7a:25:f4:18:51:65:c9:12: 62:7b:46:35:c2:ed:8f:0e:0a:91:bf:63:6c:3d:7c:7b:c7:31: 57:2e:bd:66:b2:a1:be:d1:3b:c4:31:c0:f4:16:6b:18:ef:a0: dd:ad:da:5e:23:39:9f:cb:89:7f:80:75:a9:d5:84:c3:37:a2: 85:0a:b3:57:35:b5:26:04:9a:e8:bb:73:8b:69:22:8f:7c:72: 66:0f:1a:b0:fd:9b:f0:d2:8d:4b:37:de:6f:38:bc:6c:ac:57: 50:78:7c:52:90:e5:3f:8d:61:ee:b5:15:19:40:56:e9:7d:f1: 3a:27:42:b9:ab:96:73:c3:1a:fc:43:c0:bc:d2:4b:56:e9:db: 14:38:d3:4f:d2:2f:e4:a9:07:0c:8d:2a:c2:98:1f:56:cc:39: 0b:e1:0a:79:b2:35:00:ae:df:3a:f3:11:87:8a:40:7e:6e:98: 06:4c:11:73:df:9e:d7:94:45:72:68:94:80:7d:ce:dc:f0:c7: 56:57:e9:a3:b1:25:e1:e1:e2:f4:1b:ab:a9:93:0d:d2:ca:37: 41:22:5f:99:3a:37:8b:fa:eb:23:c2:44:a9:fb:91:eb:b8:8f: 6c:98:eb:09:02:51:0e:b8:74:bd:c3:2a:71:94:ed:d9:39:ce: 6b:2d:e7:95 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBYDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhBQTA4 MDk3QzYwNjA3MTAyODBDREFBQTRFN0UwNkMxRjEzQ0QxNkYyMB4XDTIzMDkwMTAx MjkyMVoXDTI0MDgxNDAxMzAwMlowMzExMC8GA1UEAxMoMEUyODQ5QUUzQjNEMUE1 NDlFNjk1OENBRDZEOUMyRjUwREVBQjlCMjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKDDTqeqloYRAUo1VT0oM7FnKjMTyB3P8HDRkEos9VaHnUDaLPeU /nUKfXcPwZEWR1tsM9Uv2jeAas1YnJjna4Zkknngobg1D53U03DHgLTOsbtPjyWB DNgH+1M0ZZEPu/I8+5MAzlyUWfLqGB5MVje/zaXY3XOAgHXf3vjznvf5eBT00pC9 H2LvruNtUYqiUGmp19feytHEcp/5GlI4EnmKVugoEbeZByZewtuVeOT31eTzvuYr 4Xs3gjPL6amMfkEoN+6ogEsrwmZuOMEq6qTxPjHwMaNBVsi6oWzV+YZ/COKQ1QH4 jIjv8eQ2QKnySNcYN+fiCHIf8IEq0cRax3cCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBQOKEmuOz0aVJ5pWMrW2cL1Deq5sjAfBgNVHSMEGDAWgBSqCAl8YGBxAoDNqqTn 4GwfE80W8jAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvODk3L3FnZ0pmR0JnY1FLQXphcWs1LUJzSHhQTkZ2SS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3FnZ0pmR0JnY1FLQXphcWs1LUJzSHhQ TkZ2SS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC84OTcvRGloSnJqczlHbFNlYVZqSzF0bkM5UTNxdWJJLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBNN44DANBgkqhkiG9w0BAQsFAAOCAQEAI9rIZJcQ0ay1+3ol9BhRZckSYntG NcLtjw4Kkb9jbD18e8cxVy69ZrKhvtE7xDHA9BZrGO+g3a3aXiM5n8uJf4B1qdWE wzeihQqzVzW1JgSa6Ltzi2kij3xyZg8asP2b8NKNSzfebzi8bKxXUHh8UpDlP41h 7rUVGUBW6X3xOidCuauWc8Ma/EPAvNJLVunbFDjTT9Iv5KkHDI0qwpgfVsw5C+EK ebI1AK7fOvMRh4pAfm6YBkwRc9+e15RFcmiUgH3O3PDHVlfpo7El4eHi9BurqZMN 0so3QSJfmTo3i/rrI8JEqfuR67iPbJjrCQJRDrh0vcMqcZTt2TnOay3nlQ== -----END CERTIFICATE-----Generated at Sat Jun 1 13:38:53 2024 by rpki-client on console-fra.rpki-client.org