$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/897/uzSme_hzcVcjNMhkTZ2Znr-3lPE.roa File: uzSme_hzcVcjNMhkTZ2Znr-3lPE.roa (raw, json) Hash identifier: zraVpSCRtDI27V+Xe6cYinICI6TvEUZ/dU9/nov8VTo= Subject key identifier: BB:34:A6:7B:F8:73:71:57:23:34:C8:64:4D:9D:99:9E:BF:B7:94:F1 Certificate issuer: /CN=AA08097C6060710280CDAAA4E7E06C1F13CD16F2 Certificate serial: 62 Authority key identifier: AA:08:09:7C:60:60:71:02:80:CD:AA:A4:E7:E0:6C:1F:13:CD:16:F2 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qggJfGBgcQKAzaqk5-BsHxPNFvI.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/uzSme_hzcVcjNMhkTZ2Znr-3lPE.roa Signing time: Sun 01 Oct 2023 01:29:02 +0000 ROA not before: Sun 01 Oct 2023 01:29:02 +0000 ROA not after: Sat 14 Sep 2024 01:30:03 +0000 asID: 9621 IP address blocks: 218.40.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/qggJfGBgcQKAzaqk5-BsHxPNFvI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/qggJfGBgcQKAzaqk5-BsHxPNFvI.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qggJfGBgcQKAzaqk5-BsHxPNFvI.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 14 Jun 2024 14:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 98 (0x62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA08097C6060710280CDAAA4E7E06C1F13CD16F2 Validity Not Before: Oct 1 01:29:02 2023 GMT Not After : Sep 14 01:30:03 2024 GMT Subject: CN=BB34A67BF87371572334C8644D9D999EBFB794F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:59:92:07:83:6c:1a:2a:02:0e:2a:7f:c7:13: c3:34:13:73:a7:9b:32:34:27:a9:86:9c:f8:a5:18: e6:49:89:07:42:f6:b2:c9:80:fd:eb:aa:93:0d:1b: 09:cb:91:99:17:0a:ca:4d:b9:cf:5c:3d:1e:be:1a: dc:d0:a5:b0:67:81:4a:e8:25:4e:87:1d:25:57:9c: 79:e5:df:37:47:5e:fc:e5:3f:ff:0b:7a:dd:fb:4b: 19:46:94:ad:0b:86:56:57:82:bf:96:70:69:96:64: 81:a0:15:0b:cd:3c:45:46:c2:56:46:2d:2b:29:f3: a1:4c:26:7a:d9:c3:71:ec:b9:77:8e:c1:b7:03:71: f8:d5:e2:8e:9e:76:2d:77:c7:0a:b3:e1:8a:c0:dd: 21:b8:91:21:d4:15:98:23:4e:62:d3:ec:75:d9:b6: 55:25:22:77:8c:13:6d:ef:3e:55:39:a5:38:0a:ca: 11:a5:02:61:c4:87:ec:dc:7c:89:cf:9e:f3:79:ed: f9:3b:ef:33:e4:59:11:5d:82:68:36:6f:7b:c5:2e: d2:cc:e9:1c:92:ae:47:2b:71:16:9e:ca:cc:a3:e6: 8f:50:2d:4b:99:e2:6c:ab:d9:3f:e9:1b:02:c0:5f: e2:73:b3:ff:44:37:2c:b9:3f:2f:28:dc:17:de:d7: 32:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:34:A6:7B:F8:73:71:57:23:34:C8:64:4D:9D:99:9E:BF:B7:94:F1 X509v3 Authority Key Identifier: keyid:AA:08:09:7C:60:60:71:02:80:CD:AA:A4:E7:E0:6C:1F:13:CD:16:F2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/qggJfGBgcQKAzaqk5-BsHxPNFvI.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qggJfGBgcQKAzaqk5-BsHxPNFvI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/uzSme_hzcVcjNMhkTZ2Znr-3lPE.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 218.40.176.0/20 Signature Algorithm: sha256WithRSAEncryption 02:02:2f:48:75:93:c1:e0:66:e1:0e:6a:29:db:bb:c7:2a:48: 8f:42:9d:78:de:b4:70:0c:ee:42:28:0d:77:ff:c5:7e:58:39: f7:5e:94:5a:05:85:ca:db:7f:66:45:91:ac:16:20:71:42:e6: 92:f4:88:98:ab:9d:aa:70:ea:12:ff:5a:27:78:c3:4b:0a:27: 1a:0e:25:a8:8d:2d:04:f9:d3:6d:43:c1:a8:bd:91:d6:c8:2f: ee:de:92:a7:d2:9f:4e:a4:fa:1a:98:e5:6c:aa:81:41:c8:a6: 8f:86:48:93:5a:74:c1:5f:50:6c:24:7a:4d:63:45:7d:8a:8f: 30:18:5c:10:41:3e:5f:f6:75:4f:71:70:0b:0a:7b:09:4c:74: 5e:2b:45:f7:b2:79:9a:52:a3:a3:5f:72:51:4a:dc:ed:a8:2d: 33:5d:71:61:e5:86:67:d9:88:fd:fe:b5:59:d2:8c:1b:0d:0a: 4a:74:a0:7c:31:19:cf:92:f5:75:e0:7b:d4:8c:7b:31:6c:7e: 5a:eb:ed:63:85:eb:e0:b6:30:e6:f8:95:bb:c6:60:d4:4f:f7: 6a:18:bf:2d:0e:1f:55:75:b5:8e:c9:ff:54:9b:5b:e2:52:ec: 10:5d:fc:5e:c3:47:23:a5:65:83:65:b7:71:03:44:6b:38:d3: 90:95:87:a1 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBYjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhBQTA4 MDk3QzYwNjA3MTAyODBDREFBQTRFN0UwNkMxRjEzQ0QxNkYyMB4XDTIzMTAwMTAx MjkwMloXDTI0MDkxNDAxMzAwM1owMzExMC8GA1UEAxMoQkIzNEE2N0JGODczNzE1 NzIzMzRDODY0NEQ5RDk5OUVCRkI3OTRGMTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAOZZkgeDbBoqAg4qf8cTwzQTc6ebMjQnqYac+KUY5kmJB0L2ssmA /euqkw0bCcuRmRcKyk25z1w9Hr4a3NClsGeBSuglTocdJVeceeXfN0de/OU//wt6 3ftLGUaUrQuGVleCv5ZwaZZkgaAVC808RUbCVkYtKynzoUwmetnDcey5d47BtwNx +NXijp52LXfHCrPhisDdIbiRIdQVmCNOYtPsddm2VSUid4wTbe8+VTmlOArKEaUC YcSH7Nx8ic+e83nt+TvvM+RZEV2CaDZve8Uu0szpHJKuRytxFp7KzKPmj1AtS5ni bKvZP+kbAsBf4nOz/0Q3LLk/LyjcF97XMo8CAwEAAaOCAiQwggIgMB0GA1UdDgQW BBS7NKZ7+HNxVyM0yGRNnZmev7eU8TAfBgNVHSMEGDAWgBSqCAl8YGBxAoDNqqTn 4GwfE80W8jAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvODk3L3FnZ0pmR0JnY1FLQXphcWs1LUJzSHhQTkZ2SS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3FnZ0pmR0JnY1FLQXphcWs1LUJzSHhQ TkZ2SS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC84OTcvdXpTbWVfaHpjVmNqTk1oa1RaMlpuci0zbFBFLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBNoosDANBgkqhkiG9w0BAQsFAAOCAQEAAgIvSHWTweBm4Q5qKdu7xypIj0Kd eN60cAzuQigNd//Fflg5916UWgWFytt/ZkWRrBYgcULmkvSImKudqnDqEv9aJ3jD SwonGg4lqI0tBPnTbUPBqL2R1sgv7t6Sp9KfTqT6GpjlbKqBQcimj4ZIk1p0wV9Q bCR6TWNFfYqPMBhcEEE+X/Z1T3FwCwp7CUx0XitF97J5mlKjo19yUUrc7agtM11x YeWGZ9mI/f61WdKMGw0KSnSgfDEZz5L1deB71Ix7MWx+WuvtY4Xr4LYw5viVu8Zg 1E/3ahi/LQ4fVXW1jsn/VJtb4lLsEF38XsNHI6Vlg2W3cQNEazjTkJWHoQ== -----END CERTIFICATE-----Generated at Fri Jun 7 15:25:08 2024 by rpki-client on console-fra.rpki-client.org