$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/925/sAfGbWMwjd9rukP-3qXb8y5uxUY.roa File: sAfGbWMwjd9rukP-3qXb8y5uxUY.roa (raw, json) Hash identifier: jetwxezV93oZdnlmmz1SGbw/AeipdfXJXckG1qhmxAo= Subject key identifier: B0:07:C6:6D:63:30:8D:DF:6B:BA:43:FE:DE:A5:DB:F3:2E:6E:C5:46 Certificate issuer: /CN=1426C384E2A49283FA747D079E83DD32B65D7E85 Certificate serial: 37 Authority key identifier: 14:26:C3:84:E2:A4:92:83:FA:74:7D:07:9E:83:DD:32:B6:5D:7E:85 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FCbDhOKkkoP6dH0HnoPdMrZdfoU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/925/sAfGbWMwjd9rukP-3qXb8y5uxUY.roa Signing time: Fri 19 Apr 2024 07:53:46 +0000 ROA not before: Fri 19 Apr 2024 07:53:46 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 24289 IP address blocks: 203.81.112.0/20 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/925/FCbDhOKkkoP6dH0HnoPdMrZdfoU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/925/FCbDhOKkkoP6dH0HnoPdMrZdfoU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FCbDhOKkkoP6dH0HnoPdMrZdfoU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55 (0x37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1426C384E2A49283FA747D079E83DD32B65D7E85 Validity Not Before: Apr 19 07:53:46 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=B007C66D63308DDF6BBA43FEDEA5DBF32E6EC546 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:c2:7d:99:a6:b3:4f:c6:27:6d:44:0c:69:13: 15:3e:50:05:3f:ab:f0:9a:c6:ba:39:b2:5b:a1:8d: 94:11:e1:5d:29:e4:17:d6:e7:df:74:87:29:a8:28: 96:8e:cd:9c:cd:16:00:e7:0b:7f:4d:1b:c3:9b:0c: 0f:ab:fe:27:d5:f2:dc:7a:57:12:52:11:77:7d:f6: 48:69:d3:81:72:a8:af:0b:bd:b7:d2:25:c1:9a:4c: b0:57:82:31:c4:b5:5b:4b:36:21:88:d3:66:ee:21: cf:81:f8:30:32:59:dc:be:74:fa:2f:d3:9b:3f:81: 05:67:b0:c5:f7:2d:c4:77:e3:27:7f:72:90:94:ef: 8b:61:0d:e7:30:70:8d:a0:6e:64:28:1f:e6:95:68: ef:c5:0a:9b:7a:c2:67:a9:c8:ee:c9:21:09:df:25: 15:da:66:f6:17:4c:35:6f:89:de:05:6a:da:10:82: 88:15:70:2a:80:8e:e5:58:e6:24:4a:85:47:58:31: 98:e2:9d:0a:66:44:c0:34:35:cb:a8:08:cc:28:33: 7f:ae:61:21:a7:0b:32:9e:49:8f:a1:cb:9d:60:8a: 66:16:9b:4d:61:1c:5e:13:e6:e4:98:86:77:47:df: 10:34:9e:be:1f:44:25:9a:97:2c:b1:07:10:74:08: 83:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:07:C6:6D:63:30:8D:DF:6B:BA:43:FE:DE:A5:DB:F3:2E:6E:C5:46 X509v3 Authority Key Identifier: keyid:14:26:C3:84:E2:A4:92:83:FA:74:7D:07:9E:83:DD:32:B6:5D:7E:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/925/FCbDhOKkkoP6dH0HnoPdMrZdfoU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FCbDhOKkkoP6dH0HnoPdMrZdfoU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/925/sAfGbWMwjd9rukP-3qXb8y5uxUY.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.81.112.0/20 Signature Algorithm: sha256WithRSAEncryption b8:aa:68:59:bd:ae:a7:ad:74:0d:fb:42:d4:50:3f:54:5b:6b: cd:90:7c:be:b2:e3:05:25:2f:48:46:09:03:ab:ff:0a:d0:86: e9:30:03:39:66:97:44:38:a5:38:3a:39:3a:ce:78:36:9a:7c: fc:c9:85:47:ed:17:a5:6d:a5:7d:48:50:77:b6:66:fd:62:84: 01:4c:1d:53:cb:f3:b0:07:8a:c2:0a:61:c7:ee:08:30:86:69: b6:77:46:d1:9f:95:4c:18:d3:2f:a7:a0:64:19:e5:0b:9a:a4: c2:c6:ce:1b:54:0e:a6:66:bd:ea:ca:96:b5:a5:3e:c4:58:88: 59:d9:b5:22:6f:36:d2:91:b0:2f:52:a2:6f:70:7c:98:81:e7: d8:f7:6c:2f:73:f1:c8:14:7e:87:6a:3a:d2:db:77:dd:36:d0: ec:68:fd:9d:4c:d0:da:d4:4c:b2:3c:46:67:ce:3b:c5:f0:ea: d2:54:32:b4:35:19:e4:ae:4f:0b:e9:e2:2f:06:24:b7:e2:1d: f1:bd:1c:ab:89:b6:fe:1a:3b:93:85:82:51:a0:6a:1e:1d:4b: c8:27:0b:bb:8b:f8:72:d1:18:70:4e:d8:6f:1a:e8:99:12:83: fb:46:b8:0d:02:6f:6e:74:0e:4f:3b:dd:81:dd:e6:28:c1:9f: cc:34:06:04 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBNzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxNDI2 QzM4NEUyQTQ5MjgzRkE3NDdEMDc5RTgzREQzMkI2NUQ3RTg1MB4XDTI0MDQxOTA3 NTM0NloXDTI1MDQxNTAxMzAwMlowMzExMC8GA1UEAxMoQjAwN0M2NkQ2MzMwOERE RjZCQkE0M0ZFREVBNURCRjMyRTZFQzU0NjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANTCfZmms0/GJ21EDGkTFT5QBT+r8JrGujmyW6GNlBHhXSnkF9bn 33SHKagolo7NnM0WAOcLf00bw5sMD6v+J9Xy3HpXElIRd332SGnTgXKorwu9t9Il wZpMsFeCMcS1W0s2IYjTZu4hz4H4MDJZ3L50+i/Tmz+BBWewxfctxHfjJ39ykJTv i2EN5zBwjaBuZCgf5pVo78UKm3rCZ6nI7skhCd8lFdpm9hdMNW+J3gVq2hCCiBVw KoCO5VjmJEqFR1gxmOKdCmZEwDQ1y6gIzCgzf65hIacLMp5Jj6HLnWCKZhabTWEc XhPm5JiGd0ffEDSevh9EJZqXLLEHEHQIg5cCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBSwB8ZtYzCN32u6Q/7epdvzLm7FRjAfBgNVHSMEGDAWgBQUJsOE4qSSg/p0fQee g90ytl1+hTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvOTI1L0ZDYkRoT0tra29QNmRIMEhub1BkTXJaZGZvVS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0ZDYkRoT0tra29QNmRIMEhub1BkTXJa ZGZvVS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC85MjUvc0FmR2JXTXdqZDlydWtQLTNxWGI4eTV1eFVZLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBMtRcDANBgkqhkiG9w0BAQsFAAOCAQEAuKpoWb2up610DftC1FA/VFtrzZB8 vrLjBSUvSEYJA6v/CtCG6TADOWaXRDilODo5Os54Npp8/MmFR+0XpW2lfUhQd7Zm /WKEAUwdU8vzsAeKwgphx+4IMIZptndG0Z+VTBjTL6egZBnlC5qkwsbOG1QOpma9 6sqWtaU+xFiIWdm1Im820pGwL1Kib3B8mIHn2PdsL3PxyBR+h2o60tt33TbQ7Gj9 nUzQ2tRMsjxGZ847xfDq0lQytDUZ5K5PC+niLwYkt+Id8b0cq4m2/ho7k4WCUaBq Hh1LyCcLu4v4ctEYcE7YbxromRKD+0a4DQJvbnQOTzvdgd3mKMGfzDQGBA== -----END CERTIFICATE-----Generated at Sat Jun 1 13:38:53 2024 by rpki-client on console-fra.rpki-client.org