$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/934/aNa5-_eNomqDN_tfvKuw6wRNvLA.roa File: aNa5-_eNomqDN_tfvKuw6wRNvLA.roa (raw, json) Hash identifier: FKXn40J9BgZNgkD2JOwwaYcNuYqwFftOIPo0sR6LFVk= Subject key identifier: 68:D6:B9:FB:F7:8D:A2:6A:83:37:FB:5F:BC:AB:B0:EB:04:4D:BC:B0 Certificate issuer: /CN=2A4CFE909CA58307E7CA8735AF245D718D99F7FB Certificate serial: 58 Authority key identifier: 2A:4C:FE:90:9C:A5:83:07:E7:CA:87:35:AF:24:5D:71:8D:99:F7:FB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/934/aNa5-_eNomqDN_tfvKuw6wRNvLA.roa Signing time: Thu 29 Feb 2024 01:31:11 +0000 ROA not before: Thu 29 Feb 2024 01:31:11 +0000 ROA not after: Fri 14 Feb 2025 01:30:03 +0000 asID: 37892 IP address blocks: 202.220.6.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/934/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/934/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 13 Jun 2024 14:03:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 88 (0x58) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A4CFE909CA58307E7CA8735AF245D718D99F7FB Validity Not Before: Feb 29 01:31:11 2024 GMT Not After : Feb 14 01:30:03 2025 GMT Subject: CN=68D6B9FBF78DA26A8337FB5FBCABB0EB044DBCB0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:fc:0c:9a:c1:54:39:b7:a1:f0:cd:de:34:d5: c7:f9:b2:ea:e6:e3:0a:b2:01:67:92:63:b4:47:f4: 39:18:02:04:51:05:15:7a:71:db:de:9a:fd:d5:6f: 8e:d6:f5:6c:80:86:32:74:e3:5d:23:57:82:38:ac: 48:f8:3d:b5:9b:ed:f2:6b:9f:30:4e:ac:bf:b1:f3: 7a:69:dc:db:a5:a5:9b:ff:84:84:93:fc:da:c3:0f: 1c:45:f5:16:82:84:44:7e:d1:78:ba:62:a2:42:f2: c5:38:07:8e:cf:e6:79:0e:0f:cf:81:21:84:3c:b9: c1:35:00:cb:d3:28:81:f5:b7:97:5f:e9:f0:d2:91: fd:1e:41:c9:c6:b8:7d:ef:57:44:43:e8:a9:9b:0a: ac:2c:a6:82:99:33:b4:20:36:45:e5:29:fe:7e:c9: 6f:16:6e:b7:82:c9:32:3e:bf:6e:de:fa:be:78:9c: 71:83:cc:a8:da:a5:ab:4b:eb:1e:78:ec:f1:ab:eb: 87:d0:c4:93:35:e1:bc:4e:2f:b1:8e:84:16:c9:f1: 36:43:b9:da:4c:bb:be:8f:46:73:bd:52:a3:b4:71: 42:9d:13:b2:b3:44:dc:d1:2f:3f:9d:15:d0:da:5b: 1b:68:a9:61:ac:09:f3:01:4c:a6:13:0b:88:38:cc: e3:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:D6:B9:FB:F7:8D:A2:6A:83:37:FB:5F:BC:AB:B0:EB:04:4D:BC:B0 X509v3 Authority Key Identifier: keyid:2A:4C:FE:90:9C:A5:83:07:E7:CA:87:35:AF:24:5D:71:8D:99:F7:FB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/934/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/934/aNa5-_eNomqDN_tfvKuw6wRNvLA.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.220.6.0/23 Signature Algorithm: sha256WithRSAEncryption 13:b1:83:73:86:d4:33:83:68:79:e1:a9:af:a5:6e:a8:49:4e: 6c:a0:d7:e1:8c:55:b2:84:a5:ed:e1:08:4a:aa:e3:ec:90:65: 4a:83:c9:37:0b:35:dc:61:fe:a9:7a:ea:f8:08:45:ba:6a:20: c0:f9:6d:3c:e5:5b:c9:7a:e1:8a:f5:5f:b3:cb:35:c6:13:39: e9:36:3a:74:94:a0:7a:9e:67:5e:0f:64:f0:25:55:5a:6a:25: 66:fc:02:46:5f:89:f6:37:c1:92:ac:cb:ad:ec:11:2c:4c:03: 96:87:6b:cd:b6:d8:8d:52:db:f9:86:14:1d:d0:ab:90:4a:4e: 05:e5:1c:2c:51:fe:4e:49:04:98:a4:65:8a:05:a1:d4:bf:98: 69:ad:5d:d8:e3:50:c0:3a:43:7f:8a:ac:9e:7b:3e:8f:f2:02: 31:10:96:d0:73:7d:45:c4:c0:51:58:12:77:11:45:3a:6d:75: d2:8c:72:cd:a9:de:d3:59:53:b3:54:7b:a6:95:dd:c8:08:98: 1c:b9:b2:59:39:1a:2c:65:cb:5c:6d:f5:55:2c:1c:67:74:85: b7:46:11:4a:ea:42:27:f1:a0:1c:6d:ec:1b:25:f1:6d:af:54: 8e:90:a7:95:9a:22:fe:9d:ba:c0:e6:8f:4e:09:a9:32:48:01: 63:58:fc:4d -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBWDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyQTRD RkU5MDlDQTU4MzA3RTdDQTg3MzVBRjI0NUQ3MThEOTlGN0ZCMB4XDTI0MDIyOTAx MzExMVoXDTI1MDIxNDAxMzAwM1owMzExMC8GA1UEAxMoNjhENkI5RkJGNzhEQTI2 QTgzMzdGQjVGQkNBQkIwRUIwNDREQkNCMDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAM38DJrBVDm3ofDN3jTVx/my6ubjCrIBZ5JjtEf0ORgCBFEFFXpx 296a/dVvjtb1bICGMnTjXSNXgjisSPg9tZvt8mufME6sv7Hzemnc26Wlm/+EhJP8 2sMPHEX1FoKERH7ReLpiokLyxTgHjs/meQ4Pz4EhhDy5wTUAy9MogfW3l1/p8NKR /R5Byca4fe9XREPoqZsKrCymgpkztCA2ReUp/n7JbxZut4LJMj6/bt76vniccYPM qNqlq0vrHnjs8avrh9DEkzXhvE4vsY6EFsnxNkO52ky7vo9Gc71So7RxQp0TsrNE 3NEvP50V0NpbG2ipYawJ8wFMphMLiDjM42UCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBRo1rn7942iaoM3+1+8q7DrBE28sDAfBgNVHSMEGDAWgBQqTP6QnKWDB+fKhzWv JF1xjZn3+zAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvOTM0L0trei1rSnlsZ3dmbnlvYzFyeVJkY1kyWjlfcy5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0trei1rSnlsZ3dmbnlvYzFyeVJkY1ky Wjlfcy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC85MzQvYU5hNS1fZU5vbXFETl90ZnZLdXc2d1JOdkxBLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAcrcBjANBgkqhkiG9w0BAQsFAAOCAQEAE7GDc4bUM4NoeeGpr6VuqElObKDX 4YxVsoSl7eEISqrj7JBlSoPJNws13GH+qXrq+AhFumogwPltPOVbyXrhivVfs8s1 xhM56TY6dJSgep5nXg9k8CVVWmolZvwCRl+J9jfBkqzLrewRLEwDlodrzbbYjVLb +YYUHdCrkEpOBeUcLFH+TkkEmKRligWh1L+Yaa1d2ONQwDpDf4qsnns+j/ICMRCW 0HN9RcTAUVgSdxFFOm110oxyzane01lTs1R7ppXdyAiYHLmyWTkaLGXLXG31VSwc Z3SFt0YRSupCJ/GgHG3sGyXxba9UjpCnlZoi/p26wOaPTgmpMkgBY1j8TQ== -----END CERTIFICATE-----Generated at Thu Jun 6 14:56:24 2024 by rpki-client on console-fra.rpki-client.org