$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/954/Xho9KfhR_c69h0oEOS8KFOv4bKw.roa File: Xho9KfhR_c69h0oEOS8KFOv4bKw.roa (raw, json) Hash identifier: PXYoLzlv7mPJ3+djuCdt7rwyN+Kf313Ddb4sUHAWwZg= Subject key identifier: 5E:1A:3D:29:F8:51:FD:CE:BD:87:4A:04:39:2F:0A:14:EB:F8:6C:AC Certificate issuer: /CN=1678DD6B61CB673BA4423C81BF63A61DD724E840 Certificate serial: 24 Authority key identifier: 16:78:DD:6B:61:CB:67:3B:A4:42:3C:81:BF:63:A6:1D:D7:24:E8:40 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fnjda2HLZzukQjyBv2OmHdck6EA.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/954/Xho9KfhR_c69h0oEOS8KFOv4bKw.roa Signing time: Sun 31 Mar 2024 01:32:28 +0000 ROA not before: Sun 31 Mar 2024 01:32:28 +0000 ROA not after: Sat 15 Mar 2025 01:30:02 +0000 asID: 131954 IP address blocks: 202.226.12.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/954/Fnjda2HLZzukQjyBv2OmHdck6EA.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/954/Fnjda2HLZzukQjyBv2OmHdck6EA.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fnjda2HLZzukQjyBv2OmHdck6EA.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36 (0x24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1678DD6B61CB673BA4423C81BF63A61DD724E840 Validity Not Before: Mar 31 01:32:28 2024 GMT Not After : Mar 15 01:30:02 2025 GMT Subject: CN=5E1A3D29F851FDCEBD874A04392F0A14EBF86CAC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:16:1d:4c:d7:e0:5c:33:e8:a6:7e:ef:73:b5: c6:4c:76:93:59:69:8f:a5:69:05:52:1b:aa:a6:9e: 99:b6:ee:b3:48:36:ee:be:a4:b0:83:bf:81:50:b3: 92:1e:81:e1:77:fc:e9:06:6e:bf:92:3c:a0:17:49: 36:cc:dd:db:1a:f7:fb:7f:ed:48:9d:62:9d:df:2c: 15:a4:fb:cd:28:10:cb:2a:36:f4:34:0e:c9:0e:b4: 8b:92:78:07:11:a6:25:27:76:11:47:44:34:39:cb: 49:e5:02:83:8d:b0:7d:af:89:d8:8b:bc:aa:80:ee: 80:57:cf:6f:d0:ee:9f:54:db:c3:87:43:67:bc:a9: be:b9:83:02:56:bf:00:25:ca:9f:44:c6:a8:fe:57: ae:e5:8e:1f:de:7c:f9:bb:42:e5:7c:be:dd:8a:a4: 63:ab:14:6a:6f:01:2b:0d:ba:76:a6:a4:cd:13:c7: 79:42:04:76:ad:75:6f:c5:b3:8d:96:1d:50:68:a0: 07:08:13:75:20:8f:db:44:72:e1:c7:fa:f9:39:bb: 5b:0f:6d:f1:a1:1c:d7:70:ea:b9:78:f5:d8:ee:a5: bc:e9:9e:2c:61:59:a5:ca:71:d1:41:f3:a6:5d:dc: 99:7e:0f:19:5d:34:99:1b:6a:d4:38:05:55:f3:77: 69:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:1A:3D:29:F8:51:FD:CE:BD:87:4A:04:39:2F:0A:14:EB:F8:6C:AC X509v3 Authority Key Identifier: keyid:16:78:DD:6B:61:CB:67:3B:A4:42:3C:81:BF:63:A6:1D:D7:24:E8:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/954/Fnjda2HLZzukQjyBv2OmHdck6EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fnjda2HLZzukQjyBv2OmHdck6EA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/954/Xho9KfhR_c69h0oEOS8KFOv4bKw.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.226.12.0/22 Signature Algorithm: sha256WithRSAEncryption af:0f:6d:63:a9:ec:ad:55:5f:44:2b:4b:4e:96:2c:5a:01:6b: 7d:4a:2e:08:4e:3d:09:8c:29:f3:c6:b5:e9:50:5b:e7:67:e7: 26:93:1a:7d:a2:be:25:7d:b1:78:e7:b8:0c:bc:2f:46:09:25: c4:83:a8:5a:b5:3b:1a:31:76:a1:55:ec:86:f2:bc:7a:7e:e2: da:d9:e5:16:a4:f7:ac:1c:d6:11:ac:29:72:9d:76:ac:56:51: f7:c3:8c:c3:ee:b6:3b:5c:78:57:25:5e:b1:3a:db:62:da:7c: 7d:c9:d3:a3:c0:2d:0c:dd:85:15:ae:64:62:52:b3:40:d3:6c: ee:9b:92:b3:eb:ab:3d:f5:bf:5c:06:f3:10:2b:5c:9d:b3:72: 18:76:c0:0b:a5:41:d0:93:c7:b5:67:3c:4a:f6:61:e9:0d:48: bd:a3:c0:3b:ba:34:12:f8:77:10:3f:4d:4e:39:a9:12:6d:ce: 8d:48:ca:84:be:bf:a8:a1:cc:c5:f6:d3:7a:88:d7:99:21:bc: 32:47:99:35:0e:ee:88:ec:6a:14:bd:9a:33:fd:8f:34:a5:21: a2:e3:db:21:c9:9d:d9:da:29:d1:37:53:cf:15:50:af:b6:00: f9:32:71:7d:a4:72:72:d8:cf:ee:c3:8a:3b:58:30:85:62:65: 53:33:df:da -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBJDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxNjc4 REQ2QjYxQ0I2NzNCQTQ0MjNDODFCRjYzQTYxREQ3MjRFODQwMB4XDTI0MDMzMTAx MzIyOFoXDTI1MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoNUUxQTNEMjlGODUxRkRD RUJEODc0QTA0MzkyRjBBMTRFQkY4NkNBQzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMAWHUzX4Fwz6KZ+73O1xkx2k1lpj6VpBVIbqqaembbus0g27r6k sIO/gVCzkh6B4Xf86QZuv5I8oBdJNszd2xr3+3/tSJ1ind8sFaT7zSgQyyo29DQO yQ60i5J4BxGmJSd2EUdENDnLSeUCg42wfa+J2Iu8qoDugFfPb9Dun1Tbw4dDZ7yp vrmDAla/ACXKn0TGqP5XruWOH958+btC5Xy+3YqkY6sUam8BKw26dqakzRPHeUIE dq11b8WzjZYdUGigBwgTdSCP20Ry4cf6+Tm7Ww9t8aEc13DquXj12O6lvOmeLGFZ pcpx0UHzpl3cmX4PGV00mRtq1DgFVfN3aU0CAwEAAaOCAiQwggIgMB0GA1UdDgQW BBReGj0p+FH9zr2HSgQ5LwoU6/hsrDAfBgNVHSMEGDAWgBQWeN1rYctnO6RCPIG/ Y6Yd1yToQDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvOTU0L0ZuamRhMkhMWnp1a1FqeUJ2Mk9tSGRjazZFQS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0ZuamRhMkhMWnp1a1FqeUJ2Mk9tSGRj azZFQS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC85NTQvWGhvOUtmaFJfYzY5aDBvRU9TOEtGT3Y0Ykt3LnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAsriDDANBgkqhkiG9w0BAQsFAAOCAQEArw9tY6nsrVVfRCtLTpYsWgFrfUou CE49CYwp88a16VBb52fnJpMafaK+JX2xeOe4DLwvRgklxIOoWrU7GjF2oVXshvK8 en7i2tnlFqT3rBzWEawpcp12rFZR98OMw+62O1x4VyVesTrbYtp8fcnTo8AtDN2F Fa5kYlKzQNNs7puSs+urPfW/XAbzECtcnbNyGHbAC6VB0JPHtWc8SvZh6Q1IvaPA O7o0Evh3ED9NTjmpEm3OjUjKhL6/qKHMxfbTeojXmSG8MkeZNQ7uiOxqFL2aM/2P NKUhouPbIcmd2dop0TdTzxVQr7YA+TJxfaRyctjP7sOKO1gwhWJlUzPf2g== -----END CERTIFICATE-----Generated at Sat Jun 1 15:54:44 2024 by rpki-client on console-ams.rpki-client.org