$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/958/vwzLaLqirNBqLd6YGLKCp_ZfC7I.roa File: vwzLaLqirNBqLd6YGLKCp_ZfC7I.roa (raw, json) Hash identifier: mNv1/323r4WtC5tcu/gZZB6uZic2vLHmNniCx1k+wTE= Subject key identifier: BF:0C:CB:68:BA:A2:AC:D0:6A:2D:DE:98:18:B2:82:A7:F6:5F:0B:B2 Certificate issuer: /CN=9904ECBCD85F22A2E8AE7E1F991E8345D06A9816 Certificate serial: 90 Authority key identifier: 99:04:EC:BC:D8:5F:22:A2:E8:AE:7E:1F:99:1E:83:45:D0:6A:98:16 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mQTsvNhfIqLorn4fmR6DRdBqmBY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/vwzLaLqirNBqLd6YGLKCp_ZfC7I.roa Signing time: Thu 29 Feb 2024 01:30:38 +0000 ROA not before: Thu 29 Feb 2024 01:30:38 +0000 ROA not after: Fri 14 Feb 2025 01:30:03 +0000 asID: 38631 IP address blocks: 103.2.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/mQTsvNhfIqLorn4fmR6DRdBqmBY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/mQTsvNhfIqLorn4fmR6DRdBqmBY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mQTsvNhfIqLorn4fmR6DRdBqmBY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Jun 2024 02:39:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 144 (0x90) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9904ECBCD85F22A2E8AE7E1F991E8345D06A9816 Validity Not Before: Feb 29 01:30:38 2024 GMT Not After : Feb 14 01:30:03 2025 GMT Subject: CN=BF0CCB68BAA2ACD06A2DDE9818B282A7F65F0BB2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:4a:84:36:0e:44:a7:04:c4:d3:f3:44:86:f8: 5b:00:6d:d9:bd:4e:58:57:36:95:9b:af:ca:66:18: 1a:15:e2:7a:7d:1b:52:e5:53:f3:e2:b5:8c:4b:9c: ec:58:fe:56:06:57:77:56:9b:c2:4b:89:58:66:47: eb:aa:d4:83:81:2a:cd:d1:6a:ce:06:41:83:c2:8b: 61:f2:f4:25:ce:a0:70:59:05:18:ec:67:e6:8c:93: a3:91:ae:78:53:d4:c6:e5:cb:b9:72:6c:e8:51:02: 06:df:06:c1:20:28:43:3e:8e:c8:a7:77:bf:58:54: 47:8b:32:d4:29:05:e7:73:5e:46:ee:89:89:1e:63: 39:05:c5:61:58:c2:48:af:34:68:d6:70:cf:74:0d: 22:fb:18:4e:20:2b:8a:0f:e5:8c:9a:35:4f:e6:eb: d5:83:7f:10:6b:ab:64:c5:53:12:ae:13:de:02:6b: 00:2e:bd:f2:a9:96:cb:0f:23:6a:c2:80:e8:22:af: 17:43:a5:c1:10:c4:cf:11:d1:bd:12:63:ca:7d:70: 53:23:59:0e:1c:9f:16:b4:a8:ea:0e:7a:7e:d0:09: 57:b5:a2:22:65:04:7c:08:2c:47:8d:3f:24:b8:aa: a4:6d:4f:9d:1f:87:d1:19:d1:1d:dd:3b:25:7f:fc: f0:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:0C:CB:68:BA:A2:AC:D0:6A:2D:DE:98:18:B2:82:A7:F6:5F:0B:B2 X509v3 Authority Key Identifier: keyid:99:04:EC:BC:D8:5F:22:A2:E8:AE:7E:1F:99:1E:83:45:D0:6A:98:16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/mQTsvNhfIqLorn4fmR6DRdBqmBY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mQTsvNhfIqLorn4fmR6DRdBqmBY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/vwzLaLqirNBqLd6YGLKCp_ZfC7I.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.2.28.0/24 Signature Algorithm: sha256WithRSAEncryption c1:eb:12:6a:7d:0c:ff:e7:c9:34:97:e4:a3:ce:07:4d:7f:01: 3e:3d:0f:1b:f9:1a:21:04:df:bf:88:3a:bc:4d:9e:37:86:e5: 41:06:86:09:73:00:db:6e:40:32:df:e3:26:e8:7d:e8:fd:04: a0:c3:b1:ae:cc:76:d5:15:ac:3a:8e:8c:c5:9f:ca:ec:3f:53: a5:2d:b9:cb:22:a6:bf:d5:f5:9f:b8:87:94:82:ed:ef:2b:e1: a5:03:ed:f8:88:41:31:a6:57:39:57:b3:a0:60:20:52:07:48: e4:59:54:66:d0:65:16:8f:0c:81:43:b1:19:aa:9d:97:99:08: 99:08:da:fd:d1:f9:e3:56:75:b5:ab:ed:89:08:3e:6d:54:67: fe:6f:fa:8e:e4:fb:b9:a8:e7:fb:01:a7:2f:d7:de:e9:f0:cf: 48:96:92:0f:1e:ff:5b:54:22:94:77:84:fb:02:6a:f6:9d:5f: 1f:53:01:cf:d4:71:1f:fd:de:d9:bf:a2:13:1a:ac:c6:58:b0: 99:75:df:d3:c0:4a:e2:16:4b:a5:5c:4f:1b:8d:c6:9c:d1:a9: 2d:f5:31:5e:86:40:05:83:f7:1c:88:4e:fb:56:60:bc:d5:a5: 69:46:6c:c8:16:1f:27:64:39:67:f3:c5:7c:fb:be:73:a3:49: f9:df:b6:6f -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAJAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTkw NEVDQkNEODVGMjJBMkU4QUU3RTFGOTkxRTgzNDVEMDZBOTgxNjAeFw0yNDAyMjkw MTMwMzhaFw0yNTAyMTQwMTMwMDNaMDMxMTAvBgNVBAMTKEJGMENDQjY4QkFBMkFD RDA2QTJEREU5ODE4QjI4MkE3RjY1RjBCQjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCjSoQ2DkSnBMTT80SG+FsAbdm9TlhXNpWbr8pmGBoV4np9G1Ll U/PitYxLnOxY/lYGV3dWm8JLiVhmR+uq1IOBKs3Ras4GQYPCi2Hy9CXOoHBZBRjs Z+aMk6ORrnhT1Mbly7lybOhRAgbfBsEgKEM+jsind79YVEeLMtQpBedzXkbuiYke YzkFxWFYwkivNGjWcM90DSL7GE4gK4oP5YyaNU/m69WDfxBrq2TFUxKuE94CawAu vfKplssPI2rCgOgirxdDpcEQxM8R0b0SY8p9cFMjWQ4cnxa0qOoOen7QCVe1oiJl BHwILEeNPyS4qqRtT50fh9EZ0R3dOyV//PCLAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUvwzLaLqirNBqLd6YGLKCp/ZfC7IwHwYDVR0jBBgwFoAUmQTsvNhfIqLorn4f mR6DRdBqmBYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzk1OC9tUVRzdk5oZklxTG9ybjRmbVI2RFJkQnFtQlkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9tUVRzdk5oZklxTG9ybjRmbVI2RFJk QnFtQlkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvOTU4L3Z3ekxhTHFpck5CcUxkNllHTEtDcF9aZkM3SS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABnAhwwDQYJKoZIhvcNAQELBQADggEBAMHrEmp9DP/nyTSX5KPOB01/AT49 Dxv5GiEE37+IOrxNnjeG5UEGhglzANtuQDLf4ybofej9BKDDsa7MdtUVrDqOjMWf yuw/U6Utucsipr/V9Z+4h5SC7e8r4aUD7fiIQTGmVzlXs6BgIFIHSORZVGbQZRaP DIFDsRmqnZeZCJkI2v3R+eNWdbWr7YkIPm1UZ/5v+o7k+7mo5/sBpy/X3unwz0iW kg8e/1tUIpR3hPsCavadXx9TAc/UcR/93tm/ohMarMZYsJl139PASuIWS6VcTxuN xpzRqS31MV6GQAWD9xyITvtWYLzVpWlGbMgWHydkOWfzxXz7vnOjSfnftm8= -----END CERTIFICATE-----Generated at Thu May 30 03:38:54 2024 by rpki-client on console-ams.rpki-client.org