$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/972/iRZ3JTB8eGPoPv5_1N3JfHApftM.roa File: iRZ3JTB8eGPoPv5_1N3JfHApftM.roa (raw, json) Hash identifier: Xo+nlit1vUnXQ0jJs16gZUjHqJOZ/jKDO7KFcrpepdw= Subject key identifier: 89:16:77:25:30:7C:78:63:E8:3E:FE:7F:D4:DD:C9:7C:70:29:7E:D3 Certificate issuer: /CN=5F3E33AA6F92A837FA8944AB83627D3B44E0CF4A Certificate serial: 32 Authority key identifier: 5F:3E:33:AA:6F:92:A8:37:FA:89:44:AB:83:62:7D:3B:44:E0:CF:4A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Xz4zqm-SqDf6iUSrg2J9O0Tgz0o.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/972/iRZ3JTB8eGPoPv5_1N3JfHApftM.roa Signing time: Fri 01 Sep 2023 01:29:44 +0000 ROA not before: Fri 01 Sep 2023 01:29:44 +0000 ROA not after: Wed 14 Aug 2024 01:30:02 +0000 asID: 38651 IP address blocks: 110.44.176.0/21 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/972/Xz4zqm-SqDf6iUSrg2J9O0Tgz0o.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/972/Xz4zqm-SqDf6iUSrg2J9O0Tgz0o.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Xz4zqm-SqDf6iUSrg2J9O0Tgz0o.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50 (0x32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5F3E33AA6F92A837FA8944AB83627D3B44E0CF4A Validity Not Before: Sep 1 01:29:44 2023 GMT Not After : Aug 14 01:30:02 2024 GMT Subject: CN=89167725307C7863E83EFE7FD4DDC97C70297ED3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:7b:b4:a1:55:92:03:60:52:e0:3b:b6:bd:04: 8a:a8:4a:5f:4d:b7:10:c9:15:b5:77:1a:48:14:91: ed:f0:0e:c4:b7:a7:3b:57:6a:0b:96:b5:74:0e:ae: a7:fc:4b:eb:9f:05:b7:48:38:34:9c:1a:07:5d:cc: 85:71:11:f1:90:a2:93:2c:f2:3e:4d:b5:9c:a9:08: 0c:f2:47:7f:0f:34:ce:97:a8:60:56:57:93:a0:c5: 2c:d8:e4:27:c8:cc:92:65:53:f6:d5:9d:67:84:6b: f0:51:3f:f2:49:b3:96:19:48:11:96:2c:c4:a1:92: fc:18:65:ec:55:9e:f8:48:6e:aa:b0:6f:90:63:b5: b5:3c:00:23:81:ef:54:7e:1d:21:2a:7d:42:77:5b: af:d6:b6:de:e6:13:3f:66:d1:b6:14:d8:a9:1d:05: 16:fb:64:a6:2c:42:26:75:5d:8f:28:a9:04:e4:c2: 89:2e:f8:cc:7a:91:ed:f3:78:27:85:d8:ad:e9:97: 28:6d:89:3b:51:55:64:b7:bb:dd:9a:49:54:04:0f: 80:70:91:0a:47:32:d2:b7:d6:35:dc:49:4a:dc:50: 54:b1:47:67:c4:ea:25:59:f3:47:bd:2c:29:0b:98: c9:cd:14:83:e4:4e:ef:ab:2f:15:68:af:08:bd:20: c1:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:16:77:25:30:7C:78:63:E8:3E:FE:7F:D4:DD:C9:7C:70:29:7E:D3 X509v3 Authority Key Identifier: keyid:5F:3E:33:AA:6F:92:A8:37:FA:89:44:AB:83:62:7D:3B:44:E0:CF:4A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/972/Xz4zqm-SqDf6iUSrg2J9O0Tgz0o.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Xz4zqm-SqDf6iUSrg2J9O0Tgz0o.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/972/iRZ3JTB8eGPoPv5_1N3JfHApftM.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 110.44.176.0/21 Signature Algorithm: sha256WithRSAEncryption 9b:04:4b:ee:3b:0f:a1:a5:e5:e7:1a:10:33:20:b6:50:40:0e: 73:a3:31:ad:12:63:b4:59:f0:ec:4a:cc:4c:4d:1e:ff:1b:f4: 21:b8:2b:56:b2:49:7b:3b:17:93:c2:27:a7:8b:e0:de:cb:c3: 6f:5c:d7:c2:1b:a6:64:a8:1b:cc:5b:53:af:90:8e:de:92:e4: 5d:8b:96:94:90:04:a2:8e:51:32:34:96:fa:31:3e:48:59:a3: 1c:de:84:7a:34:5e:ba:af:dc:f5:a7:24:48:3c:68:fa:99:be: 27:2d:0e:0d:d5:39:1b:b3:c5:43:6d:8f:5c:30:3e:bc:00:15: e3:74:53:fb:9e:13:a9:95:37:c2:5c:5a:18:f9:c9:b3:79:2e: 96:2c:b5:b1:11:33:0c:84:1c:73:a4:a8:cc:93:bc:dc:c3:46: 8f:33:01:00:7e:58:69:48:e4:d6:c5:ee:a9:93:75:ac:51:60: 37:f7:3d:5a:d6:6a:f5:f2:a4:53:cf:5d:ef:5a:95:bb:b9:32: aa:79:70:d7:8e:45:3c:70:88:58:7c:75:38:1a:b5:6f:18:3e: f2:a5:17:5e:86:7c:fb:e1:80:47:db:bd:b9:1a:39:d0:f1:bc: 22:43:8b:19:86:2f:83:cd:f5:56:03:4b:83:1a:bf:60:ef:6c: f6:c0:f9:09 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBMjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1RjNF MzNBQTZGOTJBODM3RkE4OTQ0QUI4MzYyN0QzQjQ0RTBDRjRBMB4XDTIzMDkwMTAx Mjk0NFoXDTI0MDgxNDAxMzAwMlowMzExMC8GA1UEAxMoODkxNjc3MjUzMDdDNzg2 M0U4M0VGRTdGRDREREM5N0M3MDI5N0VEMzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANh7tKFVkgNgUuA7tr0EiqhKX023EMkVtXcaSBSR7fAOxLenO1dq C5a1dA6up/xL658Ft0g4NJwaB13MhXER8ZCikyzyPk21nKkIDPJHfw80zpeoYFZX k6DFLNjkJ8jMkmVT9tWdZ4Rr8FE/8kmzlhlIEZYsxKGS/Bhl7FWe+EhuqrBvkGO1 tTwAI4HvVH4dISp9Qndbr9a23uYTP2bRthTYqR0FFvtkpixCJnVdjyipBOTCiS74 zHqR7fN4J4XYremXKG2JO1FVZLe73ZpJVAQPgHCRCkcy0rfWNdxJStxQVLFHZ8Tq JVnzR70sKQuYyc0Ug+RO76svFWivCL0gwakCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBSJFnclMHx4Y+g+/n/U3cl8cCl+0zAfBgNVHSMEGDAWgBRfPjOqb5KoN/qJRKuD Yn07RODPSjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvOTcyL1h6NHpxbS1TcURmNmlVU3JnMko5TzBUZ3owby5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1h6NHpxbS1TcURmNmlVU3JnMko5TzBU Z3owby5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC85NzIvaVJaM0pUQjhlR1BvUHY1XzFOM0pmSEFwZnRNLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEA24ssDANBgkqhkiG9w0BAQsFAAOCAQEAmwRL7jsPoaXl5xoQMyC2UEAOc6Mx rRJjtFnw7ErMTE0e/xv0IbgrVrJJezsXk8Inp4vg3svDb1zXwhumZKgbzFtTr5CO 3pLkXYuWlJAEoo5RMjSW+jE+SFmjHN6EejReuq/c9ackSDxo+pm+Jy0ODdU5G7PF Q22PXDA+vAAV43RT+54TqZU3wlxaGPnJs3kuliy1sREzDIQcc6SozJO83MNGjzMB AH5YaUjk1sXuqZN1rFFgN/c9WtZq9fKkU89d71qVu7kyqnlw145FPHCIWHx1OBq1 bxg+8qUXXoZ8++GAR9u9uRo50PG8IkOLGYYvg831VgNLgxq/YO9s9sD5CQ== -----END CERTIFICATE-----Generated at Sat Jun 1 13:38:53 2024 by rpki-client on console-fra.rpki-client.org