$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/bAi67Bj8d0MCUkfB_sbNjQUdt0w.roa File: bAi67Bj8d0MCUkfB_sbNjQUdt0w.roa (raw, json) Hash identifier: KgqWjlc7iKIotBliaKz/KKn16ek10LG4/vd47Xt/020= Subject key identifier: 6C:08:BA:EC:18:FC:77:43:02:52:47:C1:FE:C6:CD:8D:05:1D:B7:4C Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 01DE Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/bAi67Bj8d0MCUkfB_sbNjQUdt0w.roa Signing time: Tue 01 Aug 2023 01:31:27 +0000 ROA not before: Tue 01 Aug 2023 01:31:27 +0000 ROA not after: Sun 14 Jul 2024 01:30:03 +0000 asID: 4686 IP address blocks: 124.255.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Jun 2024 06:27:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 478 (0x1de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: Aug 1 01:31:27 2023 GMT Not After : Jul 14 01:30:03 2024 GMT Subject: CN=6C08BAEC18FC7743025247C1FEC6CD8D051DB74C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:a6:21:f8:74:68:23:e0:76:55:d5:5a:49:4e: 41:3d:84:8d:53:fe:8c:cd:37:d8:bc:7e:62:b4:7e: 85:47:3e:c0:bd:b0:24:12:23:b5:18:22:b9:d2:5d: eb:b9:bf:cf:49:e4:ad:97:77:0f:3d:ca:32:88:c2: 54:2d:71:6f:b7:ea:58:7b:e6:29:bf:25:b0:58:9c: c4:24:10:61:c0:30:dd:be:2d:0a:8a:60:5a:ad:dd: df:d6:82:d9:e5:aa:b2:11:1e:06:a6:09:6d:42:d3: 62:70:7e:6d:a5:2a:30:1f:46:d1:0d:d8:f2:99:e0: 7b:73:ba:e3:a6:a2:51:33:f3:ea:54:2b:f7:ac:26: 2e:d5:a2:41:6f:e9:89:01:8d:67:45:1e:69:bd:4e: f3:4f:0d:a5:f0:76:de:0f:96:53:36:f1:06:e6:d3: d3:fd:75:33:95:51:86:50:c5:c1:88:ab:e0:86:8c: c7:85:e8:ae:a2:bf:d9:15:65:9f:99:2b:95:e3:6b: 35:22:38:6d:a7:37:3f:0f:db:7c:6c:6c:93:63:d4: 4c:97:9f:af:63:d3:62:8e:dc:03:dc:e1:ba:21:34: 9f:b4:00:87:e4:d7:9f:7a:f4:be:c9:60:91:5a:5d: c5:c4:fd:14:0e:37:be:9e:6f:b9:73:34:0b:24:da: 65:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:08:BA:EC:18:FC:77:43:02:52:47:C1:FE:C6:CD:8D:05:1D:B7:4C X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/bAi67Bj8d0MCUkfB_sbNjQUdt0w.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 124.255.224.0/19 Signature Algorithm: sha256WithRSAEncryption 3c:f3:b5:34:df:0e:2c:82:da:5c:d7:43:55:34:4f:a3:fe:40: 39:6a:42:81:f9:ef:13:81:75:0a:52:e7:70:d4:40:cb:2f:cc: f1:6e:43:39:bc:fd:2d:77:5d:75:cb:12:64:95:df:e5:14:39: e2:2a:94:f6:95:d5:99:27:52:e8:1e:b2:50:fd:eb:b6:70:92: 10:8f:2d:40:7a:16:bf:a9:e3:2b:5f:b0:2d:dc:0e:7c:3b:56: 19:d6:e7:01:e2:ad:e9:d8:0f:08:b7:8a:97:b1:73:ce:69:c6: 29:3d:f9:1e:7c:ad:6b:0e:22:ba:3c:3c:bc:c9:9a:ac:b7:af: c3:29:a9:c0:aa:95:d5:9d:b1:63:92:6a:05:10:2e:59:9c:e3: b7:80:15:78:c4:11:d7:61:a8:94:a1:53:25:41:51:15:8a:d9: d4:ca:9c:7f:77:95:46:21:a1:ab:a4:1e:06:ec:f8:2e:dd:35: 52:57:75:44:43:7d:45:52:59:a0:d7:43:80:69:b3:b9:f8:ef: 3d:a6:72:6d:b3:fb:26:29:8a:eb:bc:b2:44:65:ec:2b:cb:90: d6:39:de:d1:ef:97:51:23:5a:8f:92:7b:13:c4:8c:57:72:ec: c1:75:08:9b:e2:59:9f:cb:cc:01:84:d3:b2:37:b9:1b:b0:41: d7:11:a4:0d -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAd4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yMzA4MDEw MTMxMjdaFw0yNDA3MTQwMTMwMDNaMDMxMTAvBgNVBAMTKDZDMDhCQUVDMThGQzc3 NDMwMjUyNDdDMUZFQzZDRDhEMDUxREI3NEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDhpiH4dGgj4HZV1VpJTkE9hI1T/ozNN9i8fmK0foVHPsC9sCQS I7UYIrnSXeu5v89J5K2Xdw89yjKIwlQtcW+36lh75im/JbBYnMQkEGHAMN2+LQqK YFqt3d/WgtnlqrIRHgamCW1C02Jwfm2lKjAfRtEN2PKZ4HtzuuOmolEz8+pUK/es Ji7VokFv6YkBjWdFHmm9TvNPDaXwdt4PllM28Qbm09P9dTOVUYZQxcGIq+CGjMeF 6K6iv9kVZZ+ZK5XjazUiOG2nNz8P23xsbJNj1EyXn69j02KO3APc4bohNJ+0AIfk 15969L7JYJFaXcXE/RQON76eb7lzNAsk2mWnAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUbAi67Bj8d0MCUkfB/sbNjQUdt0wwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L2JBaTY3Qmo4ZDBNQ1VrZkJfc2JOalFVZHQwdy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAV8/+AwDQYJKoZIhvcNAQELBQADggEBADzztTTfDiyC2lzXQ1U0T6P+QDlq QoH57xOBdQpS53DUQMsvzPFuQzm8/S13XXXLEmSV3+UUOeIqlPaV1ZknUugeslD9 67ZwkhCPLUB6Fr+p4ytfsC3cDnw7VhnW5wHirenYDwi3ipexc85pxik9+R58rWsO Iro8PLzJmqy3r8MpqcCqldWdsWOSagUQLlmc47eAFXjEEddhqJShUyVBURWK2dTK nH93lUYhoaukHgbs+C7dNVJXdURDfUVSWaDXQ4Bps7n47z2mcm2z+yYpiuu8skRl 7CvLkNY53tHvl1EjWo+SexPEjFdy7MF1CJviWZ/LzAGE07I3uRuwQdcRpA0= -----END CERTIFICATE-----Generated at Tue Jun 25 02:54:27 2024 by rpki-client on console.sobornost.net