$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/9sPsYvvGYqnEtEZO7FwO6-CYr78.roa File: 9sPsYvvGYqnEtEZO7FwO6-CYr78.roa (raw, json) Hash identifier: WbOZP9k5WFp6RiXmxtBNd0WXf1zbHoDM7HYSGL+EBMQ= Subject key identifier: F6:C3:EC:62:FB:C6:62:A9:C4:B4:46:4E:EC:5C:0E:EB:E0:98:AF:BF Certificate issuer: /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A Certificate serial: 01CD Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/9sPsYvvGYqnEtEZO7FwO6-CYr78.roa Signing time: Wed 01 Nov 2023 01:31:16 +0000 ROA not before: Wed 01 Nov 2023 01:31:16 +0000 ROA not after: Mon 14 Oct 2024 01:30:03 +0000 asID: 9371 IP address blocks: 210.188.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 23 Jun 2024 14:09:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 461 (0x1cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A Validity Not Before: Nov 1 01:31:16 2023 GMT Not After : Oct 14 01:30:03 2024 GMT Subject: CN=F6C3EC62FBC662A9C4B4464EEC5C0EEBE098AFBF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a1:05:58:24:6a:4f:09:46:47:ed:83:58:54: 7f:6e:39:23:89:47:ad:15:3c:44:96:f9:25:d8:0e: 7c:93:6c:ba:f6:95:9a:81:20:9a:1a:30:99:db:10: 99:02:03:c1:ec:50:07:90:e7:8e:d1:28:9c:8e:c7: 3e:7e:57:62:cd:39:28:00:41:af:c8:86:64:8f:e8: 02:0a:1d:7d:04:71:2c:92:99:90:22:34:6d:dd:72: f9:17:f9:f6:f7:9d:62:4e:2f:65:52:90:b6:f7:c3: 57:35:8c:e0:39:86:1a:3d:66:8b:76:c2:af:1c:aa: 5d:49:37:b4:9a:8b:59:47:79:e1:6a:eb:18:50:20: 28:de:4b:e5:4d:19:2e:66:67:09:bc:09:a5:fd:fe: 96:f9:7b:24:cc:0e:6c:a7:c3:78:bb:ee:c5:e2:8b: 84:b9:2e:f4:66:9d:b7:d2:40:97:d9:fc:2b:f5:bb: 65:8e:4c:44:7b:c0:9d:c3:59:4f:3d:2a:02:56:1b: 97:e8:ff:51:9a:61:e1:dd:4e:15:da:f5:2f:3c:d3: 75:2f:2e:24:10:f2:3f:db:4f:f1:1b:4f:61:6c:76: 17:75:ed:d4:b7:f1:19:d0:b7:6b:14:fe:77:ce:6b: e1:d1:74:be:81:55:8e:e3:1d:5c:ad:95:82:c7:19: f6:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:C3:EC:62:FB:C6:62:A9:C4:B4:46:4E:EC:5C:0E:EB:E0:98:AF:BF X509v3 Authority Key Identifier: keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/9sPsYvvGYqnEtEZO7FwO6-CYr78.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.188.211.0/24 Signature Algorithm: sha256WithRSAEncryption b7:91:a9:7c:b2:49:43:22:24:b0:00:5c:b4:31:31:cf:c5:a6: 56:c1:b7:b0:4f:b3:76:fe:f8:ea:24:8e:fa:01:a9:04:30:3b: 0e:31:79:c1:f8:0d:02:b7:55:88:c3:cd:f5:b8:4d:99:d3:ea: d9:24:b7:cb:44:04:28:cb:d2:14:c3:5d:3b:93:9e:58:8a:5e: a6:3f:bd:c2:3c:32:e5:dc:2d:f3:d7:19:e2:7f:20:c4:ee:a0: fb:fb:3a:3f:54:13:63:5e:58:47:03:d1:28:c5:db:76:18:ec: 3d:bf:cb:a3:95:48:0f:62:c0:55:f6:1c:ed:f6:50:a5:e5:d7: 42:f8:db:fd:7b:69:23:ba:82:07:40:5e:64:bd:a0:6a:56:2f: 5d:d7:9e:b6:2d:4f:03:6b:06:69:1d:2a:68:73:41:1e:d2:9b: 02:49:ba:f5:05:b9:32:40:0a:1d:42:ad:fe:f9:64:32:be:ea: 12:8c:61:53:e1:00:ce:0c:ba:a1:0f:50:24:b6:07:b0:d6:77: 65:ff:42:34:12:ed:c0:2a:c1:98:5c:b4:bb:73:09:d6:57:f7: 6e:87:01:83:3d:50:32:e8:f3:17:5a:2b:bd:46:e2:0e:19:12: 4d:64:b6:be:13:53:6b:49:91:38:d9:f5:1b:a4:de:db:8a:25: a2:96:fe:02 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgICAc0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjAz MjBGNkQwOURCMThDMEY3MEIzNTRBM0Q4NzQ1MEY3MEU2RDcxQTAeFw0yMzExMDEw MTMxMTZaFw0yNDEwMTQwMTMwMDNaMDMxMTAvBgNVBAMTKEY2QzNFQzYyRkJDNjYy QTlDNEI0NDY0RUVDNUMwRUVCRTA5OEFGQkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCyoQVYJGpPCUZH7YNYVH9uOSOJR60VPESW+SXYDnyTbLr2lZqB IJoaMJnbEJkCA8HsUAeQ547RKJyOxz5+V2LNOSgAQa/IhmSP6AIKHX0EcSySmZAi NG3dcvkX+fb3nWJOL2VSkLb3w1c1jOA5hho9Zot2wq8cql1JN7Sai1lHeeFq6xhQ ICjeS+VNGS5mZwm8CaX9/pb5eyTMDmynw3i77sXii4S5LvRmnbfSQJfZ/Cv1u2WO TER7wJ3DWU89KgJWG5fo/1GaYeHdThXa9S8803UvLiQQ8j/bT/EbT2Fsdhd17dS3 8RnQt2sU/nfOa+HRdL6BVY7jHVytlYLHGfaBAgMBAAGjggIoMIICJDAdBgNVHQ4E FgQU9sPsYvvGYqnEtEZO7FwO6+CYr78wHwYDVR0jBBgwFoAUIDIPbQnbGMD3CzVK PYdFD3Dm1xowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzEwMjQ3L0lESVBiUW5iR01EM0N6VktQWWRGRDNEbTF4by5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0lESVBiUW5iR01EM0N6VktQWWRG RDNEbTF4by5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8xMDI0Ny85c1BzWXZ2R1lxbkV0RVpPN0Z3TzYtQ1lyNzgu cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQA0rzTMA0GCSqGSIb3DQEBCwUAA4IBAQC3kal8sklDIiSwAFy0MTHP xaZWwbewT7N2/vjqJI76AakEMDsOMXnB+A0Ct1WIw831uE2Z0+rZJLfLRAQoy9IU w107k55Yil6mP73CPDLl3C3z1xnifyDE7qD7+zo/VBNjXlhHA9Eoxdt2GOw9v8uj lUgPYsBV9hzt9lCl5ddC+Nv9e2kjuoIHQF5kvaBqVi9d1562LU8DawZpHSpoc0Ee 0psCSbr1BbkyQAodQq3++WQyvuoSjGFT4QDODLqhD1Aktgew1ndl/0I0Eu3AKsGY XLS7cwnWV/duhwGDPVAy6PMXWiu9RuIOGRJNZLa+E1NrSZE42fUbpN7biiWilv4C -----END CERTIFICATE-----Generated at Mon Jun 17 14:51:59 2024 by rpki-client on console-ams.rpki-client.org