$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/604/fxaacUyIbcNciOE491PywSlHsRI.roa File: fxaacUyIbcNciOE491PywSlHsRI.roa (raw, json) Hash identifier: cM6MCY1ltc/dv2zRvazwHdElCCacFI2VPJQAvMbFfZw= Subject key identifier: 7F:16:9A:71:4C:88:6D:C3:5C:88:E1:38:F7:53:F2:C1:29:47:B1:12 Certificate issuer: /CN=84F94F26AD23CBA93655AE34D806A8CE0A4C5907 Certificate serial: 0A Authority key identifier: 84:F9:4F:26:AD:23:CB:A9:36:55:AE:34:D8:06:A8:CE:0A:4C:59:07 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hPlPJq0jy6k2Va402AaozgpMWQc.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/604/fxaacUyIbcNciOE491PywSlHsRI.roa Signing time: Mon 11 Sep 2023 00:05:54 +0000 ROA not before: Mon 11 Sep 2023 00:05:54 +0000 ROA not after: Sun 18 Aug 2024 03:04:44 +0000 asID: 17682 IP address blocks: 119.47.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/604/hPlPJq0jy6k2Va402AaozgpMWQc.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/604/hPlPJq0jy6k2Va402AaozgpMWQc.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hPlPJq0jy6k2Va402AaozgpMWQc.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Jun 2024 06:27:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10 (0xa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84F94F26AD23CBA93655AE34D806A8CE0A4C5907 Validity Not Before: Sep 11 00:05:54 2023 GMT Not After : Aug 18 03:04:44 2024 GMT Subject: CN=7F169A714C886DC35C88E138F753F2C12947B112 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:70:2a:dd:a4:8a:36:5f:61:89:11:e8:89:87: 48:9b:40:55:2b:0d:05:0d:83:d9:13:1f:c7:a9:3b: 79:2b:9b:30:c8:2d:57:05:ff:74:09:97:28:28:2a: 0b:c6:44:8f:99:59:81:d6:78:10:1f:13:54:35:6a: 5b:00:fa:07:cd:ad:76:84:2a:21:14:7e:30:3a:fc: 78:0c:7c:4d:53:f4:50:42:ea:fe:c8:c4:11:ef:9a: 57:6d:a1:88:10:c3:06:9c:87:6b:aa:80:f1:93:53: 0f:d6:70:b8:1c:21:e9:4e:04:21:2e:ed:ff:75:92: ec:70:5b:f3:52:7c:10:2a:39:2a:81:80:44:ab:45: 32:ca:1e:7a:6d:d5:ad:de:75:d6:0e:af:47:84:f2: d9:ad:f4:0f:97:32:fd:68:8d:54:10:6f:30:82:02: 1e:85:16:b7:91:c6:0c:fa:9b:6f:17:a3:4c:93:ed: 38:e6:04:58:aa:36:d2:02:72:72:3b:fc:d4:6f:5e: d4:17:6a:54:a3:44:d4:b4:2f:bc:ee:a0:c7:7b:60: 23:2c:30:d3:01:00:4c:7d:13:84:ec:71:27:c8:dc: a3:1a:33:8e:da:37:10:bd:6c:4b:01:4f:52:19:59: 32:46:75:79:95:ab:13:d2:3e:4f:30:f8:2b:cb:1f: 4c:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:16:9A:71:4C:88:6D:C3:5C:88:E1:38:F7:53:F2:C1:29:47:B1:12 X509v3 Authority Key Identifier: keyid:84:F9:4F:26:AD:23:CB:A9:36:55:AE:34:D8:06:A8:CE:0A:4C:59:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/604/hPlPJq0jy6k2Va402AaozgpMWQc.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hPlPJq0jy6k2Va402AaozgpMWQc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/604/fxaacUyIbcNciOE491PywSlHsRI.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 119.47.16.0/20 Signature Algorithm: sha256WithRSAEncryption 9e:15:b0:c8:14:1b:01:1d:65:48:58:a9:74:17:e5:21:bd:e8: f3:2f:b1:76:e5:84:f9:0a:37:74:0d:54:ec:4c:b0:e1:43:1a: 87:65:52:36:4e:44:46:af:2b:c4:41:4e:cb:80:dd:83:6c:29: 85:8a:86:d9:e5:93:82:7b:01:01:21:93:52:5a:d7:e9:1e:59: fb:da:98:39:a4:df:c8:54:90:b6:c1:cf:50:6a:fe:29:1b:f4: df:ab:e8:dc:f5:e8:38:07:36:41:5a:b8:91:32:4c:99:be:92: 80:82:e7:f4:52:f2:2a:60:83:28:6d:48:09:8a:6f:f7:a9:80: 0a:1a:6e:31:52:1e:44:1a:36:c4:ec:f4:99:ca:8b:12:85:4f: 03:54:23:79:8f:b1:12:4f:b2:00:e0:66:c9:03:7c:95:d4:e6: 84:bc:4b:3f:82:01:62:73:a3:68:2b:78:8c:94:9d:c1:0e:e0: 4e:54:53:ab:d3:a5:ff:67:98:2e:96:82:0b:dc:84:8e:0f:a9: 84:a4:ac:dc:c8:93:b7:56:2d:0b:ff:d3:c7:19:17:56:55:30: 25:ef:3a:8a:e9:c9:be:c6:d6:47:9d:75:ea:96:e9:68:7c:bb: 88:4c:38:41:67:f3:6a:32:fa:a2:ff:14:4a:aa:0d:23:07:93: fb:9d:e5:b5 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBCjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4NEY5 NEYyNkFEMjNDQkE5MzY1NUFFMzREODA2QThDRTBBNEM1OTA3MB4XDTIzMDkxMTAw MDU1NFoXDTI0MDgxODAzMDQ0NFowMzExMC8GA1UEAxMoN0YxNjlBNzE0Qzg4NkRD MzVDODhFMTM4Rjc1M0YyQzEyOTQ3QjExMjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKpwKt2kijZfYYkR6ImHSJtAVSsNBQ2D2RMfx6k7eSubMMgtVwX/ dAmXKCgqC8ZEj5lZgdZ4EB8TVDVqWwD6B82tdoQqIRR+MDr8eAx8TVP0UELq/sjE Ee+aV22hiBDDBpyHa6qA8ZNTD9ZwuBwh6U4EIS7t/3WS7HBb81J8ECo5KoGARKtF Msoeem3Vrd511g6vR4Ty2a30D5cy/WiNVBBvMIICHoUWt5HGDPqbbxejTJPtOOYE WKo20gJycjv81G9e1BdqVKNE1LQvvO6gx3tgIyww0wEATH0ThOxxJ8jcoxozjto3 EL1sSwFPUhlZMkZ1eZWrE9I+TzD4K8sfTBMCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBR/FppxTIhtw1yI4Tj3U/LBKUexEjAfBgNVHSMEGDAWgBSE+U8mrSPLqTZVrjTY BqjOCkxZBzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNjA0L2hQbFBKcTBqeTZrMlZhNDAyQWFvemdwTVdRYy5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2hQbFBKcTBqeTZrMlZhNDAyQWFvemdw TVdRYy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC82MDQvZnhhYWNVeUliY05jaU9FNDkxUHl3U2xIc1JJLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBHcvEDANBgkqhkiG9w0BAQsFAAOCAQEAnhWwyBQbAR1lSFipdBflIb3o8y+x duWE+Qo3dA1U7Eyw4UMah2VSNk5ERq8rxEFOy4Ddg2wphYqG2eWTgnsBASGTUlrX 6R5Z+9qYOaTfyFSQtsHPUGr+KRv036vo3PXoOAc2QVq4kTJMmb6SgILn9FLyKmCD KG1ICYpv96mAChpuMVIeRBo2xOz0mcqLEoVPA1QjeY+xEk+yAOBmyQN8ldTmhLxL P4IBYnOjaCt4jJSdwQ7gTlRTq9Ol/2eYLpaCC9yEjg+phKSs3MiTt1YtC//TxxkX VlUwJe86iunJvsbWR5116pbpaHy7iEw4QWfzajL6ov8USqoNIweT+53ltQ== -----END CERTIFICATE-----Generated at Mon Jun 24 11:27:11 2024 by rpki-client on console-fra.rpki-client.org