$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/7Db7Rsyz85_DGlJD9OAN5fH3cH0.roa File: 7Db7Rsyz85_DGlJD9OAN5fH3cH0.roa (raw, json) Hash identifier: dWVsa1V3qKAlnb1sSoAgGQi/8TjEQQhQjZRBAR3+bOM= Subject key identifier: EC:36:FB:46:CC:B3:F3:9F:C3:1A:52:43:F4:E0:0D:E5:F1:F7:70:7D Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Certificate serial: 01F5 Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/7Db7Rsyz85_DGlJD9OAN5fH3cH0.roa Signing time: Wed 01 Nov 2023 01:30:35 +0000 ROA not before: Wed 01 Nov 2023 01:30:35 +0000 ROA not after: Mon 14 Oct 2024 01:30:03 +0000 asID: 0 IP address blocks: 211.1.176.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 01:42:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 501 (0x1f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Validity Not Before: Nov 1 01:30:35 2023 GMT Not After : Oct 14 01:30:03 2024 GMT Subject: CN=EC36FB46CCB3F39FC31A5243F4E00DE5F1F7707D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:75:73:86:7a:ec:30:11:c4:dd:1a:4d:fe:3e: 0c:0b:02:85:b1:66:d7:ff:e9:ce:f3:cd:5f:87:22: 1a:01:75:98:d7:b2:df:ed:06:ea:07:d4:7e:9f:52: 4b:3f:45:dc:6d:8c:9a:d1:b7:b7:c6:5c:2c:f1:cd: 31:48:55:17:29:ef:9f:b1:b1:28:ca:6f:6c:0a:2c: ef:4c:ca:be:c5:83:5f:02:b5:be:67:8d:f6:0f:9d: 3b:31:7f:75:d6:5e:96:6c:dc:df:0c:bc:dd:71:b9: 08:74:4d:db:df:d6:5e:2c:32:ab:c3:8e:2f:fa:50: fe:e0:a7:74:ad:b6:ed:0b:b1:23:f3:06:c9:4b:79: 96:8b:e3:85:94:3a:77:bf:42:94:6a:71:1b:97:e5: e3:3b:cf:47:b5:7f:43:88:41:b7:71:07:2f:dd:df: 81:bf:62:94:20:70:65:b7:d0:3f:5e:9e:95:f9:dd: 46:f5:37:08:21:7c:e2:5f:ae:5d:42:cb:fd:bc:38: 75:08:8b:62:e0:36:12:96:60:56:c3:e9:f9:3f:6c: bd:08:b3:d8:cf:18:86:05:94:1a:b6:d2:94:fb:3b: 31:60:af:fb:92:92:56:b7:70:c9:af:64:5a:a3:c8: af:56:3d:f2:7f:f7:8f:92:fe:dd:da:01:3a:cb:9a: 05:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:36:FB:46:CC:B3:F3:9F:C3:1A:52:43:F4:E0:0D:E5:F1:F7:70:7D X509v3 Authority Key Identifier: keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/7Db7Rsyz85_DGlJD9OAN5fH3cH0.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 211.1.176.0/20 Signature Algorithm: sha256WithRSAEncryption d1:8e:57:ea:6e:dc:4d:b6:98:a7:20:5e:96:70:c6:3d:ca:81: 25:8d:79:cb:e2:5e:8c:ad:72:5c:9f:ee:06:82:8b:1a:cf:74: 07:16:ae:a4:89:19:f3:7a:67:bd:e1:83:0a:b1:a2:f9:c1:58: 63:dc:45:e1:88:2f:c4:fd:00:3e:a8:ef:ed:41:cc:60:13:95: ac:12:76:92:bc:98:0a:75:73:54:e3:81:05:d0:2e:74:e6:cf: 89:b4:e4:4f:1b:da:1a:05:e3:6f:04:57:d7:0d:0d:7f:28:bc: 79:09:c8:13:1d:9a:e9:77:bb:41:8c:73:af:73:e9:20:88:ac: d7:37:61:5b:af:66:14:a6:bc:69:7e:c6:42:48:27:f6:47:eb: eb:1c:e0:ab:7a:fb:03:85:3a:18:01:7e:5d:84:a6:4e:11:f8: 98:34:45:bb:8d:06:01:69:2c:7d:a7:b0:24:bb:35:88:35:06: ee:39:c7:6b:fc:d8:7f:05:b6:5b:12:88:e2:0e:bd:6a:19:60: e2:61:a9:88:d4:a2:e5:6a:ea:67:6d:26:bc:d7:15:a0:61:34: 94:8c:39:ee:0f:35:8f:6f:b0:76:27:9e:ae:71:aa:6d:33:80: 6c:86:38:5e:fb:77:b7:4c:42:1a:e5:14:34:4a:23:fe:99:6b: f3:e5:7c:83 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAfUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yMzExMDEw MTMwMzVaFw0yNDEwMTQwMTMwMDNaMDMxMTAvBgNVBAMTKEVDMzZGQjQ2Q0NCM0Yz OUZDMzFBNTI0M0Y0RTAwREU1RjFGNzcwN0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDGdXOGeuwwEcTdGk3+PgwLAoWxZtf/6c7zzV+HIhoBdZjXst/t BuoH1H6fUks/RdxtjJrRt7fGXCzxzTFIVRcp75+xsSjKb2wKLO9Myr7Fg18Ctb5n jfYPnTsxf3XWXpZs3N8MvN1xuQh0Tdvf1l4sMqvDji/6UP7gp3Sttu0LsSPzBslL eZaL44WUOne/QpRqcRuX5eM7z0e1f0OIQbdxBy/d34G/YpQgcGW30D9enpX53Ub1 NwghfOJfrl1Cy/28OHUIi2LgNhKWYFbD6fk/bL0Is9jPGIYFlBq20pT7OzFgr/uS kla3cMmvZFqjyK9WPfJ/94+S/t3aATrLmgVlAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU7Db7Rsyz85/DGlJD9OAN5fH3cH0wHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNjcxLzdEYjdSc3l6ODVfREdsSkQ5T0FONWZIM2NIMC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBATTAbAwDQYJKoZIhvcNAQELBQADggEBANGOV+pu3E22mKcgXpZwxj3KgSWN ecviXoytclyf7gaCixrPdAcWrqSJGfN6Z73hgwqxovnBWGPcReGIL8T9AD6o7+1B zGATlawSdpK8mAp1c1TjgQXQLnTmz4m05E8b2hoF428EV9cNDX8ovHkJyBMdmul3 u0GMc69z6SCIrNc3YVuvZhSmvGl+xkJIJ/ZH6+sc4Kt6+wOFOhgBfl2Epk4R+Jg0 RbuNBgFpLH2nsCS7NYg1Bu45x2v82H8FtlsSiOIOvWoZYOJhqYjUouVq6mdtJrzX FaBhNJSMOe4PNY9vsHYnnq5xqm0zgGyGOF77d7dMQhrlFDRKI/6Za/PlfIM= -----END CERTIFICATE-----Generated at Fri May 3 11:55:55 2024 by rpki-client on console-fra.rpki-client.org