$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/6PnOE3rhmtBdg4sNDS8rpFg5guw.roa File: 6PnOE3rhmtBdg4sNDS8rpFg5guw.roa (raw, json) Hash identifier: GJ7bbGtjASLCfdP1Gh3kuWO+rv9q68o5MgkEKo4sbXg= Subject key identifier: E8:F9:CE:13:7A:E1:9A:D0:5D:83:8B:0D:0D:2F:2B:A4:58:39:82:EC Certificate issuer: /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B Certificate serial: 01AD Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/6PnOE3rhmtBdg4sNDS8rpFg5guw.roa Signing time: Sun 31 Mar 2024 01:29:06 +0000 ROA not before: Sun 31 Mar 2024 01:29:06 +0000 ROA not after: Sat 15 Mar 2025 01:30:02 +0000 asID: 4713 IP address blocks: 61.214.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 22:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 429 (0x1ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B Validity Not Before: Mar 31 01:29:06 2024 GMT Not After : Mar 15 01:30:02 2025 GMT Subject: CN=E8F9CE137AE19AD05D838B0D0D2F2BA4583982EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:04:60:d5:57:4e:7f:c2:a6:f1:57:c4:ec:5f: 2d:70:90:20:63:78:f0:18:3e:24:90:d6:49:b9:de: 4f:5a:ea:14:b3:15:01:83:b4:13:ac:ee:0e:26:e9: 79:e8:54:09:ca:8b:75:81:fe:1b:2d:3e:ae:95:48: 41:04:a8:f4:a9:e8:85:ce:5c:8b:c2:c5:01:2a:e2: 8a:73:1f:ff:ce:ee:73:56:01:63:d1:37:a2:62:44: de:3a:15:d8:56:7a:b7:3d:6a:5a:7c:16:4d:61:54: 1e:fa:5b:c8:02:41:e2:1a:d8:1c:5e:38:54:52:72: 86:ae:30:d2:1d:22:cc:ca:fa:a2:df:6d:46:67:d6: cd:34:b7:36:49:5f:61:fa:9e:97:0c:3e:58:7c:54: ff:da:4d:5a:a6:e3:f3:41:cb:9d:7a:de:33:5e:24: e3:27:18:cd:5a:f8:8f:92:eb:b1:51:ba:1f:be:1b: fc:ed:1b:43:7d:5f:c6:8e:21:15:f0:76:6b:f7:0d: b7:41:76:bf:a4:af:7f:6d:f0:0b:30:fc:ae:d9:ab: 24:ec:25:cb:3d:bd:5f:01:e9:1a:a4:93:01:a9:aa: b4:42:3f:59:10:16:9f:77:8e:be:02:41:6e:ce:67: d1:db:34:1b:43:b9:3e:9d:c4:c4:6e:b2:d2:8a:c2: 38:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:F9:CE:13:7A:E1:9A:D0:5D:83:8B:0D:0D:2F:2B:A4:58:39:82:EC X509v3 Authority Key Identifier: keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/6PnOE3rhmtBdg4sNDS8rpFg5guw.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 61.214.0.0/16 Signature Algorithm: sha256WithRSAEncryption b2:90:50:2c:74:f9:9e:a5:6c:16:47:9d:35:57:78:1a:a1:51: 29:a6:31:ad:95:dd:53:c5:a4:ff:a5:38:b7:e6:5d:83:c3:e2: a6:4f:81:b9:16:f5:31:a8:1c:30:1d:ef:3c:5a:e3:70:a5:02: 3c:b7:24:f7:14:19:c6:90:e7:f6:5d:31:d7:e4:40:db:b7:00: 11:37:0e:8a:cb:f6:bc:42:2e:b5:23:28:c1:4d:1e:38:a7:de: f2:f4:6b:68:e3:d3:9e:8c:dd:fc:3e:fa:86:bd:21:bf:b2:6a: c7:6e:58:ba:f7:56:2b:3a:f1:58:b8:22:1f:4e:9b:d6:e4:eb: ef:cb:ce:af:44:bc:72:81:68:72:e7:e7:e2:e3:00:98:87:da: 9e:a4:d7:83:e5:f9:e7:a5:55:15:84:a7:1f:be:d6:0d:3a:b1: 07:89:b1:59:e7:cd:6b:b6:9f:aa:06:9a:38:97:bc:66:80:ba: 06:80:83:d7:7b:53:4b:70:e0:4d:7d:be:98:5b:a6:7f:59:ca: 4b:fe:c4:76:26:69:a8:75:b4:5a:d9:35:8e:b2:7c:d7:82:ac: b3:e4:3d:91:66:f3:9d:5d:59:2c:60:53:07:13:83:d6:30:a9: ec:09:16:6d:ee:6b:e2:54:7a:0d:25:69:1e:86:95:f9:d4:da: 0b:38:13:d4 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgICAa0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkZD MDk5MjNCMDVBN0U4RjFBREQ5QTU5ODRFREMxOTMyMERCOTc0QjAeFw0yNDAzMzEw MTI5MDZaFw0yNTAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEU4RjlDRTEzN0FFMTlB RDA1RDgzOEIwRDBEMkYyQkE0NTgzOTgyRUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDtBGDVV05/wqbxV8TsXy1wkCBjePAYPiSQ1km53k9a6hSzFQGD tBOs7g4m6XnoVAnKi3WB/hstPq6VSEEEqPSp6IXOXIvCxQEq4opzH//O7nNWAWPR N6JiRN46FdhWerc9alp8Fk1hVB76W8gCQeIa2BxeOFRScoauMNIdIszK+qLfbUZn 1s00tzZJX2H6npcMPlh8VP/aTVqm4/NBy5163jNeJOMnGM1a+I+S67FRuh++G/zt G0N9X8aOIRXwdmv3DbdBdr+kr39t8Asw/K7ZqyTsJcs9vV8B6RqkkwGpqrRCP1kQ Fp93jr4CQW7OZ9HbNBtDuT6dxMRustKKwjhtAgMBAAGjggIjMIICHzAdBgNVHQ4E FgQU6PnOE3rhmtBdg4sNDS8rpFg5guwwHwYDVR0jBBgwFoAUL8CZI7Bafo8a3ZpZ hO3BkyDbl0swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzEzMS9MOENaSTdCYWZvOGEzWnBaaE8zQmt5RGJsMHMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9MOENaSTdCYWZvOGEzWnBaaE8zQmt5 RGJsMHMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTMxLzZQbk9FM3JobXRCZGc0c05EUzhycEZnNWd1dy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA91jANBgkqhkiG9w0BAQsFAAOCAQEAspBQLHT5nqVsFkedNVd4GqFRKaYx rZXdU8Wk/6U4t+Zdg8Pipk+BuRb1MagcMB3vPFrjcKUCPLck9xQZxpDn9l0x1+RA 27cAETcOisv2vEIutSMowU0eOKfe8vRraOPTnozd/D76hr0hv7Jqx25YuvdWKzrx WLgiH06b1uTr78vOr0S8coFocufn4uMAmIfanqTXg+X556VVFYSnH77WDTqxB4mx WefNa7afqgaaOJe8ZoC6BoCD13tTS3DgTX2+mFumf1nKS/7EdiZpqHW0Wtk1jrJ8 14Kss+Q9kWbznV1ZLGBTBxOD1jCp7AkWbe5r4lR6DSVpHoaV+dTaCzgT1A== -----END CERTIFICATE-----Generated at Mon Nov 25 23:59:02 2024 by rpki-client on console-fra.rpki-client.org