$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/240/FXLyGkDhS5fdpMr-Wj494M3fP_Q.roa File: FXLyGkDhS5fdpMr-Wj494M3fP_Q.roa (raw, json) Hash identifier: G+rAlNrcMvSBnOoK1iqwLpwnLTXi7iXpXvIHnsRvjwI= Subject key identifier: 15:72:F2:1A:40:E1:4B:97:DD:A4:CA:FE:5A:3E:3D:E0:CD:DF:3F:F4 Certificate issuer: /CN=9C8669BF18B31012710F48C9A8DE0BB71D7C2F66 Certificate serial: 02 Authority key identifier: 9C:86:69:BF:18:B3:10:12:71:0F:48:C9:A8:DE:0B:B7:1D:7C:2F:66 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nIZpvxizEBJxD0jJqN4Ltx18L2Y.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/FXLyGkDhS5fdpMr-Wj494M3fP_Q.roa Signing time: Fri 18 Aug 2023 02:24:21 +0000 ROA not before: Fri 18 Aug 2023 02:24:21 +0000 ROA not after: Sat 17 Aug 2024 02:01:09 +0000 asID: 9597 IP address blocks: 158.199.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/nIZpvxizEBJxD0jJqN4Ltx18L2Y.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/nIZpvxizEBJxD0jJqN4Ltx18L2Y.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nIZpvxizEBJxD0jJqN4Ltx18L2Y.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Jun 2024 02:07:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9C8669BF18B31012710F48C9A8DE0BB71D7C2F66 Validity Not Before: Aug 18 02:24:21 2023 GMT Not After : Aug 17 02:01:09 2024 GMT Subject: CN=1572F21A40E14B97DDA4CAFE5A3E3DE0CDDF3FF4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:46:7b:ec:2c:d2:8d:9c:26:be:03:95:1a:9a: f6:56:70:b4:f4:e4:6c:f4:cb:ef:86:c8:96:c5:2e: e7:06:04:12:bb:52:6b:79:30:09:c6:6f:b5:20:f0: fc:8b:17:2d:05:3e:f4:47:c5:98:ee:8e:13:b9:6e: 5e:82:25:4c:90:9f:2c:d2:ce:cc:53:05:ef:d8:1a: 59:fe:c9:a9:81:8f:da:86:55:36:fc:f8:76:3d:f5: 7d:29:c4:1c:54:92:6e:d7:78:29:f9:fc:05:51:40: 72:e4:af:da:0a:62:b9:51:de:af:a7:a4:64:a6:05: f4:a6:23:3f:cd:9d:ba:ce:2f:f5:ac:b2:9c:85:87: 7b:a6:e5:8c:49:d7:cf:b2:81:36:b2:90:9d:1c:e6: 8b:56:ef:fa:a5:4a:13:96:74:b1:c5:03:a4:6d:c6: 6d:3e:c2:0a:17:d8:c7:7a:ab:c2:1d:68:ac:04:79: 80:ec:a3:49:77:d4:79:86:1e:5d:59:95:2e:66:43: 3e:fb:9a:4c:6e:ce:59:93:c0:37:df:ad:07:f3:6c: 4f:00:11:33:05:60:11:1f:cb:37:ec:ac:0e:9a:a0: 28:79:a4:dd:1b:ef:10:9c:72:d9:84:94:5a:0b:a9: d9:5e:ac:3c:12:ba:ca:5d:03:95:66:f6:ce:8e:d2: d1:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:72:F2:1A:40:E1:4B:97:DD:A4:CA:FE:5A:3E:3D:E0:CD:DF:3F:F4 X509v3 Authority Key Identifier: keyid:9C:86:69:BF:18:B3:10:12:71:0F:48:C9:A8:DE:0B:B7:1D:7C:2F:66 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/nIZpvxizEBJxD0jJqN4Ltx18L2Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nIZpvxizEBJxD0jJqN4Ltx18L2Y.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/FXLyGkDhS5fdpMr-Wj494M3fP_Q.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 158.199.128.0/17 Signature Algorithm: sha256WithRSAEncryption 36:7d:a7:00:85:d0:16:e6:7a:c2:66:c5:c0:68:3c:1d:05:19: 2f:99:b5:69:27:62:63:fe:52:6e:82:df:c7:54:a4:00:7a:7a: 12:66:81:a6:63:2c:2b:ab:b9:5a:d7:fd:44:0d:5d:89:ad:e6: a8:01:af:53:a2:c2:62:bc:fb:1e:ba:8a:61:39:fe:9d:ff:b3: dc:f1:1f:3d:03:ec:d8:4c:a7:14:2b:04:f8:87:ee:6e:21:80: 53:8c:86:f3:2a:fe:c6:a0:cd:5d:07:b7:01:b4:62:ca:10:08: 96:3b:5b:8f:7e:b1:b2:3e:d6:ef:8d:38:b8:e4:bf:ce:3a:81: 4c:30:1e:98:d6:1d:68:4f:70:b9:28:da:a6:ac:e6:17:4d:c0: 9f:67:bd:c4:3f:0c:00:3a:8c:fb:83:44:54:3c:19:1d:cb:9a: 49:54:31:68:23:f3:7b:f1:0d:9d:01:4a:dc:6d:59:92:78:0b: 28:c5:5b:db:15:21:0e:c7:e0:5c:73:02:56:eb:45:86:e7:c3: c2:33:c3:17:c3:80:45:bd:5c:a7:3a:b1:dc:86:4d:d4:30:22: 9b:ae:b2:35:ca:e1:57:e2:99:e4:c7:5e:56:fc:67:a9:88:d1: 19:5d:fe:ca:36:a0:87:85:03:81:ff:ea:73:86:d1:c8:85:86: 9d:0c:c4:b9 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBAjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5Qzg2 NjlCRjE4QjMxMDEyNzEwRjQ4QzlBOERFMEJCNzFEN0MyRjY2MB4XDTIzMDgxODAy MjQyMVoXDTI0MDgxNzAyMDEwOVowMzExMC8GA1UEAxMoMTU3MkYyMUE0MEUxNEI5 N0REQTRDQUZFNUEzRTNERTBDRERGM0ZGNDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALxGe+ws0o2cJr4DlRqa9lZwtPTkbPTL74bIlsUu5wYEErtSa3kw CcZvtSDw/IsXLQU+9EfFmO6OE7luXoIlTJCfLNLOzFMF79gaWf7JqYGP2oZVNvz4 dj31fSnEHFSSbtd4Kfn8BVFAcuSv2gpiuVHer6ekZKYF9KYjP82dus4v9ayynIWH e6bljEnXz7KBNrKQnRzmi1bv+qVKE5Z0scUDpG3GbT7CChfYx3qrwh1orAR5gOyj SXfUeYYeXVmVLmZDPvuaTG7OWZPAN9+tB/NsTwARMwVgER/LN+ysDpqgKHmk3Rvv EJxy2YSUWgup2V6sPBK6yl0DlWb2zo7S0a0CAwEAAaOCAiQwggIgMB0GA1UdDgQW BBQVcvIaQOFLl92kyv5aPj3gzd8/9DAfBgNVHSMEGDAWgBSchmm/GLMQEnEPSMmo 3gu3HXwvZjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjQwL25JWnB2eGl6RUJKeEQwakpxTjRMdHgxOEwyWS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL25JWnB2eGl6RUJKeEQwakpxTjRMdHgx OEwyWS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8yNDAvRlhMeUdrRGhTNWZkcE1yLVdqNDk0TTNmUF9RLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEB57HgDANBgkqhkiG9w0BAQsFAAOCAQEANn2nAIXQFuZ6wmbFwGg8HQUZL5m1 aSdiY/5SboLfx1SkAHp6EmaBpmMsK6u5Wtf9RA1dia3mqAGvU6LCYrz7HrqKYTn+ nf+z3PEfPQPs2EynFCsE+IfubiGAU4yG8yr+xqDNXQe3AbRiyhAIljtbj36xsj7W 7404uOS/zjqBTDAemNYdaE9wuSjapqzmF03An2e9xD8MADqM+4NEVDwZHcuaSVQx aCPze/ENnQFK3G1ZkngLKMVb2xUhDsfgXHMCVutFhufDwjPDF8OARb1cpzqx3IZN 1DAim66yNcrhV+KZ5MdeVvxnqYjRGV3+yjagh4UDgf/qc4bRyIWGnQzEuQ== -----END CERTIFICATE-----Generated at Thu May 30 03:08:52 2024 by rpki-client on console-fra.rpki-client.org