$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/2716/fUh9JS_ExcynBjkCrQByU1wlxlY.roa File: fUh9JS_ExcynBjkCrQByU1wlxlY.roa (raw, json) Hash identifier: r4VOBjyJ3dPOaCtvyahQs/PjGtofHYqLQYSDEovUUxw= Subject key identifier: 7D:48:7D:25:2F:C4:C5:CC:A7:06:39:02:AD:00:72:53:5C:25:C6:56 Certificate issuer: /CN=A6082143BCEF52E712B4A5BD5D6E5C195379D91A Certificate serial: 33 Authority key identifier: A6:08:21:43:BC:EF:52:E7:12:B4:A5:BD:5D:6E:5C:19:53:79:D9:1A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pgghQ7zvUucStKW9XW5cGVN52Ro.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2716/fUh9JS_ExcynBjkCrQByU1wlxlY.roa Signing time: Mon 01 Jan 2024 01:30:36 +0000 ROA not before: Mon 01 Jan 2024 01:30:36 +0000 ROA not after: Sat 14 Dec 2024 01:30:03 +0000 asID: 18131 IP address blocks: 192.47.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2716/pgghQ7zvUucStKW9XW5cGVN52Ro.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2716/pgghQ7zvUucStKW9XW5cGVN52Ro.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pgghQ7zvUucStKW9XW5cGVN52Ro.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 13 Jun 2024 05:56:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51 (0x33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A6082143BCEF52E712B4A5BD5D6E5C195379D91A Validity Not Before: Jan 1 01:30:36 2024 GMT Not After : Dec 14 01:30:03 2024 GMT Subject: CN=7D487D252FC4C5CCA7063902AD0072535C25C656 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:9e:3b:04:9b:9a:4c:6d:74:f6:4a:b4:e8:b3: 39:38:ce:b5:15:2f:98:cb:ca:90:86:20:34:23:52: 40:e2:99:4f:1d:2f:a9:c9:76:c4:9a:a5:f7:46:ba: fa:fe:08:18:98:4f:2f:ce:10:fe:51:64:75:38:e0: 6f:a1:1c:c3:41:48:ce:79:0b:02:54:a5:f7:5d:d9: 3e:63:26:00:af:b4:b9:7c:dc:cb:5a:4a:e2:5a:67: 15:63:d7:2d:a7:3d:b6:00:eb:58:78:89:0b:20:c0: 26:8d:b9:81:c9:26:7f:d3:68:72:43:0e:a1:92:2b: 39:63:0b:c1:ed:06:00:a6:79:61:01:39:33:c2:63: dd:e4:f8:40:94:d7:c1:06:a4:37:ec:35:c8:49:ad: d2:39:01:6e:39:9c:8f:12:d5:ed:72:33:6d:76:68: 92:50:e1:b3:68:8f:42:c9:4e:cf:0d:81:3c:1f:43: 99:b3:0d:27:60:3f:e5:e6:5a:bd:ae:2d:c9:cb:23: 7a:16:85:8d:4d:63:3c:19:4f:94:0d:ff:9a:b5:ee: d3:7c:0a:7e:4b:cb:aa:35:0f:4d:c7:dd:64:fc:22: 5e:78:ae:ab:fc:09:f0:11:6a:93:f4:e8:bb:ee:91: 58:4e:5e:de:13:3f:a3:80:72:82:26:64:b5:f9:87: b2:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:48:7D:25:2F:C4:C5:CC:A7:06:39:02:AD:00:72:53:5C:25:C6:56 X509v3 Authority Key Identifier: keyid:A6:08:21:43:BC:EF:52:E7:12:B4:A5:BD:5D:6E:5C:19:53:79:D9:1A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2716/pgghQ7zvUucStKW9XW5cGVN52Ro.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pgghQ7zvUucStKW9XW5cGVN52Ro.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2716/fUh9JS_ExcynBjkCrQByU1wlxlY.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 192.47.166.0/24 Signature Algorithm: sha256WithRSAEncryption 1e:9d:3b:da:44:08:4e:73:b1:7e:36:b9:31:f2:7f:ed:33:6d: 72:77:26:39:da:7d:a6:a3:d0:e8:85:a9:c6:61:89:f3:d6:5e: 7a:9f:57:af:74:1e:e0:7d:50:4a:11:aa:6a:28:ea:e5:82:05: d2:29:e6:3b:59:01:8d:68:83:9d:06:44:a3:49:40:22:d2:33: f4:c7:f3:4f:df:d0:87:57:21:03:cc:bc:5e:e1:13:45:3f:09: 18:9b:96:60:28:17:2e:a5:95:23:6e:fe:49:69:d6:3c:e4:f9: 0b:76:1e:b1:06:a1:f8:0b:cb:00:1f:00:22:7b:cb:ef:a8:a0: fc:5a:c2:71:58:de:b0:f3:31:e6:e2:e6:a0:74:f1:7f:52:bb: 66:06:c3:25:56:f1:d0:13:e6:cb:38:f0:bd:a1:f5:03:f4:29: 84:ba:dc:0e:ae:bd:79:e9:04:b5:b2:ee:e8:e0:67:14:02:ab: 6a:4e:e1:b8:ca:6e:69:35:9e:57:b0:2a:fd:2d:aa:cd:a5:78: 66:e9:f4:47:be:eb:88:58:25:92:00:a4:89:ee:41:45:c1:ce: 73:a9:d3:d9:07:9e:ca:cd:46:8c:8c:0f:f0:89:33:90:8d:65: 13:2e:7d:7f:9b:c8:52:36:c2:c4:5d:44:2a:6c:28:c3:cf:94: b5:70:14:3a -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgIBMzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhBNjA4 MjE0M0JDRUY1MkU3MTJCNEE1QkQ1RDZFNUMxOTUzNzlEOTFBMB4XDTI0MDEwMTAx MzAzNloXDTI0MTIxNDAxMzAwM1owMzExMC8GA1UEAxMoN0Q0ODdEMjUyRkM0QzVD Q0E3MDYzOTAyQUQwMDcyNTM1QzI1QzY1NjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKaeOwSbmkxtdPZKtOizOTjOtRUvmMvKkIYgNCNSQOKZTx0vqcl2 xJql90a6+v4IGJhPL84Q/lFkdTjgb6Ecw0FIznkLAlSl913ZPmMmAK+0uXzcy1pK 4lpnFWPXLac9tgDrWHiJCyDAJo25gckmf9NockMOoZIrOWMLwe0GAKZ5YQE5M8Jj 3eT4QJTXwQakN+w1yEmt0jkBbjmcjxLV7XIzbXZoklDhs2iPQslOzw2BPB9DmbMN J2A/5eZava4tycsjehaFjU1jPBlPlA3/mrXu03wKfkvLqjUPTcfdZPwiXniuq/wJ 8BFqk/Tou+6RWE5e3hM/o4BygiZktfmHsssCAwEAAaOCAiYwggIiMB0GA1UdDgQW BBR9SH0lL8TFzKcGOQKtAHJTXCXGVjAfBgNVHSMEGDAWgBSmCCFDvO9S5xK0pb1d blwZU3nZGjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjcxNi9wZ2doUTd6dlV1Y1N0S1c5WFc1Y0dWTjUyUm8uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9wZ2doUTd6dlV1Y1N0S1c5WFc1Y0dW TjUyUm8uY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMjcxNi9mVWg5SlNfRXhjeW5CamtDclFCeVUxd2x4bFkucm9h MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAwC+mMA0GCSqGSIb3DQEBCwUAA4IBAQAenTvaRAhOc7F+Nrkx8n/tM21y dyY52n2mo9DohanGYYnz1l56n1evdB7gfVBKEapqKOrlggXSKeY7WQGNaIOdBkSj SUAi0jP0x/NP39CHVyEDzLxe4RNFPwkYm5ZgKBcupZUjbv5JadY85PkLdh6xBqH4 C8sAHwAie8vvqKD8WsJxWN6w8zHm4uagdPF/UrtmBsMlVvHQE+bLOPC9ofUD9CmE utwOrr156QS1su7o4GcUAqtqTuG4ym5pNZ5XsCr9LarNpXhm6fRHvuuIWCWSAKSJ 7kFFwc5zqdPZB57KzUaMjA/wiTOQjWUTLn1/m8hSNsLEXUQqbCjDz5S1cBQ6 -----END CERTIFICATE-----Generated at Thu Jun 6 14:56:15 2024 by rpki-client on console-fra.rpki-client.org