$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/307/fRxzUcWwtAkWovpuHZbzLgSRJrk.roa File: fRxzUcWwtAkWovpuHZbzLgSRJrk.roa (raw, json) Hash identifier: MVJuyFQWzm1AlwAsx54OeVZkGjaAE4/jj+8DkgAZQ84= Subject key identifier: 7D:1C:73:51:C5:B0:B4:09:16:A2:FA:6E:1D:96:F3:2E:04:91:26:B9 Certificate issuer: /CN=6D1ED16D8C6D3BA40BF42CB3A29652ADAB76D061 Certificate serial: 0B Authority key identifier: 6D:1E:D1:6D:8C:6D:3B:A4:0B:F4:2C:B3:A2:96:52:AD:AB:76:D0:61 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bR7RbYxtO6QL9CyzopZSrat20GE.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/fRxzUcWwtAkWovpuHZbzLgSRJrk.roa Signing time: Thu 16 Nov 2023 02:44:45 +0000 ROA not before: Thu 16 Nov 2023 02:44:45 +0000 ROA not after: Thu 14 Nov 2024 01:30:03 +0000 asID: 23783 IP address blocks: 203.179.248.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/bR7RbYxtO6QL9CyzopZSrat20GE.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/bR7RbYxtO6QL9CyzopZSrat20GE.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bR7RbYxtO6QL9CyzopZSrat20GE.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11 (0xb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D1ED16D8C6D3BA40BF42CB3A29652ADAB76D061 Validity Not Before: Nov 16 02:44:45 2023 GMT Not After : Nov 14 01:30:03 2024 GMT Subject: CN=7D1C7351C5B0B40916A2FA6E1D96F32E049126B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:86:7e:4e:ce:3b:09:13:d8:a2:d0:77:3d:3c: 41:65:75:d7:b5:91:d0:52:e2:1a:8c:78:1f:22:fd: 50:ed:d9:59:78:1b:13:04:64:5f:46:89:dd:cf:93: a4:5e:1a:dc:32:63:06:77:24:8c:07:27:e2:f2:7f: a0:17:f2:19:a2:26:e9:38:d4:9a:90:db:d3:35:79: 57:67:5c:d3:60:ec:a7:cc:e3:55:7f:32:df:07:05: 1c:73:bf:3e:dc:5d:c8:52:58:54:90:8b:ff:47:3d: 7c:92:65:6e:c7:06:d5:34:5a:b2:4f:c1:43:a2:63: 9c:ba:dd:64:03:6c:9a:3b:e7:c2:b1:10:92:85:cc: b5:bb:0b:96:db:d0:5d:f2:b1:c6:19:e5:a8:5a:8d: a4:5d:d9:08:53:84:5b:63:81:f7:ae:d4:37:27:98: 7f:37:c2:5f:34:7b:de:84:7a:21:cf:2e:f3:bf:48: 03:74:20:6f:09:d7:17:d3:2d:25:3e:77:53:7d:5e: af:a9:0d:b5:25:2e:a6:ca:10:09:0a:88:eb:29:c3: e7:c7:0f:40:42:83:c2:48:8b:14:c2:93:98:ad:7b: c0:a6:8b:ff:68:bf:25:ed:aa:2a:58:0f:54:2b:0b: 58:b1:c9:a2:91:a7:18:21:bf:37:81:5d:c3:63:dc: 5d:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:1C:73:51:C5:B0:B4:09:16:A2:FA:6E:1D:96:F3:2E:04:91:26:B9 X509v3 Authority Key Identifier: keyid:6D:1E:D1:6D:8C:6D:3B:A4:0B:F4:2C:B3:A2:96:52:AD:AB:76:D0:61 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/bR7RbYxtO6QL9CyzopZSrat20GE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bR7RbYxtO6QL9CyzopZSrat20GE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/fRxzUcWwtAkWovpuHZbzLgSRJrk.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.179.248.0/23 Signature Algorithm: sha256WithRSAEncryption 7d:5d:6c:e5:b2:c1:aa:f7:bd:49:28:2f:1e:95:90:c6:2e:53: 84:bd:a8:96:6b:51:45:3e:21:0a:37:9c:6a:91:81:44:bd:04: b7:e5:d1:77:02:73:35:a8:36:fa:84:27:0d:ef:16:82:54:95: 10:b0:e3:b1:36:89:e8:0c:af:40:d7:d2:fa:14:53:6d:95:8d: 71:e8:2a:a7:3b:f7:67:bc:0c:ce:d2:6c:42:36:7e:e5:7d:93: c0:ec:07:6f:9f:0a:5d:cc:f9:1a:a7:00:4a:16:b5:33:64:e3: d0:16:c6:b4:30:a7:82:ad:4b:8a:1d:55:b2:72:54:62:de:b9: cb:db:51:69:4e:3d:c0:5d:30:f9:e0:76:bb:b8:0c:9f:1d:57: 2a:b0:15:18:3c:29:12:d0:9a:01:62:f9:51:4e:3e:74:e7:5f: 3f:43:05:32:5a:97:25:b4:97:d0:e1:ec:00:c7:24:d9:3e:08: 82:62:db:70:68:02:2a:cf:51:04:ad:e9:81:30:08:a7:33:fe: 0d:5f:f1:09:ad:38:96:e8:07:d0:ab:64:cc:d5:41:f8:91:df: 07:d5:50:4c:dd:04:68:6a:0e:4d:14:b5:ff:f7:be:26:2f:84: 13:7e:80:71:56:f1:5d:86:58:b0:91:91:17:72:58:b1:32:ab: d2:f1:7d:2b -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBCzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2RDFF RDE2RDhDNkQzQkE0MEJGNDJDQjNBMjk2NTJBREFCNzZEMDYxMB4XDTIzMTExNjAy NDQ0NVoXDTI0MTExNDAxMzAwM1owMzExMC8GA1UEAxMoN0QxQzczNTFDNUIwQjQw OTE2QTJGQTZFMUQ5NkYzMkUwNDkxMjZCOTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKeGfk7OOwkT2KLQdz08QWV117WR0FLiGox4HyL9UO3ZWXgbEwRk X0aJ3c+TpF4a3DJjBnckjAcn4vJ/oBfyGaIm6TjUmpDb0zV5V2dc02Dsp8zjVX8y 3wcFHHO/PtxdyFJYVJCL/0c9fJJlbscG1TRask/BQ6JjnLrdZANsmjvnwrEQkoXM tbsLltvQXfKxxhnlqFqNpF3ZCFOEW2OB967UNyeYfzfCXzR73oR6Ic8u879IA3Qg bwnXF9MtJT53U31er6kNtSUupsoQCQqI6ynD58cPQEKDwkiLFMKTmK17wKaL/2i/ Je2qKlgPVCsLWLHJopGnGCG/N4Fdw2PcXSECAwEAAaOCAiQwggIgMB0GA1UdDgQW BBR9HHNRxbC0CRai+m4dlvMuBJEmuTAfBgNVHSMEGDAWgBRtHtFtjG07pAv0LLOi llKtq3bQYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzA3L2JSN1JiWXh0TzZRTDlDeXpvcFpTcmF0MjBHRS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2JSN1JiWXh0TzZRTDlDeXpvcFpTcmF0 MjBHRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8zMDcvZlJ4elVjV3d0QWtXb3ZwdUhaYnpMZ1NSSnJrLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAcuz+DANBgkqhkiG9w0BAQsFAAOCAQEAfV1s5bLBqve9SSgvHpWQxi5ThL2o lmtRRT4hCjecapGBRL0Et+XRdwJzNag2+oQnDe8WglSVELDjsTaJ6AyvQNfS+hRT bZWNcegqpzv3Z7wMztJsQjZ+5X2TwOwHb58KXcz5GqcASha1M2Tj0BbGtDCngq1L ih1VsnJUYt65y9tRaU49wF0w+eB2u7gMnx1XKrAVGDwpEtCaAWL5UU4+dOdfP0MF MlqXJbSX0OHsAMck2T4IgmLbcGgCKs9RBK3pgTAIpzP+DV/xCa04lugH0KtkzNVB +JHfB9VQTN0EaGoOTRS1//e+Ji+EE36AcVbxXYZYsJGRF3JYsTKr0vF9Kw== -----END CERTIFICATE-----Generated at Sat Jun 1 13:38:46 2024 by rpki-client on console-fra.rpki-client.org