$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/668/FNaXD1mgFlp4tIgDIKgqyrb1m1s.roa File: FNaXD1mgFlp4tIgDIKgqyrb1m1s.roa (raw, json) Hash identifier: lCM2svh0Ftu4WsYn238DLWamqH0scUCNCfB5x1gwAVY= Subject key identifier: 14:D6:97:0F:59:A0:16:5A:78:B4:88:03:20:A8:2A:CA:B6:F5:9B:5B Certificate issuer: /CN=F556EC334102047BEDBA0C0DDB4DC930E07A9058 Certificate serial: 41 Authority key identifier: F5:56:EC:33:41:02:04:7B:ED:BA:0C:0D:DB:4D:C9:30:E0:7A:90:58 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9VbsM0ECBHvtugwN203JMOB6kFg.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/668/FNaXD1mgFlp4tIgDIKgqyrb1m1s.roa Signing time: Sun 31 Mar 2024 01:29:59 +0000 ROA not before: Sun 31 Mar 2024 01:29:59 +0000 ROA not after: Sat 15 Mar 2025 01:30:02 +0000 asID: 17948 IP address blocks: 49.236.224.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/668/9VbsM0ECBHvtugwN203JMOB6kFg.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/668/9VbsM0ECBHvtugwN203JMOB6kFg.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9VbsM0ECBHvtugwN203JMOB6kFg.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 22:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65 (0x41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F556EC334102047BEDBA0C0DDB4DC930E07A9058 Validity Not Before: Mar 31 01:29:59 2024 GMT Not After : Mar 15 01:30:02 2025 GMT Subject: CN=14D6970F59A0165A78B4880320A82ACAB6F59B5B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:8d:e7:f0:8d:11:b0:d1:07:f6:40:a8:9a:1f: ea:59:ac:03:5f:75:9c:45:cc:35:8b:60:df:91:c7: 55:4b:9d:72:50:94:f1:8a:e3:74:06:eb:bb:42:96: 3b:2f:72:ef:33:b9:71:62:b6:6a:11:ee:9f:03:69: f5:d3:0c:43:93:23:d5:21:7f:e5:ba:3d:6e:a5:6c: c7:c6:67:13:ec:92:c8:0a:28:77:ac:de:14:0d:8c: b9:59:b3:72:c2:b6:81:9c:bd:b5:f6:6f:bf:cf:c3: 06:18:f8:9a:6d:83:5e:76:d7:5c:3c:d3:30:37:8e: be:8e:12:ed:e4:7b:30:fc:de:5f:60:f1:4d:d7:1b: 2b:a4:33:53:61:68:b1:1b:fb:93:0f:fa:ff:f4:8c: 06:f1:ad:c5:7d:b3:77:fd:1c:6f:be:af:a0:56:10: 59:2a:d7:76:34:10:00:a6:af:83:6a:8e:3c:5c:a7: 96:55:ae:df:dc:03:25:e4:3b:3f:ed:eb:d5:3b:4e: 1c:eb:b4:59:57:d6:3e:fd:75:b3:5a:fa:c5:38:6a: fc:be:64:9a:0c:70:11:92:97:f2:4b:42:08:fc:fd: 19:68:bb:6f:45:c1:40:fa:c3:fc:ae:f1:28:77:ff: 8d:f7:bd:80:bc:bf:d6:1d:d1:d6:1b:de:45:00:e3: 4c:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:D6:97:0F:59:A0:16:5A:78:B4:88:03:20:A8:2A:CA:B6:F5:9B:5B X509v3 Authority Key Identifier: keyid:F5:56:EC:33:41:02:04:7B:ED:BA:0C:0D:DB:4D:C9:30:E0:7A:90:58 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/668/9VbsM0ECBHvtugwN203JMOB6kFg.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9VbsM0ECBHvtugwN203JMOB6kFg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/668/FNaXD1mgFlp4tIgDIKgqyrb1m1s.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.236.224.0/21 Signature Algorithm: sha256WithRSAEncryption 72:72:35:1e:f5:39:1d:e2:31:aa:f2:8a:ee:23:00:81:69:43: 38:19:3f:d6:b8:eb:37:d9:ee:cf:cb:0e:49:09:e9:02:9a:9e: c8:b7:8f:34:53:58:58:56:8b:0c:21:84:ff:73:ef:2d:5d:16: 83:f7:6d:7a:af:58:31:fe:2d:f7:94:d4:b6:6f:6c:72:94:ac: 97:f4:ab:a2:75:ca:a9:6d:7b:ac:8a:44:b3:cd:57:bc:3f:37: c8:db:e8:c1:7c:aa:05:44:97:52:78:97:bf:41:d4:7d:66:18: 3f:44:d0:93:87:b5:65:43:48:5f:c6:5d:c5:db:c5:ef:03:20: 89:70:81:a0:f4:57:48:98:1a:2d:9f:6c:02:1a:ad:8b:d9:30: 5f:c8:85:96:e2:55:9e:eb:d8:e9:f4:94:0d:71:13:b0:90:29: a4:d9:33:a0:6a:ab:cf:66:76:e1:b5:85:a8:b7:0e:1a:99:1d: 45:18:19:1b:5a:b9:88:72:c9:cc:60:ad:96:99:1e:3c:67:a0: 4a:d8:4f:5f:89:92:df:8a:18:da:21:20:2e:07:49:b5:70:bc: b1:7b:c3:bc:f7:72:d8:98:46:78:af:89:0d:a5:e6:ba:13:42: d3:cc:da:2c:aa:64:38:17:e5:a4:33:42:71:80:b1:51:86:6d: 30:12:e8:ac -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBQTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGNTU2 RUMzMzQxMDIwNDdCRURCQTBDMEREQjREQzkzMEUwN0E5MDU4MB4XDTI0MDMzMTAx Mjk1OVoXDTI1MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoMTRENjk3MEY1OUEwMTY1 QTc4QjQ4ODAzMjBBODJBQ0FCNkY1OUI1QjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMSN5/CNEbDRB/ZAqJof6lmsA191nEXMNYtg35HHVUudclCU8Yrj dAbru0KWOy9y7zO5cWK2ahHunwNp9dMMQ5Mj1SF/5bo9bqVsx8ZnE+ySyAood6ze FA2MuVmzcsK2gZy9tfZvv8/DBhj4mm2DXnbXXDzTMDeOvo4S7eR7MPzeX2DxTdcb K6QzU2FosRv7kw/6//SMBvGtxX2zd/0cb76voFYQWSrXdjQQAKavg2qOPFynllWu 39wDJeQ7P+3r1TtOHOu0WVfWPv11s1r6xThq/L5kmgxwEZKX8ktCCPz9GWi7b0XB QPrD/K7xKHf/jfe9gLy/1h3R1hveRQDjTCECAwEAAaOCAiQwggIgMB0GA1UdDgQW BBQU1pcPWaAWWni0iAMgqCrKtvWbWzAfBgNVHSMEGDAWgBT1VuwzQQIEe+26DA3b Tckw4HqQWDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNjY4LzlWYnNNMEVDQkh2dHVnd04yMDNKTU9CNmtGZy5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzlWYnNNMEVDQkh2dHVnd04yMDNKTU9C NmtGZy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC82NjgvRk5hWEQxbWdGbHA0dElnRElLZ3F5cmIxbTFzLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAzHs4DANBgkqhkiG9w0BAQsFAAOCAQEAcnI1HvU5HeIxqvKK7iMAgWlDOBk/ 1rjrN9nuz8sOSQnpApqeyLePNFNYWFaLDCGE/3PvLV0Wg/dteq9YMf4t95TUtm9s cpSsl/SronXKqW17rIpEs81XvD83yNvowXyqBUSXUniXv0HUfWYYP0TQk4e1ZUNI X8ZdxdvF7wMgiXCBoPRXSJgaLZ9sAhqti9kwX8iFluJVnuvY6fSUDXETsJAppNkz oGqrz2Z24bWFqLcOGpkdRRgZG1q5iHLJzGCtlpkePGegSthPX4mS34oY2iEgLgdJ tXC8sXvDvPdy2JhGeK+JDaXmuhNC08zaLKpkOBflpDNCcYCxUYZtMBLorA== -----END CERTIFICATE-----Generated at Mon Nov 25 23:59:16 2024 by rpki-client on console-fra.rpki-client.org