$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/-BFomBXyUmNfuy4glkJqgeyS8kA.roa File: -BFomBXyUmNfuy4glkJqgeyS8kA.roa (raw, json) Hash identifier: Qd+bEicTdAYYm9rO1aDk3ioWcz+eCN8ug9TIl6pZXTE= Subject key identifier: F8:11:68:98:15:F2:52:63:5F:BB:2E:20:96:42:6A:81:EC:92:F2:40 Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Certificate serial: 0230 Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-BFomBXyUmNfuy4glkJqgeyS8kA.roa Signing time: Sat 31 Aug 2024 01:33:25 +0000 ROA not before: Sat 31 Aug 2024 01:33:25 +0000 ROA not after: Fri 15 Aug 2025 01:30:02 +0000 asID: 9824 IP address blocks: 61.215.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 06:14:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 560 (0x230) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Validity Not Before: Aug 31 01:33:25 2024 GMT Not After : Aug 15 01:30:02 2025 GMT Subject: CN=F811689815F252635FBB2E2096426A81EC92F240 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:54:5a:64:dd:4e:3a:04:2b:d2:38:ee:94:35: de:75:2c:19:f7:f9:67:87:8c:e1:90:a7:5a:6e:27: a0:60:7b:7d:d8:0b:5a:fb:81:ff:d6:0c:f0:6b:9c: 52:b0:ec:27:17:a9:64:01:f9:a1:47:fb:69:7f:ee: cb:d9:91:e0:88:d7:89:0c:96:bb:8b:40:a3:e5:ad: 83:6f:e3:b1:31:72:3a:ea:0c:7b:c5:20:09:6e:c1: 1e:66:fb:c0:26:d0:ea:d8:35:a4:27:67:27:d9:5b: fc:c9:f1:d2:18:52:1f:4c:b4:02:f5:93:b1:7a:0d: 9b:aa:92:16:76:a1:54:e9:e1:aa:79:35:d7:28:d4: 72:0d:63:09:04:2f:7d:b2:2c:bc:8d:c0:fa:4d:04: 88:ec:9f:95:8e:62:f3:4f:1a:01:cb:24:96:ec:f9: e2:81:c8:74:df:ab:e0:69:6b:8f:97:cc:b2:f5:22: 38:df:94:0c:c2:bd:14:0c:7e:46:05:83:06:3e:aa: f4:21:66:85:1e:8f:c5:05:9d:a9:65:28:c5:fd:b3: 42:a9:38:87:6f:2b:97:74:85:b8:bf:63:c6:be:df: 6a:1c:4d:7e:9a:60:4c:62:3d:7d:ae:43:77:20:4a: 8e:2b:28:b1:65:9b:68:db:18:4f:08:36:0c:93:78: 6e:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:11:68:98:15:F2:52:63:5F:BB:2E:20:96:42:6A:81:EC:92:F2:40 X509v3 Authority Key Identifier: keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-BFomBXyUmNfuy4glkJqgeyS8kA.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 61.215.128.0/19 Signature Algorithm: sha256WithRSAEncryption 33:bc:20:8f:de:4e:c9:62:fa:63:22:0e:85:2c:82:f8:66:78: 30:93:3b:be:8d:42:b2:94:69:23:0c:bd:af:b8:88:7f:f0:26: 4e:41:dd:37:1e:86:5c:3c:18:89:16:8b:1e:8b:8d:49:b5:20: 1f:a3:b5:da:ad:f0:f0:db:b0:6e:94:c3:53:94:b8:51:e3:68: ef:d0:3d:32:8f:4c:63:68:41:54:7d:90:1d:0c:75:26:14:fa: 3b:80:e1:55:10:86:4d:84:16:08:97:4c:25:94:f4:d4:77:1e: 8f:db:35:48:41:1d:1b:09:7d:32:a7:6e:92:48:09:12:e6:43: ff:0b:0b:df:b9:79:00:8c:03:3b:00:91:cc:1a:26:88:de:b1: 04:5a:07:6e:33:ec:06:31:fa:52:72:61:d8:2d:ab:6a:bd:a9: 25:28:3a:99:8e:c8:09:36:65:e5:df:c8:e9:75:4b:d5:7b:71: 22:2f:90:02:b3:09:19:b2:42:ee:3d:0f:dc:47:8b:ba:ec:d7: c8:ba:17:2f:84:cb:ea:97:45:54:d9:15:09:7e:78:a9:91:fc: 2b:6a:b8:2f:7e:b5:23:da:cd:90:79:4f:38:f0:ec:b6:bf:81: d7:e9:e3:d8:b8:d1:b1:cf:eb:1f:ec:cf:6d:74:f9:14:6d:72: 23:6c:1a:0e -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAjAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yNDA4MzEw MTMzMjVaFw0yNTA4MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEY4MTE2ODk4MTVGMjUy NjM1RkJCMkUyMDk2NDI2QTgxRUM5MkYyNDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCyVFpk3U46BCvSOO6UNd51LBn3+WeHjOGQp1puJ6Bge33YC1r7 gf/WDPBrnFKw7CcXqWQB+aFH+2l/7svZkeCI14kMlruLQKPlrYNv47ExcjrqDHvF IAluwR5m+8Am0OrYNaQnZyfZW/zJ8dIYUh9MtAL1k7F6DZuqkhZ2oVTp4ap5Ndco 1HINYwkEL32yLLyNwPpNBIjsn5WOYvNPGgHLJJbs+eKByHTfq+Bpa4+XzLL1Ijjf lAzCvRQMfkYFgwY+qvQhZoUej8UFnallKMX9s0KpOIdvK5d0hbi/Y8a+32ocTX6a YExiPX2uQ3cgSo4rKLFlm2jbGE8INgyTeG51AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU+BFomBXyUmNfuy4glkJqgeyS8kAwHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNjcxLy1CRm9tQlh5VW1OZnV5NGdsa0pxZ2V5UzhrQS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAU914AwDQYJKoZIhvcNAQELBQADggEBADO8II/eTsli+mMiDoUsgvhmeDCT O76NQrKUaSMMva+4iH/wJk5B3Tcehlw8GIkWix6LjUm1IB+jtdqt8PDbsG6Uw1OU uFHjaO/QPTKPTGNoQVR9kB0MdSYU+juA4VUQhk2EFgiXTCWU9NR3Ho/bNUhBHRsJ fTKnbpJICRLmQ/8LC9+5eQCMAzsAkcwaJojesQRaB24z7AYx+lJyYdgtq2q9qSUo OpmOyAk2ZeXfyOl1S9V7cSIvkAKzCRmyQu49D9xHi7rs18i6Fy+Ey+qXRVTZFQl+ eKmR/CtquC9+tSPazZB5Tzjw7La/gdfp49i40bHP6x/sz210+RRtciNsGg4= -----END CERTIFICATE-----Generated at Fri Nov 22 11:45:57 2024 by rpki-client on console-ams.rpki-client.org