$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/1eaKquNAvLkogpe1Zr6_Vs_61jQ.roa File: 1eaKquNAvLkogpe1Zr6_Vs_61jQ.roa (raw, json) Hash identifier: shyKC9xmmrthS0UDaxLT6wqO8sngjp9nDIxc9Kkl1ss= Subject key identifier: D5:E6:8A:AA:E3:40:BC:B9:28:82:97:B5:66:BE:BF:56:CF:FA:D6:34 Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Certificate serial: 0245 Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/1eaKquNAvLkogpe1Zr6_Vs_61jQ.roa Signing time: Sat 31 Aug 2024 01:33:33 +0000 ROA not before: Sat 31 Aug 2024 01:33:33 +0000 ROA not after: Fri 15 Aug 2025 01:30:02 +0000 asID: 9824 IP address blocks: 202.57.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 06:14:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 581 (0x245) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Validity Not Before: Aug 31 01:33:33 2024 GMT Not After : Aug 15 01:30:02 2025 GMT Subject: CN=D5E68AAAE340BCB9288297B566BEBF56CFFAD634 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:0d:a4:41:6b:81:7c:e9:d2:3a:2f:74:d9:56: 86:0b:54:65:1f:0e:f2:c3:26:41:1c:2a:65:61:83: aa:6e:8f:df:0e:f1:12:bf:1a:05:08:40:c8:8d:8a: 1b:15:77:b8:06:82:8d:a4:92:79:9f:b1:7d:cb:af: a5:1d:1a:e5:7c:79:d1:ef:bf:fe:4b:e7:c9:81:8d: 35:3a:d8:f0:96:54:dc:3a:36:e6:af:ab:e6:73:a8: 89:1e:c8:00:98:24:72:56:ad:ca:be:30:d8:9b:b7: 98:e3:e9:50:b2:9a:47:b3:cf:33:69:8f:6a:8a:9f: a1:52:27:79:67:25:83:e2:89:46:db:45:ae:0a:89: d5:ec:c6:0c:fd:0c:23:01:fc:12:51:b7:e9:a4:82: 6b:f4:24:d1:34:1c:f1:e3:e7:c3:b9:76:de:2f:01: c4:da:ec:3c:36:7d:b3:9f:48:e7:58:d5:e8:dd:9b: fd:73:82:ed:a4:5d:4d:f3:10:ba:6a:3a:35:6c:c2: d0:01:15:41:de:31:15:86:9f:b3:64:96:d5:48:01: 89:42:a0:7e:9d:38:a5:39:07:ad:c4:99:2e:42:90: a0:d5:b6:21:63:24:d6:2b:05:9c:55:54:2b:67:c7: a6:3a:22:f4:4f:ea:b7:27:80:64:58:c0:5c:23:f8: 9b:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:E6:8A:AA:E3:40:BC:B9:28:82:97:B5:66:BE:BF:56:CF:FA:D6:34 X509v3 Authority Key Identifier: keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/1eaKquNAvLkogpe1Zr6_Vs_61jQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.57.224.0/20 Signature Algorithm: sha256WithRSAEncryption 1b:0f:c2:b2:59:04:bf:5f:46:35:a6:b8:2c:20:ec:b0:c3:23: 9f:c5:5f:3b:e0:7a:bb:75:19:38:b0:1a:91:c8:c6:d3:01:b2: 00:65:df:3a:28:7c:0b:22:42:97:8a:89:4e:0c:21:8a:e6:71: 94:06:ab:84:dc:7a:9f:ab:46:06:31:1a:41:97:e4:f5:62:a9: d0:f3:d1:dc:eb:db:a6:0f:e9:1e:9d:cb:21:cc:0a:94:9f:25: e2:87:37:ab:69:c7:07:a7:3f:40:a7:36:3c:02:82:4e:13:c3: 4f:fd:c6:28:f3:4d:ab:b1:01:64:11:df:ac:eb:ae:d9:5a:1d: 3f:ec:64:eb:b5:23:f0:e9:2d:3e:e7:55:ae:2d:bf:08:59:c8: c8:c1:59:ed:fb:36:9f:b2:43:34:5e:64:22:23:d8:02:33:78: e2:2d:9f:82:57:cf:29:8a:36:ed:9a:67:48:40:07:7f:9e:9e: 8b:34:80:e8:18:a9:a5:e1:2f:dc:2f:7a:0f:9f:b7:8e:d2:f4: fa:c2:24:8d:cd:19:c5:19:dd:34:ac:64:42:1d:fa:23:07:9a: eb:1b:73:4b:19:8f:9e:c4:86:9d:5e:bc:5e:e7:77:29:c6:63: 8c:4a:0f:1d:21:52:10:47:56:71:12:65:0c:aa:6d:26:6f:c5: 7f:5b:4b:02 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAkUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yNDA4MzEw MTMzMzNaFw0yNTA4MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEQ1RTY4QUFBRTM0MEJD QjkyODgyOTdCNTY2QkVCRjU2Q0ZGQUQ2MzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDpDaRBa4F86dI6L3TZVoYLVGUfDvLDJkEcKmVhg6puj98O8RK/ GgUIQMiNihsVd7gGgo2kknmfsX3Lr6UdGuV8edHvv/5L58mBjTU62PCWVNw6Nuav q+ZzqIkeyACYJHJWrcq+MNibt5jj6VCymkezzzNpj2qKn6FSJ3lnJYPiiUbbRa4K idXsxgz9DCMB/BJRt+mkgmv0JNE0HPHj58O5dt4vAcTa7Dw2fbOfSOdY1ejdm/1z gu2kXU3zELpqOjVswtABFUHeMRWGn7NkltVIAYlCoH6dOKU5B63EmS5CkKDVtiFj JNYrBZxVVCtnx6Y6IvRP6rcngGRYwFwj+JsFAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU1eaKquNAvLkogpe1Zr6/Vs/61jQwHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNjcxLzFlYUtxdU5Bdkxrb2dwZTFacjZfVnNfNjFqUS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBATKOeAwDQYJKoZIhvcNAQELBQADggEBABsPwrJZBL9fRjWmuCwg7LDDI5/F Xzvgert1GTiwGpHIxtMBsgBl3zoofAsiQpeKiU4MIYrmcZQGq4Tcep+rRgYxGkGX 5PViqdDz0dzr26YP6R6dyyHMCpSfJeKHN6tpxwenP0CnNjwCgk4Tw0/9xijzTaux AWQR36zrrtlaHT/sZOu1I/DpLT7nVa4tvwhZyMjBWe37Np+yQzReZCIj2AIzeOIt n4JXzymKNu2aZ0hAB3+enos0gOgYqaXhL9wveg+ft47S9PrCJI3NGcUZ3TSsZEId +iMHmusbc0sZj57Ehp1evF7ndynGY4xKDx0hUhBHVnESZQyqbSZvxX9bSwI= -----END CERTIFICATE-----Generated at Fri Nov 22 11:45:57 2024 by rpki-client on console-ams.rpki-client.org