$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/2AWm8e6y35wQ43hXkHwvL53AIrQ.roa File: 2AWm8e6y35wQ43hXkHwvL53AIrQ.roa (raw, json) Hash identifier: uEM0HRLBE3cQcGTA+3JJyCykvvk+CSrJ7Gb2Cudgr0A= Subject key identifier: D8:05:A6:F1:EE:B2:DF:9C:10:E3:78:57:90:7C:2F:2F:9D:C0:22:B4 Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Certificate serial: 01B1 Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/2AWm8e6y35wQ43hXkHwvL53AIrQ.roa Signing time: Sun 01 Oct 2023 01:36:38 +0000 ROA not before: Sun 01 Oct 2023 01:36:38 +0000 ROA not after: Sat 14 Sep 2024 01:30:03 +0000 asID: 9824 IP address blocks: 219.113.96.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Jun 2024 02:39:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 433 (0x1b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Validity Not Before: Oct 1 01:36:38 2023 GMT Not After : Sep 14 01:30:03 2024 GMT Subject: CN=D805A6F1EEB2DF9C10E37857907C2F2F9DC022B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:5d:65:66:cf:f0:a9:aa:a5:88:3b:97:5b:6e: 3b:d3:2e:1c:a3:fe:cd:ac:28:cd:54:20:6b:1d:ea: 85:7c:c7:5d:f2:ea:e9:50:03:d6:93:87:ae:52:10: 8f:94:0a:eb:30:56:05:9c:c8:3c:d5:6d:a5:f1:2e: 2d:04:99:51:40:87:f9:db:32:48:e1:5e:eb:34:17: 47:2a:b3:21:b4:a8:38:1b:c5:ed:8f:34:3c:32:c1: 92:af:59:6d:97:a7:66:2a:e3:80:a1:09:8d:9d:4b: ba:07:7a:a3:39:f2:35:db:57:fa:84:d0:40:88:90: e3:1c:56:8d:c6:db:d8:0a:14:ba:da:dc:a9:0b:d6: f4:d4:1e:73:6c:12:2a:a5:46:f3:23:e0:de:43:01: c7:f4:7b:83:85:29:bd:9c:3d:b5:4b:49:75:25:1c: 70:15:d4:44:71:f7:da:40:a3:ce:28:26:16:f4:6a: 20:c5:3b:d2:f4:85:a9:73:34:55:10:b7:61:ca:d4: 35:e8:cd:23:6a:90:ff:fd:af:d6:f3:6d:4d:7d:cb: 64:35:c6:25:58:1f:88:32:75:96:f6:7e:ae:75:e1: 71:61:e2:10:88:ae:76:10:3c:c0:3a:41:d3:4a:05: bb:5a:15:e7:49:07:cd:e5:e3:13:21:3c:cf:7c:94: 40:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:05:A6:F1:EE:B2:DF:9C:10:E3:78:57:90:7C:2F:2F:9D:C0:22:B4 X509v3 Authority Key Identifier: keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/2AWm8e6y35wQ43hXkHwvL53AIrQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 219.113.96.0/20 Signature Algorithm: sha256WithRSAEncryption 96:35:93:da:06:ce:58:05:e5:88:b7:b9:90:33:7a:88:83:d0: b0:d8:02:d3:24:ba:97:29:de:64:92:28:86:40:61:ba:5d:cb: 49:11:15:0c:b1:24:6c:d4:a0:0f:9a:cb:e8:f4:a5:5b:67:cc: 1c:af:48:37:6d:a8:6b:fd:85:2a:5e:e9:21:9f:c9:f2:1c:04: 79:0d:9d:a6:2d:3c:95:b7:07:1c:0b:74:26:80:aa:1b:77:a8: 3c:37:a5:7b:0c:3a:b2:e8:7c:95:da:e6:bc:50:00:68:85:83: 54:12:95:53:f7:d3:fe:4e:0c:2e:ac:6f:ee:d5:6c:07:c0:d5: d7:6a:e8:05:7a:d2:c8:32:60:be:23:c0:04:5a:0b:e3:2d:ca: b0:69:f2:98:78:de:5e:bb:a8:71:58:6a:8a:b2:00:84:6f:7c: 69:e5:3a:e3:d5:f7:23:08:71:82:43:7c:cb:9c:05:4b:23:9b: 02:b9:bd:51:a0:e4:71:9e:2d:c0:8d:15:b5:fc:43:a5:29:fc: e6:26:96:19:52:43:2c:57:b6:b1:40:c1:15:01:ab:59:3b:c2: 69:fb:dd:c5:ba:aa:e4:cd:9e:81:15:dd:18:0a:13:36:f8:30: 51:c3:48:31:e9:97:ba:2d:a4:5d:f3:d2:68:16:4e:42:72:ef: 32:8d:ff:c2 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAbEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yMzEwMDEw MTM2MzhaFw0yNDA5MTQwMTMwMDNaMDMxMTAvBgNVBAMTKEQ4MDVBNkYxRUVCMkRG OUMxMEUzNzg1NzkwN0MyRjJGOURDMDIyQjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDjXWVmz/CpqqWIO5dbbjvTLhyj/s2sKM1UIGsd6oV8x13y6ulQ A9aTh65SEI+UCuswVgWcyDzVbaXxLi0EmVFAh/nbMkjhXus0F0cqsyG0qDgbxe2P NDwywZKvWW2Xp2Yq44ChCY2dS7oHeqM58jXbV/qE0ECIkOMcVo3G29gKFLra3KkL 1vTUHnNsEiqlRvMj4N5DAcf0e4OFKb2cPbVLSXUlHHAV1ERx99pAo84oJhb0aiDF O9L0halzNFUQt2HK1DXozSNqkP/9r9bzbU19y2Q1xiVYH4gydZb2fq514XFh4hCI rnYQPMA6QdNKBbtaFedJB83l4xMhPM98lEAZAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU2AWm8e6y35wQ43hXkHwvL53AIrQwHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNjcxLzJBV204ZTZ5MzV3UTQzaFhrSHd2TDUzQUlyUS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBATbcWAwDQYJKoZIhvcNAQELBQADggEBAJY1k9oGzlgF5Yi3uZAzeoiD0LDY AtMkupcp3mSSKIZAYbpdy0kRFQyxJGzUoA+ay+j0pVtnzByvSDdtqGv9hSpe6SGf yfIcBHkNnaYtPJW3BxwLdCaAqht3qDw3pXsMOrLofJXa5rxQAGiFg1QSlVP30/5O DC6sb+7VbAfA1ddq6AV60sgyYL4jwARaC+MtyrBp8ph43l67qHFYaoqyAIRvfGnl OuPV9yMIcYJDfMucBUsjmwK5vVGg5HGeLcCNFbX8Q6Up/OYmlhlSQyxXtrFAwRUB q1k7wmn73cW6quTNnoEV3RgKEzb4MFHDSDHpl7otpF3z0mgWTkJy7zKN/8I= -----END CERTIFICATE-----Generated at Thu May 30 03:08:55 2024 by rpki-client on console-fra.rpki-client.org