$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/3_F0NjbDRhuVUuPfobWJG5M7IYY.roa File: 3_F0NjbDRhuVUuPfobWJG5M7IYY.roa (raw, json) Hash identifier: FdYvms8NQGYLPb5FZBLWejbLR5s5XDTABYRrDVEzwYY= Subject key identifier: DF:F1:74:36:36:C3:46:1B:95:52:E3:DF:A1:B5:89:1B:93:3B:21:86 Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Certificate serial: 0121 Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/3_F0NjbDRhuVUuPfobWJG5M7IYY.roa Signing time: Fri 01 Sep 2023 01:30:28 +0000 ROA not before: Fri 01 Sep 2023 01:30:28 +0000 ROA not after: Wed 14 Aug 2024 01:30:02 +0000 asID: 18134 IP address blocks: 111.125.144.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 01:34:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 289 (0x121) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Validity Not Before: Sep 1 01:30:28 2023 GMT Not After : Aug 14 01:30:02 2024 GMT Subject: CN=DFF1743636C3461B9552E3DFA1B5891B933B2186 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:50:cb:cd:72:87:7e:1d:64:8b:3b:97:1d:78: b7:b0:2e:12:f5:4c:ad:e2:9a:93:09:c6:04:a0:81: 85:24:74:90:5b:a0:e0:71:c5:66:39:0a:24:60:a0: af:38:92:c8:ba:15:3a:2b:d4:29:e1:d6:9e:ff:27: 72:a2:7c:1d:da:ec:9b:17:76:3a:f7:7d:ad:c6:f5: 37:43:e2:c8:f2:17:77:6f:41:b7:4b:96:fe:67:e1: 02:5d:22:cc:bb:e9:ac:ed:c1:52:9c:15:00:6e:21: 5a:58:08:59:2b:be:7b:22:af:d2:2c:4c:9e:a7:2d: 69:10:e8:39:78:5f:d5:87:8a:ab:58:fd:c1:0c:00: ad:0e:a9:cb:0e:28:a0:bf:47:97:bc:f9:cc:a1:cc: 15:c1:03:43:a9:f2:99:18:04:c6:b0:d8:1e:8e:15: 4a:19:fe:fc:de:be:e7:54:e3:50:9a:35:06:f5:78: 3f:1e:9c:e9:bf:2f:a9:3b:68:6c:34:df:3d:51:5d: b1:14:e8:b4:04:90:f6:cf:bc:71:ff:48:9b:b1:70: f4:f3:e4:ca:ce:b1:07:3f:e4:22:d7:e5:9e:56:c9: cd:87:56:0c:64:0b:60:7c:2f:d5:e1:3b:7f:c5:ae: b0:95:11:8e:28:23:7c:b2:43:d0:c6:62:59:5b:fd: b2:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:F1:74:36:36:C3:46:1B:95:52:E3:DF:A1:B5:89:1B:93:3B:21:86 X509v3 Authority Key Identifier: keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/3_F0NjbDRhuVUuPfobWJG5M7IYY.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 111.125.144.0/21 Signature Algorithm: sha256WithRSAEncryption 55:bd:aa:93:7d:17:a4:cf:54:75:d8:d7:a2:9b:aa:68:56:91: fd:cb:f1:fc:6c:f5:39:f2:f2:bd:c9:6f:a7:73:15:a9:57:20: 7f:56:cd:99:3f:bb:18:a1:d5:b6:99:69:7a:f1:4d:c1:b0:1f: a7:d0:41:4c:7e:ac:37:fc:49:fb:8a:98:b6:bd:17:da:57:13: c8:9b:62:1a:a5:d8:78:79:74:6d:44:4a:01:75:46:74:b4:d1: 54:06:a6:9c:47:f9:78:c6:f7:17:3b:5f:08:a3:50:b6:7d:c5: 2b:45:53:ab:9f:ff:e2:af:92:16:ab:18:42:bc:82:1d:e0:3d: e5:10:1b:3f:a8:c5:43:cc:f3:84:1e:a9:ce:39:71:10:cf:cf: e7:ea:b1:11:fe:5f:96:e1:9a:87:34:c5:dc:5d:37:77:ec:bd: 25:1b:87:45:e0:a5:86:55:48:6d:aa:02:6d:f6:bc:fd:90:0a: fb:46:cd:e3:ac:40:e1:13:fe:b0:99:55:96:a4:b0:6e:9d:db: 1b:b6:55:03:15:3d:e6:50:36:80:6e:41:7a:4c:09:2c:8a:81: 13:d6:b9:aa:07:ef:4f:0a:37:41:68:eb:b0:02:13:41:9f:95: aa:5d:b7:7b:a9:94:09:e3:52:0d:70:6a:09:5e:cc:cc:38:1c: 1f:ae:b5:55 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICASEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yMzA5MDEw MTMwMjhaFw0yNDA4MTQwMTMwMDJaMDMxMTAvBgNVBAMTKERGRjE3NDM2MzZDMzQ2 MUI5NTUyRTNERkExQjU4OTFCOTMzQjIxODYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDmUMvNcod+HWSLO5cdeLewLhL1TK3impMJxgSggYUkdJBboOBx xWY5CiRgoK84ksi6FTor1Cnh1p7/J3KifB3a7JsXdjr3fa3G9TdD4sjyF3dvQbdL lv5n4QJdIsy76aztwVKcFQBuIVpYCFkrvnsir9IsTJ6nLWkQ6Dl4X9WHiqtY/cEM AK0OqcsOKKC/R5e8+cyhzBXBA0Op8pkYBMaw2B6OFUoZ/vzevudU41CaNQb1eD8e nOm/L6k7aGw03z1RXbEU6LQEkPbPvHH/SJuxcPTz5MrOsQc/5CLX5Z5Wyc2HVgxk C2B8L9XhO3/FrrCVEY4oI3yyQ9DGYllb/bJvAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU3/F0NjbDRhuVUuPfobWJG5M7IYYwHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNjcxLzNfRjBOamJEUmh1VlV1UGZvYldKRzVNN0lZWS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBANvfZAwDQYJKoZIhvcNAQELBQADggEBAFW9qpN9F6TPVHXY16KbqmhWkf3L 8fxs9Tny8r3Jb6dzFalXIH9WzZk/uxih1baZaXrxTcGwH6fQQUx+rDf8SfuKmLa9 F9pXE8ibYhql2Hh5dG1ESgF1RnS00VQGppxH+XjG9xc7XwijULZ9xStFU6uf/+Kv kharGEK8gh3gPeUQGz+oxUPM84Qeqc45cRDPz+fqsRH+X5bhmoc0xdxdN3fsvSUb h0XgpYZVSG2qAm32vP2QCvtGzeOsQOET/rCZVZaksG6d2xu2VQMVPeZQNoBuQXpM CSyKgRPWuaoH708KN0Fo67ACE0Gflapdt3uplAnjUg1waglezMw4HB+utVU= -----END CERTIFICATE-----Generated at Sat May 18 12:40:38 2024 by rpki-client on console-ams.rpki-client.org