$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/3hwMUqUi9tqzbIPmyagmuL9xh90.roa File: 3hwMUqUi9tqzbIPmyagmuL9xh90.roa (raw, json) Hash identifier: qI+eOeKsouJCwuLepqB3Z516pPjObfS9D6M+WIEtdSs= Subject key identifier: DE:1C:0C:52:A5:22:F6:DA:B3:6C:83:E6:C9:A8:26:B8:BF:71:87:DD Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Certificate serial: 023A Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/3hwMUqUi9tqzbIPmyagmuL9xh90.roa Signing time: Sat 31 Aug 2024 01:33:29 +0000 ROA not before: Sat 31 Aug 2024 01:33:29 +0000 ROA not after: Fri 15 Aug 2025 01:30:02 +0000 asID: 9378 IP address blocks: 202.179.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 06:14:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 570 (0x23a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Validity Not Before: Aug 31 01:33:29 2024 GMT Not After : Aug 15 01:30:02 2025 GMT Subject: CN=DE1C0C52A522F6DAB36C83E6C9A826B8BF7187DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:4d:cc:b8:f8:67:50:4a:5b:f7:11:ae:d9:e4: e1:e6:a9:ec:4e:52:91:c6:6c:7b:13:2d:8f:1b:4f: 25:bd:dc:d2:a5:27:51:45:51:7a:21:c9:a3:53:b0: 71:3a:c1:f8:17:6e:cd:8f:b3:f5:96:df:b2:31:fa: 55:93:17:c6:f0:88:79:41:40:2d:a2:5e:90:1b:36: 47:2a:f2:29:f1:ef:74:8d:8e:f6:a9:83:4b:25:f8: 37:11:38:2e:30:4a:44:5c:e9:9d:05:3b:07:0a:bc: 6d:47:7f:a1:28:70:3a:c4:ac:dd:79:96:52:f4:f2: 80:4e:d9:40:1c:22:ad:f8:0d:29:5d:4e:86:d9:24: 7c:80:2c:a3:20:b8:85:34:ec:f0:03:d1:aa:c3:4e: ea:13:99:47:e8:10:f6:18:48:e3:eb:a6:4c:71:26: 07:71:2b:6c:aa:90:c1:52:31:1d:83:e4:f8:41:a5: d4:71:22:96:ee:59:af:1b:d4:46:e9:02:10:cc:ee: 5c:37:64:af:ff:02:95:98:fc:6d:bc:37:62:c5:c5: ca:39:c6:bd:b7:0e:d1:72:6f:9d:e8:56:f3:c1:6a: 85:c4:0f:37:e9:17:15:2a:42:89:06:71:b9:b1:b2: 1c:cb:e9:7c:93:25:54:cd:59:3b:e0:66:b9:13:1f: ae:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:1C:0C:52:A5:22:F6:DA:B3:6C:83:E6:C9:A8:26:B8:BF:71:87:DD X509v3 Authority Key Identifier: keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/3hwMUqUi9tqzbIPmyagmuL9xh90.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.179.224.0/20 Signature Algorithm: sha256WithRSAEncryption ed:ed:c8:fc:19:f0:85:42:66:f1:20:1d:02:71:b2:61:2c:e1: 99:d8:d7:36:26:18:93:b5:77:c2:f1:37:de:d9:f7:18:96:48: 57:81:8a:ca:3c:a2:a2:6f:6a:63:e6:a6:18:7f:f2:c8:60:c1: b4:20:2d:56:6d:88:73:d3:75:20:00:73:13:33:47:be:1d:37: 9e:fb:2d:d2:c8:94:94:13:7b:31:27:1e:d5:4b:02:43:6e:44: 5a:f0:63:a1:f7:4a:29:d0:49:a4:0a:9a:88:4a:ee:19:8c:26: b8:c1:60:46:4a:ed:3c:a2:6a:6a:91:7a:b1:f1:04:1d:cf:43: b9:7e:d2:54:6f:0f:71:8c:21:e4:4c:91:cb:a9:8c:87:d8:3a: 23:31:0e:de:81:f7:2b:82:fe:7b:68:b1:1c:f9:3f:16:91:34: 17:d2:37:e1:37:c4:74:98:f6:dd:fd:49:69:76:19:03:23:77: 7d:2b:6e:f9:5a:fc:0f:24:b8:f2:77:d4:32:0f:7b:1f:1c:db: a0:06:db:c7:98:83:66:b7:7d:f8:51:4d:9e:44:90:03:c0:89: c7:6a:a7:72:d0:bd:02:40:56:31:89:24:2b:f1:ad:4f:38:ba: 60:d3:90:43:34:18:01:55:50:b2:8b:a8:6b:36:a7:a7:ce:e8: a8:e7:c5:04 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAjowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yNDA4MzEw MTMzMjlaFw0yNTA4MTUwMTMwMDJaMDMxMTAvBgNVBAMTKERFMUMwQzUyQTUyMkY2 REFCMzZDODNFNkM5QTgyNkI4QkY3MTg3REQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDmTcy4+GdQSlv3Ea7Z5OHmqexOUpHGbHsTLY8bTyW93NKlJ1FF UXohyaNTsHE6wfgXbs2Ps/WW37Ix+lWTF8bwiHlBQC2iXpAbNkcq8inx73SNjvap g0sl+DcROC4wSkRc6Z0FOwcKvG1Hf6EocDrErN15llL08oBO2UAcIq34DSldTobZ JHyALKMguIU07PAD0arDTuoTmUfoEPYYSOPrpkxxJgdxK2yqkMFSMR2D5PhBpdRx IpbuWa8b1EbpAhDM7lw3ZK//ApWY/G28N2LFxco5xr23DtFyb53oVvPBaoXEDzfp FxUqQokGcbmxshzL6XyTJVTNWTvgZrkTH66DAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU3hwMUqUi9tqzbIPmyagmuL9xh90wHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNjcxLzNod01VcVVpOXRxemJJUG15YWdtdUw5eGg5MC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBATKs+AwDQYJKoZIhvcNAQELBQADggEBAO3tyPwZ8IVCZvEgHQJxsmEs4ZnY 1zYmGJO1d8LxN97Z9xiWSFeBiso8oqJvamPmphh/8shgwbQgLVZtiHPTdSAAcxMz R74dN577LdLIlJQTezEnHtVLAkNuRFrwY6H3SinQSaQKmohK7hmMJrjBYEZK7Tyi amqRerHxBB3PQ7l+0lRvD3GMIeRMkcupjIfYOiMxDt6B9yuC/ntosRz5PxaRNBfS N+E3xHSY9t39SWl2GQMjd30rbvla/A8kuPJ31DIPex8c26AG28eYg2a3ffhRTZ5E kAPAicdqp3LQvQJAVjGJJCvxrU84umDTkEM0GAFVULKLqGs2p6fO6KjnxQQ= -----END CERTIFICATE-----Generated at Fri Nov 22 11:45:57 2024 by rpki-client on console-ams.rpki-client.org