$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/3spJ_TF925aY-EnKNY4gSjRuPEA.roa File: 3spJ_TF925aY-EnKNY4gSjRuPEA.roa (raw, json) Hash identifier: eZfQpiF3Bpcv78xGcEGfPlrmi/fk1Gj6czUyI0jM5V4= Subject key identifier: DE:CA:49:FD:31:7D:DB:96:98:F8:49:CA:35:8E:20:4A:34:6E:3C:40 Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Certificate serial: 0229 Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/3spJ_TF925aY-EnKNY4gSjRuPEA.roa Signing time: Sat 31 Aug 2024 01:33:22 +0000 ROA not before: Sat 31 Aug 2024 01:33:22 +0000 ROA not after: Fri 15 Aug 2025 01:30:02 +0000 asID: 9824 IP address blocks: 210.228.0.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 06:14:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 553 (0x229) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Validity Not Before: Aug 31 01:33:22 2024 GMT Not After : Aug 15 01:30:02 2025 GMT Subject: CN=DECA49FD317DDB9698F849CA358E204A346E3C40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:f8:b1:ce:8f:da:c0:5c:5c:f4:43:16:7d:be: 6f:71:7b:60:11:0c:c8:33:5f:fe:65:55:40:5f:a3: 13:e1:4d:79:e5:28:12:ea:f9:fb:ba:6d:a9:bb:95: bb:d1:e2:eb:23:c6:c2:09:5c:ea:ec:8d:34:c5:69: bc:50:ed:27:8d:83:e8:ca:38:aa:2a:e1:3c:7f:14: a0:7c:7a:c2:84:e6:85:9d:c8:fb:ec:c1:7f:f9:b5: 0f:11:a0:f1:80:f6:2c:25:45:15:30:67:34:62:aa: 88:16:94:23:05:03:29:af:66:6d:96:97:07:42:c6: 32:cf:b6:97:eb:50:12:31:03:1a:65:4f:9c:31:e9: 97:a7:7c:aa:7b:18:b5:85:69:a9:c7:6f:b7:02:16: 4c:23:7a:71:bf:54:98:df:ce:4b:9f:71:88:e2:e5: 5c:b2:42:27:d2:7f:3c:35:f2:f1:ed:b0:20:45:13: 74:fd:49:44:73:8d:91:44:39:c5:55:cb:fe:8b:47: b2:a7:6b:af:59:d8:07:2a:64:d5:05:9a:df:48:1b: 10:f9:92:73:83:a6:fb:18:c4:4b:e9:24:96:15:ea: 1c:9d:b1:69:cf:c6:c3:56:c7:b1:94:5e:e9:10:63: 58:67:d0:46:01:c8:17:fb:a1:04:5f:d6:d0:4c:9b: 6e:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:CA:49:FD:31:7D:DB:96:98:F8:49:CA:35:8E:20:4A:34:6E:3C:40 X509v3 Authority Key Identifier: keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/3spJ_TF925aY-EnKNY4gSjRuPEA.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.228.0.0/20 Signature Algorithm: sha256WithRSAEncryption 9f:88:84:d4:a4:c0:c1:62:25:f3:72:46:c8:d0:54:d3:c8:33: 39:5e:51:53:62:49:ff:d6:b4:13:1a:ca:21:e5:32:9f:52:ee: 7b:30:6e:5d:54:b5:7b:11:18:b7:55:c5:e8:d0:66:d7:57:df: e7:ed:c6:8a:60:11:90:e8:12:43:a9:7d:ce:83:f4:1f:e7:31: 34:0b:2f:f6:8f:ed:17:e1:c6:ea:00:c3:32:2c:70:53:74:12: ba:bd:0d:4f:cc:fe:b5:bb:1b:5f:e8:69:06:15:20:1e:c1:ca: 7b:9c:3d:bf:d4:0e:32:cc:bc:10:55:0c:62:ca:c4:93:97:b0: f8:23:89:ee:b2:9b:b0:25:77:0c:dc:2e:f8:72:92:16:ad:03: 01:cf:b2:e7:b0:29:95:2c:ab:bf:4b:1d:de:09:f6:ba:10:3f: 48:d8:9c:b6:37:4f:9a:bb:6d:0d:d0:dc:2c:85:35:71:16:2c: 50:3c:23:72:f6:c2:ca:c3:1b:1a:39:2a:87:36:35:0a:4c:6b: 8b:21:22:01:09:f7:3d:c6:26:97:ae:57:26:7b:7f:8b:ea:e9: 0c:1e:64:3e:10:31:ca:b7:9c:69:b4:6e:92:3d:25:30:cf:03: 6d:25:ac:72:3c:c1:52:7f:e6:19:ed:c8:28:e1:42:b2:33:bf: 06:6d:e1:b8 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAikwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yNDA4MzEw MTMzMjJaFw0yNTA4MTUwMTMwMDJaMDMxMTAvBgNVBAMTKERFQ0E0OUZEMzE3RERC OTY5OEY4NDlDQTM1OEUyMDRBMzQ2RTNDNDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDV+LHOj9rAXFz0QxZ9vm9xe2ARDMgzX/5lVUBfoxPhTXnlKBLq +fu6bam7lbvR4usjxsIJXOrsjTTFabxQ7SeNg+jKOKoq4Tx/FKB8esKE5oWdyPvs wX/5tQ8RoPGA9iwlRRUwZzRiqogWlCMFAymvZm2WlwdCxjLPtpfrUBIxAxplT5wx 6ZenfKp7GLWFaanHb7cCFkwjenG/VJjfzkufcYji5VyyQifSfzw18vHtsCBFE3T9 SURzjZFEOcVVy/6LR7Kna69Z2AcqZNUFmt9IGxD5knODpvsYxEvpJJYV6hydsWnP xsNWx7GUXukQY1hn0EYByBf7oQRf1tBMm26lAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU3spJ/TF925aY+EnKNY4gSjRuPEAwHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNjcxLzNzcEpfVEY5MjVhWS1FbktOWTRnU2pSdVBFQS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBATS5AAwDQYJKoZIhvcNAQELBQADggEBAJ+IhNSkwMFiJfNyRsjQVNPIMzle UVNiSf/WtBMayiHlMp9S7nswbl1UtXsRGLdVxejQZtdX3+ftxopgEZDoEkOpfc6D 9B/nMTQLL/aP7RfhxuoAwzIscFN0Erq9DU/M/rW7G1/oaQYVIB7BynucPb/UDjLM vBBVDGLKxJOXsPgjie6ym7AldwzcLvhykhatAwHPsuewKZUsq79LHd4J9roQP0jY nLY3T5q7bQ3Q3CyFNXEWLFA8I3L2wsrDGxo5Koc2NQpMa4shIgEJ9z3GJpeuVyZ7 f4vq6QweZD4QMcq3nGm0bpI9JTDPA20lrHI8wVJ/5hntyCjhQrIzvwZt4bg= -----END CERTIFICATE-----Generated at Fri Nov 22 11:45:57 2024 by rpki-client on console-ams.rpki-client.org