$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/68MiGQ529KpEI8rtarrx96oosmU.roa File: 68MiGQ529KpEI8rtarrx96oosmU.roa (raw, json) Hash identifier: hmlWFQsQsyP/EQJatEY7z6wNaJEYUM79wjT9VYscg/A= Subject key identifier: EB:C3:22:19:0E:76:F4:AA:44:23:CA:ED:6A:BA:F1:F7:AA:28:B2:65 Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Certificate serial: 024E Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/68MiGQ529KpEI8rtarrx96oosmU.roa Signing time: Sat 31 Aug 2024 01:36:37 +0000 ROA not before: Sat 31 Aug 2024 01:36:37 +0000 ROA not after: Fri 15 Aug 2025 01:30:02 +0000 asID: 9824 IP address blocks: 117.53.0.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 06:14:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 590 (0x24e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Validity Not Before: Aug 31 01:36:37 2024 GMT Not After : Aug 15 01:30:02 2025 GMT Subject: CN=EBC322190E76F4AA4423CAED6ABAF1F7AA28B265 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f0:ed:4e:5c:fd:99:27:b5:ef:37:6c:8e:ff: 6f:83:d8:7a:5b:16:12:f5:c6:5b:89:df:5c:20:13: 07:33:30:e3:06:ef:44:4e:a0:81:d0:78:f3:92:1a: b7:d7:16:57:6c:78:5f:55:bd:5a:2b:10:c4:97:9e: 51:32:48:ce:cb:ad:6a:56:b5:be:30:44:96:bc:4a: 5e:cb:aa:0d:ca:51:e8:83:d6:6f:b0:39:df:ea:1c: 72:a5:bf:7f:48:ec:4d:d3:58:0c:15:68:e2:28:0d: 3b:9e:06:57:92:64:d6:99:19:aa:7a:a9:8d:f9:01: 51:d1:0d:2c:71:03:22:c5:9c:16:98:01:8e:de:3a: ac:7c:60:3a:f5:83:ab:b0:45:1f:5b:a4:a8:da:d3: 8c:cd:16:0b:b0:50:39:06:ea:84:7c:df:08:31:f9: af:6a:6b:dd:d8:ab:6f:27:36:26:df:37:8a:d0:40: 78:04:8f:b9:35:d5:e4:4c:6e:42:f5:6a:01:6a:61: 38:5d:2b:f9:e0:02:c6:35:4c:0f:b2:e0:07:4b:b8: e9:62:a9:3b:c8:28:33:35:f4:70:38:73:98:1a:93: 62:28:f5:7a:29:67:f1:7e:91:59:8d:3a:3e:48:62: ce:9f:d5:ce:b8:a1:ad:42:9c:6f:f7:0e:a0:f6:59: 2e:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:C3:22:19:0E:76:F4:AA:44:23:CA:ED:6A:BA:F1:F7:AA:28:B2:65 X509v3 Authority Key Identifier: keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/68MiGQ529KpEI8rtarrx96oosmU.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 117.53.0.0/19 Signature Algorithm: sha256WithRSAEncryption 84:d1:a5:52:52:2b:e5:95:b8:63:c4:b2:70:c7:23:a2:d0:9e: e9:6c:44:7c:28:e0:df:fe:ce:ef:1e:dd:63:41:a9:1d:30:92: 6c:9a:50:c4:2a:43:32:42:88:80:d4:89:7c:d6:94:4a:7e:6e: 3d:ea:7a:86:f9:12:60:08:93:c3:4d:8b:01:e9:2f:ab:7e:35: 63:50:e3:db:0f:db:f0:d6:a0:e7:98:f3:e6:93:7c:2d:0c:ee: 4e:ff:79:fa:1c:c3:f8:31:3d:0a:cb:91:dd:6c:85:66:cf:46: 02:ac:40:ac:08:42:86:2f:c1:97:73:3a:91:a6:4a:f6:aa:08: 89:f8:e3:9b:eb:32:60:8f:74:e8:7b:a6:4c:79:5f:ad:c5:f6: d3:c9:e0:2c:2e:08:55:df:37:7c:39:8a:19:04:f4:95:da:e4: e4:79:8f:36:b2:1d:eb:f0:44:3a:ad:fd:e6:5f:48:d4:85:65: 39:ad:8c:dd:42:a1:c4:2f:9a:c9:39:b0:62:92:b6:e7:05:0d: 45:a8:6f:9e:f4:36:6b:e5:4a:e8:94:7c:31:e5:cc:a7:5b:11: 5a:05:e2:fa:5a:21:6c:6e:51:0d:e6:58:a4:ad:53:79:9a:56: ab:5d:54:57:0d:4f:98:1d:8b:0d:06:fe:2e:ee:c8:be:70:8c: 8c:15:25:f7 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAk4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yNDA4MzEw MTM2MzdaFw0yNTA4MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEVCQzMyMjE5MEU3NkY0 QUE0NDIzQ0FFRDZBQkFGMUY3QUEyOEIyNjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC38O1OXP2ZJ7XvN2yO/2+D2HpbFhL1xluJ31wgEwczMOMG70RO oIHQePOSGrfXFldseF9VvVorEMSXnlEySM7LrWpWtb4wRJa8Sl7Lqg3KUeiD1m+w Od/qHHKlv39I7E3TWAwVaOIoDTueBleSZNaZGap6qY35AVHRDSxxAyLFnBaYAY7e Oqx8YDr1g6uwRR9bpKja04zNFguwUDkG6oR83wgx+a9qa93Yq28nNibfN4rQQHgE j7k11eRMbkL1agFqYThdK/ngAsY1TA+y4AdLuOliqTvIKDM19HA4c5gak2Io9Xop Z/F+kVmNOj5IYs6f1c64oa1CnG/3DqD2WS7hAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU68MiGQ529KpEI8rtarrx96oosmUwHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNjcxLzY4TWlHUTUyOUtwRUk4cnRhcnJ4OTZvb3NtVS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAV1NQAwDQYJKoZIhvcNAQELBQADggEBAITRpVJSK+WVuGPEsnDHI6LQnuls RHwo4N/+zu8e3WNBqR0wkmyaUMQqQzJCiIDUiXzWlEp+bj3qeob5EmAIk8NNiwHp L6t+NWNQ49sP2/DWoOeY8+aTfC0M7k7/efocw/gxPQrLkd1shWbPRgKsQKwIQoYv wZdzOpGmSvaqCIn445vrMmCPdOh7pkx5X63F9tPJ4CwuCFXfN3w5ihkE9JXa5OR5 jzayHevwRDqt/eZfSNSFZTmtjN1CocQvmsk5sGKStucFDUWob570NmvlSuiUfDHl zKdbEVoF4vpaIWxuUQ3mWKStU3maVqtdVFcNT5gdiw0G/i7uyL5wjIwVJfc= -----END CERTIFICATE-----Generated at Fri Nov 22 11:45:57 2024 by rpki-client on console-ams.rpki-client.org