$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/8nA9s8nhDw1fyF_FovdHh9w9TC4.roa File: 8nA9s8nhDw1fyF_FovdHh9w9TC4.roa (raw, json) Hash identifier: ob7ejfjcnp293hd4zMTRhLQ35yBYIk4IM61FNb8LBWA= Subject key identifier: F2:70:3D:B3:C9:E1:0F:0D:5F:C8:5F:C5:A2:F7:47:87:DC:3D:4C:2E Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Certificate serial: 0213 Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/8nA9s8nhDw1fyF_FovdHh9w9TC4.roa Signing time: Wed 31 Jul 2024 01:29:10 +0000 ROA not before: Wed 31 Jul 2024 01:29:10 +0000 ROA not after: Tue 15 Jul 2025 01:30:02 +0000 asID: 9824 IP address blocks: 223.165.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 06:14:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 531 (0x213) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Validity Not Before: Jul 31 01:29:10 2024 GMT Not After : Jul 15 01:30:02 2025 GMT Subject: CN=F2703DB3C9E10F0D5FC85FC5A2F74787DC3D4C2E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:75:ad:4b:95:ac:54:a3:38:27:d7:f7:42:a0: ad:cf:e3:97:58:49:96:f5:d9:36:0e:72:ed:b8:71: d6:32:1a:c5:02:64:b3:9b:0e:42:fd:9d:fa:d8:b6: 7f:10:77:c4:20:05:a7:43:f4:f7:46:19:c0:e9:01: 56:b7:c0:45:32:51:63:11:7c:44:95:0e:40:15:1d: 6a:20:b3:40:f8:8c:3f:c8:94:05:8f:b6:dc:69:56: de:b7:4b:43:47:35:48:8b:c9:b1:71:75:0f:1b:23: 7d:0b:06:c9:14:19:01:d1:e6:20:30:63:c6:63:c6: 9c:6c:4a:98:8e:d4:c3:f6:7f:b4:bd:3b:df:e3:9e: 0d:68:58:0e:19:b7:f7:08:80:91:42:6f:0c:13:2f: 30:c4:d5:c3:f2:f4:49:82:c1:67:22:cd:dc:e1:2f: 54:90:bd:b8:8f:df:4d:8b:26:e4:15:d6:c6:04:d7: b1:18:c9:86:ad:4d:5d:fd:cc:3c:05:e5:96:1d:57: ad:54:c3:76:c1:c8:3a:57:54:10:e3:ae:00:23:f1: f3:23:78:4d:48:cf:2f:ed:3c:17:fb:f4:27:36:32: 0c:24:b3:2f:65:3b:d2:b9:78:2f:2b:3c:8a:a2:ee: fe:24:25:d5:76:80:5a:27:d0:d9:9d:0f:5b:ee:f5: 03:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:70:3D:B3:C9:E1:0F:0D:5F:C8:5F:C5:A2:F7:47:87:DC:3D:4C:2E X509v3 Authority Key Identifier: keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/8nA9s8nhDw1fyF_FovdHh9w9TC4.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 223.165.20.0/22 Signature Algorithm: sha256WithRSAEncryption 4d:5d:79:e3:d5:d8:f2:5c:0c:cb:9c:7e:2f:5d:f0:81:c2:39: 36:f6:b4:cb:f3:8b:f7:6d:e5:42:61:62:97:6f:eb:b9:f8:5d: 03:73:9b:db:bf:86:cf:e7:73:09:fb:a5:14:58:7e:f0:c7:bf: 46:7a:ac:40:f1:d7:b8:95:ff:16:9f:72:53:98:07:1d:db:ca: c9:c7:06:80:00:15:d3:c5:18:5f:ec:e9:e7:be:17:17:fe:7c: 00:98:47:81:ab:95:2a:43:30:df:7e:69:19:b1:3b:bc:a1:4c: 13:5a:7f:d9:0d:d3:cd:9b:14:e3:90:0e:18:6e:a8:53:cb:96: b6:62:df:f1:ab:e6:ba:98:07:e2:07:9c:04:07:97:79:51:f9: fa:8a:46:a5:2c:28:f5:f7:76:90:96:06:d0:34:72:37:d4:6a: 38:76:2e:8e:d7:e1:8d:3b:ed:ef:22:18:72:82:1a:88:86:e0: 30:88:14:7c:59:00:50:05:7a:1d:db:64:e1:06:a4:ce:99:bf: a6:99:4d:08:ce:88:02:4c:e4:6c:60:1a:a7:e9:43:35:be:7a: 33:d4:e8:10:1a:34:01:18:fc:dd:e8:b7:d4:d1:33:94:70:38: c2:db:45:1b:2c:cd:04:8b:f4:6a:86:e5:99:bf:6a:1e:5d:77: 7c:8f:20:88 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAhMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yNDA3MzEw MTI5MTBaFw0yNTA3MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEYyNzAzREIzQzlFMTBG MEQ1RkM4NUZDNUEyRjc0Nzg3REMzRDRDMkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDBda1LlaxUozgn1/dCoK3P45dYSZb12TYOcu24cdYyGsUCZLOb DkL9nfrYtn8Qd8QgBadD9PdGGcDpAVa3wEUyUWMRfESVDkAVHWogs0D4jD/IlAWP ttxpVt63S0NHNUiLybFxdQ8bI30LBskUGQHR5iAwY8ZjxpxsSpiO1MP2f7S9O9/j ng1oWA4Zt/cIgJFCbwwTLzDE1cPy9EmCwWcizdzhL1SQvbiP302LJuQV1sYE17EY yYatTV39zDwF5ZYdV61Uw3bByDpXVBDjrgAj8fMjeE1Izy/tPBf79Cc2Mgwksy9l O9K5eC8rPIqi7v4kJdV2gFon0NmdD1vu9QPlAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU8nA9s8nhDw1fyF/FovdHh9w9TC4wHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNjcxLzhuQTlzOG5oRHcxZnlGX0ZvdmRIaDl3OVRDNC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBALfpRQwDQYJKoZIhvcNAQELBQADggEBAE1deePV2PJcDMucfi9d8IHCOTb2 tMvzi/dt5UJhYpdv67n4XQNzm9u/hs/ncwn7pRRYfvDHv0Z6rEDx17iV/xafclOY Bx3bysnHBoAAFdPFGF/s6ee+Fxf+fACYR4GrlSpDMN9+aRmxO7yhTBNaf9kN082b FOOQDhhuqFPLlrZi3/Gr5rqYB+IHnAQHl3lR+fqKRqUsKPX3dpCWBtA0cjfUajh2 Lo7X4Y077e8iGHKCGoiG4DCIFHxZAFAFeh3bZOEGpM6Zv6aZTQjOiAJM5GxgGqfp QzW+ejPU6BAaNAEY/N3ot9TRM5RwOMLbRRsszQSL9GqG5Zm/ah5dd3yPIIg= -----END CERTIFICATE-----Generated at Fri Nov 22 11:45:57 2024 by rpki-client on console-ams.rpki-client.org