$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/B6sUqt2GjqGdzAaZ3FXUwQsQ-dI.roa File: B6sUqt2GjqGdzAaZ3FXUwQsQ-dI.roa (raw, json) Hash identifier: MO9h95+48aoC5cqu4cfkmNlA9Msy+x4NEu7KoSKzT7o= Subject key identifier: 07:AB:14:AA:DD:86:8E:A1:9D:CC:06:99:DC:55:D4:C1:0B:10:F9:D2 Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Certificate serial: 02A2 Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/B6sUqt2GjqGdzAaZ3FXUwQsQ-dI.roa Signing time: Sat 31 Aug 2024 01:40:41 +0000 ROA not before: Sat 31 Aug 2024 01:40:41 +0000 ROA not after: Fri 15 Aug 2025 01:30:02 +0000 asID: 4721 IP address blocks: 211.19.208.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 06:14:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 674 (0x2a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Validity Not Before: Aug 31 01:40:41 2024 GMT Not After : Aug 15 01:30:02 2025 GMT Subject: CN=07AB14AADD868EA19DCC0699DC55D4C10B10F9D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:19:ac:be:e5:aa:86:10:24:a0:9c:18:10:be: 05:28:ac:3e:ab:68:d9:60:fb:a1:51:b4:c1:18:cd: 58:38:eb:5f:e5:4e:7e:12:f2:08:df:c0:b2:08:ae: fd:8c:ee:03:a1:63:9f:0f:06:30:36:ae:d0:9d:a3: 89:11:01:f2:3c:80:9c:b2:00:6d:fe:32:42:74:65: 80:6d:46:c1:5d:e3:a4:f5:b7:0b:79:d7:1f:9a:66: 9e:3f:1f:15:7c:f3:75:02:13:5b:48:fd:0d:c1:82: da:2d:f7:2d:b1:49:9b:65:65:44:d1:b3:3b:d2:48: 8c:af:c0:e2:af:5c:9f:d3:ec:3c:ff:6b:70:cb:52: 21:8d:be:66:83:1f:e1:85:73:7c:45:ff:3e:87:da: 98:b7:13:b8:2d:8e:59:c7:d4:a1:4f:f8:e0:0d:7a: 00:79:43:e6:bd:1b:0e:42:30:82:5d:00:ee:96:62: 98:f5:55:c3:0a:3a:f9:ac:f8:81:53:54:ab:71:b0: 66:fa:2b:37:62:5e:b3:b7:a1:af:54:82:f3:d3:db: 66:d1:e1:95:c8:f4:5f:54:f9:55:ba:90:ab:52:b5: 77:57:4e:b2:24:6b:51:b2:70:8f:08:f3:40:c6:5c: 5a:6e:36:b6:44:4f:53:75:cb:2e:72:d8:14:ce:10: a9:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:AB:14:AA:DD:86:8E:A1:9D:CC:06:99:DC:55:D4:C1:0B:10:F9:D2 X509v3 Authority Key Identifier: keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/B6sUqt2GjqGdzAaZ3FXUwQsQ-dI.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 211.19.208.0/20 Signature Algorithm: sha256WithRSAEncryption db:68:cc:85:19:bb:7c:74:cc:c5:50:93:56:d3:b6:d8:d6:a5: 02:00:91:f5:85:23:83:80:a0:0c:c6:d8:5c:6a:4d:51:dd:e0: 66:00:00:df:e6:46:cd:da:80:a9:32:83:36:b9:b8:88:11:9e: 02:de:ed:63:cb:a2:e7:84:e2:e7:0f:7e:fa:db:24:1c:03:ed: 1d:2c:8e:9e:be:10:34:aa:cc:42:6c:8e:4d:d2:ab:8a:85:dd: cc:38:fd:cf:1a:68:2a:91:71:d6:ec:2b:ab:18:07:d7:1b:57: 6e:0f:cc:df:0d:b0:08:6f:80:b5:e0:af:ad:53:3a:7c:80:92: 1d:df:10:0b:cb:92:c1:29:9d:a3:ff:28:88:cd:d5:14:41:cb: 60:aa:59:b8:5d:ee:22:34:e8:6d:0a:09:07:b9:10:b8:bd:ae: 2c:d3:f7:3d:61:2d:62:40:ab:9e:55:4d:66:66:51:da:d2:78: f9:3a:d9:ef:2e:88:a8:86:f9:0b:b7:b5:56:f4:d6:37:5a:be: 4a:55:2f:70:b5:74:54:8b:18:d3:27:46:0d:e4:0d:27:9f:0b: ac:26:40:f9:5e:c3:2d:f8:19:5e:ca:82:71:84:16:4a:95:85: 6a:67:9c:15:b1:e9:03:f4:2e:02:c3:19:4c:cf:97:98:78:55: 7e:9b:ab:8b -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAqIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yNDA4MzEw MTQwNDFaFw0yNTA4MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDA3QUIxNEFBREQ4NjhF QTE5RENDMDY5OURDNTVENEMxMEIxMEY5RDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC6Gay+5aqGECSgnBgQvgUorD6raNlg+6FRtMEYzVg461/lTn4S 8gjfwLIIrv2M7gOhY58PBjA2rtCdo4kRAfI8gJyyAG3+MkJ0ZYBtRsFd46T1twt5 1x+aZp4/HxV883UCE1tI/Q3Bgtot9y2xSZtlZUTRszvSSIyvwOKvXJ/T7Dz/a3DL UiGNvmaDH+GFc3xF/z6H2pi3E7gtjlnH1KFP+OANegB5Q+a9Gw5CMIJdAO6WYpj1 VcMKOvms+IFTVKtxsGb6KzdiXrO3oa9UgvPT22bR4ZXI9F9U+VW6kKtStXdXTrIk a1GycI8I80DGXFpuNrZET1N1yy5y2BTOEKnXAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUB6sUqt2GjqGdzAaZ3FXUwQsQ+dIwHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNjcxL0I2c1VxdDJHanFHZHpBYVozRlhVd1FzUS1kSS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBATTE9AwDQYJKoZIhvcNAQELBQADggEBANtozIUZu3x0zMVQk1bTttjWpQIA kfWFI4OAoAzG2FxqTVHd4GYAAN/mRs3agKkygza5uIgRngLe7WPLoueE4ucPfvrb JBwD7R0sjp6+EDSqzEJsjk3Sq4qF3cw4/c8aaCqRcdbsK6sYB9cbV24PzN8NsAhv gLXgr61TOnyAkh3fEAvLksEpnaP/KIjN1RRBy2CqWbhd7iI06G0KCQe5ELi9rizT 9z1hLWJAq55VTWZmUdrSePk62e8uiKiG+Qu3tVb01jdavkpVL3C1dFSLGNMnRg3k DSefC6wmQPlewy34GV7KgnGEFkqVhWpnnBWx6QP0LgLDGUzPl5h4VX6bq4s= -----END CERTIFICATE-----Generated at Fri Nov 22 11:45:57 2024 by rpki-client on console-ams.rpki-client.org