$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/FIJ20g6MWS9ncFdKx9RBm9g5N0Q.roa File: FIJ20g6MWS9ncFdKx9RBm9g5N0Q.roa (raw, json) Hash identifier: VQ0KhbM81Sos+Fk3fvXPTYpx4FvuD38QgCvxErrtjDY= Subject key identifier: 14:82:76:D2:0E:8C:59:2F:67:70:57:4A:C7:D4:41:9B:D8:39:37:44 Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Certificate serial: 015C Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/FIJ20g6MWS9ncFdKx9RBm9g5N0Q.roa Signing time: Sun 01 Oct 2023 01:33:03 +0000 ROA not before: Sun 01 Oct 2023 01:33:03 +0000 ROA not after: Sat 14 Sep 2024 01:30:03 +0000 asID: 23788 IP address blocks: 110.172.0.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 01:34:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 348 (0x15c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Validity Not Before: Oct 1 01:33:03 2023 GMT Not After : Sep 14 01:30:03 2024 GMT Subject: CN=148276D20E8C592F6770574AC7D4419BD8393744 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:31:22:18:47:da:0f:0f:91:56:e2:ea:3c:b7: 4e:38:dc:ac:aa:59:1d:02:e2:2a:9e:9c:39:e9:71: b9:91:02:d4:a6:77:0b:eb:d7:3b:a8:25:03:b2:1d: cf:bc:87:da:74:0a:94:5b:f4:ac:05:74:25:c4:c3: 86:33:32:d2:82:ce:e5:d4:59:16:91:38:73:dc:cb: 4d:06:35:09:a1:8d:af:b7:95:25:fa:d6:d5:c7:9d: 1a:82:15:f4:8b:e1:90:f5:3f:c2:9e:be:50:33:79: da:22:7a:8e:c2:6b:19:e2:e1:a5:a7:14:80:c0:f0: 28:d8:19:cd:28:91:00:c1:c7:4d:78:73:ae:ad:43: cb:09:c6:ba:41:0d:95:cf:c3:22:b5:54:18:68:ba: 58:e9:2e:01:64:bf:95:10:14:44:7e:8e:76:8e:98: ec:b4:d8:47:7a:2c:47:ee:4e:49:90:e7:47:4d:ba: 05:32:06:b3:d0:16:51:49:82:43:d2:20:7e:c5:e1: f5:86:56:07:02:f9:aa:90:89:1f:4f:9a:df:41:0a: 73:5c:6b:8f:f4:25:80:56:4e:66:dd:b8:fe:1a:48: 1f:8a:8c:7f:90:64:d9:92:3d:f0:bb:03:14:05:70: 34:3c:69:c7:0d:00:8a:23:96:80:c6:fd:60:f6:27: e9:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:82:76:D2:0E:8C:59:2F:67:70:57:4A:C7:D4:41:9B:D8:39:37:44 X509v3 Authority Key Identifier: keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/FIJ20g6MWS9ncFdKx9RBm9g5N0Q.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 110.172.0.0/20 Signature Algorithm: sha256WithRSAEncryption 38:95:f3:0b:7d:ca:51:12:14:9d:9c:43:c2:62:7d:1c:43:6c: c3:57:c0:27:f5:15:c6:2d:26:b6:f4:8e:b8:b1:a3:db:49:6a: e1:cd:0a:0b:a5:d1:f2:5b:ee:c5:6f:32:6a:82:22:d7:08:50: 6d:f4:10:c9:d3:67:0e:28:09:6d:c5:c4:b9:19:7b:ed:92:8f: 8c:d4:f2:8e:07:77:f2:4c:1c:83:ee:22:51:82:b4:92:c4:95: cb:1a:1d:22:f0:53:28:9b:0f:b9:6f:4e:67:6a:55:de:b7:73: aa:38:67:19:72:4e:4f:4c:d7:f8:51:95:0f:bf:fa:21:71:b9: a4:93:5b:61:60:97:01:7a:61:a2:49:b8:25:2d:df:ee:da:fe: 9d:dd:70:9a:d8:e1:51:b2:73:e5:a3:b0:25:12:48:44:40:e5: b4:62:29:b1:01:56:74:e6:7a:2b:53:4d:54:fd:47:ba:aa:f4: 24:ac:02:d9:de:a2:1f:6e:b6:88:4b:b2:d0:43:e9:b4:d8:17: 91:fe:79:0b:73:49:d3:71:9e:b5:6f:a1:38:e5:e2:60:d8:3e: 9d:f7:f4:e2:0b:e0:d9:90:68:13:ba:aa:ed:bb:ab:dd:d3:7e: 44:3f:12:1e:fe:0b:68:78:d1:93:b6:5d:a0:85:70:f5:52:62: bf:ee:be:c8 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAVwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yMzEwMDEw MTMzMDNaFw0yNDA5MTQwMTMwMDNaMDMxMTAvBgNVBAMTKDE0ODI3NkQyMEU4QzU5 MkY2NzcwNTc0QUM3RDQ0MTlCRDgzOTM3NDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC5MSIYR9oPD5FW4uo8t0443KyqWR0C4iqenDnpcbmRAtSmdwvr 1zuoJQOyHc+8h9p0CpRb9KwFdCXEw4YzMtKCzuXUWRaROHPcy00GNQmhja+3lSX6 1tXHnRqCFfSL4ZD1P8KevlAzedoieo7Caxni4aWnFIDA8CjYGc0okQDBx014c66t Q8sJxrpBDZXPwyK1VBhouljpLgFkv5UQFER+jnaOmOy02Ed6LEfuTkmQ50dNugUy BrPQFlFJgkPSIH7F4fWGVgcC+aqQiR9Pmt9BCnNca4/0JYBWTmbduP4aSB+KjH+Q ZNmSPfC7AxQFcDQ8accNAIojloDG/WD2J+n9AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUFIJ20g6MWS9ncFdKx9RBm9g5N0QwHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNjcxL0ZJSjIwZzZNV1M5bmNGZEt4OVJCbTlnNU4wUS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBARurAAwDQYJKoZIhvcNAQELBQADggEBADiV8wt9ylESFJ2cQ8JifRxDbMNX wCf1FcYtJrb0jrixo9tJauHNCgul0fJb7sVvMmqCItcIUG30EMnTZw4oCW3FxLkZ e+2Sj4zU8o4Hd/JMHIPuIlGCtJLElcsaHSLwUyibD7lvTmdqVd63c6o4ZxlyTk9M 1/hRlQ+/+iFxuaSTW2FglwF6YaJJuCUt3+7a/p3dcJrY4VGyc+WjsCUSSERA5bRi KbEBVnTmeitTTVT9R7qq9CSsAtneoh9utohLstBD6bTYF5H+eQtzSdNxnrVvoTjl 4mDYPp339OIL4NmQaBO6qu27q93TfkQ/Eh7+C2h40ZO2XaCFcPVSYr/uvsg= -----END CERTIFICATE-----Generated at Sat May 18 12:40:38 2024 by rpki-client on console-ams.rpki-client.org