$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/GKgCMIjz21nZrCyaE3z5eixOSOk.roa File: GKgCMIjz21nZrCyaE3z5eixOSOk.roa (raw, json) Hash identifier: gf++8xJW2JMNGE/B6YefNjIAjD7BIhETTDe5ubt3qks= Subject key identifier: 18:A8:02:30:88:F3:DB:59:D9:AC:2C:9A:13:7C:F9:7A:2C:4E:48:E9 Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Certificate serial: 01D6 Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/GKgCMIjz21nZrCyaE3z5eixOSOk.roa Signing time: Sun 01 Oct 2023 01:38:26 +0000 ROA not before: Sun 01 Oct 2023 01:38:26 +0000 ROA not after: Sat 14 Sep 2024 01:30:03 +0000 asID: 9617 IP address blocks: 211.135.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 01:34:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 470 (0x1d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Validity Not Before: Oct 1 01:38:26 2023 GMT Not After : Sep 14 01:30:03 2024 GMT Subject: CN=18A8023088F3DB59D9AC2C9A137CF97A2C4E48E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:38:6c:e7:f8:37:4b:0f:4d:a1:d6:21:ab:0b: 04:7a:05:6a:eb:a4:86:91:56:9e:e4:a2:7b:ac:ed: 07:6c:34:09:6c:76:fa:8f:f8:81:2b:fb:b3:e4:8a: 1c:41:00:3c:14:1e:57:d8:08:b3:16:4b:ae:31:07: 72:58:61:9b:f5:d1:2e:05:6d:a7:6c:9c:0d:50:6a: 31:4d:f2:48:39:eb:aa:09:59:60:6d:5a:86:0f:30: fd:f0:b1:3e:13:06:c9:a7:89:e0:2f:fd:c4:8e:26: 9c:41:aa:b3:f0:d2:84:67:19:3c:bc:1a:80:29:4e: 9a:3c:79:43:2e:58:57:9d:cb:70:c6:3f:70:33:87: 02:e3:81:60:db:85:27:a0:ba:cc:17:36:81:75:f0: 00:7d:0e:75:f8:f5:9f:ae:e9:59:d9:8a:f3:4b:d0: bf:a6:5d:2e:dc:71:e7:ba:e4:7a:3b:c3:16:26:12: 3f:20:50:da:fc:cb:9a:c9:55:08:ff:77:d0:84:fc: 27:91:6c:7b:74:fb:0e:a7:ce:a2:41:0b:6f:f1:a6: 55:09:36:9e:7a:c1:7f:44:f2:6d:c2:03:51:66:18: 74:9b:cf:ba:4c:81:6f:3f:e5:07:90:8e:1c:b3:d4: 4c:31:c0:fa:ac:e6:79:28:60:d1:dc:21:38:bc:db: 07:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:A8:02:30:88:F3:DB:59:D9:AC:2C:9A:13:7C:F9:7A:2C:4E:48:E9 X509v3 Authority Key Identifier: keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/GKgCMIjz21nZrCyaE3z5eixOSOk.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 211.135.0.0/17 Signature Algorithm: sha256WithRSAEncryption 8c:ce:55:66:5b:4c:f9:61:80:40:e7:b6:19:72:41:11:af:b0: 37:3b:ed:e0:d8:b9:71:3c:19:13:f5:d6:f0:b7:24:ad:da:ed: 31:f9:83:65:0c:c8:8c:57:47:e0:90:3b:08:ea:f0:47:30:6d: 3d:1d:8b:2b:ec:f1:a4:f8:02:f2:40:b9:ca:6b:06:b0:ef:98: 6a:7b:9f:ce:21:9a:11:51:dc:3a:47:13:7b:a6:25:0d:6c:be: 3b:12:bf:f4:03:e9:27:8a:81:d3:06:c4:59:08:b5:00:7b:39: eb:b9:aa:1c:f4:49:e5:04:ad:30:e0:95:cd:d6:df:87:32:c2: f1:35:3c:dd:14:66:36:aa:9c:d9:f3:02:92:90:ff:08:ba:07: 66:16:a4:5d:da:14:29:54:b7:d2:e5:83:ce:ea:07:f0:20:d9: 14:14:22:a4:a0:88:f6:74:06:5c:95:52:b0:dc:07:c2:e5:70: 16:50:71:c2:5e:52:c4:23:4f:24:f8:28:bc:30:7a:ff:c6:02: a7:f5:cc:cb:c1:42:27:8b:06:d7:ec:2e:be:71:38:06:18:cf: 59:69:9f:4b:91:88:b6:39:41:d8:75:63:f7:fb:e6:24:18:b3: 57:2c:dd:5e:4a:7f:cb:3b:f6:58:a6:f5:7c:98:b6:73:51:69: 78:5e:81:5c -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAdYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yMzEwMDEw MTM4MjZaFw0yNDA5MTQwMTMwMDNaMDMxMTAvBgNVBAMTKDE4QTgwMjMwODhGM0RC NTlEOUFDMkM5QTEzN0NGOTdBMkM0RTQ4RTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDNOGzn+DdLD02h1iGrCwR6BWrrpIaRVp7konus7QdsNAlsdvqP +IEr+7PkihxBADwUHlfYCLMWS64xB3JYYZv10S4FbadsnA1QajFN8kg566oJWWBt WoYPMP3wsT4TBsmnieAv/cSOJpxBqrPw0oRnGTy8GoApTpo8eUMuWFedy3DGP3Az hwLjgWDbhSeguswXNoF18AB9DnX49Z+u6VnZivNL0L+mXS7ccee65Ho7wxYmEj8g UNr8y5rJVQj/d9CE/CeRbHt0+w6nzqJBC2/xplUJNp56wX9E8m3CA1FmGHSbz7pM gW8/5QeQjhyz1EwxwPqs5nkoYNHcITi82wepAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUGKgCMIjz21nZrCyaE3z5eixOSOkwHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNjcxL0dLZ0NNSWp6MjFuWnJDeWFFM3o1ZWl4T1NPay5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAfThwAwDQYJKoZIhvcNAQELBQADggEBAIzOVWZbTPlhgEDnthlyQRGvsDc7 7eDYuXE8GRP11vC3JK3a7TH5g2UMyIxXR+CQOwjq8EcwbT0diyvs8aT4AvJAucpr BrDvmGp7n84hmhFR3DpHE3umJQ1svjsSv/QD6SeKgdMGxFkItQB7Oeu5qhz0SeUE rTDglc3W34cywvE1PN0UZjaqnNnzApKQ/wi6B2YWpF3aFClUt9Llg87qB/Ag2RQU IqSgiPZ0BlyVUrDcB8LlcBZQccJeUsQjTyT4KLwwev/GAqf1zMvBQieLBtfsLr5x OAYYz1lpn0uRiLY5Qdh1Y/f75iQYs1cs3V5Kf8s79lim9XyYtnNRaXhegVw= -----END CERTIFICATE-----Generated at Sat May 18 12:40:38 2024 by rpki-client on console-ams.rpki-client.org