$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/H9YWHZKk_PtV9OLfBf_165uQngE.roa File: H9YWHZKk_PtV9OLfBf_165uQngE.roa (raw, json) Hash identifier: LD1aJw11bSVMSKi3jwsRtDP5GhhefANpjhBzy/QdN8Q= Subject key identifier: 1F:D6:16:1D:92:A4:FC:FB:55:F4:E2:DF:05:FF:F5:EB:9B:90:9E:01 Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Certificate serial: 0254 Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/H9YWHZKk_PtV9OLfBf_165uQngE.roa Signing time: Sat 31 Aug 2024 01:36:40 +0000 ROA not before: Sat 31 Aug 2024 01:36:40 +0000 ROA not after: Fri 15 Aug 2025 01:30:02 +0000 asID: 23788 IP address blocks: 110.172.0.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 06:14:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 596 (0x254) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Validity Not Before: Aug 31 01:36:40 2024 GMT Not After : Aug 15 01:30:02 2025 GMT Subject: CN=1FD6161D92A4FCFB55F4E2DF05FFF5EB9B909E01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:9f:2f:2f:c1:aa:c9:ad:a6:e8:70:59:f5:06: 13:6d:4e:f0:72:89:46:b1:8e:99:33:ea:3b:19:0e: 5b:8d:e5:28:67:63:1a:ab:ed:c8:94:e0:ba:e9:6c: 54:55:57:d2:5e:e8:a0:ad:33:a5:8a:e3:f4:05:e6: 15:58:16:87:bf:15:46:07:f8:e6:03:a9:90:51:a2: 9b:f0:d5:bc:73:1b:f5:ce:cf:ce:67:fd:c2:72:09: 61:d3:2e:f9:b2:68:d8:c7:f7:40:96:d3:8c:20:de: 20:d6:fa:5b:59:3d:49:26:d2:ec:3a:f0:07:ab:6c: c6:8e:42:ed:66:1a:43:f3:0f:a6:f7:b8:a0:93:ae: f4:cc:5f:c1:9f:1d:c6:3d:c4:da:49:00:9d:47:ca: 70:4a:05:fd:93:82:1d:8a:2d:57:5d:b5:51:c7:97: 8f:10:39:7c:e2:0a:8f:fb:03:d5:d7:84:f4:26:42: 57:0a:56:59:d9:a0:90:d1:cd:ff:30:be:48:e7:29: 18:f6:99:15:78:10:03:28:75:fa:31:a4:b4:55:68: aa:35:05:8f:13:b2:5a:62:52:ec:96:25:0d:83:b2: 25:44:cc:94:02:a3:2e:5d:4c:8a:18:ff:62:fb:52: eb:d3:0e:8b:6c:08:5e:6d:76:65:11:70:49:75:17: d6:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:D6:16:1D:92:A4:FC:FB:55:F4:E2:DF:05:FF:F5:EB:9B:90:9E:01 X509v3 Authority Key Identifier: keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/H9YWHZKk_PtV9OLfBf_165uQngE.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 110.172.0.0/20 Signature Algorithm: sha256WithRSAEncryption 2e:28:64:a0:07:f5:96:93:44:9a:67:d7:90:2f:e2:dd:ca:ae: c7:1f:ec:89:5b:34:da:a2:ae:6c:78:e3:78:5e:5b:1c:e0:20: de:1e:10:c4:31:03:bf:2c:fc:73:70:ce:a2:76:1f:38:a7:55: 9f:df:56:62:a5:fc:02:95:8e:8e:2a:6a:fe:52:16:7b:97:98: dd:2b:21:e8:86:71:76:70:cd:2c:24:9c:cb:05:b6:c9:63:55: da:fc:4d:9f:d6:c6:5c:54:f8:7b:9c:25:ec:50:18:64:09:e3: b1:78:bc:11:b1:31:d8:be:5c:9b:fa:eb:68:fb:8c:04:a3:75: 01:5d:9a:7a:66:7a:88:3a:f5:45:0d:73:c3:7b:44:c0:0b:49: b7:6e:6e:e6:6c:92:03:d3:cc:c8:b7:eb:db:23:b4:0e:03:bb: 7c:35:37:b8:65:de:48:ce:9a:b6:ed:23:c3:8e:20:57:39:63: 2e:58:e9:f2:fe:67:01:67:ff:1c:2e:b8:c8:10:09:c7:c5:7d: 8c:bd:17:bf:64:db:bf:8f:75:65:46:4e:00:4f:81:17:65:da: e7:53:e1:6c:5d:fe:bc:9c:e4:af:af:b6:08:fa:76:14:1a:f3: 17:2a:df:9c:3d:0b:97:5e:e3:b3:e6:50:d9:8f:42:05:ae:38: 4e:b4:e7:3d -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAlQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yNDA4MzEw MTM2NDBaFw0yNTA4MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDFGRDYxNjFEOTJBNEZD RkI1NUY0RTJERjA1RkZGNUVCOUI5MDlFMDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDIny8vwarJrabocFn1BhNtTvByiUaxjpkz6jsZDluN5ShnYxqr 7ciU4LrpbFRVV9Je6KCtM6WK4/QF5hVYFoe/FUYH+OYDqZBRopvw1bxzG/XOz85n /cJyCWHTLvmyaNjH90CW04wg3iDW+ltZPUkm0uw68AerbMaOQu1mGkPzD6b3uKCT rvTMX8GfHcY9xNpJAJ1HynBKBf2Tgh2KLVddtVHHl48QOXziCo/7A9XXhPQmQlcK VlnZoJDRzf8wvkjnKRj2mRV4EAModfoxpLRVaKo1BY8TslpiUuyWJQ2DsiVEzJQC oy5dTIoY/2L7UuvTDotsCF5tdmURcEl1F9YhAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUH9YWHZKk/PtV9OLfBf/165uQngEwHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNjcxL0g5WVdIWktrX1B0VjlPTGZCZl8xNjV1UW5nRS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBARurAAwDQYJKoZIhvcNAQELBQADggEBAC4oZKAH9ZaTRJpn15Av4t3Krscf 7IlbNNqirmx443heWxzgIN4eEMQxA78s/HNwzqJ2HzinVZ/fVmKl/AKVjo4qav5S FnuXmN0rIeiGcXZwzSwknMsFtsljVdr8TZ/WxlxU+HucJexQGGQJ47F4vBGxMdi+ XJv662j7jASjdQFdmnpmeog69UUNc8N7RMALSbdubuZskgPTzMi369sjtA4Du3w1 N7hl3kjOmrbtI8OOIFc5Yy5Y6fL+ZwFn/xwuuMgQCcfFfYy9F79k27+PdWVGTgBP gRdl2udT4Wxd/ryc5K+vtgj6dhQa8xcq35w9C5de47PmUNmPQgWuOE605z0= -----END CERTIFICATE-----Generated at Fri Nov 22 11:45:58 2024 by rpki-client on console-ams.rpki-client.org