$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/HCFgvu4kEziy7Ynt_oDyyZj3eCg.roa File: HCFgvu4kEziy7Ynt_oDyyZj3eCg.roa (raw, json) Hash identifier: GSOlrg7A58b2+1pXLyan1WoWBbpoQY7z8Bn0QotV+Fo= Subject key identifier: 1C:21:60:BE:EE:24:13:38:B2:ED:89:ED:FE:80:F2:C9:98:F7:78:28 Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Certificate serial: 0137 Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/HCFgvu4kEziy7Ynt_oDyyZj3eCg.roa Signing time: Sun 01 Oct 2023 01:30:15 +0000 ROA not before: Sun 01 Oct 2023 01:30:15 +0000 ROA not after: Sat 14 Sep 2024 01:30:03 +0000 asID: 9378 IP address blocks: 61.215.160.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 01:34:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 311 (0x137) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Validity Not Before: Oct 1 01:30:15 2023 GMT Not After : Sep 14 01:30:03 2024 GMT Subject: CN=1C2160BEEE241338B2ED89EDFE80F2C998F77828 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:10:51:79:a0:73:b3:5b:88:b8:14:b0:6d:42: ff:44:d2:f7:b6:fe:44:dc:2a:77:32:6c:c9:fc:5c: 36:bb:fd:f9:0b:5b:58:8a:be:11:56:5a:43:eb:39: 67:3b:82:e1:39:cd:ef:19:ff:c3:32:ef:e6:3d:73: ab:08:f2:34:8d:f6:72:31:13:6a:a3:6a:1f:02:5b: 26:5e:5d:e9:fe:d2:e3:37:51:aa:0d:4c:de:3b:5b: ed:57:dd:c1:81:cb:0b:66:b8:5a:f4:11:5c:38:f5: 72:68:1b:44:b9:47:73:34:7f:0f:5e:34:fe:89:5e: d3:83:e2:c4:4f:16:27:08:a4:f0:45:c7:9d:d8:d4: 68:83:55:7f:5b:b6:6e:2e:85:da:d5:1c:45:99:87: 42:da:17:22:35:cc:b7:e3:cb:85:cb:8c:46:cf:e8: a2:79:4f:78:5a:5e:1a:c5:51:da:59:13:b0:5a:e7: e1:2f:ac:6d:80:f0:15:fd:bd:c7:45:0f:ea:07:db: de:92:1c:c4:11:f8:17:92:ce:26:27:a3:a7:0a:6a: f4:5f:f8:6e:57:3e:3a:64:cc:25:b0:68:08:c9:7b: 7a:30:b5:d9:b1:53:6d:be:7c:d0:84:2a:90:de:ce: 7d:27:0a:f4:b7:0d:2c:fb:5a:5c:fc:f2:0e:2b:56: 7c:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:21:60:BE:EE:24:13:38:B2:ED:89:ED:FE:80:F2:C9:98:F7:78:28 X509v3 Authority Key Identifier: keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/HCFgvu4kEziy7Ynt_oDyyZj3eCg.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 61.215.160.0/20 Signature Algorithm: sha256WithRSAEncryption b0:39:c8:20:ad:43:b6:56:26:49:cb:78:84:46:2e:a7:73:ae: d1:f7:a7:63:a1:12:c1:b9:e0:b0:93:8f:96:18:56:32:fc:63: f0:ec:71:f6:f2:48:31:5e:29:94:a5:5c:0d:8c:46:58:f3:22: 59:65:1b:0c:7a:25:13:86:4d:bc:10:fd:17:d2:4e:f9:13:78: b3:50:d2:da:e8:3e:7c:1d:87:9d:f2:2a:3b:f2:fd:51:19:29: b4:6d:db:5a:32:45:cd:3f:23:34:28:3c:c0:da:4f:65:3e:39: 19:37:b9:a5:a6:88:2f:86:2d:fa:7c:c2:52:27:83:23:1b:0a: 48:36:45:9e:8b:4e:57:d3:78:31:a0:af:d4:e7:88:60:4c:33: c6:b4:7c:e7:d5:26:d8:10:1f:ef:08:f7:1f:44:49:ea:ca:eb: 3b:f2:c3:a8:c4:af:ff:04:ae:e7:d3:d4:7f:69:f6:37:e6:ec: c4:d8:8c:50:ea:86:2b:1e:80:94:95:c5:5a:16:4d:ea:82:15: 48:86:71:fb:9c:4d:ed:32:90:ce:6d:f7:ee:11:3b:62:ab:b3: 94:33:0b:43:77:94:00:72:d0:f0:39:98:38:bf:a9:b7:a1:d4: 74:9f:7f:5d:65:a4:aa:a9:a7:69:f8:5a:4f:96:6f:a3:7a:17: 0e:bf:77:89 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICATcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yMzEwMDEw MTMwMTVaFw0yNDA5MTQwMTMwMDNaMDMxMTAvBgNVBAMTKDFDMjE2MEJFRUUyNDEz MzhCMkVEODlFREZFODBGMkM5OThGNzc4MjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCsEFF5oHOzW4i4FLBtQv9E0ve2/kTcKncybMn8XDa7/fkLW1iK vhFWWkPrOWc7guE5ze8Z/8My7+Y9c6sI8jSN9nIxE2qjah8CWyZeXen+0uM3UaoN TN47W+1X3cGBywtmuFr0EVw49XJoG0S5R3M0fw9eNP6JXtOD4sRPFicIpPBFx53Y 1GiDVX9btm4uhdrVHEWZh0LaFyI1zLfjy4XLjEbP6KJ5T3haXhrFUdpZE7Ba5+Ev rG2A8BX9vcdFD+oH296SHMQR+BeSziYno6cKavRf+G5XPjpkzCWwaAjJe3owtdmx U22+fNCEKpDezn0nCvS3DSz7Wlz88g4rVnyrAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUHCFgvu4kEziy7Ynt/oDyyZj3eCgwHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNjcxL0hDRmd2dTRrRXppeTdZbnRfb0R5eVpqM2VDZy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQ916AwDQYJKoZIhvcNAQELBQADggEBALA5yCCtQ7ZWJknLeIRGLqdzrtH3 p2OhEsG54LCTj5YYVjL8Y/DscfbySDFeKZSlXA2MRljzIlllGwx6JROGTbwQ/RfS TvkTeLNQ0troPnwdh53yKjvy/VEZKbRt21oyRc0/IzQoPMDaT2U+ORk3uaWmiC+G Lfp8wlIngyMbCkg2RZ6LTlfTeDGgr9TniGBMM8a0fOfVJtgQH+8I9x9ESerK6zvy w6jEr/8ErufT1H9p9jfm7MTYjFDqhisegJSVxVoWTeqCFUiGcfucTe0ykM5t9+4R O2Krs5QzC0N3lABy0PA5mDi/qbeh1HSff11lpKqpp2n4Wk+Wb6N6Fw6/d4k= -----END CERTIFICATE-----Generated at Sat May 18 11:39:42 2024 by rpki-client on console-fra.rpki-client.org