$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/HDQ-hSMix23rpcLgmWhO0QxBhds.roa File: HDQ-hSMix23rpcLgmWhO0QxBhds.roa (raw, json) Hash identifier: 8OhQvB2CevngQyrVSljMF4NsKAe7tdhRepxFy9LmXSg= Subject key identifier: 1C:34:3E:85:23:22:C7:6D:EB:A5:C2:E0:99:68:4E:D1:0C:41:85:DB Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Certificate serial: 015E Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/HDQ-hSMix23rpcLgmWhO0QxBhds.roa Signing time: Sun 01 Oct 2023 01:33:04 +0000 ROA not before: Sun 01 Oct 2023 01:33:04 +0000 ROA not after: Sat 14 Sep 2024 01:30:03 +0000 asID: 23788 IP address blocks: 119.82.192.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Jun 2024 02:39:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 350 (0x15e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Validity Not Before: Oct 1 01:33:04 2023 GMT Not After : Sep 14 01:30:03 2024 GMT Subject: CN=1C343E852322C76DEBA5C2E099684ED10C4185DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:24:ef:8f:f3:b1:6f:a4:d8:66:49:18:98:4a: 5c:ba:54:98:47:7e:34:b3:ea:c0:20:5f:88:85:f6: ac:e2:da:af:af:66:d0:57:fa:31:ac:91:26:d6:c9: e1:91:ac:25:d6:c1:38:21:65:62:60:05:87:76:68: a7:31:49:92:a9:4a:ca:c8:10:4b:98:ff:35:44:31: 9d:97:fc:e9:e3:d4:24:2c:55:56:9c:64:20:3b:19: 13:d5:39:4b:cc:6f:9e:4c:d6:b3:8a:a3:9c:36:97: 22:44:49:a1:eb:51:e0:4b:d7:b9:29:ae:b0:91:74: 62:71:b8:eb:b4:0c:c6:7f:2f:5c:b7:97:9e:a3:33: 05:ad:33:9f:6d:f7:bd:1a:1b:69:f7:00:58:a9:f7: ab:0e:f1:87:b6:71:0c:6d:9c:bf:a2:da:c9:a6:25: a3:9f:c5:82:64:fd:3e:51:b1:d2:86:7c:98:63:9b: 7e:cc:6c:94:21:0e:95:d9:39:8b:03:ca:22:50:09: 9b:ad:78:c3:cb:85:fa:8e:38:fc:b9:ce:ab:6e:9f: 2f:49:c2:e7:2a:c5:33:10:37:65:f5:6f:97:ac:cf: 78:5d:18:e6:1f:cb:d3:42:a2:86:9a:35:f3:3a:0c: c5:83:43:78:19:92:9b:7f:a7:03:ce:45:8d:62:9d: ae:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:34:3E:85:23:22:C7:6D:EB:A5:C2:E0:99:68:4E:D1:0C:41:85:DB X509v3 Authority Key Identifier: keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/HDQ-hSMix23rpcLgmWhO0QxBhds.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 119.82.192.0/20 Signature Algorithm: sha256WithRSAEncryption d9:92:a7:ae:be:42:42:2a:b5:44:5d:aa:b4:3c:ff:bc:1d:8d: 45:d9:a9:a6:f8:83:dc:8c:96:98:5a:3f:ec:b1:5d:3b:b4:80: 94:ed:97:50:17:fc:75:1d:cf:03:77:13:b9:2f:3d:25:64:50: 48:a6:2f:6f:e5:1b:8f:40:4a:40:10:a8:79:06:75:d1:64:fb: 5f:78:64:ac:6b:e5:06:39:df:7c:ec:c6:91:09:56:b7:72:a8: c7:90:5d:ac:89:d3:f8:17:44:49:a3:f6:ed:d6:98:d9:1d:6b: 44:e5:32:74:96:f7:a7:60:99:01:92:7a:73:fb:46:3c:74:b5: 8d:92:53:ac:14:f4:93:2b:95:a8:9b:ac:f4:a8:6f:f8:ea:17: 43:02:66:bb:98:d8:7c:ab:bf:a3:c0:af:2b:9b:37:6c:da:0f: 70:ca:c5:ad:c7:87:a1:9a:04:a8:ea:46:6a:20:c2:1d:18:f5: d6:db:3e:8e:b3:a5:72:47:55:7e:5e:ce:aa:e0:f9:1c:28:6c: e0:53:51:17:20:f3:32:ca:8b:f9:2d:b9:7e:bd:54:2f:21:ed: e2:9e:02:33:aa:ca:42:90:68:e8:4a:91:b2:d6:9c:ed:6b:23: 70:d8:b1:03:e6:c2:7c:59:d2:2a:58:7a:ef:49:c8:fd:5b:0d: c5:0b:7c:73 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAV4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yMzEwMDEw MTMzMDRaFw0yNDA5MTQwMTMwMDNaMDMxMTAvBgNVBAMTKDFDMzQzRTg1MjMyMkM3 NkRFQkE1QzJFMDk5Njg0RUQxMEM0MTg1REIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC9JO+P87FvpNhmSRiYSly6VJhHfjSz6sAgX4iF9qzi2q+vZtBX +jGskSbWyeGRrCXWwTghZWJgBYd2aKcxSZKpSsrIEEuY/zVEMZ2X/Onj1CQsVVac ZCA7GRPVOUvMb55M1rOKo5w2lyJESaHrUeBL17kprrCRdGJxuOu0DMZ/L1y3l56j MwWtM59t970aG2n3AFip96sO8Ye2cQxtnL+i2smmJaOfxYJk/T5RsdKGfJhjm37M bJQhDpXZOYsDyiJQCZuteMPLhfqOOPy5zqtuny9JwucqxTMQN2X1b5esz3hdGOYf y9NCooaaNfM6DMWDQ3gZkpt/pwPORY1ina7DAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUHDQ+hSMix23rpcLgmWhO0QxBhdswHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNjcxL0hEUS1oU01peDIzcnBjTGdtV2hPMFF4Qmhkcy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAR3UsAwDQYJKoZIhvcNAQELBQADggEBANmSp66+QkIqtURdqrQ8/7wdjUXZ qab4g9yMlphaP+yxXTu0gJTtl1AX/HUdzwN3E7kvPSVkUEimL2/lG49ASkAQqHkG ddFk+194ZKxr5QY533zsxpEJVrdyqMeQXayJ0/gXREmj9u3WmNkda0TlMnSW96dg mQGSenP7Rjx0tY2SU6wU9JMrlaibrPSob/jqF0MCZruY2Hyrv6PAryubN2zaD3DK xa3Hh6GaBKjqRmogwh0Y9dbbPo6zpXJHVX5ezqrg+RwobOBTURcg8zLKi/ktuX69 VC8h7eKeAjOqykKQaOhKkbLWnO1rI3DYsQPmwnxZ0ipYeu9JyP1bDcULfHM= -----END CERTIFICATE-----Generated at Thu May 30 03:38:52 2024 by rpki-client on console-ams.rpki-client.org