$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/JmHKOK3pPuZj-dwGJcPDsfAd2XY.roa File: JmHKOK3pPuZj-dwGJcPDsfAd2XY.roa (raw, json) Hash identifier: FkFWAhG/hIFYPbn5Nj7VyCIdgrS9Mo1f28FJXVHHzzc= Subject key identifier: 26:61:CA:38:AD:E9:3E:E6:63:F9:DC:06:25:C3:C3:B1:F0:1D:D9:76 Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Certificate serial: 010D Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/JmHKOK3pPuZj-dwGJcPDsfAd2XY.roa Signing time: Fri 01 Sep 2023 01:30:19 +0000 ROA not before: Fri 01 Sep 2023 01:30:19 +0000 ROA not after: Wed 14 Aug 2024 01:30:02 +0000 asID: 4721 IP address blocks: 202.43.68.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 01:34:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 269 (0x10d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Validity Not Before: Sep 1 01:30:19 2023 GMT Not After : Aug 14 01:30:02 2024 GMT Subject: CN=2661CA38ADE93EE663F9DC0625C3C3B1F01DD976 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c5:fb:cd:98:70:bb:e5:2f:dd:ef:18:2c:20: 14:dd:22:ba:fe:21:17:d9:a2:2e:ae:30:cb:b2:c0: 20:f0:f4:8d:51:e0:5c:52:a2:0a:a3:1e:67:9e:e5: 87:96:64:d6:dd:67:10:75:f7:2a:ce:28:55:5c:a3: 2e:d1:79:36:6f:53:e7:30:d8:fe:12:87:bf:16:b7: 68:85:33:e9:c6:e9:05:1d:65:ff:6d:91:45:1a:7a: dd:50:67:17:2f:f5:ae:8c:62:05:1d:6c:e4:6c:99: 3f:fa:ee:75:d4:45:b2:1b:ee:d7:f7:31:16:ff:10: ad:46:53:13:f0:f9:c6:97:47:19:c7:c0:24:ca:c1: b5:3e:2b:ca:1b:3c:17:1f:2d:36:6c:38:3c:d9:74: 86:fc:6a:ab:3b:68:00:5b:f4:a2:16:47:2c:b6:43: c4:58:86:72:f7:02:03:a7:5d:d0:e8:f5:83:a0:91: 7d:61:b1:e9:18:72:d8:f1:3e:6c:18:43:b2:0d:af: ff:b5:0c:67:aa:39:15:b3:38:44:06:d7:37:46:bf: 23:79:44:ee:3b:5a:98:77:60:99:f5:c0:bc:de:4e: a4:a9:30:1b:d2:5a:f1:6d:24:1f:f1:9e:26:1f:f4: 3a:6b:f9:78:02:1a:28:6c:15:50:7b:35:75:51:ca: 13:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:61:CA:38:AD:E9:3E:E6:63:F9:DC:06:25:C3:C3:B1:F0:1D:D9:76 X509v3 Authority Key Identifier: keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/JmHKOK3pPuZj-dwGJcPDsfAd2XY.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.43.68.0/22 Signature Algorithm: sha256WithRSAEncryption 0e:ce:58:0a:84:2f:77:24:2a:63:f1:f9:34:ea:d5:f7:62:e2: 5b:33:9a:c1:f3:be:31:86:12:e8:1d:e1:d5:29:eb:46:48:48: c5:0b:ba:2f:71:6f:e8:0f:7b:f8:f0:d7:40:a1:1c:03:c2:1a: d9:b8:e6:f7:fc:6b:ff:75:b4:7f:d6:86:87:6f:0c:ff:41:d6: ed:16:86:b3:11:b9:81:c0:6a:41:9d:b0:26:a0:04:9b:46:78: 46:c7:8a:82:fa:dd:6b:c1:a1:89:30:0f:19:15:ae:b6:19:15: b8:6f:52:42:00:e4:a8:10:3a:34:7a:f4:79:6d:38:2e:d1:de: 62:dd:f8:7c:90:91:cb:f2:23:fd:c9:56:5a:ab:77:14:f8:dd: 70:37:a8:21:54:f1:ef:24:a4:c7:89:d5:13:1a:52:78:b4:95: c8:38:06:ef:65:62:26:57:ac:77:15:9a:1e:19:f1:85:cf:dc: 58:f8:b6:28:15:9e:10:70:e6:bb:49:97:b1:5f:10:bd:ac:00: bb:0b:d3:4c:9a:b6:a8:54:19:2c:ce:b3:ac:61:3f:ed:04:ac: ea:30:3f:8a:00:15:0d:12:d8:4d:18:51:83:2d:d0:f0:53:1e: c4:34:e4:3d:64:b3:e4:55:41:26:fd:43:88:47:c6:54:fd:3b: 43:a4:f5:8e -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAQ0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yMzA5MDEw MTMwMTlaFw0yNDA4MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDI2NjFDQTM4QURFOTNF RTY2M0Y5REMwNjI1QzNDM0IxRjAxREQ5NzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCuxfvNmHC75S/d7xgsIBTdIrr+IRfZoi6uMMuywCDw9I1R4FxS ogqjHmee5YeWZNbdZxB19yrOKFVcoy7ReTZvU+cw2P4Sh78Wt2iFM+nG6QUdZf9t kUUaet1QZxcv9a6MYgUdbORsmT/67nXURbIb7tf3MRb/EK1GUxPw+caXRxnHwCTK wbU+K8obPBcfLTZsODzZdIb8aqs7aABb9KIWRyy2Q8RYhnL3AgOnXdDo9YOgkX1h sekYctjxPmwYQ7INr/+1DGeqORWzOEQG1zdGvyN5RO47Wph3YJn1wLzeTqSpMBvS WvFtJB/xniYf9Dpr+XgCGihsFVB7NXVRyhNrAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUJmHKOK3pPuZj+dwGJcPDsfAd2XYwHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNjcxL0ptSEtPSzNwUHVaai1kd0dKY1BEc2ZBZDJYWS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBALKK0QwDQYJKoZIhvcNAQELBQADggEBAA7OWAqEL3ckKmPx+TTq1fdi4lsz msHzvjGGEugd4dUp60ZISMULui9xb+gPe/jw10ChHAPCGtm45vf8a/91tH/Whodv DP9B1u0WhrMRuYHAakGdsCagBJtGeEbHioL63WvBoYkwDxkVrrYZFbhvUkIA5KgQ OjR69HltOC7R3mLd+HyQkcvyI/3JVlqrdxT43XA3qCFU8e8kpMeJ1RMaUni0lcg4 Bu9lYiZXrHcVmh4Z8YXP3Fj4tigVnhBw5rtJl7FfEL2sALsL00yatqhUGSzOs6xh P+0ErOowP4oAFQ0S2E0YUYMt0PBTHsQ05D1ks+RVQSb9Q4hHxlT9O0Ok9Y4= -----END CERTIFICATE-----Generated at Sat May 18 12:40:39 2024 by rpki-client on console-ams.rpki-client.org