$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/MTcHH0GIA_nYIUMT_6pgNiy12Dk.roa File: MTcHH0GIA_nYIUMT_6pgNiy12Dk.roa (raw, json) Hash identifier: Css55GSEYTZ+Q41sDlL1qs/ToFlwEzUqW859jlU2g8U= Subject key identifier: 31:37:07:1F:41:88:03:F9:D8:21:43:13:FF:AA:60:36:2C:B5:D8:39 Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Certificate serial: 02E8 Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/MTcHH0GIA_nYIUMT_6pgNiy12Dk.roa Signing time: Mon 30 Sep 2024 01:28:10 +0000 ROA not before: Mon 30 Sep 2024 01:28:10 +0000 ROA not after: Mon 15 Sep 2025 01:30:03 +0000 asID: 0 IP address blocks: 125.62.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Oct 2024 13:49:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 744 (0x2e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Validity Not Before: Sep 30 01:28:10 2024 GMT Not After : Sep 15 01:30:03 2025 GMT Subject: CN=3137071F418803F9D8214313FFAA60362CB5D839 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:74:88:8d:4c:bc:99:14:63:fb:b0:8a:f2:e6: c4:16:73:fa:cc:4e:a1:ad:dd:c3:aa:46:18:79:64: 74:30:5a:b1:f1:9c:e2:67:6a:61:c5:ef:0d:b8:33: e4:e7:32:37:91:7e:89:32:67:aa:da:91:da:66:af: 7c:45:6a:6b:4b:90:48:0b:ae:6c:8d:09:1d:06:6d: 26:17:5e:28:9b:0c:f8:dc:b1:4c:8f:0e:75:d5:b7: 80:98:ad:3a:e2:82:8c:95:4f:77:a2:a3:b5:1c:5c: 57:2e:ec:7a:c1:2b:e2:c1:1d:f1:55:18:00:dc:38: 88:d1:75:1c:22:f6:8d:2f:14:4a:cb:2d:27:bb:82: 36:e0:75:d2:e5:66:67:a4:9c:fc:8d:4d:d1:f3:c0: 44:21:a8:1a:a1:ce:f6:dc:ec:54:96:26:93:1c:0d: 60:42:6d:18:12:c4:33:66:39:82:f1:64:88:ab:e4: 3b:c8:9f:3b:9a:d7:d8:72:f8:3e:08:71:e8:73:93: a0:5d:f6:14:50:44:7e:3a:bf:9f:b3:2e:6e:6b:6d: 57:4e:a1:c7:1b:cf:78:6c:db:e1:fa:91:7c:07:7c: c2:20:65:5f:5b:7e:37:c2:40:14:d7:8e:88:73:54: 64:02:c7:fb:ec:16:42:a6:a3:c7:1e:a8:8d:f7:99: b7:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:37:07:1F:41:88:03:F9:D8:21:43:13:FF:AA:60:36:2C:B5:D8:39 X509v3 Authority Key Identifier: keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/MTcHH0GIA_nYIUMT_6pgNiy12Dk.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 125.62.240.0/20 Signature Algorithm: sha256WithRSAEncryption 75:7b:1f:7f:0f:d7:70:68:ff:97:48:31:32:c3:7b:c3:cb:f5: 53:72:1a:21:2f:61:85:2a:71:66:4d:62:c0:5e:df:90:be:73: b4:6f:39:99:25:7c:d6:33:5e:6e:da:d9:c9:74:63:d3:1f:39: 6d:0f:d6:1b:01:79:d8:74:8d:de:30:59:fb:7f:ca:e5:8c:8e: 31:7a:91:9f:59:87:e9:b6:b6:8d:f9:e6:35:ff:a3:42:28:b9: 87:70:e8:c3:03:bf:ee:8d:f0:cb:6b:b7:9f:ca:cb:9d:bd:8f: 60:e3:2b:a2:53:98:e2:96:28:8a:cb:1c:a6:cc:3c:64:99:e3: ad:1c:37:ea:99:26:e8:d1:13:ce:b8:59:fd:a6:9e:7e:4c:4a: 9d:7a:52:cf:11:85:aa:49:1b:1f:44:e8:78:69:1d:a3:84:c1: 15:a5:1c:0c:58:b8:0a:bd:69:55:c8:52:6a:f5:fa:5e:90:ea: a0:18:ef:22:32:3b:e3:d8:0d:65:7e:fb:61:20:02:f7:63:f0: 12:32:f0:ff:1d:82:1b:7e:a0:2d:0d:79:86:7e:b7:34:c0:e6: f2:4a:eb:e2:c3:53:b3:e9:a5:cc:e9:5d:5a:f2:52:da:99:24: 4d:d3:07:e9:68:59:d6:2d:8e:9f:ed:6e:5a:15:86:c9:b1:67: a2:f3:40:ee -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAugwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yNDA5MzAw MTI4MTBaFw0yNTA5MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDMxMzcwNzFGNDE4ODAz RjlEODIxNDMxM0ZGQUE2MDM2MkNCNUQ4MzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDTdIiNTLyZFGP7sIry5sQWc/rMTqGt3cOqRhh5ZHQwWrHxnOJn amHF7w24M+TnMjeRfokyZ6rakdpmr3xFamtLkEgLrmyNCR0GbSYXXiibDPjcsUyP DnXVt4CYrTrigoyVT3eio7UcXFcu7HrBK+LBHfFVGADcOIjRdRwi9o0vFErLLSe7 gjbgddLlZmeknPyNTdHzwEQhqBqhzvbc7FSWJpMcDWBCbRgSxDNmOYLxZIir5DvI nzua19hy+D4Icehzk6Bd9hRQRH46v5+zLm5rbVdOoccbz3hs2+H6kXwHfMIgZV9b fjfCQBTXjohzVGQCx/vsFkKmo8ceqI33mbcRAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUMTcHH0GIA/nYIUMT/6pgNiy12DkwHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNjcxL01UY0hIMEdJQV9uWUlVTVRfNnBnTml5MTJEay5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAR9PvAwDQYJKoZIhvcNAQELBQADggEBAHV7H38P13Bo/5dIMTLDe8PL9VNy GiEvYYUqcWZNYsBe35C+c7RvOZklfNYzXm7a2cl0Y9MfOW0P1hsBedh0jd4wWft/ yuWMjjF6kZ9Zh+m2to355jX/o0IouYdw6MMDv+6N8Mtrt5/Ky529j2DjK6JTmOKW KIrLHKbMPGSZ460cN+qZJujRE864Wf2mnn5MSp16Us8RhapJGx9E6HhpHaOEwRWl HAxYuAq9aVXIUmr1+l6Q6qAY7yIyO+PYDWV++2EgAvdj8BIy8P8dght+oC0NeYZ+ tzTA5vJK6+LDU7PppczpXVryUtqZJE3TB+loWdYtjp/tbloVhsmxZ6LzQO4= -----END CERTIFICATE-----Generated at Tue Oct 22 15:30:53 2024 by rpki-client on console-ams.rpki-client.org