$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/MtTVQdG9Vob9KDDcsnUoj9YPpKY.roa File: MtTVQdG9Vob9KDDcsnUoj9YPpKY.roa (raw, json) Hash identifier: KLLKudJcstsgjfLTMTR8FvjskN5enBr5Zpj74sEEJzs= Subject key identifier: 32:D4:D5:41:D1:BD:56:86:FD:28:30:DC:B2:75:28:8F:D6:0F:A4:A6 Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Certificate serial: 01BC Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/MtTVQdG9Vob9KDDcsnUoj9YPpKY.roa Signing time: Sun 01 Oct 2023 01:38:15 +0000 ROA not before: Sun 01 Oct 2023 01:38:15 +0000 ROA not after: Sat 14 Sep 2024 01:30:03 +0000 asID: 4721 IP address blocks: 223.223.208.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 01:34:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 444 (0x1bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Validity Not Before: Oct 1 01:38:15 2023 GMT Not After : Sep 14 01:30:03 2024 GMT Subject: CN=32D4D541D1BD5686FD2830DCB275288FD60FA4A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a8:e3:bb:88:c7:40:e6:c3:ac:5f:b8:35:14: 47:f2:10:9a:9b:72:26:6e:70:18:85:6b:e5:6e:b6: 43:97:c6:aa:eb:cd:7b:02:d8:86:cd:8c:88:6b:8a: 17:c9:2b:f3:2a:c9:03:c3:f7:86:f6:5a:78:52:67: 64:45:a5:62:b4:97:4c:e9:0c:a4:c1:66:24:51:68: 85:77:22:38:98:98:9d:91:a7:da:9f:1e:9b:d3:80: 41:39:90:a6:e7:e0:1d:e9:92:84:80:4b:40:d0:b8: f4:b0:f8:0e:30:3c:b7:12:08:71:9e:00:f1:01:ff: 84:bf:17:ef:db:69:9d:c3:32:60:22:54:65:58:73: 57:cf:c1:55:c3:07:42:ee:15:57:d9:da:f6:55:5b: 6a:8c:61:c5:5a:6a:bb:80:8f:ac:69:12:09:bd:84: 1d:4a:d2:1d:94:76:60:0c:90:6f:e7:97:e3:85:c8: a8:1c:51:60:28:3e:ba:2b:bf:56:50:fa:e7:ca:85: 7b:e3:15:c5:f0:48:32:0f:27:98:fc:9c:b0:ae:58: 83:11:4f:8d:59:ae:cf:9a:d2:72:3c:e5:9f:10:28: 3a:e3:67:9a:ca:12:b2:75:3a:bc:33:bb:d1:1d:bc: 18:21:f2:7a:4a:a5:64:cb:60:04:b1:9b:b5:5e:8e: e1:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:D4:D5:41:D1:BD:56:86:FD:28:30:DC:B2:75:28:8F:D6:0F:A4:A6 X509v3 Authority Key Identifier: keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/MtTVQdG9Vob9KDDcsnUoj9YPpKY.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 223.223.208.0/21 Signature Algorithm: sha256WithRSAEncryption dd:d9:e9:84:31:b5:a1:f0:c6:e7:a6:94:e7:9f:d9:ed:a1:a8: e1:a8:73:29:40:a0:d6:a4:fa:25:3e:ee:20:5a:6f:e7:fc:b4: 35:f0:fe:dd:3f:7c:aa:70:f4:0f:70:80:d8:07:1f:7e:48:59: 47:6a:0d:eb:64:6b:d1:6a:37:b4:30:25:7a:94:9e:62:2f:b9: e0:cb:1c:12:87:9b:f0:14:bd:e6:09:cf:7c:71:80:ca:9c:26: e1:de:b1:bc:9b:87:3d:6f:9c:f1:88:60:ff:89:8a:33:45:01: 28:00:14:46:6e:19:49:a1:23:5c:81:f7:04:92:02:ac:be:c1: ca:a6:b6:aa:2c:3e:ea:20:75:27:8e:01:ba:da:94:8d:fe:66: 07:c4:45:6f:68:8b:c5:5a:87:96:71:2f:89:12:3c:35:f6:c2: 53:e4:fa:2f:e0:6d:02:c6:58:f1:3f:21:2b:96:ee:2e:ea:7e: 87:0b:ca:9c:f7:50:24:83:34:fb:5e:c8:ee:0a:15:06:3a:0a: 85:9f:e4:c5:09:4b:ab:79:7e:1c:d0:15:fa:39:cb:cd:00:ca: 66:b9:38:bd:40:d3:26:52:1b:ee:8e:79:29:f2:7c:79:43:76: 37:f7:24:97:e6:cd:4b:45:95:df:13:89:c9:17:f7:2f:ca:71: eb:35:ed:ac -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAbwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yMzEwMDEw MTM4MTVaFw0yNDA5MTQwMTMwMDNaMDMxMTAvBgNVBAMTKDMyRDRENTQxRDFCRDU2 ODZGRDI4MzBEQ0IyNzUyODhGRDYwRkE0QTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCjqOO7iMdA5sOsX7g1FEfyEJqbciZucBiFa+VutkOXxqrrzXsC 2IbNjIhrihfJK/MqyQPD94b2WnhSZ2RFpWK0l0zpDKTBZiRRaIV3IjiYmJ2Rp9qf HpvTgEE5kKbn4B3pkoSAS0DQuPSw+A4wPLcSCHGeAPEB/4S/F+/baZ3DMmAiVGVY c1fPwVXDB0LuFVfZ2vZVW2qMYcVaaruAj6xpEgm9hB1K0h2UdmAMkG/nl+OFyKgc UWAoProrv1ZQ+ufKhXvjFcXwSDIPJ5j8nLCuWIMRT41Zrs+a0nI85Z8QKDrjZ5rK ErJ1Orwzu9EdvBgh8npKpWTLYASxm7VejuHJAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUMtTVQdG9Vob9KDDcsnUoj9YPpKYwHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNjcxL010VFZRZEc5Vm9iOUtERGNzblVvajlZUHBLWS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAPf39AwDQYJKoZIhvcNAQELBQADggEBAN3Z6YQxtaHwxuemlOef2e2hqOGo cylAoNak+iU+7iBab+f8tDXw/t0/fKpw9A9wgNgHH35IWUdqDetka9FqN7QwJXqU nmIvueDLHBKHm/AUveYJz3xxgMqcJuHesbybhz1vnPGIYP+JijNFASgAFEZuGUmh I1yB9wSSAqy+wcqmtqosPuogdSeOAbralI3+ZgfERW9oi8Vah5ZxL4kSPDX2wlPk +i/gbQLGWPE/ISuW7i7qfocLypz3UCSDNPteyO4KFQY6CoWf5MUJS6t5fhzQFfo5 y80Ayma5OL1A0yZSG+6OeSnyfHlDdjf3JJfmzUtFld8TickX9y/Kces17aw= -----END CERTIFICATE-----Generated at Sat May 18 12:40:39 2024 by rpki-client on console-ams.rpki-client.org