$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/NtAYMaa7JfHLteKfnKTXAHq014E.roa File: NtAYMaa7JfHLteKfnKTXAHq014E.roa (raw, json) Hash identifier: PwAGy97mGQbKcA5+BEW1w86KB7pgdHrxBawM9P+QA/c= Subject key identifier: 36:D0:18:31:A6:BB:25:F1:CB:B5:E2:9F:9C:A4:D7:00:7A:B4:D7:81 Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Certificate serial: 0124 Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/NtAYMaa7JfHLteKfnKTXAHq014E.roa Signing time: Fri 01 Sep 2023 01:30:29 +0000 ROA not before: Fri 01 Sep 2023 01:30:29 +0000 ROA not after: Wed 14 Aug 2024 01:30:02 +0000 asID: 9824 IP address blocks: 203.217.180.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Jun 2024 02:39:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 292 (0x124) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Validity Not Before: Sep 1 01:30:29 2023 GMT Not After : Aug 14 01:30:02 2024 GMT Subject: CN=36D01831A6BB25F1CBB5E29F9CA4D7007AB4D781 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c7:59:57:5b:19:e4:cb:3d:71:8a:34:22:f6: e8:6d:af:93:50:4b:2c:16:fd:c0:de:80:88:71:bf: 82:6c:20:2b:b0:c7:3d:ed:80:7a:1b:e0:bf:a0:f8: 08:93:c5:60:5a:8d:fa:25:42:9e:09:64:c0:be:79: 6b:cf:b9:8a:12:86:72:f3:de:a3:c6:cf:d1:35:a0: fd:f3:72:cc:46:73:21:a8:4b:c3:5e:2f:a3:60:d3: b1:19:e2:d1:b2:a7:61:ce:14:f0:ee:d1:c1:f7:f7: 39:43:5b:38:eb:27:d8:13:47:bd:59:33:6e:4c:57: a1:a3:48:ec:b1:76:08:f8:2f:67:0d:8e:1d:00:96: 3e:42:3b:11:69:9c:df:bc:56:23:8f:78:f5:34:f0: 6f:4f:39:5e:07:e0:5b:d5:c1:5d:a0:4c:e5:b3:6f: f4:17:5d:79:c6:31:9e:d2:f9:cd:a7:bb:6e:b0:6f: 8a:86:2d:39:28:f8:c2:8c:b7:52:15:34:ae:24:34: 99:df:96:28:f0:6c:92:2a:c1:08:06:15:f2:6c:dd: 71:bb:1a:f8:d2:a6:bd:a2:a8:aa:e2:26:95:99:49: a2:ed:1b:be:38:71:69:38:3e:1d:1a:0d:f1:96:57: 4b:6a:52:d1:d3:74:8c:69:a2:20:d0:73:0d:82:25: c1:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:D0:18:31:A6:BB:25:F1:CB:B5:E2:9F:9C:A4:D7:00:7A:B4:D7:81 X509v3 Authority Key Identifier: keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/NtAYMaa7JfHLteKfnKTXAHq014E.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.217.180.0/22 Signature Algorithm: sha256WithRSAEncryption 01:e2:3d:1d:18:14:18:a0:c7:ac:0a:48:98:b9:63:4e:05:32: eb:35:a8:49:56:65:b8:46:bf:b8:4d:5a:c6:c3:b5:6e:46:13: f4:a6:4c:15:bf:28:eb:de:bb:18:e9:37:bf:30:04:72:49:69: 07:e5:20:1e:66:01:cd:9d:a3:19:47:05:d9:68:07:ee:29:f0: 71:e2:8f:25:67:d2:12:c7:c8:06:c9:4d:ad:19:f3:37:d2:9c: 75:5d:81:9d:e8:78:94:90:90:10:5a:2f:2c:7a:cd:e3:cf:ac: 93:25:60:8f:4f:03:02:03:95:4d:40:d1:e8:32:12:11:8f:e7: f6:cf:1f:01:69:75:bd:81:e5:a9:83:f0:c3:b0:8c:bb:0c:11: 81:ee:bb:04:e1:46:60:47:9d:0b:6b:3b:8a:57:90:37:af:c7: ef:79:32:b7:28:ce:b3:4e:c4:ca:52:81:a9:67:5c:47:ff:7e: b7:d6:4c:5d:d3:77:c2:d7:0f:d4:05:9b:3a:2d:ed:e9:35:a7: 76:d6:42:ed:bd:bd:c3:d4:87:fd:87:64:92:27:a0:86:a7:6b: 56:7a:e6:36:45:3e:6f:b0:b5:00:3e:91:5b:66:fa:82:94:cb: 64:e1:1f:96:51:15:28:33:db:1d:f7:99:97:a6:c0:01:18:1b: 4e:2b:f0:51 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICASQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yMzA5MDEw MTMwMjlaFw0yNDA4MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDM2RDAxODMxQTZCQjI1 RjFDQkI1RTI5RjlDQTRENzAwN0FCNEQ3ODEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC1x1lXWxnkyz1xijQi9uhtr5NQSywW/cDegIhxv4JsICuwxz3t gHob4L+g+AiTxWBajfolQp4JZMC+eWvPuYoShnLz3qPGz9E1oP3zcsxGcyGoS8Ne L6Ng07EZ4tGyp2HOFPDu0cH39zlDWzjrJ9gTR71ZM25MV6GjSOyxdgj4L2cNjh0A lj5COxFpnN+8ViOPePU08G9POV4H4FvVwV2gTOWzb/QXXXnGMZ7S+c2nu26wb4qG LTko+MKMt1IVNK4kNJnflijwbJIqwQgGFfJs3XG7GvjSpr2iqKriJpWZSaLtG744 cWk4Ph0aDfGWV0tqUtHTdIxpoiDQcw2CJcHHAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUNtAYMaa7JfHLteKfnKTXAHq014EwHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNjcxL050QVlNYWE3SmZITHRlS2ZuS1RYQUhxMDE0RS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBALL2bQwDQYJKoZIhvcNAQELBQADggEBAAHiPR0YFBigx6wKSJi5Y04FMus1 qElWZbhGv7hNWsbDtW5GE/SmTBW/KOveuxjpN78wBHJJaQflIB5mAc2doxlHBdlo B+4p8HHijyVn0hLHyAbJTa0Z8zfSnHVdgZ3oeJSQkBBaLyx6zePPrJMlYI9PAwID lU1A0egyEhGP5/bPHwFpdb2B5amD8MOwjLsMEYHuuwThRmBHnQtrO4pXkDevx+95 MrcozrNOxMpSgalnXEf/frfWTF3Td8LXD9QFmzot7ek1p3bWQu29vcPUh/2HZJIn oIana1Z65jZFPm+wtQA+kVtm+oKUy2ThH5ZRFSgz2x33mZemwAEYG04r8FE= -----END CERTIFICATE-----Generated at Thu May 30 03:38:52 2024 by rpki-client on console-ams.rpki-client.org