$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/NvXlpLuLd3aZjSuSYrpRKiO4Y-E.roa File: NvXlpLuLd3aZjSuSYrpRKiO4Y-E.roa (raw, json) Hash identifier: yH9iK6ZRwJjIDTRD6DHeNhPCoIQ6v8DX+UxlTTP7C5c= Subject key identifier: 36:F5:E5:A4:BB:8B:77:76:99:8D:2B:92:62:BA:51:2A:23:B8:63:E1 Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Certificate serial: 029C Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/NvXlpLuLd3aZjSuSYrpRKiO4Y-E.roa Signing time: Sat 31 Aug 2024 01:40:37 +0000 ROA not before: Sat 31 Aug 2024 01:40:37 +0000 ROA not after: Fri 15 Aug 2025 01:30:02 +0000 asID: 4721 IP address blocks: 203.124.64.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 06:14:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 668 (0x29c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Validity Not Before: Aug 31 01:40:37 2024 GMT Not After : Aug 15 01:30:02 2025 GMT Subject: CN=36F5E5A4BB8B7776998D2B9262BA512A23B863E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c8:dd:3c:f2:6d:bc:16:f6:cb:a5:2a:66:8f: d0:ed:8b:d9:31:bb:82:d4:88:fd:b5:d4:7f:5b:b2: 3d:1b:03:71:a2:f2:23:66:37:cf:a0:61:2c:6b:74: ad:17:3a:0d:18:d9:ca:33:e7:0f:d1:54:e3:86:5f: dd:79:69:b6:09:5e:be:0c:8c:81:16:b4:52:d1:01: 4a:8c:6b:0e:12:86:7b:4e:10:9a:bd:6c:7e:f7:a0: 15:bc:ac:48:e3:2f:df:d6:a4:13:a9:68:35:ca:87: 6c:2d:de:65:3d:39:97:ea:15:48:c9:a0:e2:f7:1b: d7:b1:cd:4d:58:6b:8a:8f:a2:95:5e:ff:f0:40:4a: 43:b0:fb:b5:9d:3d:1f:14:3b:76:25:f4:58:62:e3: de:d5:73:49:e2:85:a6:7b:67:ea:39:4f:7c:03:57: 37:09:e0:96:3f:12:84:33:6e:52:75:2b:47:ea:da: 8d:41:0b:58:3a:d2:58:21:36:bb:06:30:b9:5e:38: 52:c9:86:37:a8:c0:7a:06:db:a2:46:aa:3e:5d:37: f5:eb:72:4e:c9:de:f0:f6:0e:08:f1:9e:da:dd:ab: 31:ea:7c:f8:be:8f:03:92:17:80:a4:fb:7e:aa:40: 0d:21:5f:b3:21:16:4e:9d:38:2c:00:b9:a6:20:b9: 3d:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:F5:E5:A4:BB:8B:77:76:99:8D:2B:92:62:BA:51:2A:23:B8:63:E1 X509v3 Authority Key Identifier: keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/NvXlpLuLd3aZjSuSYrpRKiO4Y-E.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.124.64.0/19 Signature Algorithm: sha256WithRSAEncryption ab:f0:e6:33:3c:f6:7e:b9:c8:f0:4b:a5:60:bf:e4:a3:c7:24: 35:52:26:db:78:c4:d4:24:19:56:19:3b:fc:a8:99:c5:7f:fc: f3:75:a1:03:8a:8c:74:ea:18:f4:c7:08:8f:f9:9c:0e:09:12: ee:72:6d:0a:d8:63:97:0b:bf:7b:59:d1:3d:23:f2:6c:0f:3c: fe:26:7a:b5:c3:eb:41:d9:0b:0f:29:5b:cb:56:ba:d9:51:2a: d6:77:0a:98:de:ab:66:ca:c2:5c:14:d5:56:ad:a0:0d:77:80: 7a:17:09:4a:28:41:06:21:fb:06:ea:e4:3e:9a:9d:80:e7:a9: a1:49:04:f1:9b:37:15:d2:6a:1b:f2:30:04:78:04:e0:12:59: 38:cb:ab:4b:17:a7:c1:d4:bd:fb:ed:78:77:25:c4:99:22:30: a8:53:b9:d6:ff:8d:d6:15:7a:06:a5:9c:d9:8b:a1:d1:48:b5: b9:12:c8:c8:0f:7a:c6:40:cb:62:22:49:61:aa:38:7f:87:54: e3:c1:6e:ba:cd:8b:e0:99:78:00:cf:98:05:c2:a9:72:95:eb: 73:a5:4c:f8:47:81:86:5a:8f:88:24:d9:6a:24:32:71:0a:2c: 2b:db:61:1b:c5:44:ef:03:e4:cb:06:3e:ff:33:47:18:5b:49: aa:ff:7a:92 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICApwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yNDA4MzEw MTQwMzdaFw0yNTA4MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDM2RjVFNUE0QkI4Qjc3 NzY5OThEMkI5MjYyQkE1MTJBMjNCODYzRTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDDyN088m28FvbLpSpmj9Dti9kxu4LUiP211H9bsj0bA3Gi8iNm N8+gYSxrdK0XOg0Y2coz5w/RVOOGX915abYJXr4MjIEWtFLRAUqMaw4ShntOEJq9 bH73oBW8rEjjL9/WpBOpaDXKh2wt3mU9OZfqFUjJoOL3G9exzU1Ya4qPopVe//BA SkOw+7WdPR8UO3Yl9Fhi497Vc0nihaZ7Z+o5T3wDVzcJ4JY/EoQzblJ1K0fq2o1B C1g60lghNrsGMLleOFLJhjeowHoG26JGqj5dN/Xrck7J3vD2DgjxntrdqzHqfPi+ jwOSF4Ck+36qQA0hX7MhFk6dOCwAuaYguT0HAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUNvXlpLuLd3aZjSuSYrpRKiO4Y+EwHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNjcxL052WGxwTHVMZDNhWmpTdVNZcnBSS2lPNFktRS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAXLfEAwDQYJKoZIhvcNAQELBQADggEBAKvw5jM89n65yPBLpWC/5KPHJDVS Jtt4xNQkGVYZO/yomcV//PN1oQOKjHTqGPTHCI/5nA4JEu5ybQrYY5cLv3tZ0T0j 8mwPPP4merXD60HZCw8pW8tWutlRKtZ3Cpjeq2bKwlwU1VatoA13gHoXCUooQQYh +wbq5D6anYDnqaFJBPGbNxXSahvyMAR4BOASWTjLq0sXp8HUvfvteHclxJkiMKhT udb/jdYVegalnNmLodFItbkSyMgPesZAy2IiSWGqOH+HVOPBbrrNi+CZeADPmAXC qXKV63OlTPhHgYZaj4gk2WokMnEKLCvbYRvFRO8D5MsGPv8zRxhbSar/epI= -----END CERTIFICATE-----Generated at Fri Nov 22 11:45:58 2024 by rpki-client on console-ams.rpki-client.org