$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/PF41rHfOMjSnWMC851p7VngKcj8.roa File: PF41rHfOMjSnWMC851p7VngKcj8.roa (raw, json) Hash identifier: huxGYzUP4hSFnPwkvPNVO7R8RoDWfMkL4p6xMVcqdWo= Subject key identifier: 3C:5E:35:AC:77:CE:32:34:A7:58:C0:BC:E7:5A:7B:56:78:0A:72:3F Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Certificate serial: 025A Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/PF41rHfOMjSnWMC851p7VngKcj8.roa Signing time: Sat 31 Aug 2024 01:36:42 +0000 ROA not before: Sat 31 Aug 2024 01:36:42 +0000 ROA not after: Fri 15 Aug 2025 01:30:02 +0000 asID: 23788 IP address blocks: 202.148.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 06:14:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 602 (0x25a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Validity Not Before: Aug 31 01:36:42 2024 GMT Not After : Aug 15 01:30:02 2025 GMT Subject: CN=3C5E35AC77CE3234A758C0BCE75A7B56780A723F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:20:99:1d:a7:50:51:65:08:48:67:1b:e3:b5: 1a:32:24:79:50:25:75:69:65:fb:91:27:4c:fa:97: 83:b3:7b:87:9d:e5:09:46:1b:3c:fc:8c:38:25:1f: 20:29:86:5b:6b:ea:4d:fc:a7:a3:df:e3:f7:01:31: d2:21:b8:2e:df:2a:36:d2:31:9f:df:ee:f7:53:9b: 14:04:0d:c0:c5:40:38:83:3e:36:f1:43:43:22:8e: 06:22:60:22:19:d2:55:1a:c0:34:da:da:19:3a:ac: 69:9a:7c:59:59:a6:a6:57:80:b5:75:13:58:23:ff: fc:69:37:67:ef:36:ed:88:1b:41:e7:e6:b0:45:dc: eb:8d:10:67:96:c6:b1:e3:39:3c:fb:7e:07:cb:d9: 5a:a2:40:3b:22:fe:a0:d7:29:27:5b:7a:bd:70:e1: e3:f9:d4:5b:9b:dd:fe:6f:dd:77:9c:41:0e:a5:43: b9:e6:29:32:69:45:97:6e:58:20:08:c9:67:7d:90: a2:91:29:ab:1b:01:1d:7e:86:09:de:d4:f9:d8:fa: 04:76:82:28:d4:db:9c:a8:8b:3d:76:8d:3d:60:15: 37:27:4a:dd:9c:f7:84:af:4d:d8:36:5d:51:22:1d: 71:67:51:f9:99:46:3c:dd:cd:35:59:b5:5f:bc:1c: c4:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:5E:35:AC:77:CE:32:34:A7:58:C0:BC:E7:5A:7B:56:78:0A:72:3F X509v3 Authority Key Identifier: keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/PF41rHfOMjSnWMC851p7VngKcj8.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.148.240.0/20 Signature Algorithm: sha256WithRSAEncryption 5b:ea:b9:86:18:02:ce:12:01:fc:dd:c5:82:f2:4d:ec:0b:26: fa:b5:fe:74:31:cd:8a:30:4c:46:f2:fc:5d:aa:4d:81:78:c0: a5:c3:93:ce:85:21:8e:66:76:c1:b9:f7:cd:2e:63:20:31:a1: 74:d6:44:27:ac:c1:ac:3b:a0:02:49:38:f2:2f:56:44:cb:b2: 46:d0:6e:15:cd:bc:7d:3b:d7:ec:82:b3:97:7a:a5:52:0e:32: 87:df:c2:76:9b:a5:00:46:8c:20:82:f5:ee:ea:a8:7a:e9:ee: e7:03:a1:ae:95:90:d6:3a:89:6d:5c:c6:9c:c0:fd:5a:57:f1: 30:81:b8:67:61:da:fe:bf:07:67:d8:c5:db:11:7f:6a:6e:32: a5:85:b9:4b:f3:d9:15:ad:43:b2:56:87:cb:92:17:81:87:b9: 1b:f1:a0:0f:5f:8e:f1:c6:a7:37:c8:d5:d5:40:6d:e6:db:a5: b9:89:40:ec:0b:d2:b3:90:23:74:9e:09:d3:30:d7:80:55:b9: 76:e1:cd:d6:ba:ae:0b:a0:88:fb:ed:02:73:db:bf:5d:b4:b6: 44:70:cc:58:c4:fa:bc:4d:66:df:88:dc:70:14:d3:7d:2e:e1: e3:27:85:87:b2:20:87:cd:12:6c:bd:8d:fa:15:a1:a2:c2:c9: 5f:2d:31:7a -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAlowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yNDA4MzEw MTM2NDJaFw0yNTA4MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDNDNUUzNUFDNzdDRTMy MzRBNzU4QzBCQ0U3NUE3QjU2NzgwQTcyM0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDBIJkdp1BRZQhIZxvjtRoyJHlQJXVpZfuRJ0z6l4Oze4ed5QlG Gzz8jDglHyAphltr6k38p6Pf4/cBMdIhuC7fKjbSMZ/f7vdTmxQEDcDFQDiDPjbx Q0MijgYiYCIZ0lUawDTa2hk6rGmafFlZpqZXgLV1E1gj//xpN2fvNu2IG0Hn5rBF 3OuNEGeWxrHjOTz7fgfL2VqiQDsi/qDXKSdber1w4eP51Fub3f5v3XecQQ6lQ7nm KTJpRZduWCAIyWd9kKKRKasbAR1+hgne1PnY+gR2gijU25yoiz12jT1gFTcnSt2c 94SvTdg2XVEiHXFnUfmZRjzdzTVZtV+8HMT9AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUPF41rHfOMjSnWMC851p7VngKcj8wHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNjcxL1BGNDFySGZPTWpTbldNQzg1MXA3Vm5nS2NqOC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBATKlPAwDQYJKoZIhvcNAQELBQADggEBAFvquYYYAs4SAfzdxYLyTewLJvq1 /nQxzYowTEby/F2qTYF4wKXDk86FIY5mdsG5980uYyAxoXTWRCeswaw7oAJJOPIv VkTLskbQbhXNvH071+yCs5d6pVIOMoffwnabpQBGjCCC9e7qqHrp7ucDoa6VkNY6 iW1cxpzA/VpX8TCBuGdh2v6/B2fYxdsRf2puMqWFuUvz2RWtQ7JWh8uSF4GHuRvx oA9fjvHGpzfI1dVAbebbpbmJQOwL0rOQI3SeCdMw14BVuXbhzda6rgugiPvtAnPb v120tkRwzFjE+rxNZt+I3HAU030u4eMnhYeyIIfNEmy9jfoVoaLCyV8tMXo= -----END CERTIFICATE-----Generated at Fri Nov 22 09:31:34 2024 by rpki-client on console-fra.rpki-client.org