$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/PFc3o9cOMZ7Ioh7TC-X3ixWV7aU.roa File: PFc3o9cOMZ7Ioh7TC-X3ixWV7aU.roa (raw, json) Hash identifier: L2Vzg4zAgQt4+7u9YTQZ7laEBz25CfJkC9TdfEgqbjI= Subject key identifier: 3C:57:37:A3:D7:0E:31:9E:C8:A2:1E:D3:0B:E5:F7:8B:15:95:ED:A5 Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Certificate serial: 0176 Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/PFc3o9cOMZ7Ioh7TC-X3ixWV7aU.roa Signing time: Sun 01 Oct 2023 01:34:25 +0000 ROA not before: Sun 01 Oct 2023 01:34:25 +0000 ROA not after: Sat 14 Sep 2024 01:30:03 +0000 asID: 4721 IP address blocks: 110.4.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Jun 2024 02:39:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 374 (0x176) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Validity Not Before: Oct 1 01:34:25 2023 GMT Not After : Sep 14 01:30:03 2024 GMT Subject: CN=3C5737A3D70E319EC8A21ED30BE5F78B1595EDA5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e8:d5:35:ac:73:f0:25:eb:c2:b3:54:4c:d2: 55:68:56:b4:77:95:27:38:7a:43:44:2d:4a:47:71: c0:a9:d2:72:21:aa:a4:14:3a:e3:a3:60:88:d4:a7: 94:65:d9:7a:56:2e:bc:49:d7:f3:20:ce:bf:32:1b: e9:73:41:f1:aa:29:04:03:92:ce:8e:09:3a:d7:1a: 71:57:bc:75:9e:d2:46:31:df:3f:5d:ee:cf:0b:bb: a4:5a:5b:44:8c:39:c2:9c:ff:00:86:f7:27:36:06: 73:83:a6:3c:8d:5a:ba:13:5b:59:4d:23:18:10:39: b8:b0:4b:03:e6:ff:f7:1c:fb:5c:ef:56:e6:91:48: 0e:64:07:17:f7:47:65:a6:a0:04:32:f6:dd:3c:3c: a7:e6:81:45:5f:8b:59:44:b0:50:91:ce:d0:03:f3: e3:85:e4:34:57:8e:32:1e:0c:b1:fa:35:5f:26:7f: 6f:7e:d9:3f:1d:49:c6:04:38:2a:d6:60:b6:d1:98: 18:51:ec:2e:cb:00:09:e5:0e:55:7e:4c:ca:0e:43: ec:a2:3c:50:bd:71:4b:8f:7a:77:96:fa:cc:7d:1b: 4e:d4:ac:b2:f2:28:88:ac:70:3a:a7:43:45:c0:63: ec:dc:67:93:ba:12:c5:d7:af:04:dc:21:48:49:89: 93:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:57:37:A3:D7:0E:31:9E:C8:A2:1E:D3:0B:E5:F7:8B:15:95:ED:A5 X509v3 Authority Key Identifier: keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/PFc3o9cOMZ7Ioh7TC-X3ixWV7aU.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 110.4.48.0/20 Signature Algorithm: sha256WithRSAEncryption 7d:91:43:89:90:53:a2:53:91:e7:51:75:77:fb:da:43:1e:d8: 78:d5:ff:0c:bd:43:d2:86:31:cd:ca:a6:98:a4:67:6d:9f:87: 90:ac:5e:14:44:05:59:60:6d:bc:1f:66:e0:ec:44:4b:83:e7: d8:67:2d:e2:13:71:cd:cc:10:9a:3d:e1:54:37:7e:79:7b:21: fa:29:4a:a4:19:ed:05:62:eb:56:8f:28:5f:fb:d3:78:ed:e4: 30:ad:cc:f3:3a:64:f7:96:5d:9c:3f:e4:3e:14:e6:5d:aa:46: 89:73:14:66:b0:30:e3:b9:21:a3:4f:3c:7e:75:cc:69:a2:6e: 2a:7a:14:ef:a1:9e:47:7b:2d:3e:74:5b:01:50:bc:18:4a:8e: b9:12:29:4c:07:1e:94:33:e9:ce:d3:d2:1b:66:93:f7:3b:ec: 29:c2:48:0c:0e:76:f3:7d:21:b7:49:28:c0:50:01:05:c5:11: 4d:f5:68:61:36:c5:65:7d:9e:ee:03:86:42:52:f9:16:5c:20: 23:b8:82:32:1a:d7:5e:33:46:1f:bd:23:00:0e:79:cb:1f:8a: 72:00:3e:11:80:fd:4f:49:9e:ba:d3:e3:9b:8c:ec:21:14:f4: 49:c4:4c:be:ad:b3:f2:7e:90:23:d6:79:75:9c:b3:07:05:7d: 18:ed:e5:4a -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAXYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yMzEwMDEw MTM0MjVaFw0yNDA5MTQwMTMwMDNaMDMxMTAvBgNVBAMTKDNDNTczN0EzRDcwRTMx OUVDOEEyMUVEMzBCRTVGNzhCMTU5NUVEQTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC86NU1rHPwJevCs1RM0lVoVrR3lSc4ekNELUpHccCp0nIhqqQU OuOjYIjUp5Rl2XpWLrxJ1/Mgzr8yG+lzQfGqKQQDks6OCTrXGnFXvHWe0kYx3z9d 7s8Lu6RaW0SMOcKc/wCG9yc2BnODpjyNWroTW1lNIxgQObiwSwPm//cc+1zvVuaR SA5kBxf3R2WmoAQy9t08PKfmgUVfi1lEsFCRztAD8+OF5DRXjjIeDLH6NV8mf29+ 2T8dScYEOCrWYLbRmBhR7C7LAAnlDlV+TMoOQ+yiPFC9cUuPeneW+sx9G07UrLLy KIiscDqnQ0XAY+zcZ5O6EsXXrwTcIUhJiZOTAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUPFc3o9cOMZ7Ioh7TC+X3ixWV7aUwHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNjcxL1BGYzNvOWNPTVo3SW9oN1RDLVgzaXhXVjdhVS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBARuBDAwDQYJKoZIhvcNAQELBQADggEBAH2RQ4mQU6JTkedRdXf72kMe2HjV /wy9Q9KGMc3KppikZ22fh5CsXhREBVlgbbwfZuDsREuD59hnLeITcc3MEJo94VQ3 fnl7IfopSqQZ7QVi61aPKF/703jt5DCtzPM6ZPeWXZw/5D4U5l2qRolzFGawMOO5 IaNPPH51zGmibip6FO+hnkd7LT50WwFQvBhKjrkSKUwHHpQz6c7T0htmk/c77CnC SAwOdvN9IbdJKMBQAQXFEU31aGE2xWV9nu4DhkJS+RZcICO4gjIa114zRh+9IwAO ecsfinIAPhGA/U9JnrrT45uM7CEU9EnETL6ts/J+kCPWeXWcswcFfRjt5Uo= -----END CERTIFICATE-----Generated at Thu May 30 03:08:55 2024 by rpki-client on console-fra.rpki-client.org