$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/RKf3W-450XrJsYbn6Fa3oePGO2w.roa File: RKf3W-450XrJsYbn6Fa3oePGO2w.roa (raw, json) Hash identifier: xoxSkgauqTcJFx2YCM3IbBv+8oAu/CQ6RjEwxWEdoEw= Subject key identifier: 44:A7:F7:5B:EE:39:D1:7A:C9:B1:86:E7:E8:56:B7:A1:E3:C6:3B:6C Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Certificate serial: 018B Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/RKf3W-450XrJsYbn6Fa3oePGO2w.roa Signing time: Sun 01 Oct 2023 01:34:34 +0000 ROA not before: Sun 01 Oct 2023 01:34:34 +0000 ROA not after: Sat 14 Sep 2024 01:30:03 +0000 asID: 9824 IP address blocks: 114.198.224.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Jun 2024 02:39:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 395 (0x18b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Validity Not Before: Oct 1 01:34:34 2023 GMT Not After : Sep 14 01:30:03 2024 GMT Subject: CN=44A7F75BEE39D17AC9B186E7E856B7A1E3C63B6C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:92:cf:51:46:2a:41:29:1b:96:67:6b:eb:65: c1:e2:c1:06:b6:1f:b5:da:8a:7d:8c:28:a3:64:e8: de:1c:6a:33:d5:ba:d6:8f:cb:30:f9:08:bb:c7:e4: d6:51:a9:a4:f0:2e:96:aa:80:15:7e:93:dd:7d:3a: fa:cd:6d:ee:32:9d:71:c3:2b:3c:0c:76:7d:db:fc: 79:a6:35:e7:87:61:3a:19:96:5b:aa:73:d2:eb:90: 4a:56:6c:a6:3d:c5:fe:db:3e:6a:e1:ec:7d:4e:61: e2:2b:dd:aa:e0:06:df:42:87:03:b6:7a:2f:da:ac: e7:94:3e:9e:82:d1:b1:fd:29:95:ef:b2:b9:01:0d: 04:6e:b6:7f:b1:fa:41:56:21:d7:a6:4f:8f:79:54: 72:c9:af:1b:36:89:bf:37:96:c2:ca:41:7e:68:db: 13:36:e1:c3:32:c0:02:38:63:aa:f6:3c:05:33:1f: 7e:88:57:4e:09:ea:43:9e:94:29:07:56:fc:64:db: af:86:ac:84:a5:33:91:05:4d:85:bb:2e:29:83:93: 63:89:81:97:0a:7f:f4:8d:da:15:21:41:99:af:45: 55:e3:82:81:87:38:77:3e:6b:90:6c:7d:a3:18:a8: dc:89:68:db:c9:3c:b1:fe:ff:82:3d:7a:6a:77:b1: f1:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:A7:F7:5B:EE:39:D1:7A:C9:B1:86:E7:E8:56:B7:A1:E3:C6:3B:6C X509v3 Authority Key Identifier: keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/RKf3W-450XrJsYbn6Fa3oePGO2w.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 114.198.224.0/21 Signature Algorithm: sha256WithRSAEncryption 06:18:e0:74:6d:89:dc:5b:c1:2b:b9:5d:36:3e:e9:54:d7:b5: 4e:4e:72:17:7f:09:44:09:72:8a:8f:4e:51:ce:06:2a:22:ed: 70:4c:a0:6b:a1:47:4c:b4:e9:25:da:fa:68:ac:9c:12:81:04: 79:18:bd:ce:aa:a4:1b:12:84:6e:e2:79:bc:9c:8e:fb:6d:7c: a8:58:9c:d2:b2:b2:60:7c:6f:ca:25:b2:28:76:58:fc:80:c3: b3:1c:82:90:05:b8:cb:13:ce:48:ee:6d:19:92:91:2f:41:bf: 31:f3:3b:4d:b6:76:41:c6:18:e0:9b:f5:f5:6a:dc:95:cc:05: 21:e0:7b:68:0a:ee:bd:af:47:f1:af:50:72:19:06:03:5c:c1: f6:56:8d:5f:e7:e3:c2:25:b4:b3:e4:09:9c:37:f7:16:28:44: 68:e5:30:06:7e:6a:4b:78:05:f4:b3:c2:1c:75:f5:7c:ab:e3: da:c5:26:42:62:a6:7d:fb:39:d0:9a:c0:7c:e6:21:c0:78:ae: 3b:0e:83:2a:6a:4b:83:27:fa:df:4f:e7:22:17:1c:f2:be:61: 44:b1:5e:2b:69:6d:30:14:03:4b:94:66:a9:d0:13:53:73:2f: 7e:4f:2d:2d:d4:69:06:f0:ef:74:76:01:10:cd:e7:f1:21:ff: dd:57:2b:3c -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAYswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yMzEwMDEw MTM0MzRaFw0yNDA5MTQwMTMwMDNaMDMxMTAvBgNVBAMTKDQ0QTdGNzVCRUUzOUQx N0FDOUIxODZFN0U4NTZCN0ExRTNDNjNCNkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDdks9RRipBKRuWZ2vrZcHiwQa2H7Xain2MKKNk6N4cajPVutaP yzD5CLvH5NZRqaTwLpaqgBV+k919OvrNbe4ynXHDKzwMdn3b/HmmNeeHYToZlluq c9LrkEpWbKY9xf7bPmrh7H1OYeIr3argBt9ChwO2ei/arOeUPp6C0bH9KZXvsrkB DQRutn+x+kFWIdemT495VHLJrxs2ib83lsLKQX5o2xM24cMywAI4Y6r2PAUzH36I V04J6kOelCkHVvxk26+GrISlM5EFTYW7LimDk2OJgZcKf/SN2hUhQZmvRVXjgoGH OHc+a5BsfaMYqNyJaNvJPLH+/4I9emp3sfHrAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQURKf3W+450XrJsYbn6Fa3oePGO2wwHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNjcxL1JLZjNXLTQ1MFhySnNZYm42RmEzb2VQR08ydy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBANyxuAwDQYJKoZIhvcNAQELBQADggEBAAYY4HRtidxbwSu5XTY+6VTXtU5O chd/CUQJcoqPTlHOBioi7XBMoGuhR0y06SXa+misnBKBBHkYvc6qpBsShG7iebyc jvttfKhYnNKysmB8b8olsih2WPyAw7McgpAFuMsTzkjubRmSkS9BvzHzO022dkHG GOCb9fVq3JXMBSHge2gK7r2vR/GvUHIZBgNcwfZWjV/n48IltLPkCZw39xYoRGjl MAZ+akt4BfSzwhx19Xyr49rFJkJipn37OdCawHzmIcB4rjsOgypqS4Mn+t9P5yIX HPK+YUSxXitpbTAUA0uUZqnQE1NzL35PLS3UaQbw73R2ARDN5/Eh/91XKzw= -----END CERTIFICATE-----Generated at Thu May 30 03:08:56 2024 by rpki-client on console-fra.rpki-client.org