$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/Vz5dPXzyRk9UJGBugBlCBS74GDQ.roa File: Vz5dPXzyRk9UJGBugBlCBS74GDQ.roa (raw, json) Hash identifier: JGTA0Q0ddWvU9JO1dlKdyrwGP/D4GTRh+nQqszcxQQ8= Subject key identifier: 57:3E:5D:3D:7C:F2:46:4F:54:24:60:6E:80:19:42:05:2E:F8:18:34 Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Certificate serial: 0197 Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/Vz5dPXzyRk9UJGBugBlCBS74GDQ.roa Signing time: Sun 01 Oct 2023 01:36:26 +0000 ROA not before: Sun 01 Oct 2023 01:36:26 +0000 ROA not after: Sat 14 Sep 2024 01:30:03 +0000 asID: 4721 IP address blocks: 182.50.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 01:34:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 407 (0x197) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Validity Not Before: Oct 1 01:36:26 2023 GMT Not After : Sep 14 01:30:03 2024 GMT Subject: CN=573E5D3D7CF2464F5424606E801942052EF81834 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:65:f2:24:fb:ab:ee:33:53:59:53:db:47:38: 78:18:8a:a1:05:44:a2:cb:21:49:66:51:20:1f:7f: 42:6d:b5:89:c5:5e:88:5a:86:79:74:90:8e:64:19: 9b:34:1d:e0:c0:0e:7f:e7:7a:93:43:c9:76:37:7b: 40:e8:a6:cb:dc:8e:a6:e7:eb:2c:e1:d2:23:38:39: 7c:be:5d:8d:81:27:08:45:d7:b8:9c:c9:f9:f2:66: 53:b2:54:cb:94:1c:6c:80:88:c3:4a:ec:ca:d3:aa: 85:8a:74:e6:f9:1a:d0:fa:5a:db:5a:68:0e:6f:cc: fd:0d:5b:34:68:64:ce:ca:68:51:99:45:19:36:ee: c8:5a:31:3e:6f:c9:ef:f4:fc:20:44:6b:06:71:b4: 29:dd:76:92:48:a7:6d:d0:fd:4a:f2:57:54:a4:25: 22:26:d4:37:a7:a1:e4:f9:79:48:51:57:d1:99:04: 10:41:90:30:56:7e:7f:98:4c:dd:1b:39:ae:9a:c6: 15:a0:ff:47:b9:6e:a6:d8:2a:7f:e0:92:1d:9e:15: 83:32:0a:e2:58:93:ac:db:3f:24:06:7f:f0:f2:a5: 2b:d3:29:8a:19:e3:a4:16:e9:2d:c1:a3:9e:8a:b6: 83:eb:2f:f0:ab:28:3f:7d:2a:9c:db:14:5f:22:9e: 4b:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:3E:5D:3D:7C:F2:46:4F:54:24:60:6E:80:19:42:05:2E:F8:18:34 X509v3 Authority Key Identifier: keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/Vz5dPXzyRk9UJGBugBlCBS74GDQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 182.50.224.0/20 Signature Algorithm: sha256WithRSAEncryption ea:45:46:59:53:46:1e:fe:c0:ba:90:20:c0:2e:e8:fd:c1:4e: 24:ab:d5:05:62:dc:27:d4:ec:4a:c7:02:55:21:37:77:83:13: 6a:d8:f3:f5:36:8b:96:f9:5f:71:3b:e3:52:ce:a5:1d:3e:3b: 6b:cd:6f:b8:f5:02:60:62:6e:c9:90:b7:9a:ef:d1:95:83:f1: c3:20:7b:61:c5:16:42:7e:be:26:72:d4:b2:25:53:84:95:6c: 97:a5:57:d6:e0:a7:e2:8b:22:fd:dd:9f:52:aa:8c:d7:ad:b8: 0c:87:80:e7:3d:a0:7a:b2:5f:ca:8f:28:de:51:34:59:fc:b9: 98:f5:86:24:68:5e:44:c2:d5:30:b7:c6:d2:12:c9:71:b9:4a: 55:a0:72:23:98:81:a2:bf:e8:37:08:3e:67:0d:fe:1a:88:fe: cd:f1:54:db:38:5c:7e:0e:c8:75:06:40:f8:e9:94:65:42:6d: eb:14:dd:ae:0e:14:32:d0:44:14:cd:e0:04:ea:3c:9c:88:a5: 29:6e:c6:03:d7:b0:2c:76:79:07:0c:d3:c5:2f:4e:9d:0e:d9: ee:5e:76:1e:fc:d0:f4:df:57:2e:03:ee:95:ca:62:a1:0d:24: f5:22:7c:e8:4f:d1:de:65:74:8e:bb:94:39:95:85:12:e5:02: 8c:ee:d3:1b -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAZcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yMzEwMDEw MTM2MjZaFw0yNDA5MTQwMTMwMDNaMDMxMTAvBgNVBAMTKDU3M0U1RDNEN0NGMjQ2 NEY1NDI0NjA2RTgwMTk0MjA1MkVGODE4MzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDEZfIk+6vuM1NZU9tHOHgYiqEFRKLLIUlmUSAff0JttYnFXoha hnl0kI5kGZs0HeDADn/nepNDyXY3e0Dopsvcjqbn6yzh0iM4OXy+XY2BJwhF17ic yfnyZlOyVMuUHGyAiMNK7MrTqoWKdOb5GtD6WttaaA5vzP0NWzRoZM7KaFGZRRk2 7shaMT5vye/0/CBEawZxtCnddpJIp23Q/UryV1SkJSIm1DenoeT5eUhRV9GZBBBB kDBWfn+YTN0bOa6axhWg/0e5bqbYKn/gkh2eFYMyCuJYk6zbPyQGf/DypSvTKYoZ 46QW6S3Bo56KtoPrL/CrKD99KpzbFF8inkstAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUVz5dPXzyRk9UJGBugBlCBS74GDQwHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNjcxL1Z6NWRQWHp5Ums5VUpHQnVnQmxDQlM3NEdEUS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAS2MuAwDQYJKoZIhvcNAQELBQADggEBAOpFRllTRh7+wLqQIMAu6P3BTiSr 1QVi3CfU7ErHAlUhN3eDE2rY8/U2i5b5X3E741LOpR0+O2vNb7j1AmBibsmQt5rv 0ZWD8cMge2HFFkJ+viZy1LIlU4SVbJelV9bgp+KLIv3dn1KqjNetuAyHgOc9oHqy X8qPKN5RNFn8uZj1hiRoXkTC1TC3xtISyXG5SlWgciOYgaK/6DcIPmcN/hqI/s3x VNs4XH4OyHUGQPjplGVCbesU3a4OFDLQRBTN4ATqPJyIpSluxgPXsCx2eQcM08Uv Tp0O2e5edh780PTfVy4D7pXKYqENJPUifOhP0d5ldI67lDmVhRLlAozu0xs= -----END CERTIFICATE-----Generated at Sat May 18 11:39:42 2024 by rpki-client on console-fra.rpki-client.org