$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/WstfNNJqD7dGuRL9N-mumvLpo50.roa File: WstfNNJqD7dGuRL9N-mumvLpo50.roa (raw, json) Hash identifier: /ukFFNQ/16jES6BDAlTlbAw7sQop/bMj0ojFxCfDWRU= Subject key identifier: 5A:CB:5F:34:D2:6A:0F:B7:46:B9:12:FD:37:E9:AE:9A:F2:E9:A3:9D Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Certificate serial: 014D Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/WstfNNJqD7dGuRL9N-mumvLpo50.roa Signing time: Sun 01 Oct 2023 01:32:57 +0000 ROA not before: Sun 01 Oct 2023 01:32:57 +0000 ROA not after: Sat 14 Sep 2024 01:30:03 +0000 asID: 9824 IP address blocks: 202.57.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 01:34:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 333 (0x14d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Validity Not Before: Oct 1 01:32:57 2023 GMT Not After : Sep 14 01:30:03 2024 GMT Subject: CN=5ACB5F34D26A0FB746B912FD37E9AE9AF2E9A39D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:78:c5:98:06:53:97:ae:7f:d5:24:70:c9:85: 31:43:9b:df:30:43:be:0c:ed:90:65:75:74:50:0e: 44:d0:c1:d2:0d:d4:d9:71:5d:b9:19:c8:2a:e9:07: 51:9c:3a:37:b0:1b:4a:e1:49:a5:06:50:c9:7c:67: 2b:0c:4b:4e:c6:54:5b:cf:37:7b:b7:41:95:2c:59: 2f:54:bb:23:74:bf:8e:48:9f:7f:22:51:b6:20:9d: 61:77:bf:03:7d:d1:d6:3f:06:40:82:7c:7c:1b:7e: ec:dc:b5:eb:c1:cd:9d:d8:72:bd:4d:49:35:ff:ce: b1:c4:1f:0e:a3:ca:d6:9d:ae:26:a5:3e:35:0a:8c: b8:53:8f:61:50:db:0d:70:d9:07:ad:ee:f1:9c:04: 08:e8:96:37:f2:c0:2f:e2:a0:09:71:2d:7d:af:02: c1:fc:46:52:81:d5:8f:73:dd:5f:3f:2f:ae:78:5b: c6:9b:0e:4a:03:ef:3a:40:8c:22:07:7b:2c:48:d0: e9:58:bc:22:6b:8e:5f:c2:41:f0:d9:18:cd:4e:01: a8:97:9e:a0:6c:cf:4b:7b:2c:71:36:f8:32:ba:0f: 6a:8c:cf:62:f2:b6:1e:19:ea:51:b0:b4:ec:18:15: 70:0d:41:9d:ee:e9:af:71:08:13:62:28:9a:78:00: 2b:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:CB:5F:34:D2:6A:0F:B7:46:B9:12:FD:37:E9:AE:9A:F2:E9:A3:9D X509v3 Authority Key Identifier: keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/WstfNNJqD7dGuRL9N-mumvLpo50.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.57.224.0/20 Signature Algorithm: sha256WithRSAEncryption bf:dc:51:21:52:b5:71:f3:99:05:e7:52:cb:97:f0:d5:8e:b9: ed:5e:72:4f:70:ff:1c:b8:e2:47:f0:82:43:3c:02:43:5e:26: 39:6a:1a:c1:40:d8:f4:29:55:fd:52:b6:05:44:98:e2:b2:68: 62:d7:6c:00:39:40:27:7d:8c:74:68:75:e2:cd:09:78:dd:99: 06:bf:87:39:af:da:cc:2b:d2:5a:08:33:eb:30:28:d7:d7:c3: 8a:a1:85:32:a5:1e:47:46:a5:29:31:bf:98:de:38:3b:6a:50: e0:35:98:11:fd:46:0d:d0:75:56:e5:95:9a:90:08:ce:56:7a: 93:99:bf:d3:60:b3:e7:22:a7:bc:00:e4:96:5b:75:f0:81:d6: 6d:7f:5a:e7:34:29:51:af:f3:a4:f6:92:2a:24:46:f4:52:cb: d1:f2:98:54:9c:8d:2d:13:25:ab:40:bd:ad:45:11:98:d9:bd: a2:d5:11:2e:fe:0f:d9:90:0c:90:56:01:14:03:6e:23:0a:95: 7b:f8:86:50:23:09:47:c2:a9:be:82:9c:06:eb:1e:d2:13:7d: f3:67:ec:46:6c:02:78:c2:9c:c7:2c:ce:39:ec:99:30:4a:71: 81:6a:f9:28:be:87:c7:e9:4f:98:bd:8c:88:e1:e1:2d:38:a6: f4:a1:4f:33 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAU0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yMzEwMDEw MTMyNTdaFw0yNDA5MTQwMTMwMDNaMDMxMTAvBgNVBAMTKDVBQ0I1RjM0RDI2QTBG Qjc0NkI5MTJGRDM3RTlBRTlBRjJFOUEzOUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDaeMWYBlOXrn/VJHDJhTFDm98wQ74M7ZBldXRQDkTQwdIN1Nlx XbkZyCrpB1GcOjewG0rhSaUGUMl8ZysMS07GVFvPN3u3QZUsWS9UuyN0v45In38i UbYgnWF3vwN90dY/BkCCfHwbfuzctevBzZ3Ycr1NSTX/zrHEHw6jytadrialPjUK jLhTj2FQ2w1w2Qet7vGcBAjoljfywC/ioAlxLX2vAsH8RlKB1Y9z3V8/L654W8ab DkoD7zpAjCIHeyxI0OlYvCJrjl/CQfDZGM1OAaiXnqBsz0t7LHE2+DK6D2qMz2Ly th4Z6lGwtOwYFXANQZ3u6a9xCBNiKJp4ACubAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUWstfNNJqD7dGuRL9N+mumvLpo50wHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNjcxL1dzdGZOTkpxRDdkR3VSTDlOLW11bXZMcG81MC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBATKOeAwDQYJKoZIhvcNAQELBQADggEBAL/cUSFStXHzmQXnUsuX8NWOue1e ck9w/xy44kfwgkM8AkNeJjlqGsFA2PQpVf1StgVEmOKyaGLXbAA5QCd9jHRodeLN CXjdmQa/hzmv2swr0loIM+swKNfXw4qhhTKlHkdGpSkxv5jeODtqUOA1mBH9Rg3Q dVbllZqQCM5WepOZv9Ngs+cip7wA5JZbdfCB1m1/Wuc0KVGv86T2kiokRvRSy9Hy mFScjS0TJatAva1FEZjZvaLVES7+D9mQDJBWARQDbiMKlXv4hlAjCUfCqb6CnAbr HtITffNn7EZsAnjCnMcszjnsmTBKcYFq+Si+h8fpT5i9jIjh4S04pvShTzM= -----END CERTIFICATE-----Generated at Sat May 18 11:39:42 2024 by rpki-client on console-fra.rpki-client.org