$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/ZSw6rmh44NCbCnR7g0aZcDUd5As.roa File: ZSw6rmh44NCbCnR7g0aZcDUd5As.roa (raw, json) Hash identifier: zcL/YDa+dZZgK5UF3JRQA4pDmmKZo5T46zAzCAtjLUI= Subject key identifier: 65:2C:3A:AE:68:78:E0:D0:9B:0A:74:7B:83:46:99:70:35:1D:E4:0B Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Certificate serial: 013D Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/ZSw6rmh44NCbCnR7g0aZcDUd5As.roa Signing time: Sun 01 Oct 2023 01:30:17 +0000 ROA not before: Sun 01 Oct 2023 01:30:17 +0000 ROA not after: Sat 14 Sep 2024 01:30:03 +0000 asID: 9824 IP address blocks: 124.195.144.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 01:34:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 317 (0x13d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Validity Not Before: Oct 1 01:30:17 2023 GMT Not After : Sep 14 01:30:03 2024 GMT Subject: CN=652C3AAE6878E0D09B0A747B83469970351DE40B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:2e:ef:18:bb:d4:6a:14:4b:6f:83:d9:fb:58: f3:8d:4f:eb:8f:36:eb:47:b1:72:70:48:d4:b1:0f: ec:8f:84:0e:0f:fa:f2:2e:38:d8:e6:d3:21:11:46: fa:b5:d5:47:c4:63:b1:7a:d0:95:f7:3f:06:ef:31: 87:3e:ce:d8:a4:9d:4d:61:06:62:d9:80:5e:91:74: ea:07:0a:c6:67:a8:7c:cd:c1:58:8c:b6:4b:3d:f1: de:35:a4:6a:5c:b6:d6:43:bd:96:49:e1:41:ce:9d: 3e:dd:5b:c9:cd:8f:4c:25:cf:49:97:26:c0:8f:79: c5:89:18:af:50:80:df:96:f6:dd:69:bd:43:94:b3: 99:35:ea:64:c9:4a:cd:a6:c5:79:87:f3:22:cf:58: 08:61:f5:51:ff:81:cb:71:b2:8d:fd:88:f2:9b:96: f2:f9:31:2c:be:c8:35:6f:95:f5:b3:51:a0:c6:4c: e0:48:25:60:68:96:da:a7:e5:6e:18:09:b0:ef:09: 47:58:10:8a:93:28:2a:8d:e5:49:de:10:04:cb:bc: 38:f4:88:7d:33:a6:a9:1f:db:72:a4:f0:f6:0e:90: db:15:57:2d:d3:0e:6a:17:3c:8f:c9:c2:91:ce:aa: a1:f8:2a:df:f8:33:11:19:2a:e7:b0:42:ac:93:c5: b5:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:2C:3A:AE:68:78:E0:D0:9B:0A:74:7B:83:46:99:70:35:1D:E4:0B X509v3 Authority Key Identifier: keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/ZSw6rmh44NCbCnR7g0aZcDUd5As.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 124.195.144.0/20 Signature Algorithm: sha256WithRSAEncryption 6c:cf:66:c5:6b:7c:97:ce:7d:7a:4d:6f:b1:25:db:4e:db:2b: b9:52:5f:fc:c1:4a:5a:f0:d8:78:e0:a7:59:a5:0c:1b:5c:97: 05:36:54:7b:a0:a7:a2:98:6c:1e:5b:07:3d:19:94:80:12:d4: fb:7c:4a:84:ce:10:89:6c:bf:eb:67:68:16:41:ad:b3:90:0c: bf:c5:cb:2f:ff:ae:91:58:50:52:1c:09:69:ea:4e:3b:68:4a: cc:12:37:63:e1:ad:7a:1d:51:c8:9f:33:6c:39:e5:01:5e:98: 0b:58:9d:23:46:98:24:46:2d:4c:74:93:ae:ac:46:3d:31:a0: be:b7:f1:9f:8d:9a:c4:bd:aa:d7:39:c8:47:72:e4:98:c1:6e: 86:8e:71:bc:7b:0b:c1:64:32:15:61:ae:93:97:fc:38:05:d6: 9b:c2:41:fb:b6:31:9f:20:ab:50:f8:7b:ef:cb:7c:8a:18:b0: f9:8d:d4:e3:58:08:34:6e:f4:3e:23:db:43:61:cd:05:c5:90: 41:03:34:e2:38:4f:1b:c7:32:64:a3:ed:88:97:06:b6:fb:79: a5:99:dc:25:db:85:f2:1a:0f:58:de:33:51:e4:01:33:66:e7: 54:a9:8f:04:29:13:3b:62:54:88:1b:81:df:58:8c:b1:3b:18: c7:8b:ed:52 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAT0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yMzEwMDEw MTMwMTdaFw0yNDA5MTQwMTMwMDNaMDMxMTAvBgNVBAMTKDY1MkMzQUFFNjg3OEUw RDA5QjBBNzQ3QjgzNDY5OTcwMzUxREU0MEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDRLu8Yu9RqFEtvg9n7WPONT+uPNutHsXJwSNSxD+yPhA4P+vIu ONjm0yERRvq11UfEY7F60JX3PwbvMYc+ztiknU1hBmLZgF6RdOoHCsZnqHzNwViM tks98d41pGpcttZDvZZJ4UHOnT7dW8nNj0wlz0mXJsCPecWJGK9QgN+W9t1pvUOU s5k16mTJSs2mxXmH8yLPWAhh9VH/gctxso39iPKblvL5MSy+yDVvlfWzUaDGTOBI JWBoltqn5W4YCbDvCUdYEIqTKCqN5UneEATLvDj0iH0zpqkf23Kk8PYOkNsVVy3T DmoXPI/JwpHOqqH4Kt/4MxEZKuewQqyTxbWVAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUZSw6rmh44NCbCnR7g0aZcDUd5AswHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNjcxL1pTdzZybWg0NE5DYkNuUjdnMGFaY0RVZDVBcy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAR8w5AwDQYJKoZIhvcNAQELBQADggEBAGzPZsVrfJfOfXpNb7El207bK7lS X/zBSlrw2Hjgp1mlDBtclwU2VHugp6KYbB5bBz0ZlIAS1Pt8SoTOEIlsv+tnaBZB rbOQDL/Fyy//rpFYUFIcCWnqTjtoSswSN2PhrXodUcifM2w55QFemAtYnSNGmCRG LUx0k66sRj0xoL638Z+NmsS9qtc5yEdy5JjBboaOcbx7C8FkMhVhrpOX/DgF1pvC Qfu2MZ8gq1D4e+/LfIoYsPmN1ONYCDRu9D4j20NhzQXFkEEDNOI4TxvHMmSj7YiX Brb7eaWZ3CXbhfIaD1jeM1HkATNm51SpjwQpEztiVIgbgd9YjLE7GMeL7VI= -----END CERTIFICATE-----Generated at Sat May 18 11:39:42 2024 by rpki-client on console-fra.rpki-client.org