$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/_WV_blAM3A1br7tX1BrGFoSDiXg.roa File: _WV_blAM3A1br7tX1BrGFoSDiXg.roa (raw, json) Hash identifier: B+oyvF0YA0Lg4BesoX9+4W51EbRKA0lTJSkNuVFw67o= Subject key identifier: FD:65:7F:6E:50:0C:DC:0D:5B:AF:BB:57:D4:1A:C6:16:84:83:89:78 Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Certificate serial: 0263 Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/_WV_blAM3A1br7tX1BrGFoSDiXg.roa Signing time: Sat 31 Aug 2024 01:36:46 +0000 ROA not before: Sat 31 Aug 2024 01:36:46 +0000 ROA not after: Fri 15 Aug 2025 01:30:02 +0000 asID: 9824 IP address blocks: 114.69.160.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 06:14:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 611 (0x263) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Validity Not Before: Aug 31 01:36:46 2024 GMT Not After : Aug 15 01:30:02 2025 GMT Subject: CN=FD657F6E500CDC0D5BAFBB57D41AC61684838978 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:91:f8:7f:a8:18:0d:cf:83:8b:75:81:aa:29: 12:bc:1a:a0:e0:80:f6:39:71:19:08:46:15:0b:bb: 18:02:3b:dc:9a:3e:98:f3:55:9d:98:61:70:1d:a1: 17:2e:b7:1c:80:86:cb:11:12:d4:6e:07:2e:4f:2e: a4:80:5d:f1:1c:85:7f:c7:d7:f7:a1:7e:16:e0:b6: 8a:b3:fa:67:4e:0f:83:41:50:75:19:70:5b:b6:6f: cb:df:64:06:a6:82:39:c0:3c:a5:67:9c:13:ec:b6: 62:97:d3:f4:24:b2:8b:07:e5:ba:6a:7b:99:8d:69: e2:5b:49:38:44:44:99:c9:82:cb:cc:b0:84:45:74: 14:05:8a:4d:72:b7:93:88:37:2d:73:3e:2b:85:a0: f8:f7:b4:ec:9c:7d:cc:9e:3e:eb:d1:45:d5:92:6f: 3f:17:01:f3:50:a0:0c:fe:77:7d:1c:4f:96:d4:e2: 81:ef:e4:5d:80:8a:f9:54:ab:e5:73:bf:0d:1a:c7: 99:0e:91:3c:ff:d0:65:f2:a0:e3:24:60:92:b1:16: fe:53:de:03:4c:3a:3b:88:f9:8d:f7:ca:e2:7e:89: 2e:bc:a1:49:80:30:ef:b3:c9:0a:2f:e9:10:02:bf: 2b:7d:de:0c:fc:88:1c:b4:03:81:90:96:de:fc:0d: 62:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:65:7F:6E:50:0C:DC:0D:5B:AF:BB:57:D4:1A:C6:16:84:83:89:78 X509v3 Authority Key Identifier: keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/_WV_blAM3A1br7tX1BrGFoSDiXg.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 114.69.160.0/20 Signature Algorithm: sha256WithRSAEncryption 6f:5f:3e:9d:61:45:1d:7a:0b:a8:30:8f:ff:79:eb:d4:44:d8: 13:b9:84:48:92:38:89:1d:77:eb:d0:72:0f:b2:1b:0c:0c:a2: 17:1b:a7:7d:d8:1e:6b:46:da:f2:cd:71:f8:11:47:57:f3:ce: 68:fd:81:57:85:50:8a:48:65:44:d5:52:da:68:53:43:03:79: 5d:a2:be:7f:bc:2f:1c:4a:e1:f7:9f:c8:bc:92:3f:1b:da:9e: f4:c8:e6:f9:9e:ec:c2:bf:42:12:e1:57:49:14:ab:cb:a6:a1: b9:5b:41:5f:72:4f:1e:47:c6:87:55:9e:32:33:ad:30:d7:0b: 8e:c5:d4:95:10:5f:78:0c:25:ed:79:a7:77:04:8b:6c:e3:9f: f5:7a:5d:80:ed:bb:f4:79:c2:97:e9:4a:3b:1b:de:e9:c6:89: cc:aa:d9:b2:be:3a:30:67:c8:30:78:ac:da:cd:41:f6:a0:57: 0e:31:17:62:03:7c:11:1d:5f:32:cc:9c:1a:ef:55:1d:04:49: 5c:ff:25:d2:25:56:5d:fb:da:ff:c7:e6:c2:e4:cc:ad:9f:6b: 11:58:b4:a4:0b:9b:6e:14:77:a0:64:1e:71:ea:87:dc:c5:4a: 14:a4:3b:ce:05:2d:58:e1:4a:e4:7c:51:59:11:3c:65:ca:e0: 76:04:fd:eb -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAmMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yNDA4MzEw MTM2NDZaFw0yNTA4MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEZENjU3RjZFNTAwQ0RD MEQ1QkFGQkI1N0Q0MUFDNjE2ODQ4Mzg5NzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDOkfh/qBgNz4OLdYGqKRK8GqDggPY5cRkIRhULuxgCO9yaPpjz VZ2YYXAdoRcutxyAhssREtRuBy5PLqSAXfEchX/H1/ehfhbgtoqz+mdOD4NBUHUZ cFu2b8vfZAamgjnAPKVnnBPstmKX0/QksosH5bpqe5mNaeJbSThERJnJgsvMsIRF dBQFik1yt5OINy1zPiuFoPj3tOycfcyePuvRRdWSbz8XAfNQoAz+d30cT5bU4oHv 5F2AivlUq+Vzvw0ax5kOkTz/0GXyoOMkYJKxFv5T3gNMOjuI+Y33yuJ+iS68oUmA MO+zyQov6RACvyt93gz8iBy0A4GQlt78DWINAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU/WV/blAM3A1br7tX1BrGFoSDiXgwHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNjcxL19XVl9ibEFNM0ExYnI3dFgxQnJHRm9TRGlYZy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBARyRaAwDQYJKoZIhvcNAQELBQADggEBAG9fPp1hRR16C6gwj/9569RE2BO5 hEiSOIkdd+vQcg+yGwwMohcbp33YHmtG2vLNcfgRR1fzzmj9gVeFUIpIZUTVUtpo U0MDeV2ivn+8LxxK4fefyLySPxvanvTI5vme7MK/QhLhV0kUq8umoblbQV9yTx5H xodVnjIzrTDXC47F1JUQX3gMJe15p3cEi2zjn/V6XYDtu/R5wpfpSjsb3unGicyq 2bK+OjBnyDB4rNrNQfagVw4xF2IDfBEdXzLMnBrvVR0ESVz/JdIlVl372v/H5sLk zK2faxFYtKQLm24Ud6BkHnHqh9zFShSkO84FLVjhSuR8UVkRPGXK4HYE/es= -----END CERTIFICATE-----Generated at Fri Nov 22 11:45:58 2024 by rpki-client on console-ams.rpki-client.org