$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/aOup9E0c4D5lT2e6E5G0sg3r9Xg.roa File: aOup9E0c4D5lT2e6E5G0sg3r9Xg.roa (raw, json) Hash identifier: 1JcPc4Qpp+eSHvdm6Pqwxf7Bqz0TFOlfYUIwY3XRXE4= Subject key identifier: 68:EB:A9:F4:4D:1C:E0:3E:65:4F:67:BA:13:91:B4:B2:0D:EB:F5:78 Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Certificate serial: 01B3 Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/aOup9E0c4D5lT2e6E5G0sg3r9Xg.roa Signing time: Sun 01 Oct 2023 01:38:12 +0000 ROA not before: Sun 01 Oct 2023 01:38:12 +0000 ROA not after: Sat 14 Sep 2024 01:30:03 +0000 asID: 9824 IP address blocks: 219.117.0.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 01:34:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 435 (0x1b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Validity Not Before: Oct 1 01:38:12 2023 GMT Not After : Sep 14 01:30:03 2024 GMT Subject: CN=68EBA9F44D1CE03E654F67BA1391B4B20DEBF578 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:0a:6a:57:21:73:7b:f3:c5:30:46:7e:24:3f: 60:27:7d:24:ee:9e:c9:3b:3b:23:12:d0:57:aa:58: ec:36:ef:1c:5b:16:b4:39:22:7a:ba:a2:de:b2:ef: 99:a6:bd:ed:08:a1:ed:5b:02:e6:13:46:db:cf:82: 8f:c0:6d:06:df:12:11:59:7b:0f:6d:2d:2f:7b:86: 5b:b6:e2:71:8d:7d:ef:7e:b2:ce:89:94:ec:02:4d: 8a:9a:c3:c7:88:56:6e:a6:c7:70:72:06:ef:e9:4c: 38:b6:ae:57:59:3a:41:80:57:02:58:b7:78:c8:45: 62:46:e3:bf:b5:58:5d:07:a3:1f:6e:2c:8f:54:96: 0f:f5:35:fa:54:a7:e2:39:fb:f3:05:01:a2:8d:53: ae:d4:50:66:47:25:e3:d9:2d:0d:9a:ad:f6:ca:64: 53:f4:3d:9b:e7:25:7b:07:8e:11:25:a5:a0:9a:3e: e9:33:5d:45:e6:54:63:c4:90:a6:3b:5f:11:e2:86: 30:e8:59:27:9f:d1:78:9b:5b:09:e3:f4:d6:4d:f1: 70:37:8f:72:0a:e1:b4:57:09:1c:ff:87:77:d8:5a: b9:5d:00:d7:d6:d3:83:a0:ba:e3:02:46:d1:ae:28: b3:eb:fe:ea:03:30:3f:d6:39:3f:fb:ac:35:a4:4e: 05:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:EB:A9:F4:4D:1C:E0:3E:65:4F:67:BA:13:91:B4:B2:0D:EB:F5:78 X509v3 Authority Key Identifier: keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/aOup9E0c4D5lT2e6E5G0sg3r9Xg.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 219.117.0.0/20 Signature Algorithm: sha256WithRSAEncryption 32:53:2c:fe:4c:06:b4:51:80:89:d2:94:bc:ce:4b:eb:cf:e7: 04:64:16:47:0c:3f:12:fe:69:03:32:90:5c:3a:38:fa:9f:dc: 84:35:72:9f:b9:fd:10:57:ac:66:7a:2d:0f:06:b9:eb:36:6f: 11:d2:53:84:8e:55:52:37:cf:5b:16:f7:3b:8c:1f:71:0a:c4: 3b:ce:33:cf:12:e6:87:95:ce:76:b4:91:ce:b2:6a:b3:0c:a3: 76:2d:de:56:97:2f:9b:05:98:0b:10:63:65:81:65:3e:75:f4: 98:1e:7d:95:18:bb:f3:cc:e0:35:c4:18:33:57:58:c1:b3:7d: 7d:7a:63:7a:36:60:5d:2f:a0:51:f1:87:0b:f3:4a:9b:ef:ec: ab:38:e3:4f:dd:59:9f:4f:00:7b:7b:d2:72:81:95:3a:4c:2c: 72:bf:62:8c:b6:92:a8:30:16:56:72:6d:3e:6b:e6:59:49:20: 8b:64:51:6e:f9:06:d5:b4:24:44:8d:b1:15:a6:c5:be:ff:fc: 3b:5e:43:22:31:27:1f:0c:de:73:16:9c:a9:8b:13:9b:c1:53: 8b:62:ea:20:0d:70:9a:e7:89:7e:17:68:10:17:9d:ff:76:c5: 59:ed:81:b6:56:fd:91:de:ac:ae:7b:4c:0f:0b:a1:3e:f5:0a: 50:22:09:b7 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAbMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yMzEwMDEw MTM4MTJaFw0yNDA5MTQwMTMwMDNaMDMxMTAvBgNVBAMTKDY4RUJBOUY0NEQxQ0Uw M0U2NTRGNjdCQTEzOTFCNEIyMERFQkY1NzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDcCmpXIXN788UwRn4kP2AnfSTunsk7OyMS0FeqWOw27xxbFrQ5 Inq6ot6y75mmve0Ioe1bAuYTRtvPgo/AbQbfEhFZew9tLS97hlu24nGNfe9+ss6J lOwCTYqaw8eIVm6mx3ByBu/pTDi2rldZOkGAVwJYt3jIRWJG47+1WF0Hox9uLI9U lg/1NfpUp+I5+/MFAaKNU67UUGZHJePZLQ2arfbKZFP0PZvnJXsHjhElpaCaPukz XUXmVGPEkKY7XxHihjDoWSef0XibWwnj9NZN8XA3j3IK4bRXCRz/h3fYWrldANfW 04OguuMCRtGuKLPr/uoDMD/WOT/7rDWkTgWFAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUaOup9E0c4D5lT2e6E5G0sg3r9XgwHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNjcxL2FPdXA5RTBjNEQ1bFQyZTZFNUcwc2czcjlYZy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBATbdQAwDQYJKoZIhvcNAQELBQADggEBADJTLP5MBrRRgInSlLzOS+vP5wRk FkcMPxL+aQMykFw6OPqf3IQ1cp+5/RBXrGZ6LQ8Gues2bxHSU4SOVVI3z1sW9zuM H3EKxDvOM88S5oeVzna0kc6yarMMo3Yt3laXL5sFmAsQY2WBZT519JgefZUYu/PM 4DXEGDNXWMGzfX16Y3o2YF0voFHxhwvzSpvv7Ks440/dWZ9PAHt70nKBlTpMLHK/ Yoy2kqgwFlZybT5r5llJIItkUW75BtW0JESNsRWmxb7//DteQyIxJx8M3nMWnKmL E5vBU4ti6iANcJrniX4XaBAXnf92xVntgbZW/ZHerK57TA8LoT71ClAiCbc= -----END CERTIFICATE-----Generated at Sat May 18 11:39:42 2024 by rpki-client on console-fra.rpki-client.org