$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/doW61wGem7PuTzVztkdB4txxFXQ.roa File: doW61wGem7PuTzVztkdB4txxFXQ.roa (raw, json) Hash identifier: PduZMFkPdZHNaPL3S286SyfsvNHOpz+lHLuij72/8xk= Subject key identifier: 76:85:BA:D7:01:9E:9B:B3:EE:4F:35:73:B6:47:41:E2:DC:71:15:74 Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Certificate serial: 012F Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/doW61wGem7PuTzVztkdB4txxFXQ.roa Signing time: Sun 01 Oct 2023 01:30:09 +0000 ROA not before: Sun 01 Oct 2023 01:30:09 +0000 ROA not after: Sat 14 Sep 2024 01:30:03 +0000 asID: 9824 IP address blocks: 61.211.144.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 01:34:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 303 (0x12f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Validity Not Before: Oct 1 01:30:09 2023 GMT Not After : Sep 14 01:30:03 2024 GMT Subject: CN=7685BAD7019E9BB3EE4F3573B64741E2DC711574 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:ed:20:74:a2:08:2a:b4:4a:4d:cd:02:4b:ea: 73:11:e0:b1:d4:ef:6e:14:99:75:1c:71:0b:87:d8: 42:42:77:1d:a7:97:74:5b:f0:45:e2:6b:7c:4b:21: 08:91:f3:27:75:a1:98:8e:39:0d:ac:db:d8:d4:d2: a7:ec:dc:2e:b2:b4:c2:bc:78:1f:6c:86:11:6a:56: da:2b:11:b9:5f:8c:31:8f:a4:1d:69:4e:cf:0a:81: 54:93:44:3a:e8:6f:ed:8a:3e:d6:14:ef:a9:ef:d8: 1c:cf:f5:ef:0a:76:34:8f:23:f6:33:74:b6:30:1d: 7f:ef:d2:f6:d9:02:b7:95:67:55:06:49:ef:9b:c3: 0e:c9:27:3b:9a:0f:39:d0:af:a8:13:9e:7b:f0:47: ae:bf:fb:b5:48:cc:ad:2f:10:89:91:80:d9:94:b4: 53:f4:da:54:02:02:77:60:e4:4a:33:9f:99:62:08: 7d:e1:8a:d1:5a:7f:44:ae:7d:52:39:03:a3:64:17: b4:c1:b6:db:e2:d9:a5:3a:ff:47:38:fc:b2:9d:b3: 96:5e:6a:78:0d:d8:f6:be:16:5e:21:3e:e6:d9:14: 88:93:f6:cc:9e:81:b5:e3:cc:65:e8:d3:02:2c:77: 4a:c8:66:69:84:d2:62:e6:d2:59:e8:16:29:1b:72: bd:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:85:BA:D7:01:9E:9B:B3:EE:4F:35:73:B6:47:41:E2:DC:71:15:74 X509v3 Authority Key Identifier: keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/doW61wGem7PuTzVztkdB4txxFXQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 61.211.144.0/20 Signature Algorithm: sha256WithRSAEncryption a2:5f:44:d1:ed:cb:6e:d8:b4:ae:22:e1:55:b2:cf:1f:87:0b: cc:13:ca:db:8f:b2:46:6a:cb:64:5f:12:c6:e8:24:84:e3:6e: a0:95:63:e9:e2:69:cb:47:ff:bc:27:e1:c9:ff:ac:54:db:cf: d1:f3:db:08:55:6f:f4:dd:9d:42:e8:aa:8b:63:d9:6e:1a:27: af:3e:cc:9c:55:91:f8:5b:df:c2:8e:c4:81:3b:f6:93:91:41: 79:72:6e:64:de:a9:e6:b9:6a:83:b1:08:2c:b1:43:1f:c7:63: 5d:ad:0a:75:7f:ec:80:ba:79:f9:a9:82:2d:b6:fd:bc:e8:da: 2c:ec:e2:77:2d:cb:b1:da:1c:80:05:cb:51:38:15:90:b4:a3: 38:47:e9:af:bb:de:ff:a6:fb:75:4f:36:7d:7a:8c:08:31:53: 43:5e:55:81:70:64:36:68:d9:3d:59:e9:21:fe:45:4a:52:d7: 4f:29:34:d3:fa:5b:ea:6b:50:6b:e4:10:03:2c:21:ca:55:fa: e6:47:e0:bc:ca:70:20:78:1f:21:4a:b5:0c:ab:5c:a6:0e:99: a5:b5:0c:94:cd:3f:05:df:ca:58:0e:d5:24:1b:15:b4:13:49: d0:25:4d:ba:7b:54:e0:31:41:c0:c8:83:30:26:01:08:1f:1a: 99:3f:cd:0a -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAS8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yMzEwMDEw MTMwMDlaFw0yNDA5MTQwMTMwMDNaMDMxMTAvBgNVBAMTKDc2ODVCQUQ3MDE5RTlC QjNFRTRGMzU3M0I2NDc0MUUyREM3MTE1NzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDh7SB0oggqtEpNzQJL6nMR4LHU724UmXUccQuH2EJCdx2nl3Rb 8EXia3xLIQiR8yd1oZiOOQ2s29jU0qfs3C6ytMK8eB9shhFqVtorEblfjDGPpB1p Ts8KgVSTRDrob+2KPtYU76nv2BzP9e8KdjSPI/YzdLYwHX/v0vbZAreVZ1UGSe+b ww7JJzuaDznQr6gTnnvwR66/+7VIzK0vEImRgNmUtFP02lQCAndg5Eozn5liCH3h itFaf0SufVI5A6NkF7TBttvi2aU6/0c4/LKds5ZeangN2Pa+Fl4hPubZFIiT9sye gbXjzGXo0wIsd0rIZmmE0mLm0lnoFikbcr0bAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUdoW61wGem7PuTzVztkdB4txxFXQwHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNjcxL2RvVzYxd0dlbTdQdVR6Vnp0a2RCNHR4eEZYUS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQ905AwDQYJKoZIhvcNAQELBQADggEBAKJfRNHty27YtK4i4VWyzx+HC8wT ytuPskZqy2RfEsboJITjbqCVY+niactH/7wn4cn/rFTbz9Hz2whVb/TdnULoqotj 2W4aJ68+zJxVkfhb38KOxIE79pORQXlybmTeqea5aoOxCCyxQx/HY12tCnV/7IC6 efmpgi22/bzo2izs4ncty7HaHIAFy1E4FZC0ozhH6a+73v+m+3VPNn16jAgxU0Ne VYFwZDZo2T1Z6SH+RUpS108pNNP6W+prUGvkEAMsIcpV+uZH4LzKcCB4HyFKtQyr XKYOmaW1DJTNPwXfylgO1SQbFbQTSdAlTbp7VOAxQcDIgzAmAQgfGpk/zQo= -----END CERTIFICATE-----Generated at Sat May 18 11:39:42 2024 by rpki-client on console-fra.rpki-client.org