$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/fzEU3cHr4NUdOlrWetYqJC0lxRc.roa File: fzEU3cHr4NUdOlrWetYqJC0lxRc.roa (raw, json) Hash identifier: bjhcfJo5xHyk2Xlw1K33TZiwwRXsRjdynutquoHwV7s= Subject key identifier: 7F:31:14:DD:C1:EB:E0:D5:1D:3A:5A:D6:7A:D6:2A:24:2D:25:C5:17 Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Certificate serial: 0173 Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/fzEU3cHr4NUdOlrWetYqJC0lxRc.roa Signing time: Sun 01 Oct 2023 01:34:23 +0000 ROA not before: Sun 01 Oct 2023 01:34:23 +0000 ROA not after: Sat 14 Sep 2024 01:30:03 +0000 asID: 9824 IP address blocks: 211.120.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 01:34:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 371 (0x173) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Validity Not Before: Oct 1 01:34:23 2023 GMT Not After : Sep 14 01:30:03 2024 GMT Subject: CN=7F3114DDC1EBE0D51D3A5AD67AD62A242D25C517 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:3c:4f:18:3e:85:cd:e2:f8:58:46:aa:b7:b3: fe:8c:06:5a:71:3e:23:49:1e:5d:62:90:00:3c:65: 0b:50:a4:9f:6b:1f:d5:b1:02:20:6b:35:ba:07:19: 54:9d:a8:14:b5:f9:13:61:e0:81:72:5c:9e:11:a5: 6f:15:cd:11:0f:64:e0:b9:ea:09:e2:f7:62:27:92: 37:ac:69:1d:a9:4a:a9:cd:71:7e:2c:d1:43:18:23: f9:d6:78:a9:3c:2f:3c:e3:b7:fc:33:c4:5b:5a:34: 5e:bc:1b:d7:05:be:c2:bd:00:e6:95:bf:72:11:92: bc:8a:31:0a:de:c7:cb:8a:42:a4:73:3d:0c:dd:57: 2c:36:50:34:5e:46:f8:8f:5a:c2:f1:ce:9d:29:ae: 79:07:42:6f:cc:1d:2a:ae:ad:da:26:83:ef:6a:9a: f9:7b:44:d8:6f:b8:86:e1:5e:64:85:30:13:4f:cb: 65:e8:8c:54:f9:a0:32:1b:bc:49:aa:ff:12:7f:39: be:d4:2f:6c:db:cd:72:e1:ce:88:e8:68:57:38:5f: f2:89:fa:10:12:6c:8a:7f:bf:c8:80:8d:c0:77:f3: 0e:74:ce:2f:38:f0:d0:e0:65:cc:2a:6d:9c:a4:c7: 17:11:c1:5d:db:3f:9f:3b:6d:34:48:da:fc:e2:db: a9:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:31:14:DD:C1:EB:E0:D5:1D:3A:5A:D6:7A:D6:2A:24:2D:25:C5:17 X509v3 Authority Key Identifier: keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/fzEU3cHr4NUdOlrWetYqJC0lxRc.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 211.120.128.0/18 Signature Algorithm: sha256WithRSAEncryption a5:b6:52:a0:4f:54:00:7d:84:ad:6d:39:d3:37:f7:4b:34:04: 9a:bc:16:73:9f:af:77:61:30:c6:de:58:a3:c6:00:43:e8:c4: 7f:ce:e5:50:a4:9c:2a:c0:9f:e9:d0:48:37:b5:bd:00:17:35: 25:e8:b0:8d:e5:ac:68:cc:91:2a:c7:88:a3:a3:cc:8e:79:05: 21:65:cd:42:29:23:a7:0b:07:16:9d:4c:67:df:ca:42:ce:9e: 44:c8:f0:20:94:34:c2:24:53:5c:b4:f9:a2:12:09:c2:6b:60: 19:3e:e2:5a:01:5f:4a:2a:a5:86:69:f3:0b:4d:ae:b2:d3:d8: 98:df:4f:36:04:95:db:c7:ac:12:1c:b7:ea:79:82:59:d7:a1: dd:d5:67:22:ef:d4:cf:ae:6d:3f:38:2b:aa:1b:6b:da:3a:a4: c1:e1:a1:e7:3f:2c:d3:28:c6:c2:59:50:6a:69:fd:0b:06:03: 2d:29:0e:72:a5:a4:83:04:05:30:41:b5:ec:29:eb:91:6f:62: 6f:4c:e4:94:dd:07:29:ca:ca:e0:43:93:ce:f3:87:2e:06:ad: 1d:98:b7:11:97:ab:60:df:bf:bc:aa:60:63:4d:7c:a7:27:81: 40:c0:ac:0b:2b:a1:2a:7f:d4:f3:e3:8c:9d:80:de:19:ac:40: 06:be:7c:a2 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAXMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yMzEwMDEw MTM0MjNaFw0yNDA5MTQwMTMwMDNaMDMxMTAvBgNVBAMTKDdGMzExNEREQzFFQkUw RDUxRDNBNUFENjdBRDYyQTI0MkQyNUM1MTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC2PE8YPoXN4vhYRqq3s/6MBlpxPiNJHl1ikAA8ZQtQpJ9rH9Wx AiBrNboHGVSdqBS1+RNh4IFyXJ4RpW8VzREPZOC56gni92InkjesaR2pSqnNcX4s 0UMYI/nWeKk8Lzzjt/wzxFtaNF68G9cFvsK9AOaVv3IRkryKMQrex8uKQqRzPQzd Vyw2UDReRviPWsLxzp0prnkHQm/MHSqurdomg+9qmvl7RNhvuIbhXmSFMBNPy2Xo jFT5oDIbvEmq/xJ/Ob7UL2zbzXLhzojoaFc4X/KJ+hASbIp/v8iAjcB38w50zi84 8NDgZcwqbZykxxcRwV3bP587bTRI2vzi26kVAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUfzEU3cHr4NUdOlrWetYqJC0lxRcwHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNjcxL2Z6RVUzY0hyNE5VZE9scldldFlxSkMwbHhSYy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAbTeIAwDQYJKoZIhvcNAQELBQADggEBAKW2UqBPVAB9hK1tOdM390s0BJq8 FnOfr3dhMMbeWKPGAEPoxH/O5VCknCrAn+nQSDe1vQAXNSXosI3lrGjMkSrHiKOj zI55BSFlzUIpI6cLBxadTGffykLOnkTI8CCUNMIkU1y0+aISCcJrYBk+4loBX0oq pYZp8wtNrrLT2JjfTzYEldvHrBIct+p5glnXod3VZyLv1M+ubT84K6oba9o6pMHh oec/LNMoxsJZUGpp/QsGAy0pDnKlpIMEBTBBtewp65FvYm9M5JTdBynKyuBDk87z hy4GrR2YtxGXq2Dfv7yqYGNNfKcngUDArAsroSp/1PPjjJ2A3hmsQAa+fKI= -----END CERTIFICATE-----Generated at Sat May 18 12:40:39 2024 by rpki-client on console-ams.rpki-client.org