$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/gX9AgPCF7g_zYt-VI7OGl2aQVp4.roa File: gX9AgPCF7g_zYt-VI7OGl2aQVp4.roa (raw, json) Hash identifier: /nDtGnVUg1255x9tpLYnPqxLVgb6WysUJQKAe6/e7jk= Subject key identifier: 81:7F:40:80:F0:85:EE:0F:F3:62:DF:95:23:B3:86:97:66:90:56:9E Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Certificate serial: 01AC Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/gX9AgPCF7g_zYt-VI7OGl2aQVp4.roa Signing time: Sun 01 Oct 2023 01:36:36 +0000 ROA not before: Sun 01 Oct 2023 01:36:36 +0000 ROA not after: Sat 14 Sep 2024 01:30:03 +0000 asID: 4721 IP address blocks: 218.219.80.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Jun 2024 02:39:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 428 (0x1ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Validity Not Before: Oct 1 01:36:36 2023 GMT Not After : Sep 14 01:30:03 2024 GMT Subject: CN=817F4080F085EE0FF362DF9523B386976690569E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f4:de:bb:63:01:4b:b2:f2:7e:72:09:81:8c: 7c:e5:c2:0d:5e:cb:3c:0f:9b:5c:27:f0:dd:43:55: a2:4e:45:74:56:3e:d3:86:b3:e5:77:fb:e9:29:da: 7e:de:de:48:0d:43:da:20:02:f9:67:31:2c:b4:c7: fb:44:e6:6a:b5:2d:37:83:3a:93:b0:be:ef:2f:15: 06:5d:90:87:51:cc:24:75:31:1e:aa:ca:7e:2b:52: 17:c0:97:2c:2b:55:e4:7c:7a:22:27:d3:65:25:39: a0:65:0c:59:e3:ac:84:72:71:0c:db:29:dd:d5:02: fa:03:de:95:85:66:06:9a:f3:36:f0:ac:67:93:cb: 1f:80:46:5b:08:3d:78:2b:6c:4e:19:fa:b8:c2:9e: 42:42:37:b3:13:b4:79:b7:6c:11:2f:dd:da:e8:11: 44:6d:2b:93:02:9b:d6:67:69:42:90:dc:da:f6:da: 91:07:bd:e2:3b:b9:66:af:0b:0b:1d:71:b9:48:27: b6:50:a4:b2:14:a7:ec:b6:fe:3f:2a:cc:57:1e:98: 08:c9:c2:c9:74:2c:7c:18:72:1b:ac:b9:a7:cc:12: 7f:f8:44:7d:a0:7c:5a:03:c8:e1:b3:ef:d5:9c:04: 84:cf:06:23:6f:d8:01:2c:64:4c:c4:55:f4:1c:7b: cf:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:7F:40:80:F0:85:EE:0F:F3:62:DF:95:23:B3:86:97:66:90:56:9E X509v3 Authority Key Identifier: keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/gX9AgPCF7g_zYt-VI7OGl2aQVp4.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 218.219.80.0/20 Signature Algorithm: sha256WithRSAEncryption 11:31:d8:99:6e:bc:d2:8f:42:57:2d:9e:a8:4f:0a:45:34:cc: 85:56:fb:24:e0:db:aa:0f:97:16:49:ea:c6:76:bf:35:b6:ee: 0f:fb:7b:42:99:d3:ea:84:47:9b:93:1c:40:3d:71:1c:48:e5: 85:75:f7:51:0f:7b:d2:c1:cb:73:b6:a9:7f:9d:b7:7a:83:66: c4:d5:b3:90:73:ae:bc:23:46:67:bc:d5:ec:3e:d1:fd:08:2b: 2f:87:b0:e4:b9:4f:e9:fd:37:cb:2f:bb:ba:6f:25:74:06:a3: 4d:9b:ee:76:25:d3:0f:31:c4:7c:86:8d:95:3a:7b:0a:fb:9f: 28:60:c7:80:26:2a:16:bc:de:a8:3b:d8:d7:08:0a:d8:7e:b9: 65:35:6d:03:a0:4b:7b:f6:a3:65:dd:20:19:4b:2d:77:de:48: 83:77:30:7e:b0:e2:27:b0:53:76:11:51:fe:19:e9:b3:2b:be: b2:f3:1e:1c:0c:58:47:d7:b2:c0:ae:d4:56:3b:36:2b:04:f8: fa:1f:f7:50:cb:29:30:12:98:a4:35:60:25:e6:08:85:70:f5: 7f:f1:3c:84:9c:36:5a:1b:29:15:50:dc:fc:17:12:35:3b:8a: 1c:0f:e0:d3:5e:58:84:fc:a2:a6:c1:07:31:38:2f:bc:0e:1e: e0:6f:28:40 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAawwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yMzEwMDEw MTM2MzZaFw0yNDA5MTQwMTMwMDNaMDMxMTAvBgNVBAMTKDgxN0Y0MDgwRjA4NUVF MEZGMzYyREY5NTIzQjM4Njk3NjY5MDU2OUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDB9N67YwFLsvJ+cgmBjHzlwg1eyzwPm1wn8N1DVaJORXRWPtOG s+V3++kp2n7e3kgNQ9ogAvlnMSy0x/tE5mq1LTeDOpOwvu8vFQZdkIdRzCR1MR6q yn4rUhfAlywrVeR8eiIn02UlOaBlDFnjrIRycQzbKd3VAvoD3pWFZgaa8zbwrGeT yx+ARlsIPXgrbE4Z+rjCnkJCN7MTtHm3bBEv3droEURtK5MCm9ZnaUKQ3Nr22pEH veI7uWavCwsdcblIJ7ZQpLIUp+y2/j8qzFcemAjJwsl0LHwYchusuafMEn/4RH2g fFoDyOGz79WcBITPBiNv2AEsZEzEVfQce88bAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUgX9AgPCF7g/zYt+VI7OGl2aQVp4wHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNjcxL2dYOUFnUENGN2dfell0LVZJN09HbDJhUVZwNC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBATa21AwDQYJKoZIhvcNAQELBQADggEBABEx2JluvNKPQlctnqhPCkU0zIVW +yTg26oPlxZJ6sZ2vzW27g/7e0KZ0+qER5uTHEA9cRxI5YV191EPe9LBy3O2qX+d t3qDZsTVs5BzrrwjRme81ew+0f0IKy+HsOS5T+n9N8svu7pvJXQGo02b7nYl0w8x xHyGjZU6ewr7nyhgx4AmKha83qg72NcICth+uWU1bQOgS3v2o2XdIBlLLXfeSIN3 MH6w4iewU3YRUf4Z6bMrvrLzHhwMWEfXssCu1FY7NisE+Pof91DLKTASmKQ1YCXm CIVw9X/xPIScNlobKRVQ3PwXEjU7ihwP4NNeWIT8oqbBBzE4L7wOHuBvKEA= -----END CERTIFICATE-----Generated at Thu May 30 03:08:56 2024 by rpki-client on console-fra.rpki-client.org