$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/h0Dnp5U1cQD0i91vxVXT4-rQH6I.roa File: h0Dnp5U1cQD0i91vxVXT4-rQH6I.roa (raw, json) Hash identifier: 8g2+amvT3K1Wya9yenKU2aN2YjXxNHt2R6KtOIph1II= Subject key identifier: 87:40:E7:A7:95:35:71:00:F4:8B:DD:6F:C5:55:D3:E3:EA:D0:1F:A2 Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Certificate serial: 0153 Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/h0Dnp5U1cQD0i91vxVXT4-rQH6I.roa Signing time: Sun 01 Oct 2023 01:33:00 +0000 ROA not before: Sun 01 Oct 2023 01:33:00 +0000 ROA not after: Sat 14 Sep 2024 01:30:03 +0000 asID: 9824 IP address blocks: 27.126.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 01:34:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 339 (0x153) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Validity Not Before: Oct 1 01:33:00 2023 GMT Not After : Sep 14 01:30:03 2024 GMT Subject: CN=8740E7A795357100F48BDD6FC555D3E3EAD01FA2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:82:8b:93:b9:f9:21:6f:41:73:c5:c9:56:56: 9d:d3:f3:e5:04:c3:cc:e4:be:20:8f:29:ce:23:a6: f6:82:b6:15:84:12:2b:ac:45:9e:6f:b4:bc:60:66: 4c:e1:73:09:e1:ec:52:c5:2d:ac:af:ef:85:d4:60: fc:b8:37:09:32:01:ef:91:8e:e5:e0:93:6f:d3:17: 89:6a:9a:27:0d:47:e0:df:bf:b7:b1:33:c5:61:8e: e3:d5:de:1f:d6:43:76:a5:fc:a4:b9:f0:91:c1:32: e8:db:18:eb:b4:e7:57:c9:21:e6:aa:86:f5:1d:88: 4e:62:57:94:c3:61:a5:05:0b:07:6e:58:e5:f8:e3: a8:c0:e3:35:f1:6d:03:7d:8e:8b:82:a7:93:53:a1: 24:4d:2c:37:6b:c3:ab:f5:4e:a2:28:b4:7a:41:05: 1e:14:dd:e7:05:73:7d:2c:b0:fa:2f:0f:89:c8:89: fb:ca:32:da:72:0c:fb:c4:e9:31:21:3f:b9:c8:28: 62:74:c8:2e:77:96:05:13:63:99:0e:3f:de:3d:e9: 6f:6b:92:d8:a1:34:f7:ad:27:d3:b4:ee:0a:a7:94: 6f:20:6b:9a:0e:e5:b7:e2:84:41:28:c1:3a:54:8c: fc:54:62:a2:60:ce:bb:60:6c:0f:45:1f:d5:7c:ae: 7d:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:40:E7:A7:95:35:71:00:F4:8B:DD:6F:C5:55:D3:E3:EA:D0:1F:A2 X509v3 Authority Key Identifier: keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/h0Dnp5U1cQD0i91vxVXT4-rQH6I.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.126.128.0/20 Signature Algorithm: sha256WithRSAEncryption cc:99:56:1b:4d:48:87:ac:e6:0e:f8:64:eb:73:75:d8:7d:f9: 1e:32:a9:cf:cc:1d:5c:0a:40:b9:ac:9a:49:b1:b5:42:1a:63: 31:bd:88:f1:41:04:e3:20:41:3d:d5:d4:b3:8a:cd:d8:80:6b: d9:b3:5f:b5:0c:e9:5f:6b:74:5c:8b:7b:ba:d2:5d:d7:3d:f4: cf:5c:b0:3d:4b:9e:1a:77:f2:42:74:94:81:f5:fb:ae:7f:e7: a8:0c:f2:ee:32:f9:59:63:f6:48:9d:5c:6e:1b:79:f6:33:86: 1c:48:12:55:92:0a:25:64:b8:a6:bc:5b:23:58:18:de:8f:f3: 73:83:cd:62:4f:8a:3f:c6:18:22:78:87:83:d1:a5:65:36:a5: a8:b2:60:c8:3a:3f:b1:bc:61:a5:c9:17:81:53:f4:18:29:cc: d5:0f:da:e8:61:95:b3:89:ad:50:1b:bf:21:fc:19:41:d6:88: b8:d1:d7:8b:5f:83:25:58:ef:07:1d:f1:77:00:41:98:77:52: c1:dc:39:10:01:f3:cb:1b:e6:e4:0a:5d:81:db:03:67:01:7a: 86:89:90:80:19:f5:0d:31:49:ba:1f:71:aa:5f:bb:14:fe:0b: c4:80:3d:8f:14:aa:d9:e9:60:3f:e4:41:64:6f:f1:f2:09:f6: cf:fc:f0:3a -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAVMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yMzEwMDEw MTMzMDBaFw0yNDA5MTQwMTMwMDNaMDMxMTAvBgNVBAMTKDg3NDBFN0E3OTUzNTcx MDBGNDhCREQ2RkM1NTVEM0UzRUFEMDFGQTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDZgouTufkhb0FzxclWVp3T8+UEw8zkviCPKc4jpvaCthWEEius RZ5vtLxgZkzhcwnh7FLFLayv74XUYPy4NwkyAe+RjuXgk2/TF4lqmicNR+Dfv7ex M8VhjuPV3h/WQ3al/KS58JHBMujbGOu051fJIeaqhvUdiE5iV5TDYaUFCwduWOX4 46jA4zXxbQN9jouCp5NToSRNLDdrw6v1TqIotHpBBR4U3ecFc30ssPovD4nIifvK MtpyDPvE6TEhP7nIKGJ0yC53lgUTY5kOP9496W9rktihNPetJ9O07gqnlG8ga5oO 5bfihEEowTpUjPxUYqJgzrtgbA9FH9V8rn1RAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUh0Dnp5U1cQD0i91vxVXT4+rQH6IwHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNjcxL2gwRG5wNVUxY1FEMGk5MXZ4VlhUNC1yUUg2SS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQbfoAwDQYJKoZIhvcNAQELBQADggEBAMyZVhtNSIes5g74ZOtzddh9+R4y qc/MHVwKQLmsmkmxtUIaYzG9iPFBBOMgQT3V1LOKzdiAa9mzX7UM6V9rdFyLe7rS Xdc99M9csD1Lnhp38kJ0lIH1+65/56gM8u4y+Vlj9kidXG4befYzhhxIElWSCiVk uKa8WyNYGN6P83ODzWJPij/GGCJ4h4PRpWU2paiyYMg6P7G8YaXJF4FT9BgpzNUP 2uhhlbOJrVAbvyH8GUHWiLjR14tfgyVY7wcd8XcAQZh3UsHcORAB88sb5uQKXYHb A2cBeoaJkIAZ9Q0xSbofcapfuxT+C8SAPY8UqtnpYD/kQWRv8fIJ9s/88Do= -----END CERTIFICATE-----Generated at Sat May 18 11:39:42 2024 by rpki-client on console-fra.rpki-client.org