$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/i9TOwuKXdnP8NCZNe5Sg0DhZWvQ.roa File: i9TOwuKXdnP8NCZNe5Sg0DhZWvQ.roa (raw, json) Hash identifier: xKxX1V1rCHa5/b0HxwjmBrAVNPxRaiIbY7lWlxA7BPM= Subject key identifier: 8B:D4:CE:C2:E2:97:76:73:FC:34:26:4D:7B:94:A0:D0:38:59:5A:F4 Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Certificate serial: 0154 Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/i9TOwuKXdnP8NCZNe5Sg0DhZWvQ.roa Signing time: Sun 01 Oct 2023 01:33:00 +0000 ROA not before: Sun 01 Oct 2023 01:33:00 +0000 ROA not after: Sat 14 Sep 2024 01:30:03 +0000 asID: 18136 IP address blocks: 117.53.0.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Jun 2024 02:39:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 340 (0x154) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Validity Not Before: Oct 1 01:33:00 2023 GMT Not After : Sep 14 01:30:03 2024 GMT Subject: CN=8BD4CEC2E2977673FC34264D7B94A0D038595AF4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:2d:95:35:dd:b3:d5:04:ef:04:37:7a:a8:15: 8c:2e:31:f1:1b:19:6a:59:85:19:6b:9f:15:3e:99: 9c:74:08:a8:4b:d7:ea:4f:66:ff:9d:cb:0f:a7:3d: d0:df:ea:9d:92:b0:94:0b:37:b5:3a:85:97:22:ce: 8a:76:55:5e:1c:8b:5d:1c:44:7e:6a:ac:ff:a1:04: 34:3a:10:4c:a3:6f:fe:9e:59:eb:6e:61:8d:6e:e0: f9:a6:3d:83:9f:7c:88:30:a3:55:05:d2:8f:37:63: 93:2e:ae:aa:80:0f:01:c1:f6:78:4a:4e:fc:43:89: b6:2d:b1:61:de:75:34:49:c1:52:83:2e:2e:92:33: 86:7f:30:49:dc:42:94:2e:f1:92:b8:07:ee:43:40: b2:fe:fa:68:1b:74:a9:6d:b7:92:2c:c3:e1:de:b5: 14:f1:ca:c0:d9:db:b1:bd:08:97:99:68:6d:62:49: 1d:3d:be:aa:27:6c:ab:0c:c1:69:b1:3d:b8:44:15: ae:a4:fd:50:bb:f3:6d:86:38:3b:4e:77:b6:b5:a0: fd:86:58:4d:68:94:cf:8a:f4:5d:97:c4:73:43:b8: 9e:2c:53:2b:b3:cc:19:49:87:3d:a2:09:d3:ee:f5: ba:82:e6:12:5c:48:7c:83:37:4b:c3:58:28:70:b1: 8c:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:D4:CE:C2:E2:97:76:73:FC:34:26:4D:7B:94:A0:D0:38:59:5A:F4 X509v3 Authority Key Identifier: keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/i9TOwuKXdnP8NCZNe5Sg0DhZWvQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 117.53.0.0/19 Signature Algorithm: sha256WithRSAEncryption 2d:9c:50:e8:ed:f7:88:92:ec:a2:35:5e:d5:66:e8:e8:7b:2b: d5:e9:3e:dd:2b:d4:80:8e:0e:f5:65:7a:ea:59:b8:1e:a1:b7: ba:45:37:8a:59:b3:57:de:ed:37:49:87:3f:f4:8a:3f:e5:65: cd:e8:9e:8b:01:28:3d:a5:cd:79:e7:d9:b9:c2:7b:3b:b5:08: bc:33:37:11:fb:8a:48:c9:26:0c:ae:f3:54:97:82:13:9d:87: 86:bd:9e:e4:c5:72:79:f3:92:90:e9:27:a8:95:90:d6:3f:6d: 46:de:27:82:f0:30:50:a7:20:b5:89:a4:8c:2a:e7:4a:bc:6b: ce:ca:54:eb:63:99:98:cc:25:50:39:84:2e:fc:24:38:dd:64: b8:da:cd:55:5c:49:e0:d8:9a:65:96:c9:28:33:9d:b9:18:92: 98:5f:e8:02:25:a6:96:1a:1e:68:d2:73:9a:23:01:c6:5f:d9: b9:d1:d2:ce:5f:65:05:f0:de:3f:61:ae:87:48:91:4e:9d:19: c5:64:b7:49:91:2f:a7:c2:5a:26:60:3a:93:c9:40:8b:fc:f7: 33:dc:f5:c4:65:17:20:8d:96:e7:71:94:d1:01:13:69:74:30: d2:dc:f1:50:17:08:e6:7e:23:0e:53:e2:b0:e3:ce:f3:98:12: fb:16:a5:6e -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAVQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yMzEwMDEw MTMzMDBaFw0yNDA5MTQwMTMwMDNaMDMxMTAvBgNVBAMTKDhCRDRDRUMyRTI5Nzc2 NzNGQzM0MjY0RDdCOTRBMEQwMzg1OTVBRjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDHLZU13bPVBO8EN3qoFYwuMfEbGWpZhRlrnxU+mZx0CKhL1+pP Zv+dyw+nPdDf6p2SsJQLN7U6hZcizop2VV4ci10cRH5qrP+hBDQ6EEyjb/6eWetu YY1u4PmmPYOffIgwo1UF0o83Y5MurqqADwHB9nhKTvxDibYtsWHedTRJwVKDLi6S M4Z/MEncQpQu8ZK4B+5DQLL++mgbdKltt5Isw+HetRTxysDZ27G9CJeZaG1iSR09 vqonbKsMwWmxPbhEFa6k/VC7822GODtOd7a1oP2GWE1olM+K9F2XxHNDuJ4sUyuz zBlJhz2iCdPu9bqC5hJcSHyDN0vDWChwsYyzAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUi9TOwuKXdnP8NCZNe5Sg0DhZWvQwHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNjcxL2k5VE93dUtYZG5QOE5DWk5lNVNnMERoWld2US5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAV1NQAwDQYJKoZIhvcNAQELBQADggEBAC2cUOjt94iS7KI1XtVm6Oh7K9Xp Pt0r1ICODvVleupZuB6ht7pFN4pZs1fe7TdJhz/0ij/lZc3onosBKD2lzXnn2bnC ezu1CLwzNxH7ikjJJgyu81SXghOdh4a9nuTFcnnzkpDpJ6iVkNY/bUbeJ4LwMFCn ILWJpIwq50q8a87KVOtjmZjMJVA5hC78JDjdZLjazVVcSeDYmmWWySgznbkYkphf 6AIlppYaHmjSc5ojAcZf2bnR0s5fZQXw3j9hrodIkU6dGcVkt0mRL6fCWiZgOpPJ QIv89zPc9cRlFyCNludxlNEBE2l0MNLc8VAXCOZ+Iw5T4rDjzvOYEvsWpW4= -----END CERTIFICATE-----Generated at Thu May 30 03:38:52 2024 by rpki-client on console-ams.rpki-client.org