$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/iXzU6MNOW2RuO78yV9a9Wh94mGc.roa File: iXzU6MNOW2RuO78yV9a9Wh94mGc.roa (raw, json) Hash identifier: mkwkNAehEgRmSKflVzglgOMc0L4v4GjrBCH2K3Z1Yrk= Subject key identifier: 89:7C:D4:E8:C3:4E:5B:64:6E:3B:BF:32:57:D6:BD:5A:1F:78:98:67 Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Certificate serial: 013E Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/iXzU6MNOW2RuO78yV9a9Wh94mGc.roa Signing time: Sun 01 Oct 2023 01:30:17 +0000 ROA not before: Sun 01 Oct 2023 01:30:17 +0000 ROA not after: Sat 14 Sep 2024 01:30:03 +0000 asID: 9378 IP address blocks: 180.131.152.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 01:34:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 318 (0x13e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Validity Not Before: Oct 1 01:30:17 2023 GMT Not After : Sep 14 01:30:03 2024 GMT Subject: CN=897CD4E8C34E5B646E3BBF3257D6BD5A1F789867 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:60:34:5b:ef:f0:fb:f0:98:b9:7f:69:7c:6c: 8e:92:c9:07:d0:5b:64:0b:a2:f3:0d:18:97:7e:00: 9c:f7:9d:83:66:c3:c2:1d:56:f4:22:ea:28:90:38: 47:e8:ff:ea:8e:a7:7f:d8:ed:07:61:5a:10:5e:5e: 00:ee:49:73:18:94:c9:36:ea:95:f5:53:59:96:a3: bb:aa:33:64:bb:a3:53:f8:05:09:7c:c7:aa:53:74: c7:ea:e1:31:50:34:09:8f:29:3a:b4:03:9d:21:b6: 7b:21:67:38:c8:b8:5c:1b:54:d5:58:e2:01:9d:71: 80:cf:3d:77:92:ea:88:98:6e:54:59:52:44:ca:50: 6d:16:2b:92:26:6d:8a:f5:b8:e4:ca:8a:7d:5f:4a: 9a:00:1e:a1:6e:34:21:6e:ee:91:48:aa:83:71:9d: ca:5c:0f:f5:fc:f0:3e:c8:2f:51:d1:1e:65:e1:49: 43:65:fa:be:68:e2:11:15:c2:a5:7e:cc:57:9e:8e: 89:10:63:95:80:b8:dd:40:8e:88:91:3c:04:e2:1d: 6c:04:1e:d0:8e:4a:81:f9:08:e0:9d:35:4b:b3:b7: a5:89:3e:cd:22:f2:3e:ec:17:35:f6:e6:5f:d3:85: 97:09:30:2c:e7:68:92:06:66:eb:cc:6f:77:7a:7b: a4:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:7C:D4:E8:C3:4E:5B:64:6E:3B:BF:32:57:D6:BD:5A:1F:78:98:67 X509v3 Authority Key Identifier: keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/iXzU6MNOW2RuO78yV9a9Wh94mGc.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 180.131.152.0/21 Signature Algorithm: sha256WithRSAEncryption 7b:88:fc:b1:9a:67:5e:4e:c2:32:9a:81:34:98:6d:f6:2d:88: ca:1a:f7:a5:6a:cd:43:87:f1:04:e7:0d:c9:15:f8:b0:8e:df: 8e:aa:24:7f:67:40:d4:76:c6:83:52:09:90:8c:5e:be:7b:9c: 7a:df:0b:ea:08:87:17:67:56:33:42:ba:b1:92:38:17:ac:38: fb:96:73:f6:d9:cc:15:0a:49:18:bf:ba:20:4b:30:8a:72:f8: c5:b0:11:26:7b:b7:68:36:fa:65:3c:2c:06:82:24:f9:fc:71: a8:04:65:f6:72:0d:00:c6:30:79:5c:ca:e8:4c:17:99:78:5b: 8b:55:3f:28:ea:30:2b:60:21:9b:d0:fc:1e:5a:21:5a:28:89: 5d:44:d3:bb:80:ba:e9:d5:81:8f:c0:9a:df:b0:3f:cc:1e:c3: 11:91:a6:cc:3a:85:45:f8:60:21:0a:22:d1:97:2f:c3:27:74: fb:1f:da:08:88:b7:6d:45:a8:82:17:6b:04:46:50:87:b1:e7: d8:bf:d5:b3:94:96:12:04:6d:b2:7a:f5:da:60:bb:1c:26:3b: 6c:22:25:2c:1b:bd:c8:87:95:ee:9c:94:91:22:d2:4e:36:ab: 3b:b6:80:7c:6d:ab:bc:44:73:b0:bb:7e:62:ea:35:70:13:14: ea:0d:30:8a -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAT4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yMzEwMDEw MTMwMTdaFw0yNDA5MTQwMTMwMDNaMDMxMTAvBgNVBAMTKDg5N0NENEU4QzM0RTVC NjQ2RTNCQkYzMjU3RDZCRDVBMUY3ODk4NjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC/YDRb7/D78Ji5f2l8bI6SyQfQW2QLovMNGJd+AJz3nYNmw8Id VvQi6iiQOEfo/+qOp3/Y7QdhWhBeXgDuSXMYlMk26pX1U1mWo7uqM2S7o1P4BQl8 x6pTdMfq4TFQNAmPKTq0A50htnshZzjIuFwbVNVY4gGdcYDPPXeS6oiYblRZUkTK UG0WK5ImbYr1uOTKin1fSpoAHqFuNCFu7pFIqoNxncpcD/X88D7IL1HRHmXhSUNl +r5o4hEVwqV+zFeejokQY5WAuN1AjoiRPATiHWwEHtCOSoH5COCdNUuzt6WJPs0i 8j7sFzX25l/ThZcJMCznaJIGZuvMb3d6e6RfAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUiXzU6MNOW2RuO78yV9a9Wh94mGcwHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNjcxL2lYelU2TU5PVzJSdU83OHlWOWE5V2g5NG1HYy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAO0g5gwDQYJKoZIhvcNAQELBQADggEBAHuI/LGaZ15OwjKagTSYbfYtiMoa 96VqzUOH8QTnDckV+LCO346qJH9nQNR2xoNSCZCMXr57nHrfC+oIhxdnVjNCurGS OBesOPuWc/bZzBUKSRi/uiBLMIpy+MWwESZ7t2g2+mU8LAaCJPn8cagEZfZyDQDG MHlcyuhMF5l4W4tVPyjqMCtgIZvQ/B5aIVooiV1E07uAuunVgY/Amt+wP8wewxGR psw6hUX4YCEKItGXL8MndPsf2giIt21FqIIXawRGUIex59i/1bOUlhIEbbJ69dpg uxwmO2wiJSwbvciHle6clJEi0k42qzu2gHxtq7xEc7C7fmLqNXATFOoNMIo= -----END CERTIFICATE-----Generated at Sat May 18 12:40:39 2024 by rpki-client on console-ams.rpki-client.org