$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/qIUg0n5fma6wfHDGSrccdlUc9pI.roa File: qIUg0n5fma6wfHDGSrccdlUc9pI.roa (raw, json) Hash identifier: mClhXFl6ZLES3SGqMZdJlNBxXeVs/Be75ThTINCfU8o= Subject key identifier: A8:85:20:D2:7E:5F:99:AE:B0:7C:70:C6:4A:B7:1C:76:55:1C:F6:92 Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Certificate serial: 029A Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/qIUg0n5fma6wfHDGSrccdlUc9pI.roa Signing time: Sat 31 Aug 2024 01:40:37 +0000 ROA not before: Sat 31 Aug 2024 01:40:37 +0000 ROA not after: Fri 15 Aug 2025 01:30:02 +0000 asID: 4721 IP address blocks: 203.89.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 06:14:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 666 (0x29a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Validity Not Before: Aug 31 01:40:37 2024 GMT Not After : Aug 15 01:30:02 2025 GMT Subject: CN=A88520D27E5F99AEB07C70C64AB71C76551CF692 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:00:9c:91:0c:e1:b2:3c:ff:33:06:d8:05:00: 2a:33:f5:41:c1:ae:11:c8:90:e0:05:fd:83:d9:e1: c3:05:f7:a6:1b:80:49:c6:2f:1d:f7:ee:26:62:4d: 22:52:8f:4b:06:b4:62:ec:67:fe:b0:f3:70:12:4f: 3c:52:80:0c:36:67:ea:f6:d7:2e:86:16:eb:d0:38: a7:cd:6a:3d:59:88:50:7b:4b:ff:d0:58:90:74:b2: d7:a2:3d:85:4d:f3:9c:9b:c7:e0:6b:1c:ac:d9:09: 51:79:42:b1:f2:af:c0:1d:00:68:e1:af:99:e5:d7: 4b:d2:b8:0e:3b:3c:f9:bc:70:83:68:e5:13:ea:47: 24:61:fa:fc:48:05:4d:e8:6c:07:d0:b0:3d:fc:63: ff:e9:f4:c1:a6:39:b7:03:6e:a6:98:7f:53:a7:01: 99:e5:66:a4:61:c8:10:8d:91:ca:05:81:eb:38:e0: dd:df:61:56:fc:30:61:ed:c9:74:27:43:9e:38:a6: fa:fc:6c:82:9b:b9:a4:97:b5:ef:f7:cc:c5:12:d4: fc:20:c7:d5:b0:5b:29:66:2e:90:77:2d:8d:a9:4f: 3b:5a:29:3b:0a:2b:a4:aa:1a:52:db:40:ec:2b:fe: 7a:23:3c:67:f9:5a:64:b7:e9:9e:25:e4:bb:ff:a1: cc:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:85:20:D2:7E:5F:99:AE:B0:7C:70:C6:4A:B7:1C:76:55:1C:F6:92 X509v3 Authority Key Identifier: keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/qIUg0n5fma6wfHDGSrccdlUc9pI.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.89.32.0/19 Signature Algorithm: sha256WithRSAEncryption b8:d4:18:e5:8f:01:ee:8a:2b:20:35:b2:4d:c3:99:8d:6f:63: 4e:11:07:44:4f:61:df:2e:ad:82:32:d0:f0:be:a4:26:16:56: 1b:36:6f:4f:0a:84:46:21:b4:7e:11:34:7e:b1:d2:09:d5:91: 24:3a:79:ce:25:d4:97:3a:21:59:76:30:00:7e:bc:e7:46:16: a0:3b:82:ce:79:a2:fd:91:24:68:10:15:c3:ad:e0:bc:a0:88: db:6f:a8:15:40:3c:c7:c0:d7:d6:e4:e1:1d:a7:71:a6:5e:df: 54:bb:02:44:3f:a4:ca:b2:b0:1c:86:07:3a:dd:e2:41:db:94: 1f:7d:a2:72:62:e3:c1:5a:57:eb:ae:c1:8d:5b:fc:4b:77:5a: 2a:ad:d1:72:a5:a5:53:58:48:19:36:67:ef:a9:a6:4e:48:39: 7f:98:17:ef:fc:11:c6:5b:c4:00:1f:f8:a5:18:bd:7e:c6:f2: 32:b7:0f:cc:2a:3b:81:71:e8:45:a1:14:e7:22:70:87:1a:91: 67:99:cd:06:45:c7:e5:7d:f2:00:75:a3:f2:04:10:52:a3:56: 7b:cd:cf:d6:e0:55:a9:49:b1:6a:f1:7f:65:ed:90:46:7f:a1: b9:e8:15:21:21:fc:53:87:7f:c5:a4:26:72:64:e9:38:60:c0: 49:4a:38:08 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICApowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yNDA4MzEw MTQwMzdaFw0yNTA4MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEE4ODUyMEQyN0U1Rjk5 QUVCMDdDNzBDNjRBQjcxQzc2NTUxQ0Y2OTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC2AJyRDOGyPP8zBtgFACoz9UHBrhHIkOAF/YPZ4cMF96YbgEnG Lx337iZiTSJSj0sGtGLsZ/6w83ASTzxSgAw2Z+r21y6GFuvQOKfNaj1ZiFB7S//Q WJB0steiPYVN85ybx+BrHKzZCVF5QrHyr8AdAGjhr5nl10vSuA47PPm8cINo5RPq RyRh+vxIBU3obAfQsD38Y//p9MGmObcDbqaYf1OnAZnlZqRhyBCNkcoFges44N3f YVb8MGHtyXQnQ544pvr8bIKbuaSXte/3zMUS1Pwgx9WwWylmLpB3LY2pTztaKTsK K6SqGlLbQOwr/nojPGf5WmS36Z4l5Lv/ocxNAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUqIUg0n5fma6wfHDGSrccdlUc9pIwHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNjcxL3FJVWcwbjVmbWE2d2ZIREdTcmNjZGxVYzlwSS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAXLWSAwDQYJKoZIhvcNAQELBQADggEBALjUGOWPAe6KKyA1sk3DmY1vY04R B0RPYd8urYIy0PC+pCYWVhs2b08KhEYhtH4RNH6x0gnVkSQ6ec4l1Jc6IVl2MAB+ vOdGFqA7gs55ov2RJGgQFcOt4LygiNtvqBVAPMfA19bk4R2ncaZe31S7AkQ/pMqy sByGBzrd4kHblB99onJi48FaV+uuwY1b/Et3Wiqt0XKlpVNYSBk2Z++ppk5IOX+Y F+/8EcZbxAAf+KUYvX7G8jK3D8wqO4Fx6EWhFOcicIcakWeZzQZFx+V98gB1o/IE EFKjVnvNz9bgValJsWrxf2XtkEZ/obnoFSEh/FOHf8WkJnJk6ThgwElKOAg= -----END CERTIFICATE-----Generated at Fri Nov 22 09:31:34 2024 by rpki-client on console-fra.rpki-client.org