$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/rFagNyaPnGAmWkFHFD_XdXM-BrY.roa File: rFagNyaPnGAmWkFHFD_XdXM-BrY.roa (raw, json) Hash identifier: gfEql2Qua6aFFHnmqrmuAgt4h49yG24Uef4whV3N65k= Subject key identifier: AC:56:A0:37:26:8F:9C:60:26:5A:41:47:14:3F:D7:75:73:3E:06:B6 Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Certificate serial: 02B6 Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/rFagNyaPnGAmWkFHFD_XdXM-BrY.roa Signing time: Sat 31 Aug 2024 01:42:52 +0000 ROA not before: Sat 31 Aug 2024 01:42:52 +0000 ROA not after: Fri 15 Aug 2025 01:30:02 +0000 asID: 9617 IP address blocks: 49.250.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 06:14:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 694 (0x2b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Validity Not Before: Aug 31 01:42:52 2024 GMT Not After : Aug 15 01:30:02 2025 GMT Subject: CN=AC56A037268F9C60265A4147143FD775733E06B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:67:5e:0e:84:f0:13:f6:a0:2a:03:61:75:11: 50:73:a5:a7:5f:e8:a6:3c:5a:e9:d1:12:ec:0c:40: e3:da:e2:2a:d1:20:0e:26:e3:e4:d3:77:f3:fd:f1: be:e3:4a:6a:ab:91:75:25:65:4e:9f:29:a0:2b:bd: 7c:34:cc:c9:4f:fa:b8:0c:7a:76:79:5f:9d:21:7b: 38:90:f2:cf:05:d9:70:14:ef:58:36:63:e1:df:15: 40:01:fc:95:2b:c4:a1:eb:71:ae:e8:70:6f:9b:f2: 26:9f:09:0b:0d:d9:fe:8d:ac:82:42:d6:b0:14:88: eb:33:ce:27:c9:04:53:c5:74:f9:c2:fc:4a:aa:98: 46:3a:94:ca:37:f7:56:0f:61:25:cb:c9:48:04:3d: ca:ba:b4:86:fb:f4:3a:0f:86:40:49:eb:a4:f9:4c: bf:36:f8:6d:f0:4e:07:d1:12:0a:bf:b7:40:17:ce: 32:f0:74:4b:4d:1f:0d:11:0d:90:15:c1:f0:4b:d1: c3:07:5b:23:59:05:33:13:79:21:60:4d:1d:7b:69: 5a:79:a0:88:9b:04:8d:f7:43:f5:12:d6:3c:92:e5: 29:a5:6d:64:7a:83:21:cc:f6:10:25:ab:2c:db:e1: 7a:8c:b6:26:ef:a5:4e:0b:4d:61:b2:70:d1:2a:85: c8:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:56:A0:37:26:8F:9C:60:26:5A:41:47:14:3F:D7:75:73:3E:06:B6 X509v3 Authority Key Identifier: keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/rFagNyaPnGAmWkFHFD_XdXM-BrY.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.250.0.0/15 Signature Algorithm: sha256WithRSAEncryption a6:ad:ef:d0:e4:d2:bf:65:6e:04:d4:65:69:36:a3:12:7f:b3: 2c:a1:0f:56:e5:42:d8:91:5c:9e:1f:91:b3:e9:07:f4:d7:f7: 32:1b:d6:4f:eb:1c:f5:9c:c4:24:cb:b8:dc:ce:f0:8d:41:45: 52:53:c4:7b:4a:f8:4b:16:82:c7:20:e7:da:d7:a1:7a:8f:14: cd:16:a7:b8:ea:28:ff:03:83:9b:92:5d:03:06:1f:d7:66:b6: 43:42:4f:c9:15:40:63:7c:2a:18:a6:c1:2c:1d:3d:00:22:0a: 90:b4:b7:40:aa:7d:26:0e:11:df:27:52:61:f3:76:51:e8:61: 47:92:bc:9a:f9:9a:03:ad:3b:1b:73:8f:71:f3:97:e0:7e:05: e2:15:36:8f:15:4f:b0:08:bd:30:ec:ae:14:e5:74:8b:73:16: b0:67:1a:73:12:b2:fc:43:7a:5b:96:79:a8:f9:fb:bc:9b:69: e5:4d:64:39:f3:4c:28:03:de:28:17:fb:80:95:9f:39:09:4b: c0:b0:15:0e:3e:ff:b9:5f:19:79:e5:75:e4:14:74:95:6f:b9: 35:d6:77:ae:55:00:6f:10:50:dd:d8:0e:9e:db:1b:f6:4f:02: 37:58:22:5c:15:92:48:e4:33:cf:78:a5:43:d6:c5:87:66:e8: cf:78:f8:56 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgICArYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yNDA4MzEw MTQyNTJaFw0yNTA4MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEFDNTZBMDM3MjY4RjlD NjAyNjVBNDE0NzE0M0ZENzc1NzMzRTA2QjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDJZ14OhPAT9qAqA2F1EVBzpadf6KY8WunREuwMQOPa4irRIA4m 4+TTd/P98b7jSmqrkXUlZU6fKaArvXw0zMlP+rgMenZ5X50heziQ8s8F2XAU71g2 Y+HfFUAB/JUrxKHrca7ocG+b8iafCQsN2f6NrIJC1rAUiOszzifJBFPFdPnC/Eqq mEY6lMo391YPYSXLyUgEPcq6tIb79DoPhkBJ66T5TL82+G3wTgfREgq/t0AXzjLw dEtNHw0RDZAVwfBL0cMHWyNZBTMTeSFgTR17aVp5oIibBI33Q/US1jyS5SmlbWR6 gyHM9hAlqyzb4XqMtibvpU4LTWGycNEqhcjpAgMBAAGjggIjMIICHzAdBgNVHQ4E FgQUrFagNyaPnGAmWkFHFD/XdXM+BrYwHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNjcxL3JGYWdOeWFQbkdBbVdrRkhGRF9YZFhNLUJyWS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwEx+jANBgkqhkiG9w0BAQsFAAOCAQEApq3v0OTSv2VuBNRlaTajEn+zLKEP VuVC2JFcnh+Rs+kH9Nf3MhvWT+sc9ZzEJMu43M7wjUFFUlPEe0r4SxaCxyDn2teh eo8UzRanuOoo/wODm5JdAwYf12a2Q0JPyRVAY3wqGKbBLB09ACIKkLS3QKp9Jg4R 3ydSYfN2UehhR5K8mvmaA607G3OPcfOX4H4F4hU2jxVPsAi9MOyuFOV0i3MWsGca cxKy/EN6W5Z5qPn7vJtp5U1kOfNMKAPeKBf7gJWfOQlLwLAVDj7/uV8ZeeV15BR0 lW+5NdZ3rlUAbxBQ3dgOntsb9k8CN1giXBWSSOQzz3ilQ9bFh2boz3j4Vg== -----END CERTIFICATE-----Generated at Fri Nov 22 11:45:58 2024 by rpki-client on console-ams.rpki-client.org