$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/xuQzmF1f3Cr5U0x5ao-BnRccmzs.roa File: xuQzmF1f3Cr5U0x5ao-BnRccmzs.roa (raw, json) Hash identifier: M0nd9gJ5rIaCVlSzsms7qzcts4k3C6KUVU1dfBAjYdA= Subject key identifier: C6:E4:33:98:5D:5F:DC:2A:F9:53:4C:79:6A:8F:81:9D:17:1C:9B:3B Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Certificate serial: 0292 Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/xuQzmF1f3Cr5U0x5ao-BnRccmzs.roa Signing time: Sat 31 Aug 2024 01:38:59 +0000 ROA not before: Sat 31 Aug 2024 01:38:59 +0000 ROA not after: Fri 15 Aug 2025 01:30:02 +0000 asID: 4721 IP address blocks: 202.43.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 06:14:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 658 (0x292) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Validity Not Before: Aug 31 01:38:59 2024 GMT Not After : Aug 15 01:30:02 2025 GMT Subject: CN=C6E433985D5FDC2AF9534C796A8F819D171C9B3B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f9:29:0c:ea:bd:66:e0:f2:18:62:0a:26:16: af:7f:ea:81:71:3d:20:5f:2f:3a:23:1c:c3:18:2c: 7d:e2:da:2f:df:f6:5b:3b:b3:ae:bf:ed:0b:b3:e6: 77:48:64:a2:02:28:53:47:8b:90:01:12:12:ad:40: 91:1c:c9:42:00:5f:6e:55:80:88:a8:83:9d:2a:83: dc:14:3d:28:5b:21:b4:10:37:ef:6b:5f:8a:5d:69: 48:56:26:1f:ca:90:d1:62:57:0a:0a:b8:38:90:af: f7:97:b0:ae:f3:ac:44:2c:ae:ea:01:a5:17:06:70: c7:8a:3f:13:ad:ac:02:79:dd:34:6e:21:56:32:80: 75:68:13:4c:17:80:0b:53:07:1a:07:e4:41:ef:8a: 3d:9f:ca:55:18:44:30:71:54:87:9a:1f:17:6a:75: dd:f4:3e:f7:a3:18:c2:8b:96:3a:d7:6b:a9:d2:be: 92:cc:50:2a:46:d0:e8:e6:1f:d1:c5:62:93:83:11: 06:00:f5:92:c7:9d:1f:eb:6a:8d:0a:e1:63:1a:bb: 49:b6:59:05:fc:bd:09:76:1b:68:a1:7d:7a:c6:6b: b2:50:74:6b:45:2e:69:61:04:43:f4:8e:ce:45:9f: 46:61:e0:7e:28:f4:2b:e5:2d:a9:85:de:f4:ce:60: b6:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:E4:33:98:5D:5F:DC:2A:F9:53:4C:79:6A:8F:81:9D:17:1C:9B:3B X509v3 Authority Key Identifier: keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/xuQzmF1f3Cr5U0x5ao-BnRccmzs.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.43.16.0/20 Signature Algorithm: sha256WithRSAEncryption df:10:5e:e4:ac:a9:7c:db:b4:cf:ad:80:d9:d6:22:78:c9:c8: f6:b6:88:50:68:83:17:3b:b3:5f:96:7d:ff:23:10:3f:fe:1c: af:5b:cb:eb:29:fd:33:43:c8:9c:5f:9f:47:ce:f6:83:73:c0: 94:28:51:6c:20:13:63:fa:ec:68:8b:43:e5:4d:91:3c:a4:8b: 49:38:4c:d6:a9:ba:9d:a4:0b:ec:37:77:af:22:72:98:2b:f0: 6b:60:d5:c8:68:08:3a:90:e7:f0:64:45:93:10:4f:2e:46:c0: f8:17:dd:57:f6:5f:6c:d9:46:7a:0d:2b:8a:64:a6:d7:7e:84: 49:63:5a:1f:dd:56:ee:98:9e:cf:e2:b0:0e:7b:08:84:95:64: 17:5e:9d:39:b6:43:7f:c5:47:f3:e5:8c:05:0b:6b:4a:88:c0: 92:da:b2:da:c8:df:71:87:46:5c:86:3a:49:4b:5f:18:8b:15: 35:12:23:78:e4:e1:06:98:95:27:63:d3:5f:4a:64:53:1d:f4: b7:b9:64:ee:3e:c4:f8:f0:41:29:3b:cc:1a:82:cd:d8:a7:33: 2e:26:b2:5b:60:f4:89:66:18:5c:14:6e:4b:62:cd:93:99:2e: ea:05:f8:49:28:40:92:11:6d:81:95:d1:62:73:32:e1:2a:55: 02:22:5f:78 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICApIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yNDA4MzEw MTM4NTlaFw0yNTA4MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEM2RTQzMzk4NUQ1RkRD MkFGOTUzNEM3OTZBOEY4MTlEMTcxQzlCM0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC4+SkM6r1m4PIYYgomFq9/6oFxPSBfLzojHMMYLH3i2i/f9ls7 s66/7Quz5ndIZKICKFNHi5ABEhKtQJEcyUIAX25VgIiog50qg9wUPShbIbQQN+9r X4pdaUhWJh/KkNFiVwoKuDiQr/eXsK7zrEQsruoBpRcGcMeKPxOtrAJ53TRuIVYy gHVoE0wXgAtTBxoH5EHvij2fylUYRDBxVIeaHxdqdd30PvejGMKLljrXa6nSvpLM UCpG0OjmH9HFYpODEQYA9ZLHnR/rao0K4WMau0m2WQX8vQl2G2ihfXrGa7JQdGtF LmlhBEP0js5Fn0Zh4H4o9CvlLamF3vTOYLYZAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUxuQzmF1f3Cr5U0x5ao+BnRccmzswHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNjcxL3h1UXptRjFmM0NyNVUweDVhby1CblJjY216cy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBATKKxAwDQYJKoZIhvcNAQELBQADggEBAN8QXuSsqXzbtM+tgNnWInjJyPa2 iFBogxc7s1+Wff8jED/+HK9by+sp/TNDyJxfn0fO9oNzwJQoUWwgE2P67GiLQ+VN kTyki0k4TNapup2kC+w3d68icpgr8Gtg1choCDqQ5/BkRZMQTy5GwPgX3Vf2X2zZ RnoNK4pkptd+hEljWh/dVu6Yns/isA57CISVZBdenTm2Q3/FR/PljAULa0qIwJLa strI33GHRlyGOklLXxiLFTUSI3jk4QaYlSdj019KZFMd9Le5ZO4+xPjwQSk7zBqC zdinMy4msltg9IlmGFwUbktizZOZLuoF+EkoQJIRbYGV0WJzMuEqVQIiX3g= -----END CERTIFICATE-----Generated at Fri Nov 22 09:31:34 2024 by rpki-client on console-fra.rpki-client.org