$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/800/H6i8qRsWnVtAnRpg6AVzC_odGIg.roa File: H6i8qRsWnVtAnRpg6AVzC_odGIg.roa (raw, json) Hash identifier: Detq7SGr4zk7AdpsVX0aFRbhR9t+3J/yAyk6KDRyeqA= Subject key identifier: 1F:A8:BC:A9:1B:16:9D:5B:40:9D:1A:60:E8:05:73:0B:FA:1D:18:88 Certificate issuer: /CN=084F88D837A2A2132EA8F6F8F2DB82C1C1E90A8B Certificate serial: 1F Authority key identifier: 08:4F:88:D8:37:A2:A2:13:2E:A8:F6:F8:F2:DB:82:C1:C1:E9:0A:8B Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CE-I2DeiohMuqPb48tuCwcHpCos.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/800/H6i8qRsWnVtAnRpg6AVzC_odGIg.roa Signing time: Thu 31 Oct 2024 01:32:07 +0000 ROA not before: Thu 31 Oct 2024 01:32:07 +0000 ROA not after: Wed 15 Oct 2025 01:30:02 +0000 asID: 18278 IP address blocks: 202.231.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/800/CE-I2DeiohMuqPb48tuCwcHpCos.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/800/CE-I2DeiohMuqPb48tuCwcHpCos.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CE-I2DeiohMuqPb48tuCwcHpCos.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 12:46:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31 (0x1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=084F88D837A2A2132EA8F6F8F2DB82C1C1E90A8B Validity Not Before: Oct 31 01:32:07 2024 GMT Not After : Oct 15 01:30:02 2025 GMT Subject: CN=1FA8BCA91B169D5B409D1A60E805730BFA1D1888 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:8b:56:5a:b6:9e:4c:7a:88:83:66:5a:2d:3d: 9a:56:8f:ec:33:3f:67:f8:ee:15:93:6e:ba:9b:08: c7:ad:c6:49:27:52:cc:f4:bb:76:90:2a:dd:95:d1: c1:d0:a3:aa:a3:46:83:1e:76:74:8f:4d:e9:ed:8a: cc:35:42:6d:b7:28:87:49:af:1a:56:88:72:3d:72: f2:ab:83:43:8b:05:5f:56:b4:a3:e9:90:b2:85:a8: 16:df:9a:c3:82:05:b7:fb:a7:a6:3a:3a:f7:81:d5: 2f:53:08:96:bd:c3:0d:60:a4:50:74:ff:12:c6:f2: b3:bc:b0:0f:2e:9f:4a:d7:6d:01:a4:42:8b:78:85: 49:30:26:42:dd:58:99:97:b3:67:82:2f:6d:56:c6: 51:21:ac:20:d1:96:82:68:48:a8:0c:aa:02:74:1d: f5:b5:93:31:61:38:d9:47:94:99:21:c9:9c:d2:98: 59:e9:2e:7d:95:8d:24:94:af:b1:50:90:4c:6a:81: ab:45:9c:77:cf:ee:91:a0:44:3b:ad:7d:e9:b5:e4: f6:8f:cf:80:c6:46:10:7a:31:18:30:7d:7a:2e:82: 01:5e:f0:3f:d4:61:f9:cf:6f:4c:b6:fa:a6:4e:1a: fe:8e:c6:7f:2c:72:3d:be:8c:48:c3:00:18:12:02: be:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:A8:BC:A9:1B:16:9D:5B:40:9D:1A:60:E8:05:73:0B:FA:1D:18:88 X509v3 Authority Key Identifier: keyid:08:4F:88:D8:37:A2:A2:13:2E:A8:F6:F8:F2:DB:82:C1:C1:E9:0A:8B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/800/CE-I2DeiohMuqPb48tuCwcHpCos.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CE-I2DeiohMuqPb48tuCwcHpCos.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/800/H6i8qRsWnVtAnRpg6AVzC_odGIg.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.231.176.0/20 Signature Algorithm: sha256WithRSAEncryption 20:00:1c:b0:15:06:b0:36:ee:7d:7e:e9:8e:85:c8:2f:cb:35: a4:23:4a:16:16:cc:05:15:7c:0a:65:7a:2d:f5:81:77:bb:b5: 1e:9c:7e:5e:bd:c7:91:5e:6b:66:1d:83:f5:03:13:05:35:80: 44:4d:30:dd:a7:0e:90:c1:ae:e9:1b:58:6f:11:7a:ed:2e:4b: e8:0e:8e:5f:2e:6b:3c:49:28:88:33:6b:00:a0:3e:5c:0c:1f: 58:d0:85:62:b7:a9:98:d4:f7:81:b4:c4:d8:ca:20:24:d0:62: 30:a6:86:4d:d5:f6:e4:cf:e0:08:59:0f:03:c8:68:04:4f:44: 39:12:97:86:e8:2c:a4:45:6d:82:6f:db:8e:dc:8c:91:53:7d: 13:c2:ea:c2:e1:a7:05:72:ea:d4:61:83:29:55:e8:a1:e3:07: c3:21:c1:0f:38:2e:b9:f1:de:b1:5e:f5:64:e9:d4:bc:1c:44: 6d:f7:ab:59:a0:e9:ad:66:cf:c8:13:50:35:11:c1:a3:f4:3f: 2c:00:eb:80:52:f9:c5:fb:15:1f:51:92:e8:76:98:cf:46:bc: f3:79:b0:ea:b3:9f:20:ae:c1:1e:82:9a:ad:81:b4:d8:ed:45: d6:6d:aa:2e:1b:bd:95:dd:7d:19:e0:03:bc:08:62:42:b5:09: 5f:fb:78:ab -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBHzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwODRG ODhEODM3QTJBMjEzMkVBOEY2RjhGMkRCODJDMUMxRTkwQThCMB4XDTI0MTAzMTAx MzIwN1oXDTI1MTAxNTAxMzAwMlowMzExMC8GA1UEAxMoMUZBOEJDQTkxQjE2OUQ1 QjQwOUQxQTYwRTgwNTczMEJGQTFEMTg4ODCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALOLVlq2nkx6iINmWi09mlaP7DM/Z/juFZNuupsIx63GSSdSzPS7 dpAq3ZXRwdCjqqNGgx52dI9N6e2KzDVCbbcoh0mvGlaIcj1y8quDQ4sFX1a0o+mQ soWoFt+aw4IFt/unpjo694HVL1MIlr3DDWCkUHT/Esbys7ywDy6fStdtAaRCi3iF STAmQt1YmZezZ4IvbVbGUSGsINGWgmhIqAyqAnQd9bWTMWE42UeUmSHJnNKYWeku fZWNJJSvsVCQTGqBq0Wcd8/ukaBEO6196bXk9o/PgMZGEHoxGDB9ei6CAV7wP9Rh +c9vTLb6pk4a/o7GfyxyPb6MSMMAGBICvsMCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBQfqLypGxadW0CdGmDoBXML+h0YiDAfBgNVHSMEGDAWgBQIT4jYN6KiEy6o9vjy 24LBwekKizAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvODAwL0NFLUkyRGVpb2hNdXFQYjQ4dHVDd2NIcENvcy5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0NFLUkyRGVpb2hNdXFQYjQ4dHVDd2NI cENvcy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC84MDAvSDZpOHFSc1duVnRBblJwZzZBVnpDX29kR0lnLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBMrnsDANBgkqhkiG9w0BAQsFAAOCAQEAIAAcsBUGsDbufX7pjoXIL8s1pCNK FhbMBRV8CmV6LfWBd7u1Hpx+Xr3HkV5rZh2D9QMTBTWARE0w3acOkMGu6RtYbxF6 7S5L6A6OXy5rPEkoiDNrAKA+XAwfWNCFYrepmNT3gbTE2MogJNBiMKaGTdX25M/g CFkPA8hoBE9EORKXhugspEVtgm/bjtyMkVN9E8LqwuGnBXLq1GGDKVXooeMHwyHB DzguufHesV71ZOnUvBxEbferWaDprWbPyBNQNRHBo/Q/LADrgFL5xfsVH1GS6HaY z0a883mw6rOfIK7BHoKarYG02O1F1m2qLhu9ld19GeADvAhiQrUJX/t4qw== -----END CERTIFICATE-----Generated at Fri Nov 22 13:33:25 2024 by rpki-client on console-fra.rpki-client.org