$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/868/fgtVnuYhmeWfhFyQO4O_4zdOgeA.roa File: fgtVnuYhmeWfhFyQO4O_4zdOgeA.roa (raw, json) Hash identifier: k7XblHXix6Q1yT7Stzwz8ORc3eXubC3unvi6wfZcABY= Subject key identifier: 7E:0B:55:9E:E6:21:99:E5:9F:84:5C:90:3B:83:BF:E3:37:4E:81:E0 Certificate issuer: /CN=8D0962EDE0F5E21A7E8F9E1AB006FF940E04ED46 Certificate serial: 29 Authority key identifier: 8D:09:62:ED:E0:F5:E2:1A:7E:8F:9E:1A:B0:06:FF:94:0E:04:ED:46 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jQli7eD14hp-j54asAb_lA4E7UY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/868/fgtVnuYhmeWfhFyQO4O_4zdOgeA.roa Signing time: Sun 31 Mar 2024 01:32:22 +0000 ROA not before: Sun 31 Mar 2024 01:32:22 +0000 ROA not after: Sat 15 Mar 2025 01:30:02 +0000 asID: 24271 IP address blocks: 202.177.80.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/868/jQli7eD14hp-j54asAb_lA4E7UY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/868/jQli7eD14hp-j54asAb_lA4E7UY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jQli7eD14hp-j54asAb_lA4E7UY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41 (0x29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D0962EDE0F5E21A7E8F9E1AB006FF940E04ED46 Validity Not Before: Mar 31 01:32:22 2024 GMT Not After : Mar 15 01:30:02 2025 GMT Subject: CN=7E0B559EE62199E59F845C903B83BFE3374E81E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f0:70:c5:a6:a2:51:54:43:92:3e:12:87:01: e5:85:f9:40:ad:ab:74:23:f2:58:c5:ce:7b:1c:a6: 39:12:75:56:e0:a6:a8:e5:df:43:8d:95:ae:4b:65: 32:53:82:db:c2:56:99:ee:57:d9:ee:47:8a:ca:14: b8:e3:9f:de:e3:93:1c:54:9f:19:b3:30:1e:57:56: 8b:79:bd:9a:24:6e:09:5f:b0:b9:20:59:4c:9c:b4: 61:a7:a0:41:41:95:a5:f6:b0:c6:2d:63:b4:6e:41: 99:92:2c:ca:96:ed:24:6b:21:45:c2:b7:cf:9d:6e: f1:db:b0:26:2a:ed:66:37:50:51:82:da:09:b1:f3: 31:f3:2c:76:65:83:cd:2f:a4:13:51:d2:7e:99:ed: 6b:d5:af:75:f9:76:cc:e4:dc:02:48:af:3b:14:87: 75:27:6f:1f:96:b6:51:dd:4d:9e:50:30:42:4c:fa: 99:44:54:d2:99:37:15:63:01:f5:9a:20:82:39:cb: a6:73:ce:69:34:38:59:e5:de:62:01:51:06:08:e1: 16:ac:d6:8d:8a:a2:de:5a:e1:96:64:44:f4:0c:70: 39:b0:28:83:ca:0d:50:94:ba:b1:d5:58:07:56:83: 92:94:29:1b:b4:ae:b1:88:46:60:30:e4:a5:9b:2f: 68:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:0B:55:9E:E6:21:99:E5:9F:84:5C:90:3B:83:BF:E3:37:4E:81:E0 X509v3 Authority Key Identifier: keyid:8D:09:62:ED:E0:F5:E2:1A:7E:8F:9E:1A:B0:06:FF:94:0E:04:ED:46 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/868/jQli7eD14hp-j54asAb_lA4E7UY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jQli7eD14hp-j54asAb_lA4E7UY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/868/fgtVnuYhmeWfhFyQO4O_4zdOgeA.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.177.80.0/20 Signature Algorithm: sha256WithRSAEncryption 70:74:27:2d:3f:22:81:ad:1b:de:03:9a:77:d1:1f:3e:7e:0e: 82:a9:75:01:9d:e7:e8:82:e5:7a:85:77:14:7f:c7:30:13:21: 53:17:72:88:20:fa:54:17:bc:bf:4a:9a:36:27:85:f4:24:18: a7:5e:b5:4e:9b:a9:b3:70:c9:ae:99:cb:51:aa:3a:d7:6c:d4: 02:8c:c5:01:f5:af:d8:60:0c:c6:d0:ba:76:bb:bb:d2:e7:b3: fa:24:ca:aa:b2:c7:d3:0f:36:af:4e:4e:95:43:d3:4d:02:a0: e0:14:41:f4:b9:db:ed:8d:be:7c:6e:fa:11:3c:6c:6e:8b:b7: 93:6d:39:b1:5d:86:b1:f4:6c:a8:45:4e:39:9a:ee:1c:2a:9a: 2c:3e:02:16:57:be:63:51:b2:b0:24:f3:3c:50:86:78:8e:3f: 95:88:06:89:61:61:26:ca:92:e7:7b:e5:16:f3:e1:fd:cb:30: b7:de:07:c8:6f:af:2e:3a:aa:88:93:71:a1:73:4e:b1:38:e5: ee:ed:f2:33:14:e8:36:da:91:55:98:d0:b9:ce:5e:c1:46:92: 7b:8e:94:e3:df:00:a8:e0:0d:18:c2:ea:3b:4b:7f:0a:6e:3c: 8a:20:db:21:af:7f:63:8e:53:0a:46:a9:28:59:d5:36:72:f3: 83:a7:06:92 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBKTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4RDA5 NjJFREUwRjVFMjFBN0U4RjlFMUFCMDA2RkY5NDBFMDRFRDQ2MB4XDTI0MDMzMTAx MzIyMloXDTI1MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoN0UwQjU1OUVFNjIxOTlF NTlGODQ1QzkwM0I4M0JGRTMzNzRFODFFMDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALnwcMWmolFUQ5I+EocB5YX5QK2rdCPyWMXOexymORJ1VuCmqOXf Q42VrktlMlOC28JWme5X2e5HisoUuOOf3uOTHFSfGbMwHldWi3m9miRuCV+wuSBZ TJy0YaegQUGVpfawxi1jtG5BmZIsypbtJGshRcK3z51u8duwJirtZjdQUYLaCbHz MfMsdmWDzS+kE1HSfpnta9Wvdfl2zOTcAkivOxSHdSdvH5a2Ud1NnlAwQkz6mURU 0pk3FWMB9ZoggjnLpnPOaTQ4WeXeYgFRBgjhFqzWjYqi3lrhlmRE9AxwObAog8oN UJS6sdVYB1aDkpQpG7SusYhGYDDkpZsvaFUCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBR+C1We5iGZ5Z+EXJA7g7/jN06B4DAfBgNVHSMEGDAWgBSNCWLt4PXiGn6Pnhqw Bv+UDgTtRjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvODY4L2pRbGk3ZUQxNGhwLWo1NGFzQWJfbEE0RTdVWS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2pRbGk3ZUQxNGhwLWo1NGFzQWJfbEE0 RTdVWS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC84NjgvZmd0Vm51WWhtZVdmaEZ5UU80T180emRPZ2VBLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBMqxUDANBgkqhkiG9w0BAQsFAAOCAQEAcHQnLT8iga0b3gOad9EfPn4Ogql1 AZ3n6ILleoV3FH/HMBMhUxdyiCD6VBe8v0qaNieF9CQYp161Tpups3DJrpnLUao6 12zUAozFAfWv2GAMxtC6dru70uez+iTKqrLH0w82r05OlUPTTQKg4BRB9Lnb7Y2+ fG76ETxsbou3k205sV2GsfRsqEVOOZruHCqaLD4CFle+Y1GysCTzPFCGeI4/lYgG iWFhJsqS53vlFvPh/cswt94HyG+vLjqqiJNxoXNOsTjl7u3yMxToNtqRVZjQuc5e wUaSe46U498AqOANGMLqO0t/Cm48iiDbIa9/Y45TCkapKFnVNnLzg6cGkg== -----END CERTIFICATE-----Generated at Sat Jun 1 13:38:53 2024 by rpki-client on console-fra.rpki-client.org