$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/906/bFMJLeo3Fqkx4C-jv_9fF1NdE0Q.roa File: bFMJLeo3Fqkx4C-jv_9fF1NdE0Q.roa (raw, json) Hash identifier: VAa8KwvIdkjPE5mFNCrwiQ/DdjFFU9F0vHYb/xjC0Hw= Subject key identifier: 6C:53:09:2D:EA:37:16:A9:31:E0:2F:A3:BF:FF:5F:17:53:5D:13:44 Certificate issuer: /CN=539BDF2FE18FF387FD03842C5081A145EEEB1CF7 Certificate serial: 0D Authority key identifier: 53:9B:DF:2F:E1:8F:F3:87:FD:03:84:2C:50:81:A1:45:EE:EB:1C:F7 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/U5vfL-GP84f9A4QsUIGhRe7rHPc.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/bFMJLeo3Fqkx4C-jv_9fF1NdE0Q.roa Signing time: Wed 02 Aug 2023 02:09:44 +0000 ROA not before: Wed 02 Aug 2023 02:09:44 +0000 ROA not after: Thu 01 Aug 2024 01:47:14 +0000 asID: 24259 IP address blocks: 203.188.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/U5vfL-GP84f9A4QsUIGhRe7rHPc.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/U5vfL-GP84f9A4QsUIGhRe7rHPc.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/U5vfL-GP84f9A4QsUIGhRe7rHPc.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13 (0xd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=539BDF2FE18FF387FD03842C5081A145EEEB1CF7 Validity Not Before: Aug 2 02:09:44 2023 GMT Not After : Aug 1 01:47:14 2024 GMT Subject: CN=6C53092DEA3716A931E02FA3BFFF5F17535D1344 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:15:bc:57:57:51:e4:ab:d9:f4:bb:c7:45:d8: d1:ad:21:ff:b9:80:53:6f:c3:73:6c:ee:7c:d4:88: 46:e6:94:a2:7b:e1:54:41:70:96:f5:28:12:38:d6: b8:47:d0:73:23:9e:40:59:dd:9d:ee:88:7f:91:28: f8:8e:96:52:b4:64:b2:0f:93:4a:f8:55:08:6f:1a: f2:e9:d1:ce:dc:77:c5:b5:2f:28:06:f6:e4:5d:87: fe:2a:82:1e:5c:00:40:5b:8a:fe:13:01:14:46:d1: b3:c6:aa:55:56:40:24:f1:cb:ef:ae:f6:1d:29:8e: da:09:51:0c:e1:b0:4b:75:0f:c7:52:3d:12:c6:87: 63:e0:c7:82:2f:d0:a1:8c:6a:8e:e8:77:11:71:10: 79:83:f9:8c:cb:06:2a:03:94:2b:4d:bd:00:33:19: eb:55:04:b3:2e:3d:dc:28:ec:a0:de:d7:c9:fc:f9: 15:fd:35:3f:3c:98:5f:24:db:ae:03:83:d1:b2:82: 02:bb:41:28:42:50:b9:3e:ab:ea:16:68:1d:f6:0e: b3:0b:6d:e6:32:48:20:73:a1:22:47:ca:e2:aa:70: 90:22:02:88:04:d6:53:26:b2:f3:71:7e:df:46:98: 9c:36:64:df:4a:f0:5c:12:7c:6b:96:d2:08:b6:c4: e6:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:53:09:2D:EA:37:16:A9:31:E0:2F:A3:BF:FF:5F:17:53:5D:13:44 X509v3 Authority Key Identifier: keyid:53:9B:DF:2F:E1:8F:F3:87:FD:03:84:2C:50:81:A1:45:EE:EB:1C:F7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/U5vfL-GP84f9A4QsUIGhRe7rHPc.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/U5vfL-GP84f9A4QsUIGhRe7rHPc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/bFMJLeo3Fqkx4C-jv_9fF1NdE0Q.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.188.208.0/21 Signature Algorithm: sha256WithRSAEncryption 73:19:f5:c6:e4:48:bf:29:a4:ae:3c:06:06:7e:4d:fb:9c:c1: 4f:77:24:cc:5c:3b:de:26:c1:75:46:a1:07:63:d2:c1:a4:f1: 67:ff:84:a6:71:4e:23:6b:ec:dc:42:08:f3:c2:d4:03:a6:e4: 92:c4:14:19:ba:9a:07:05:26:2d:16:ac:8a:31:dd:30:80:ba: 8b:07:e9:2b:74:8c:9a:43:c8:32:08:e3:9c:f0:bc:b3:58:d3: 16:03:48:51:d2:f1:44:51:0c:fd:5a:b9:ea:cb:a7:a2:5b:68: ca:a3:57:d7:df:12:15:08:dc:9c:6f:d7:67:d4:b4:ac:f2:87: 09:bb:c8:fc:eb:61:47:78:ec:cf:48:91:81:3d:de:63:be:f9: ac:f8:42:32:e0:df:d3:33:24:2d:14:d5:a4:03:c4:b2:bc:35: 1d:e0:69:41:85:4b:bf:5d:eb:f3:c4:91:3d:21:30:45:20:2c: 27:e9:36:cb:71:9c:c0:d3:9e:4e:3f:53:63:97:9c:d0:f1:be: 63:a2:88:cf:e5:c3:35:af:3a:5f:ae:7e:a8:02:7a:d4:80:35: fa:55:65:58:33:13:35:e0:9f:f5:03:c7:93:49:0f:24:f4:d3: 53:58:a5:aa:e0:cf:29:46:db:1a:8b:cf:ff:3c:34:8a:a6:02: 1c:e7:bc:f9 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBDTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1MzlC REYyRkUxOEZGMzg3RkQwMzg0MkM1MDgxQTE0NUVFRUIxQ0Y3MB4XDTIzMDgwMjAy MDk0NFoXDTI0MDgwMTAxNDcxNFowMzExMC8GA1UEAxMoNkM1MzA5MkRFQTM3MTZB OTMxRTAyRkEzQkZGRjVGMTc1MzVEMTM0NDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMkVvFdXUeSr2fS7x0XY0a0h/7mAU2/Dc2zufNSIRuaUonvhVEFw lvUoEjjWuEfQcyOeQFndne6If5Eo+I6WUrRksg+TSvhVCG8a8unRztx3xbUvKAb2 5F2H/iqCHlwAQFuK/hMBFEbRs8aqVVZAJPHL7672HSmO2glRDOGwS3UPx1I9EsaH Y+DHgi/QoYxqjuh3EXEQeYP5jMsGKgOUK029ADMZ61UEsy493CjsoN7Xyfz5Ff01 PzyYXyTbrgOD0bKCArtBKEJQuT6r6hZoHfYOswtt5jJIIHOhIkfK4qpwkCICiATW Uyay83F+30aYnDZk30rwXBJ8a5bSCLbE5j8CAwEAAaOCAiQwggIgMB0GA1UdDgQW BBRsUwkt6jcWqTHgL6O//18XU10TRDAfBgNVHSMEGDAWgBRTm98v4Y/zh/0DhCxQ gaFF7usc9zAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvOTA2L1U1dmZMLUdQODRmOUE0UXNVSUdoUmU3ckhQYy5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1U1dmZMLUdQODRmOUE0UXNVSUdoUmU3 ckhQYy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC85MDYvYkZNSkxlbzNGcWt4NEMtanZfOWZGMU5kRTBRLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEA8u80DANBgkqhkiG9w0BAQsFAAOCAQEAcxn1xuRIvymkrjwGBn5N+5zBT3ck zFw73ibBdUahB2PSwaTxZ/+EpnFOI2vs3EII88LUA6bkksQUGbqaBwUmLRasijHd MIC6iwfpK3SMmkPIMgjjnPC8s1jTFgNIUdLxRFEM/Vq56sunoltoyqNX198SFQjc nG/XZ9S0rPKHCbvI/OthR3jsz0iRgT3eY775rPhCMuDf0zMkLRTVpAPEsrw1HeBp QYVLv13r88SRPSEwRSAsJ+k2y3GcwNOeTj9TY5ec0PG+Y6KIz+XDNa86X65+qAJ6 1IA1+lVlWDMTNeCf9QPHk0kPJPTTU1ilquDPKUbbGovP/zw0iqYCHOe8+Q== -----END CERTIFICATE-----Generated at Sat Jun 1 13:38:53 2024 by rpki-client on console-fra.rpki-client.org