$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/961/fwqh3ApcxQ5p26EtSBAfBPfzuXc.roa File: fwqh3ApcxQ5p26EtSBAfBPfzuXc.roa (raw, json) Hash identifier: 2bSnaXY1GJPHtTdOBYx2Jh9UtLBtmfljxI0M2IQ7Y1c= Subject key identifier: 7F:0A:A1:DC:0A:5C:C5:0E:69:DB:A1:2D:48:10:1F:04:F7:F3:B9:77 Certificate issuer: /CN=E655C82691325EC8F4425BC0A66B1A6223231D71 Certificate serial: 20 Authority key identifier: E6:55:C8:26:91:32:5E:C8:F4:42:5B:C0:A6:6B:1A:62:23:23:1D:71 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5lXIJpEyXsj0QlvApmsaYiMjHXE.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/961/fwqh3ApcxQ5p26EtSBAfBPfzuXc.roa Signing time: Fri 01 Dec 2023 01:28:06 +0000 ROA not before: Fri 01 Dec 2023 01:28:06 +0000 ROA not after: Thu 14 Nov 2024 01:30:03 +0000 asID: 38648 IP address blocks: 203.76.164.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/961/5lXIJpEyXsj0QlvApmsaYiMjHXE.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/961/5lXIJpEyXsj0QlvApmsaYiMjHXE.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5lXIJpEyXsj0QlvApmsaYiMjHXE.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Jun 2024 02:39:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32 (0x20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E655C82691325EC8F4425BC0A66B1A6223231D71 Validity Not Before: Dec 1 01:28:06 2023 GMT Not After : Nov 14 01:30:03 2024 GMT Subject: CN=7F0AA1DC0A5CC50E69DBA12D48101F04F7F3B977 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:b9:06:d5:15:a3:b1:1a:3b:76:41:99:ff:80: 41:48:28:6b:ad:6b:d5:f2:1d:23:09:9d:a0:d7:63: 6a:45:26:25:f2:42:d0:a8:cf:33:c8:08:16:e7:99: c9:d2:bf:5c:80:9a:fc:31:da:4b:d7:c8:11:0a:b7: e5:e1:68:cf:1d:8f:6d:26:ca:c5:55:e4:f8:33:b2: 8c:41:c0:ac:1e:7b:86:14:d4:b5:48:12:a1:97:86: 87:4d:c1:22:62:2b:a5:53:32:9b:3b:de:b6:be:6e: 96:d0:34:00:ba:2c:28:03:10:d4:06:86:b5:68:fc: 8d:21:92:fa:88:ec:a3:b7:db:22:cd:f8:39:19:8d: 93:97:98:67:c5:c4:f5:af:fa:10:96:cb:9f:4e:0b: 1a:b1:b8:e9:5f:97:a6:24:60:c5:67:16:51:ef:92: 27:af:89:d0:d5:2f:b0:fb:1f:7d:bd:7d:e1:5a:fb: 4b:cb:3a:45:da:bb:78:ad:d7:89:0d:23:4e:e0:ce: 72:01:bf:a6:52:7e:6f:c0:65:9b:1a:d2:2b:66:00: 85:84:30:95:c4:b2:26:69:71:83:24:96:3a:6e:56: 7f:e5:f0:c5:68:a4:bc:f7:38:4c:a2:4b:28:7c:3c: a6:6d:13:73:66:01:7a:80:eb:93:b6:ee:03:79:01: 6f:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:0A:A1:DC:0A:5C:C5:0E:69:DB:A1:2D:48:10:1F:04:F7:F3:B9:77 X509v3 Authority Key Identifier: keyid:E6:55:C8:26:91:32:5E:C8:F4:42:5B:C0:A6:6B:1A:62:23:23:1D:71 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/961/5lXIJpEyXsj0QlvApmsaYiMjHXE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5lXIJpEyXsj0QlvApmsaYiMjHXE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/961/fwqh3ApcxQ5p26EtSBAfBPfzuXc.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.76.164.0/22 Signature Algorithm: sha256WithRSAEncryption 04:44:cb:92:6d:9b:5b:ce:c9:dc:df:9f:08:2a:22:2b:9e:91: 75:93:bb:21:3c:a5:66:18:1c:06:38:4e:0f:df:8a:bc:a5:6e: ba:e0:47:eb:48:b0:b5:47:dc:4a:45:eb:5f:e6:f5:14:ec:63: 15:69:63:d0:e8:af:4e:23:fb:6e:e6:db:32:6b:9d:a8:ef:41: 41:58:32:5e:b0:f4:9e:d9:0d:b8:c4:74:a2:5b:91:44:72:5f: 8c:0b:de:d9:0e:c4:e2:13:5c:8b:63:5a:17:b2:40:e5:8a:b6: 9c:3f:8d:25:b1:0a:d9:ae:12:4a:5c:40:63:18:57:af:60:81: 0a:dc:d5:7d:5f:7b:2d:b3:bf:e2:b3:8c:35:6f:dd:e8:ef:18: 8d:37:21:b7:29:fe:42:93:ce:97:91:34:98:d3:9f:f7:7e:51: e9:f0:51:82:f0:3e:95:68:57:a7:64:63:80:0a:51:1a:8a:ad: b3:56:2b:f0:1a:6e:12:eb:11:0a:d5:81:34:d4:51:c6:12:e9: 28:06:55:64:29:87:bf:72:72:a6:b8:cb:de:ab:98:92:0d:3d: 98:51:ad:2c:b4:e0:2c:51:93:05:01:61:d2:c2:13:5a:d8:50: 11:db:65:1e:ee:e5:3a:6f:8c:f5:28:c8:d0:8c:4b:18:95:7c: 00:ec:d0:77 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBIDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFNjU1 QzgyNjkxMzI1RUM4RjQ0MjVCQzBBNjZCMUE2MjIzMjMxRDcxMB4XDTIzMTIwMTAx MjgwNloXDTI0MTExNDAxMzAwM1owMzExMC8GA1UEAxMoN0YwQUExREMwQTVDQzUw RTY5REJBMTJENDgxMDFGMDRGN0YzQjk3NzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANa5BtUVo7EaO3ZBmf+AQUgoa61r1fIdIwmdoNdjakUmJfJC0KjP M8gIFueZydK/XICa/DHaS9fIEQq35eFozx2PbSbKxVXk+DOyjEHArB57hhTUtUgS oZeGh03BImIrpVMymzvetr5ultA0ALosKAMQ1AaGtWj8jSGS+ojso7fbIs34ORmN k5eYZ8XE9a/6EJbLn04LGrG46V+XpiRgxWcWUe+SJ6+J0NUvsPsffb194Vr7S8s6 Rdq7eK3XiQ0jTuDOcgG/plJ+b8BlmxrSK2YAhYQwlcSyJmlxgySWOm5Wf+XwxWik vPc4TKJLKHw8pm0Tc2YBeoDrk7buA3kBb3UCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBR/CqHcClzFDmnboS1IEB8E9/O5dzAfBgNVHSMEGDAWgBTmVcgmkTJeyPRCW8Cm axpiIyMdcTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvOTYxLzVsWElKcEV5WHNqMFFsdkFwbXNhWWlNakhYRS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzVsWElKcEV5WHNqMFFsdkFwbXNhWWlN akhYRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC85NjEvZndxaDNBcGN4UTVwMjZFdFNCQWZCUGZ6dVhjLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAstMpDANBgkqhkiG9w0BAQsFAAOCAQEABETLkm2bW87J3N+fCCoiK56RdZO7 ITylZhgcBjhOD9+KvKVuuuBH60iwtUfcSkXrX+b1FOxjFWlj0OivTiP7bubbMmud qO9BQVgyXrD0ntkNuMR0oluRRHJfjAve2Q7E4hNci2NaF7JA5Yq2nD+NJbEK2a4S SlxAYxhXr2CBCtzVfV97LbO/4rOMNW/d6O8YjTchtyn+QpPOl5E0mNOf935R6fBR gvA+lWhXp2RjgApRGoqts1Yr8BpuEusRCtWBNNRRxhLpKAZVZCmHv3JyprjL3quY kg09mFGtLLTgLFGTBQFh0sITWthQEdtlHu7lOm+M9SjI0IxLGJV8AOzQdw== -----END CERTIFICATE-----Generated at Thu May 30 03:08:56 2024 by rpki-client on console-fra.rpki-client.org