$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/-xaX4QcTF9yVgMPnD1kw1Dazo2o.roa File: -xaX4QcTF9yVgMPnD1kw1Dazo2o.roa (raw, json) Hash identifier: M3rZ6cLMgZSDwI48IDOa7MUo0nsP4SNHUZ2Zml8VOr4= Subject key identifier: FB:16:97:E1:07:13:17:DC:95:80:C3:E7:0F:59:30:D4:36:B3:A3:6A Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 09ED Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-xaX4QcTF9yVgMPnD1kw1Dazo2o.roa Signing time: Sun 30 Jun 2024 01:42:24 +0000 ROA not before: Sun 30 Jun 2024 01:42:24 +0000 ROA not after: Tue 24 Jun 2025 10:46:45 +0000 asID: 9605 IP address blocks: 211.14.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 22:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2541 (0x9ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 30 01:42:24 2024 GMT Not After : Jun 24 10:46:45 2025 GMT Subject: CN=FB1697E1071317DC9580C3E70F5930D436B3A36A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ec:79:b2:9e:c5:d7:b3:3e:ff:c4:ff:c2:a3: 74:e6:55:e9:ae:0d:38:d8:a8:5e:d9:0d:f8:cc:ec: c1:9d:a3:ef:a2:53:c1:04:23:04:b4:31:5f:64:36: b0:40:5b:82:6c:5c:67:46:3c:b9:ae:20:a4:05:b5: 41:3c:07:f0:63:93:3e:e3:f0:b8:11:81:67:84:6d: 49:95:2a:b4:28:3a:48:44:fd:9b:e4:2a:ed:7f:bf: e8:74:aa:3c:0a:9f:72:52:b8:f5:d3:fd:27:f9:ad: 0b:18:7f:92:9f:e5:f7:d7:57:66:b7:d6:4a:7b:76: 19:4a:1b:19:7c:c5:76:1b:04:16:de:07:c2:23:23: dd:07:de:40:33:15:dd:5e:a4:6f:bc:38:52:19:c8: 4d:85:18:f4:99:71:06:64:7a:2c:1e:cf:0b:09:43: 36:7b:65:c3:85:cc:ca:76:30:02:ff:18:5f:25:21: 95:69:7a:15:88:6d:23:ad:6a:d3:5b:c2:ec:4b:a2: 55:ce:9b:e8:c8:2d:0a:7d:ea:b6:64:70:84:2f:e2: 08:85:0d:dd:2b:2a:bc:9e:24:e9:13:1e:fc:1c:4b: f2:99:fb:84:7c:28:93:f2:62:c3:35:24:bc:73:be: c0:3d:c1:bd:cd:b7:bd:43:f7:49:13:cc:84:95:b7: 79:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:16:97:E1:07:13:17:DC:95:80:C3:E7:0F:59:30:D4:36:B3:A3:6A X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-xaX4QcTF9yVgMPnD1kw1Dazo2o.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 211.14.94.0/24 Signature Algorithm: sha256WithRSAEncryption 84:67:ba:67:fb:6e:f8:5a:90:55:9f:37:a5:96:d2:4f:d8:65: b8:fe:92:7c:3b:21:55:ff:67:6f:f1:ae:7c:2f:d7:13:21:77: 27:37:57:6f:3b:2c:20:9e:49:45:c1:48:38:ef:e8:7b:32:37: ee:b0:81:e5:18:36:e5:fa:48:65:e3:01:bb:f7:87:48:0c:4d: 2b:b8:09:38:39:22:ac:72:d1:4b:39:91:5b:3f:8a:e1:86:1a: f5:16:11:23:94:eb:74:67:6e:80:d6:e5:9a:6d:97:ed:9a:2a: 78:b4:36:d1:3e:38:a3:8c:e5:d8:1e:aa:fa:77:6a:c7:1c:fb: a1:d2:ab:f4:9e:28:7b:90:c2:49:4b:b7:5e:07:07:67:b6:4c: 07:34:63:a4:7d:77:01:58:cf:fd:64:cc:eb:d6:ad:8b:c1:56: 6d:a3:ae:db:66:e5:76:e8:01:54:c4:fa:1d:d5:eb:4e:94:7c: 20:a1:18:8b:3e:2d:18:b4:ae:5e:5b:7a:c9:fe:93:3f:a2:b7: 84:35:9f:93:19:31:63:da:dd:7e:49:ca:9f:a4:dd:7a:12:4f: f5:54:21:5f:01:47:73:11:4f:72:ee:c2:95:54:f6:07:60:ad: 9d:b1:dd:4d:bf:bf:cd:bf:91:3e:d7:ad:20:f8:4a:8e:ed:b3: 6b:e2:46:9d -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCe0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA2MzAw MTQyMjRaFw0yNTA2MjQxMDQ2NDVaMDMxMTAvBgNVBAMTKEZCMTY5N0UxMDcxMzE3 REM5NTgwQzNFNzBGNTkzMEQ0MzZCM0EzNkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDT7HmynsXXsz7/xP/Co3TmVemuDTjYqF7ZDfjM7MGdo++iU8EE IwS0MV9kNrBAW4JsXGdGPLmuIKQFtUE8B/Bjkz7j8LgRgWeEbUmVKrQoOkhE/Zvk Ku1/v+h0qjwKn3JSuPXT/Sf5rQsYf5Kf5ffXV2a31kp7dhlKGxl8xXYbBBbeB8Ij I90H3kAzFd1epG+8OFIZyE2FGPSZcQZkeiwezwsJQzZ7ZcOFzMp2MAL/GF8lIZVp ehWIbSOtatNbwuxLolXOm+jILQp96rZkcIQv4giFDd0rKryeJOkTHvwcS/KZ+4R8 KJPyYsM1JLxzvsA9wb3Nt71D90kTzISVt3k/AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU+xaX4QcTF9yVgMPnD1kw1Dazo2owHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5Ly14YVg0UWNURjl5VmdNUG5EMWt3MURhem8yby5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADTDl4wDQYJKoZIhvcNAQELBQADggEBAIRnumf7bvhakFWfN6WW0k/YZbj+ knw7IVX/Z2/xrnwv1xMhdyc3V287LCCeSUXBSDjv6HsyN+6wgeUYNuX6SGXjAbv3 h0gMTSu4CTg5Iqxy0Us5kVs/iuGGGvUWESOU63RnboDW5Zptl+2aKni0NtE+OKOM 5dgeqvp3ascc+6HSq/SeKHuQwklLt14HB2e2TAc0Y6R9dwFYz/1kzOvWrYvBVm2j rttm5XboAVTE+h3V606UfCChGIs+LRi0rl5besn+kz+it4Q1n5MZMWPa3X5Jyp+k 3XoST/VUIV8BR3MRT3LuwpVU9gdgrZ2x3U2/v82/kT7XrSD4So7ts2viRp0= -----END CERTIFICATE-----Generated at Mon Nov 25 23:59:09 2024 by rpki-client on console-fra.rpki-client.org