$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/1PEjog9qxjf6pXh2DCLNWR-jdhg.roa File: 1PEjog9qxjf6pXh2DCLNWR-jdhg.roa (raw, json) Hash identifier: zTLlaZUtKYxEaSggw7sDye8evyX5G9UCA94jocsT23s= Subject key identifier: D4:F1:23:A2:0F:6A:C6:37:FA:A5:78:76:0C:22:CD:59:1F:A3:76:18 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0908 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/1PEjog9qxjf6pXh2DCLNWR-jdhg.roa Signing time: Tue 30 Apr 2024 02:28:40 +0000 ROA not before: Tue 30 Apr 2024 02:28:40 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 1.67.236.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Dec 2024 00:11:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2312 (0x908) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 30 02:28:40 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=D4F123A20F6AC637FAA578760C22CD591FA37618 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:8c:10:b3:84:d2:b0:42:e7:0e:03:24:84:c2: cb:42:48:42:a7:13:89:a1:f4:3c:0d:f0:64:39:18: 1a:7d:bf:ad:06:3c:d8:f7:16:19:49:46:77:e8:84: 2d:e4:15:d2:50:47:1c:78:5c:93:f2:30:ae:c1:fe: be:75:2c:f3:20:c3:52:ec:57:83:c6:59:87:2f:60: 26:ab:f8:a2:d2:05:a4:ff:f6:25:37:2d:6b:c0:9b: 35:ba:3f:1b:f9:51:fc:1c:a7:ee:e3:74:72:28:d8: 09:50:07:28:ba:3c:45:95:2f:da:52:78:e7:02:fa: cd:82:2e:0c:7a:9a:92:15:72:25:f1:fe:da:2f:19: 31:a1:6f:b3:64:b9:9a:be:31:96:5b:66:1a:eb:e6: 49:35:96:5b:ed:d9:b1:f7:e7:eb:04:0b:e6:05:4d: e5:fa:5c:43:29:a0:16:23:42:bb:ea:4c:73:f1:15: 2b:20:bd:c5:9b:c2:80:d0:4a:4e:4b:b2:66:f8:a3: f9:fc:65:79:fd:70:d1:3e:06:2b:74:98:14:8c:8a: a9:20:ff:5b:3d:e2:7d:5f:40:5c:b6:3e:84:2c:05: a4:9a:52:f9:12:89:5f:80:a1:88:ef:ce:85:3c:ec: 88:ab:ae:d9:67:97:0d:b9:32:cf:8e:4d:34:b4:98: 67:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:F1:23:A2:0F:6A:C6:37:FA:A5:78:76:0C:22:CD:59:1F:A3:76:18 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/1PEjog9qxjf6pXh2DCLNWR-jdhg.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.67.236.0/23 Signature Algorithm: sha256WithRSAEncryption 5b:ad:54:b6:2c:dd:64:55:83:ef:b0:2c:50:0d:2c:79:a2:78: 88:10:93:8f:e3:6b:09:67:40:24:de:af:12:4a:31:43:d3:e4: 5a:7e:13:30:fb:be:a7:f3:7b:3d:7b:78:6e:ff:a7:65:53:88: 89:e2:4f:5d:f8:28:14:93:48:38:ef:56:d8:4a:67:ce:4d:1d: 3b:d0:52:a0:2e:1c:8d:14:a0:7f:c1:d9:9f:ff:9c:f3:04:cd: db:64:73:e1:5f:bf:e7:8e:2e:03:d8:1c:0d:7c:1c:de:b3:40: 53:12:5e:24:3b:f0:43:a8:28:99:f7:c4:81:8f:a8:b7:2f:6e: e0:3b:c2:ef:aa:2b:f8:50:bd:a7:ad:c7:4b:5f:23:ee:b3:ad: 29:b3:b9:a4:1a:72:d5:28:da:bc:43:e0:d3:b2:a2:9d:c0:41: 66:18:ab:36:31:5e:87:e8:dd:0b:ff:1e:c8:3e:c3:60:c0:fa: 64:82:65:58:2a:00:22:76:b9:77:9a:10:a2:58:ee:0f:87:ab: a9:34:e4:bc:f3:c8:79:7e:7c:07:da:65:21:7e:b4:44:0b:62: 18:73:6a:70:f3:17:f8:74:fa:42:88:24:f9:1c:77:f7:a0:13: 6e:a9:da:f7:30:a4:e6:98:56:3f:94:c2:54:2c:5e:97:64:6b: 89:5c:3c:32 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCQgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw MjI4NDBaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEQ0RjEyM0EyMEY2QUM2 MzdGQUE1Nzg3NjBDMjJDRDU5MUZBMzc2MTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDZjBCzhNKwQucOAySEwstCSEKnE4mh9DwN8GQ5GBp9v60GPNj3 FhlJRnfohC3kFdJQRxx4XJPyMK7B/r51LPMgw1LsV4PGWYcvYCar+KLSBaT/9iU3 LWvAmzW6Pxv5Ufwcp+7jdHIo2AlQByi6PEWVL9pSeOcC+s2CLgx6mpIVciXx/tov GTGhb7NkuZq+MZZbZhrr5kk1llvt2bH35+sEC+YFTeX6XEMpoBYjQrvqTHPxFSsg vcWbwoDQSk5Lsmb4o/n8ZXn9cNE+Bit0mBSMiqkg/1s94n1fQFy2PoQsBaSaUvkS iV+AoYjvzoU87Iirrtlnlw25Ms+OTTS0mGehAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU1PEjog9qxjf6pXh2DCLNWR+jdhgwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5LzFQRWpvZzlxeGpmNnBYaDJEQ0xOV1ItamRoZy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEBQ+wwDQYJKoZIhvcNAQELBQADggEBAFutVLYs3WRVg++wLFANLHmieIgQ k4/jawlnQCTerxJKMUPT5Fp+EzD7vqfzez17eG7/p2VTiIniT134KBSTSDjvVthK Z85NHTvQUqAuHI0UoH/B2Z//nPMEzdtkc+Ffv+eOLgPYHA18HN6zQFMSXiQ78EOo KJn3xIGPqLcvbuA7wu+qK/hQvaetx0tfI+6zrSmzuaQactUo2rxD4NOyop3AQWYY qzYxXofo3Qv/Hsg+w2DA+mSCZVgqACJ2uXeaEKJY7g+Hq6k05LzzyHl+fAfaZSF+ tEQLYhhzanDzF/h0+kKIJPkcd/egE26p2vcwpOaYVj+UwlQsXpdka4lcPDI= -----END CERTIFICATE-----Generated at Tue Nov 26 02:17:08 2024 by rpki-client on console-fra.rpki-client.org