$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/1gE6x4hngpGntkIDuegBtUz_7OU.roa File: 1gE6x4hngpGntkIDuegBtUz_7OU.roa (raw, json) Hash identifier: Ltc1rgJUjlZEMQKs6LXi9ZmcZ+AR9JUNyYaGqwfHvhc= Subject key identifier: D6:01:3A:C7:88:67:82:91:A7:B6:42:03:B9:E8:01:B5:4C:FF:EC:E5 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0678 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/1gE6x4hngpGntkIDuegBtUz_7OU.roa Signing time: Tue 30 Apr 2024 01:37:58 +0000 ROA not before: Tue 30 Apr 2024 01:37:58 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 1.72.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1656 (0x678) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 30 01:37:58 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=D6013AC788678291A7B64203B9E801B54CFFECE5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:33:98:8d:c1:ac:f6:80:6a:ca:da:bd:c3:f2: 6b:36:93:1e:95:82:4b:44:86:1b:56:d2:74:84:55: 5d:2c:0e:04:1c:c7:dd:6b:9c:64:39:03:01:a7:34: 3f:21:29:1b:c7:c2:20:29:b5:dd:40:7a:a7:7a:24: 0c:9c:db:f5:a1:64:77:8e:d7:f9:50:fc:6f:08:6a: 9a:c2:4c:99:04:12:33:b2:75:17:86:ff:a9:05:e5: ea:cb:1d:da:fc:56:e9:86:e0:3a:83:9f:53:a5:58: 41:25:7f:b4:d1:72:44:18:55:b4:88:d4:19:46:44: b4:d7:11:9e:1d:8c:2e:97:71:0d:26:d9:15:8b:ae: c0:f5:f5:ed:a7:00:7c:8c:ba:57:d4:2f:b3:28:34: b3:0b:b4:fb:54:0f:29:05:07:03:c5:ae:7b:b9:9e: 65:dd:75:c8:c8:d1:ee:91:eb:d9:d0:51:7a:3f:81: d6:9e:e2:ce:bf:f8:c1:ee:40:b7:38:64:f8:aa:43: b2:bc:d1:6f:21:17:f4:97:ef:51:0a:0a:81:4e:5e: c3:e8:57:e0:f3:44:47:11:be:5f:59:ed:cc:48:2b: e1:22:17:9a:78:ef:49:ce:64:63:e5:69:be:9a:ed: 13:7a:a0:44:0c:32:60:16:90:cf:c6:ce:c5:a7:30: 9e:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:01:3A:C7:88:67:82:91:A7:B6:42:03:B9:E8:01:B5:4C:FF:EC:E5 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/1gE6x4hngpGntkIDuegBtUz_7OU.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.72.32.0/19 Signature Algorithm: sha256WithRSAEncryption c9:fa:f3:2e:77:cd:b0:8b:8e:64:17:b5:b4:51:f0:45:8b:a6: e3:76:1f:c5:a8:65:2d:19:d9:8c:5b:cb:88:54:40:ca:69:e9: 4d:c2:d6:c8:07:83:4c:77:bc:a1:8c:ce:b3:17:d0:75:7a:35: fe:b5:22:81:78:10:48:da:8c:72:2e:6c:1d:06:f0:db:3d:d3: c9:fe:73:f7:b3:42:62:35:1b:89:e0:1b:c1:da:da:cd:3d:c8: a6:67:b5:e4:65:91:99:f0:62:88:37:73:ce:fa:97:fc:c7:04: 14:32:13:73:e6:7e:63:d6:b8:4c:20:f5:0b:87:2f:b3:3b:47: 1c:2e:67:25:23:52:df:d0:a8:cb:2f:e6:98:15:dc:fc:9c:3d: ae:8e:3b:9b:ba:84:dc:90:27:40:93:56:73:d7:8f:d3:07:c0: ac:9a:85:b0:bb:a3:10:cf:db:21:f1:1c:9a:d6:57:09:33:df: 23:a3:7e:60:bd:42:5f:56:3c:36:e6:9b:21:a7:cc:3e:f2:e9: 32:1a:f9:28:7d:a3:48:5d:1c:81:bf:2b:24:1d:71:4a:28:47: e5:72:b5:dd:49:c1:40:db:10:1f:00:4c:14:0e:07:18:03:29: 5c:ee:03:6c:30:ee:bc:91:fa:9e:db:1e:57:b8:74:70:13:f0: b8:d1:09:0f -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBngwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw MTM3NThaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEQ2MDEzQUM3ODg2Nzgy OTFBN0I2NDIwM0I5RTgwMUI1NENGRkVDRTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC5M5iNwaz2gGrK2r3D8ms2kx6VgktEhhtW0nSEVV0sDgQcx91r nGQ5AwGnND8hKRvHwiAptd1Aeqd6JAyc2/WhZHeO1/lQ/G8IaprCTJkEEjOydReG /6kF5erLHdr8VumG4DqDn1OlWEElf7TRckQYVbSI1BlGRLTXEZ4djC6XcQ0m2RWL rsD19e2nAHyMulfUL7MoNLMLtPtUDykFBwPFrnu5nmXddcjI0e6R69nQUXo/gdae 4s6/+MHuQLc4ZPiqQ7K80W8hF/SX71EKCoFOXsPoV+DzREcRvl9Z7cxIK+EiF5p4 70nOZGPlab6a7RN6oEQMMmAWkM/GzsWnMJ5fAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU1gE6x4hngpGntkIDuegBtUz/7OUwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5LzFnRTZ4NGhuZ3BHbnRrSUR1ZWdCdFV6XzdPVS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAUBSCAwDQYJKoZIhvcNAQELBQADggEBAMn68y53zbCLjmQXtbRR8EWLpuN2 H8WoZS0Z2Yxby4hUQMpp6U3C1sgHg0x3vKGMzrMX0HV6Nf61IoF4EEjajHIubB0G 8Ns908n+c/ezQmI1G4ngG8Ha2s09yKZnteRlkZnwYog3c876l/zHBBQyE3PmfmPW uEwg9QuHL7M7RxwuZyUjUt/QqMsv5pgV3PycPa6OO5u6hNyQJ0CTVnPXj9MHwKya hbC7oxDP2yHxHJrWVwkz3yOjfmC9Ql9WPDbmmyGnzD7y6TIa+Sh9o0hdHIG/KyQd cUooR+Vytd1JwUDbEB8ATBQOBxgDKVzuA2ww7ryR+p7bHle4dHAT8LjRCQ8= -----END CERTIFICATE-----Generated at Sat Jun 1 13:38:46 2024 by rpki-client on console-fra.rpki-client.org