$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/1qelT-uPo6IyJ7qEZqG6RUrA-ZQ.roa File: 1qelT-uPo6IyJ7qEZqG6RUrA-ZQ.roa (raw, json) Hash identifier: ukjs2pYG/E7tb/u81c7VthMecaCqNoR81jqWx/SB7dY= Subject key identifier: D6:A7:A5:4F:EB:8F:A3:A2:32:27:BA:84:66:A1:BA:45:4A:C0:F9:94 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 073F Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/1qelT-uPo6IyJ7qEZqG6RUrA-ZQ.roa Signing time: Tue 30 Apr 2024 01:58:46 +0000 ROA not before: Tue 30 Apr 2024 01:58:46 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 1.76.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1855 (0x73f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 30 01:58:46 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=D6A7A54FEB8FA3A23227BA8466A1BA454AC0F994 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:4f:f6:fd:2d:c4:e5:e5:97:8f:40:6d:59:ed: 57:41:31:6c:df:1e:d6:1c:f3:ea:2d:46:bb:5d:d1: 61:40:93:0a:1b:08:1b:3c:25:9a:8c:93:fe:db:de: 3a:d6:81:93:5f:cd:08:7a:56:a8:d1:99:ea:78:51: 73:1f:1b:70:b1:bb:27:a7:b3:43:91:d6:01:6b:e5: df:0e:59:80:f1:69:bb:fe:61:ce:d1:3f:6c:df:45: 13:02:a9:3d:c3:a1:1e:b5:62:b9:2b:2b:31:f7:5d: c5:9f:79:44:fd:5c:23:70:98:7a:72:4d:4b:db:1e: f9:4e:18:9b:67:4b:14:0b:38:6e:3a:3c:48:5b:2b: b9:9e:46:55:ee:d4:c4:e5:e7:5a:53:8b:c4:77:73: 2f:10:c7:26:bc:4d:35:12:df:8f:ba:11:fb:9d:d6: ca:7f:a5:12:f6:b5:01:69:8e:1a:eb:b4:58:03:fb: 46:b8:4a:bc:01:30:ac:c8:b6:98:73:3e:1f:ab:3d: 9c:e9:16:40:92:ac:3c:94:ab:a6:14:36:39:a0:65: 75:dd:de:b5:64:79:5f:2e:e9:45:15:e3:7d:22:cc: de:18:48:15:1c:b7:ba:d0:1c:ad:10:21:4a:50:0a: 8f:02:b1:7a:39:68:f5:56:e5:00:8f:a5:da:ca:79: eb:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:A7:A5:4F:EB:8F:A3:A2:32:27:BA:84:66:A1:BA:45:4A:C0:F9:94 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/1qelT-uPo6IyJ7qEZqG6RUrA-ZQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.76.16.0/20 Signature Algorithm: sha256WithRSAEncryption 65:f0:b0:80:38:6e:aa:2b:b2:3f:80:2e:ad:5c:1f:c7:40:a2: 8e:8b:35:f6:b1:b6:b3:ae:04:6c:38:a0:60:c8:94:ac:5a:e0: a9:58:41:a8:d7:70:6b:7e:5a:24:93:8c:4f:76:ac:cb:8d:e3: b6:1e:91:0d:d0:48:19:dd:7c:3c:73:b5:b2:2e:c1:25:55:1a: 10:ac:8f:09:22:83:7f:08:e9:b8:71:06:4e:dc:51:62:0b:87: 1b:39:f1:66:44:53:d0:0f:aa:33:8b:06:d8:33:74:47:77:fa: 40:e5:cb:84:30:12:d6:5f:47:30:d4:61:1d:69:02:47:6d:da: 3b:c4:84:14:b0:82:d0:6f:06:7a:6a:b7:f9:57:94:30:39:28: b2:96:ba:42:af:92:ce:4c:88:20:7f:23:45:c9:0c:e3:35:16: 43:16:ec:82:e3:f4:6c:66:fd:91:6e:fc:b8:c6:41:eb:17:8b: fc:ef:b7:2b:90:cf:b0:8e:6a:78:d0:65:d5:fa:bf:4f:cf:d1: bb:94:fe:08:59:d3:0d:9a:e3:ae:16:c1:02:60:bc:8d:77:1a: 81:48:ed:53:af:2b:c5:4b:10:da:6c:ab:b1:b2:76:6a:94:a2: 0f:9b:1b:04:76:25:1c:66:c6:c1:95:8f:e6:9a:c8:b8:b1:13: 4f:19:69:1c -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBz8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw MTU4NDZaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEQ2QTdBNTRGRUI4RkEz QTIzMjI3QkE4NDY2QTFCQTQ1NEFDMEY5OTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDeT/b9LcTl5ZePQG1Z7VdBMWzfHtYc8+otRrtd0WFAkwobCBs8 JZqMk/7b3jrWgZNfzQh6VqjRmep4UXMfG3Cxuyens0OR1gFr5d8OWYDxabv+Yc7R P2zfRRMCqT3DoR61YrkrKzH3XcWfeUT9XCNwmHpyTUvbHvlOGJtnSxQLOG46PEhb K7meRlXu1MTl51pTi8R3cy8Qxya8TTUS34+6Efud1sp/pRL2tQFpjhrrtFgD+0a4 SrwBMKzItphzPh+rPZzpFkCSrDyUq6YUNjmgZXXd3rVkeV8u6UUV430izN4YSBUc t7rQHK0QIUpQCo8CsXo5aPVW5QCPpdrKeeuDAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU1qelT+uPo6IyJ7qEZqG6RUrA+ZQwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5LzFxZWxULXVQbzZJeUo3cUVacUc2UlVyQS1aUS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQBTBAwDQYJKoZIhvcNAQELBQADggEBAGXwsIA4bqorsj+ALq1cH8dAoo6L NfaxtrOuBGw4oGDIlKxa4KlYQajXcGt+WiSTjE92rMuN47YekQ3QSBndfDxztbIu wSVVGhCsjwkig38I6bhxBk7cUWILhxs58WZEU9APqjOLBtgzdEd3+kDly4QwEtZf RzDUYR1pAkdt2jvEhBSwgtBvBnpqt/lXlDA5KLKWukKvks5MiCB/I0XJDOM1FkMW 7ILj9Gxm/ZFu/LjGQesXi/zvtyuQz7COanjQZdX6v0/P0buU/ghZ0w2a464WwQJg vI13GoFI7VOvK8VLENpsq7GydmqUog+bGwR2JRxmxsGVj+aayLixE08ZaRw= -----END CERTIFICATE-----Generated at Sun Feb 16 22:07:07 2025 by rpki-client