$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/1uC7IpCya0OjHmg9ad-2I8ozLNQ.roa File: 1uC7IpCya0OjHmg9ad-2I8ozLNQ.roa (raw, json) Hash identifier: 1b7GD9FNNVDPYwtWM+hauRqWtLEKqsr3/bTX2kyHu6k= Subject key identifier: D6:E0:BB:22:90:B2:6B:43:A3:1E:68:3D:69:DF:B6:23:CA:33:2C:D4 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 095B Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/1uC7IpCya0OjHmg9ad-2I8ozLNQ.roa Signing time: Sun 30 Jun 2024 01:33:29 +0000 ROA not before: Sun 30 Jun 2024 01:33:29 +0000 ROA not after: Tue 24 Jun 2025 10:46:45 +0000 asID: 9605 IP address blocks: 1.66.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 22:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2395 (0x95b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 30 01:33:29 2024 GMT Not After : Jun 24 10:46:45 2025 GMT Subject: CN=D6E0BB2290B26B43A31E683D69DFB623CA332CD4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:54:2b:c8:10:1b:cd:1c:dc:bc:02:f0:77:ae: 7e:21:dd:88:7a:43:16:34:dd:f2:12:a7:15:03:a9: 53:1a:5f:67:6f:3f:e2:0b:8c:70:84:91:10:d8:8e: b2:c7:07:66:95:ec:7d:8f:10:eb:16:fa:f2:67:51: dd:fd:a0:0c:79:9f:66:78:8a:d5:90:93:2b:e5:4d: 35:bb:61:b4:d2:af:cb:3f:f4:99:00:6b:dc:42:28: 8a:1e:d0:51:80:cd:c5:e7:34:f8:7b:63:55:ce:5e: 69:df:a3:13:2c:94:5b:4e:af:23:80:49:da:2d:f0: c6:c7:b4:46:da:49:46:b2:9e:00:e7:f9:08:83:61: c3:98:6b:b5:da:14:89:da:ad:13:a4:af:df:b2:c7: 67:4a:eb:75:c3:ce:71:1e:eb:55:0c:e2:79:89:4c: 85:b4:f9:c1:74:7a:ef:d1:e8:75:40:0a:c9:30:4c: b5:06:d3:cb:05:08:80:62:ee:30:30:21:c5:74:ee: 1a:29:7e:dd:d0:ee:da:7c:b3:d8:03:d7:20:b4:a3: a2:e9:bd:39:bb:c8:f1:6d:5c:0e:37:3f:ad:4e:33: 5c:c7:b5:56:59:65:a7:93:16:96:ee:e1:0a:ed:a4: b4:2b:78:f9:f4:c0:a9:3f:09:5d:2c:0e:08:22:29: 98:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:E0:BB:22:90:B2:6B:43:A3:1E:68:3D:69:DF:B6:23:CA:33:2C:D4 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/1uC7IpCya0OjHmg9ad-2I8ozLNQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.66.120.0/21 Signature Algorithm: sha256WithRSAEncryption bb:19:da:76:8a:03:6b:c6:60:03:01:cd:74:2b:f4:d6:1f:bf: 15:55:c5:e4:e8:a7:63:a8:38:a0:5a:87:23:d7:0b:e8:20:6f: a8:cd:87:ac:00:14:32:07:46:4b:48:20:a0:62:ea:df:0a:1e: 73:f8:5f:a9:dc:b9:fc:4f:56:95:a0:07:ec:34:dc:96:92:10: 76:5c:6b:49:57:35:32:00:88:dc:c1:2d:f0:d5:a3:c8:ef:45: e3:fa:52:92:d6:5b:19:11:c0:38:30:ea:ac:25:c9:01:39:6b: 68:9f:eb:de:d4:20:cb:7f:bb:eb:6f:ed:74:17:90:d7:4a:35: 99:fb:06:86:d6:ec:06:3b:c1:b0:d1:e7:ac:c3:0f:33:93:f8: 71:4a:83:dd:0d:40:d7:0d:df:a8:c9:7b:ed:9b:eb:01:5e:d0: 25:39:65:59:e0:3f:04:67:37:9c:b0:de:8d:ae:8d:1b:23:bb: 05:a5:8e:ee:da:35:cc:a8:1a:06:a3:16:4b:5e:ad:0e:37:4b: d4:6f:13:29:69:b2:82:39:ee:13:0c:54:40:8e:d1:46:cd:c4: 75:9b:50:cd:56:dd:f4:cf:0e:15:39:90:1c:08:fb:c2:84:98: 2c:96:19:32:b5:c3:c9:23:3e:1d:63:84:81:aa:50:b3:e7:73: e8:c1:38:a9 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCVswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA2MzAw MTMzMjlaFw0yNTA2MjQxMDQ2NDVaMDMxMTAvBgNVBAMTKEQ2RTBCQjIyOTBCMjZC NDNBMzFFNjgzRDY5REZCNjIzQ0EzMzJDRDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC/VCvIEBvNHNy8AvB3rn4h3Yh6QxY03fISpxUDqVMaX2dvP+IL jHCEkRDYjrLHB2aV7H2PEOsW+vJnUd39oAx5n2Z4itWQkyvlTTW7YbTSr8s/9JkA a9xCKIoe0FGAzcXnNPh7Y1XOXmnfoxMslFtOryOASdot8MbHtEbaSUayngDn+QiD YcOYa7XaFInarROkr9+yx2dK63XDznEe61UM4nmJTIW0+cF0eu/R6HVACskwTLUG 08sFCIBi7jAwIcV07hopft3Q7tp8s9gD1yC0o6LpvTm7yPFtXA43P61OM1zHtVZZ ZaeTFpbu4QrtpLQrePn0wKk/CV0sDggiKZjzAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU1uC7IpCya0OjHmg9ad+2I8ozLNQwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5LzF1QzdJcEN5YTBPakhtZzlhZC0ySThvekxOUS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMBQngwDQYJKoZIhvcNAQELBQADggEBALsZ2naKA2vGYAMBzXQr9NYfvxVV xeTop2OoOKBahyPXC+ggb6jNh6wAFDIHRktIIKBi6t8KHnP4X6ncufxPVpWgB+w0 3JaSEHZca0lXNTIAiNzBLfDVo8jvReP6UpLWWxkRwDgw6qwlyQE5a2if697UIMt/ u+tv7XQXkNdKNZn7BobW7AY7wbDR56zDDzOT+HFKg90NQNcN36jJe+2b6wFe0CU5 ZVngPwRnN5yw3o2ujRsjuwWlju7aNcyoGgajFkterQ43S9RvEylpsoI57hMMVECO 0UbNxHWbUM1W3fTPDhU5kBwI+8KEmCyWGTK1w8kjPh1jhIGqULPnc+jBOKk= -----END CERTIFICATE-----Generated at Mon Nov 25 23:54:35 2024 by rpki-client on console-ams.rpki-client.org