$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/2sgNt3aL5VA2yi-_4A5z-7YIyZU.roa File: 2sgNt3aL5VA2yi-_4A5z-7YIyZU.roa (raw, json) Hash identifier: 0mz+k8Ziqp+NrEkKdeTJIJXESwuZHYxqaokirl+HS7c= Subject key identifier: DA:C8:0D:B7:76:8B:E5:50:36:CA:2F:BF:E0:0E:73:FB:B6:08:C9:95 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 07D2 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/2sgNt3aL5VA2yi-_4A5z-7YIyZU.roa Signing time: Tue 30 Apr 2024 02:08:53 +0000 ROA not before: Tue 30 Apr 2024 02:08:53 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 1.78.16.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:41:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2002 (0x7d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 30 02:08:53 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=DAC80DB7768BE55036CA2FBFE00E73FBB608C995 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:91:36:17:be:c9:2a:4f:fb:49:b7:2d:86:a5: 02:a0:13:80:85:12:66:83:b3:75:55:99:93:6a:99: 3f:41:0f:5c:49:ff:36:26:4f:88:aa:2b:59:ab:60: c6:b7:15:51:d2:37:42:d9:63:5c:e0:f5:b8:15:89: 84:7c:5e:98:a0:f9:de:7d:6a:b0:72:27:50:78:07: c7:1e:8e:52:b9:0f:41:ca:50:ae:7a:e2:4e:87:dc: 45:80:15:fe:c6:bc:15:27:14:5e:88:50:ab:3e:13: 71:e6:fb:40:0a:c8:23:f8:01:06:f5:08:96:1a:89: 34:56:c2:d8:c5:a5:a3:4b:cf:71:d7:3b:79:cd:61: b7:ee:c8:a7:14:37:0c:5b:ed:5e:b3:b4:d8:39:de: 7d:e5:cc:7f:70:a5:9f:5f:12:98:4a:42:d2:d4:7c: 46:67:a1:5f:93:dc:54:9c:e5:ad:27:b0:50:b9:e9: 9e:f5:43:9c:d0:b3:e5:02:67:51:62:30:f5:df:f1: d9:a5:f4:d6:03:74:e5:19:ec:cf:4b:45:bb:de:9d: b0:bc:e2:27:f9:17:c6:92:8d:c0:79:6f:32:7a:2e: 41:9d:37:16:26:f9:fe:37:61:d2:5f:9e:de:e6:38: 18:8a:62:ab:7d:47:e5:0c:ed:f2:77:c5:05:50:c6: 93:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:C8:0D:B7:76:8B:E5:50:36:CA:2F:BF:E0:0E:73:FB:B6:08:C9:95 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/2sgNt3aL5VA2yi-_4A5z-7YIyZU.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.78.16.0/22 Signature Algorithm: sha256WithRSAEncryption 77:c2:df:2a:b1:7b:62:9e:46:3a:46:f3:f6:66:81:8e:82:cc: 0e:ab:f1:b9:9e:c0:0f:98:c2:ff:0f:83:d7:90:fe:e9:70:2f: 28:69:90:c9:af:2b:07:70:32:a4:36:64:29:28:ad:ec:e3:84: f0:5e:61:51:35:32:5b:54:10:c5:47:53:ee:8a:bf:b6:e9:22: ed:ed:3b:a8:d8:38:06:e5:3c:a4:de:ae:ab:f0:35:03:c8:33: d5:24:9b:e8:cf:6a:b6:23:cf:57:6e:96:9a:b7:ac:89:5b:ab: 07:8b:70:c7:21:d2:eb:30:5f:00:7f:9c:39:87:b6:f8:58:70: c9:4b:b8:85:67:b9:4b:4c:8b:06:00:c6:73:fa:a5:78:ce:9c: 2f:12:2a:38:fd:be:46:c6:dd:3a:23:d5:3d:15:c8:a2:88:8a: 96:6b:a2:cd:58:01:dc:0b:25:36:57:30:8e:d8:74:7a:74:0d: c5:4f:c0:1f:86:b0:d6:80:e5:a2:85:06:2a:82:29:ee:2c:84: 1c:27:bf:1a:b0:f9:58:44:0d:9f:ae:5d:45:23:63:37:a8:4f: c6:54:7b:fc:ed:57:84:e4:74:9c:13:fb:e9:4f:84:99:c5:04: 7d:23:e0:6a:ca:76:71:4f:f6:1c:a8:fe:f0:23:56:0a:dd:03: d3:59:b9:1f -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICB9IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw MjA4NTNaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKERBQzgwREI3NzY4QkU1 NTAzNkNBMkZCRkUwMEU3M0ZCQjYwOEM5OTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC7kTYXvskqT/tJty2GpQKgE4CFEmaDs3VVmZNqmT9BD1xJ/zYm T4iqK1mrYMa3FVHSN0LZY1zg9bgViYR8Xpig+d59arByJ1B4B8cejlK5D0HKUK56 4k6H3EWAFf7GvBUnFF6IUKs+E3Hm+0AKyCP4AQb1CJYaiTRWwtjFpaNLz3HXO3nN YbfuyKcUNwxb7V6ztNg53n3lzH9wpZ9fEphKQtLUfEZnoV+T3FSc5a0nsFC56Z71 Q5zQs+UCZ1FiMPXf8dml9NYDdOUZ7M9LRbvenbC84if5F8aSjcB5bzJ6LkGdNxYm +f43YdJfnt7mOBiKYqt9R+UM7fJ3xQVQxpMfAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU2sgNt3aL5VA2yi+/4A5z+7YIyZUwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5LzJzZ050M2FMNVZBMnlpLV80QTV6LTdZSXlaVS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIBThAwDQYJKoZIhvcNAQELBQADggEBAHfC3yqxe2KeRjpG8/ZmgY6CzA6r 8bmewA+Ywv8Pg9eQ/ulwLyhpkMmvKwdwMqQ2ZCkorezjhPBeYVE1MltUEMVHU+6K v7bpIu3tO6jYOAblPKTerqvwNQPIM9Ukm+jParYjz1dulpq3rIlbqweLcMch0usw XwB/nDmHtvhYcMlLuIVnuUtMiwYAxnP6pXjOnC8SKjj9vkbG3Toj1T0VyKKIipZr os1YAdwLJTZXMI7YdHp0DcVPwB+GsNaA5aKFBiqCKe4shBwnvxqw+VhEDZ+uXUUj YzeoT8ZUe/ztV4TkdJwT++lPhJnFBH0j4GrKdnFP9hyo/vAjVgrdA9NZuR8= -----END CERTIFICATE-----Generated at Fri Nov 22 15:23:58 2024 by rpki-client on console-fra.rpki-client.org