$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/2yTBp7BKkU82y-nRW5BSy8KbtIo.roa File: 2yTBp7BKkU82y-nRW5BSy8KbtIo.roa (raw, json) Hash identifier: 2J/uuZajffFCpGI98xxM2Ynm3YhMd+RjKMdM55mo3Pg= Subject key identifier: DB:24:C1:A7:B0:4A:91:4F:36:CB:E9:D1:5B:90:52:CB:C2:9B:B4:8A Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 08C5 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/2yTBp7BKkU82y-nRW5BSy8KbtIo.roa Signing time: Tue 30 Apr 2024 02:24:35 +0000 ROA not before: Tue 30 Apr 2024 02:24:35 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 1.76.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 22:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2245 (0x8c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 30 02:24:35 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=DB24C1A7B04A914F36CBE9D15B9052CBC29BB48A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d9:7c:15:7e:38:d1:91:5b:ea:79:e0:04:f2: fa:81:9c:7f:d1:94:9d:ac:a2:00:f1:63:d4:5b:4c: b8:6a:12:73:8a:3f:d7:b4:21:2d:30:b6:db:66:a4: 4f:04:ae:c3:1e:eb:78:41:fa:17:57:b3:bb:49:01: d4:7a:ae:e5:8c:5f:72:5b:5d:18:ed:91:1a:0d:e6: ab:c9:d2:36:2e:dd:9e:11:fd:90:c0:02:38:cc:b8: 38:fe:b1:ea:f8:d0:d8:13:ed:53:5b:fc:57:33:f9: 15:2a:a2:0d:88:9a:f2:60:2f:ec:c2:7b:38:12:ee: 6a:af:ec:e8:05:80:50:81:ab:da:eb:0e:3d:98:91: f2:e9:d2:1b:5d:ef:f0:52:d5:99:c9:b1:f1:00:e0: d1:8f:9a:b6:19:42:a4:4e:cb:ed:64:4d:cf:1a:89: d9:39:c9:8d:3a:13:68:69:14:a0:62:5e:36:7b:7a: 6a:4a:cc:84:53:31:fd:5d:84:9d:32:ba:ee:cc:c4: 9b:4b:c7:79:ae:fd:5a:6c:d1:62:00:03:7d:45:f1: 0c:e3:37:d8:11:c0:5d:74:32:0b:8b:45:01:8c:af: 04:97:4e:7e:c3:9c:fe:c3:89:5f:9a:e7:61:c7:b0: 79:dd:1a:bc:b8:06:c6:be:99:de:ae:ef:e4:51:ab: d9:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:24:C1:A7:B0:4A:91:4F:36:CB:E9:D1:5B:90:52:CB:C2:9B:B4:8A X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/2yTBp7BKkU82y-nRW5BSy8KbtIo.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.76.8.0/21 Signature Algorithm: sha256WithRSAEncryption 24:57:4d:1a:d7:51:f4:42:8a:8d:2e:3b:ed:2f:05:8d:da:7f: 1d:f3:77:98:f4:63:81:4b:4f:14:70:db:fe:76:e3:8a:75:6f: 9e:b8:ea:86:04:68:ee:2a:7d:5b:95:1d:e3:a8:96:a4:e0:58: 64:ab:0e:91:43:c0:e4:64:e9:2a:8c:36:d2:9e:2d:6f:68:80: 28:40:71:b1:a0:d0:94:1a:ce:83:14:26:7b:cf:6e:39:83:0e: b1:7b:3e:98:32:cd:0f:69:d7:6b:e5:d1:ce:32:61:7b:7e:c1: 3a:70:01:e6:70:3e:51:43:e2:52:14:da:33:be:4a:8b:ff:f1: 7a:95:d6:0a:a2:c0:b9:be:cf:e5:8b:ad:22:06:76:4f:96:b1: 71:ec:11:f0:8f:99:27:3a:27:51:55:4e:f1:df:3f:eb:19:d9: ea:d4:be:32:34:6a:59:a6:be:20:64:e4:de:84:4e:47:5d:0d: 87:29:43:82:1a:de:b4:46:a9:b9:17:13:b6:bc:e7:7b:68:2a: 73:fd:55:f7:a8:15:4e:86:0d:37:2c:e5:30:c3:12:4a:2e:1a: d5:ac:42:5c:61:48:1b:af:83:5a:01:ec:33:de:96:9b:01:eb: 63:c3:4b:22:1a:08:1d:a0:c2:93:2c:b0:0f:59:b0:aa:14:ab: fe:d7:cb:da -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCMUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw MjI0MzVaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKERCMjRDMUE3QjA0QTkx NEYzNkNCRTlEMTVCOTA1MkNCQzI5QkI0OEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCv2XwVfjjRkVvqeeAE8vqBnH/RlJ2sogDxY9RbTLhqEnOKP9e0 IS0wtttmpE8ErsMe63hB+hdXs7tJAdR6ruWMX3JbXRjtkRoN5qvJ0jYu3Z4R/ZDA AjjMuDj+ser40NgT7VNb/Fcz+RUqog2ImvJgL+zCezgS7mqv7OgFgFCBq9rrDj2Y kfLp0htd7/BS1ZnJsfEA4NGPmrYZQqROy+1kTc8aidk5yY06E2hpFKBiXjZ7empK zIRTMf1dhJ0yuu7MxJtLx3mu/Vps0WIAA31F8QzjN9gRwF10MguLRQGMrwSXTn7D nP7DiV+a52HHsHndGry4Bsa+md6u7+RRq9nRAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU2yTBp7BKkU82y+nRW5BSy8KbtIowHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5LzJ5VEJwN0JLa1U4MnktblJXNUJTeThLYnRJby5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMBTAgwDQYJKoZIhvcNAQELBQADggEBACRXTRrXUfRCio0uO+0vBY3afx3z d5j0Y4FLTxRw2/5244p1b5646oYEaO4qfVuVHeOolqTgWGSrDpFDwORk6SqMNtKe LW9ogChAcbGg0JQazoMUJnvPbjmDDrF7PpgyzQ9p12vl0c4yYXt+wTpwAeZwPlFD 4lIU2jO+Sov/8XqV1gqiwLm+z+WLrSIGdk+WsXHsEfCPmSc6J1FVTvHfP+sZ2erU vjI0almmviBk5N6ETkddDYcpQ4Ia3rRGqbkXE7a853toKnP9VfeoFU6GDTcs5TDD EkouGtWsQlxhSBuvg1oB7DPelpsB62PDSyIaCB2gwpMssA9ZsKoUq/7Xy9o= -----END CERTIFICATE-----Generated at Mon Nov 25 23:59:09 2024 by rpki-client on console-fra.rpki-client.org