$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/3Z7AYpzgAI7VkIE7sWi9mgNGLjc.roa File: 3Z7AYpzgAI7VkIE7sWi9mgNGLjc.roa (raw, json) Hash identifier: HWNZr4s13ENrg5VWCDnWPkb/9uOPnkkPM4zreQavRYU= Subject key identifier: DD:9E:C0:62:9C:E0:00:8E:D5:90:81:3B:B1:68:BD:9A:03:46:2E:37 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0779 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/3Z7AYpzgAI7VkIE7sWi9mgNGLjc.roa Signing time: Tue 30 Apr 2024 02:04:37 +0000 ROA not before: Tue 30 Apr 2024 02:04:37 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 1.75.234.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 23 Jun 2024 14:09:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1913 (0x779) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 30 02:04:37 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=DD9EC0629CE0008ED590813BB168BD9A03462E37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:5b:c3:97:ef:80:1e:96:9f:c4:19:31:0b:4f: 6a:74:34:ad:2b:ad:ef:0d:8c:e0:aa:c8:e9:06:68: 4e:45:91:2a:9e:87:83:95:21:ef:23:7e:6b:48:53: 91:c5:1a:b7:92:21:1c:f6:28:e8:19:f8:bb:31:45: 62:26:c7:c6:6f:28:6d:bf:4e:15:d5:49:2e:d4:bc: 94:68:b7:c6:5a:55:e1:b4:bc:a0:b3:eb:f4:57:32: f3:fd:d1:ba:0d:8e:9e:fe:8c:3d:c6:c8:3c:48:e8: 99:fa:94:47:5f:5f:6a:51:dc:8e:95:9e:fe:dd:dd: c0:f6:ed:0a:22:58:bc:20:b3:cc:00:ed:17:53:85: 03:1d:e1:9f:c1:a0:a3:7a:f7:a1:fd:84:72:c1:7d: ef:a3:b9:57:7a:a1:17:87:73:c1:32:35:7b:e8:d7: 73:73:2f:c8:e1:9d:5f:5a:84:c6:ed:a9:b5:79:a0: 4c:08:4a:0c:d0:93:bf:77:62:b1:88:a2:2f:27:7d: ef:06:8f:82:e0:cc:c5:6a:b5:93:82:81:cd:46:43: 91:9b:1a:1b:4b:63:1e:fd:b8:fd:78:e6:5f:c4:16: 49:46:6d:a9:54:cd:5a:7d:1f:60:08:44:11:84:55: a2:db:96:ec:ab:70:ad:c3:4e:1f:fa:7f:ac:94:9f: ce:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:9E:C0:62:9C:E0:00:8E:D5:90:81:3B:B1:68:BD:9A:03:46:2E:37 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/3Z7AYpzgAI7VkIE7sWi9mgNGLjc.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.75.234.0/23 Signature Algorithm: sha256WithRSAEncryption 83:f2:f0:01:9e:7f:32:86:c2:29:b4:2c:ef:d5:b7:e5:ab:b0: 33:38:0b:74:bc:76:ed:f4:d5:ca:e9:0a:49:58:ff:38:8b:cc: 5e:ca:0d:90:33:08:7c:ed:0b:a9:1b:b3:67:f6:00:4e:c1:93: 7c:76:46:fe:2a:25:07:df:2b:bb:45:07:f2:8c:d7:2a:d0:80: 55:e0:7f:f6:00:fd:82:36:5f:04:51:5c:da:6d:cd:fd:f0:10: 52:d6:d7:f5:79:1e:f4:ae:48:e0:bc:2b:53:36:2f:07:a9:d7: 4f:26:64:ef:d4:57:a3:2f:7d:5b:91:fa:3e:3a:11:b8:e5:2e: 33:64:a1:e2:3a:b0:b2:11:4d:ac:46:e8:f1:c5:16:85:12:4b: 74:0e:e5:e5:da:0d:b1:7f:ae:18:51:a3:e5:19:01:ec:a2:00: 63:ea:b0:93:a4:b0:0a:26:9b:69:4b:48:3f:43:f4:ee:e9:d0: 89:e5:7b:c9:1c:29:88:0d:87:3c:11:3e:a6:37:ee:e7:7d:d5: 4f:59:21:73:71:29:7b:d3:62:d8:68:47:40:4c:a6:96:aa:86: b4:54:fb:92:fb:47:c8:08:34:9d:b5:86:b1:26:4b:4e:b1:7c: c8:fe:a1:f5:69:b4:0a:17:67:82:e4:61:36:76:fc:6b:db:91: 29:30:4e:28 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICB3kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw MjA0MzdaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEREOUVDMDYyOUNFMDAw OEVENTkwODEzQkIxNjhCRDlBMDM0NjJFMzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCqW8OX74Aelp/EGTELT2p0NK0rre8NjOCqyOkGaE5FkSqeh4OV Ie8jfmtIU5HFGreSIRz2KOgZ+LsxRWImx8ZvKG2/ThXVSS7UvJRot8ZaVeG0vKCz 6/RXMvP90boNjp7+jD3GyDxI6Jn6lEdfX2pR3I6Vnv7d3cD27QoiWLwgs8wA7RdT hQMd4Z/BoKN696H9hHLBfe+juVd6oReHc8EyNXvo13NzL8jhnV9ahMbtqbV5oEwI SgzQk793YrGIoi8nfe8Gj4LgzMVqtZOCgc1GQ5GbGhtLYx79uP145l/EFklGbalU zVp9H2AIRBGEVaLbluyrcK3DTh/6f6yUn841AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU3Z7AYpzgAI7VkIE7sWi9mgNGLjcwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5LzNaN0FZcHpnQUk3VmtJRTdzV2k5bWdOR0xqYy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEBS+owDQYJKoZIhvcNAQELBQADggEBAIPy8AGefzKGwim0LO/Vt+WrsDM4 C3S8du301crpCklY/ziLzF7KDZAzCHztC6kbs2f2AE7Bk3x2Rv4qJQffK7tFB/KM 1yrQgFXgf/YA/YI2XwRRXNptzf3wEFLW1/V5HvSuSOC8K1M2Lwep108mZO/UV6Mv fVuR+j46EbjlLjNkoeI6sLIRTaxG6PHFFoUSS3QO5eXaDbF/rhhRo+UZAeyiAGPq sJOksAomm2lLSD9D9O7p0Inle8kcKYgNhzwRPqY37ud91U9ZIXNxKXvTYthoR0BM ppaqhrRU+5L7R8gINJ21hrEmS06xfMj+ofVptAoXZ4LkYTZ2/GvbkSkwTig= -----END CERTIFICATE-----Generated at Mon Jun 17 11:39:11 2024 by rpki-client on console-fra.rpki-client.org