$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/3u45UaGkEN3hcx1K1PPaVSa7GRI.roa File: 3u45UaGkEN3hcx1K1PPaVSa7GRI.roa (raw, json) Hash identifier: dKdDvJ4m6Uj+M+JrdL0Sg0RPhwLNuLdmhPBhNac2dQk= Subject key identifier: DE:EE:39:51:A1:A4:10:DD:E1:73:1D:4A:D4:F3:DA:55:26:BB:19:12 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0720 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/3u45UaGkEN3hcx1K1PPaVSa7GRI.roa Signing time: Tue 30 Apr 2024 01:55:50 +0000 ROA not before: Tue 30 Apr 2024 01:55:50 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 1.79.81.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1824 (0x720) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 30 01:55:50 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=DEEE3951A1A410DDE1731D4AD4F3DA5526BB1912 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:be:12:fb:dc:f4:ea:44:0a:11:68:7a:97:42: 9f:d0:dd:82:e4:51:81:68:a4:3f:85:6f:63:03:ba: 3a:8f:e0:84:09:1d:6a:02:11:5a:1c:18:17:1e:4d: 7f:af:cc:93:79:98:11:9a:e4:1f:18:99:4a:e2:3e: ec:c4:3e:aa:1f:86:84:6d:07:bb:ff:5a:7f:de:0f: 29:d6:7f:92:c4:ab:ca:49:6a:e6:fd:fe:06:d0:7a: 00:9c:42:7d:2f:35:19:c5:d7:c2:f6:8b:cc:45:5b: 71:a3:9f:d7:b3:ce:b2:78:6b:8f:59:d5:ec:7a:8f: 89:05:65:ad:2e:0b:7e:36:30:a2:33:6c:fb:1d:39: 57:39:a0:47:e4:44:12:db:9d:86:cf:22:f8:83:54: 51:e3:f4:9f:7f:5f:7c:75:1d:0f:50:2e:dd:28:14: 26:a3:a8:37:df:7f:72:fa:2c:d7:5f:fe:73:15:c1: f6:a2:d9:f3:3a:70:73:11:71:90:8a:c0:31:f4:73: 2b:3e:ab:62:91:b1:b9:a4:cc:ab:99:29:60:d1:c3: f8:24:89:0e:a3:97:fd:b5:4b:07:7c:bc:bb:23:05: a7:52:eb:66:df:ba:68:85:c5:17:53:5e:97:5d:ca: cd:f0:4f:05:f5:c7:31:a8:8f:f2:c6:b3:66:ad:9b: 9d:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:EE:39:51:A1:A4:10:DD:E1:73:1D:4A:D4:F3:DA:55:26:BB:19:12 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/3u45UaGkEN3hcx1K1PPaVSa7GRI.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.79.81.0/24 Signature Algorithm: sha256WithRSAEncryption 53:8f:2e:e5:c9:87:cb:9a:9b:2e:e6:34:9f:1f:77:f3:58:fc: c1:0d:1b:ea:ac:d6:d0:b1:3c:c3:ae:12:49:fd:1a:9e:0b:07: a6:28:0b:18:53:3f:9e:97:45:66:b1:34:91:8b:59:a4:03:fa: 20:b1:37:78:76:dc:1d:e8:8c:7f:c5:d0:47:a9:32:f3:24:83: 00:22:fa:38:1d:aa:16:92:7d:bd:3a:20:34:e9:a4:a1:da:c3: 4f:62:ef:b2:99:79:03:55:39:e4:69:33:30:0a:83:bc:cb:5c: ef:10:5d:fd:15:f1:b0:4d:dc:08:00:d2:b2:36:7a:c4:8d:e6: a0:8b:37:ac:d1:ab:57:e6:bd:01:94:50:23:46:a3:ff:7f:3f: 63:0a:bc:e2:96:d1:54:2b:f4:66:46:51:72:97:e9:be:6a:a5: 77:1b:fe:a8:38:3e:af:c4:83:34:81:2a:69:ee:76:fe:a6:5a: 46:25:df:df:f5:1a:c4:01:bc:1a:38:40:59:5c:2a:71:57:99: 71:cc:0d:95:b5:91:11:14:c7:15:c3:d9:23:18:1b:c1:b4:6f: 5c:25:a2:1a:60:d9:f8:52:72:c0:28:cf:36:73:7a:22:77:29: 59:3d:49:6b:64:90:4f:24:a5:22:39:21:34:38:1b:c4:ab:62: ab:8d:57:71 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICByAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw MTU1NTBaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKERFRUUzOTUxQTFBNDEw RERFMTczMUQ0QUQ0RjNEQTU1MjZCQjE5MTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDevhL73PTqRAoRaHqXQp/Q3YLkUYFopD+Fb2MDujqP4IQJHWoC EVocGBceTX+vzJN5mBGa5B8YmUriPuzEPqofhoRtB7v/Wn/eDynWf5LEq8pJaub9 /gbQegCcQn0vNRnF18L2i8xFW3Gjn9ezzrJ4a49Z1ex6j4kFZa0uC342MKIzbPsd OVc5oEfkRBLbnYbPIviDVFHj9J9/X3x1HQ9QLt0oFCajqDfff3L6LNdf/nMVwfai 2fM6cHMRcZCKwDH0cys+q2KRsbmkzKuZKWDRw/gkiQ6jl/21Swd8vLsjBadS62bf umiFxRdTXpddys3wTwX1xzGoj/LGs2atm53vAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU3u45UaGkEN3hcx1K1PPaVSa7GRIwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5LzN1NDVVYUdrRU4zaGN4MUsxUFBhVlNhN0dSSS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAABT1EwDQYJKoZIhvcNAQELBQADggEBAFOPLuXJh8uamy7mNJ8fd/NY/MEN G+qs1tCxPMOuEkn9Gp4LB6YoCxhTP56XRWaxNJGLWaQD+iCxN3h23B3ojH/F0Eep MvMkgwAi+jgdqhaSfb06IDTppKHaw09i77KZeQNVOeRpMzAKg7zLXO8QXf0V8bBN 3AgA0rI2esSN5qCLN6zRq1fmvQGUUCNGo/9/P2MKvOKW0VQr9GZGUXKX6b5qpXcb /qg4Pq/EgzSBKmnudv6mWkYl39/1GsQBvBo4QFlcKnFXmXHMDZW1kREUxxXD2SMY G8G0b1wlohpg2fhScsAozzZzeiJ3KVk9SWtkkE8kpSI5ITQ4G8SrYquNV3E= -----END CERTIFICATE-----Generated at Sat Jun 1 15:54:29 2024 by rpki-client on console-ams.rpki-client.org