$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/6chcZIVvPsMdvhtcQMzAfHfmSag.roa File: 6chcZIVvPsMdvhtcQMzAfHfmSag.roa (raw, json) Hash identifier: eaT3Fwogk+IwQ53lIeM6QyLYkAghHd5RZ/XRPpb0f0c= Subject key identifier: E9:C8:5C:64:85:6F:3E:C3:1D:BE:1B:5C:40:CC:C0:7C:77:E6:49:A8 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0700 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/6chcZIVvPsMdvhtcQMzAfHfmSag.roa Signing time: Tue 30 Apr 2024 01:52:51 +0000 ROA not before: Tue 30 Apr 2024 01:52:51 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 1.79.92.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:22:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1792 (0x700) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 30 01:52:51 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=E9C85C64856F3EC31DBE1B5C40CCC07C77E649A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:7e:b6:a0:9f:95:4e:b5:46:f7:94:f8:33:32: b7:d0:a4:ad:90:38:81:4a:00:dc:5b:1f:69:2e:2e: f9:3b:2c:26:ed:6d:10:90:a2:e4:c6:5d:91:b2:9c: 6e:41:55:94:62:8d:eb:1f:ee:5e:70:13:a5:82:99: 40:12:e8:44:71:fa:45:7a:c1:75:c1:b5:b8:29:3c: d6:c3:94:b9:66:cb:2b:bc:a6:a3:0d:5e:e2:aa:0b: ad:a9:12:d1:0a:41:60:ce:b5:65:d2:54:a8:36:a4: e7:e6:85:68:1c:6d:49:97:33:73:cc:84:90:39:59: a0:58:47:4a:c3:f0:5e:00:da:c7:75:52:83:c7:41: 9f:3b:5f:52:fb:78:60:18:72:c4:a1:31:15:bf:63: 6d:a8:e5:17:6d:8c:0f:38:05:76:7c:b8:6a:4a:9b: 9e:3b:ca:8c:db:b7:46:28:b5:2d:9e:c6:ef:ed:ce: 03:6f:44:69:8e:2c:71:76:04:eb:a6:0e:d4:df:ea: 95:e4:8b:f2:2d:3b:46:57:66:23:34:3a:b3:51:2b: 8f:71:c6:84:51:82:19:fe:3b:1c:fe:ba:83:d0:59: 76:cc:22:bc:61:40:bb:1e:3e:b0:d4:a7:c9:f9:3e: de:63:d6:0d:93:3a:14:2a:28:17:02:a5:62:7b:2d: 09:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:C8:5C:64:85:6F:3E:C3:1D:BE:1B:5C:40:CC:C0:7C:77:E6:49:A8 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/6chcZIVvPsMdvhtcQMzAfHfmSag.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.79.92.0/22 Signature Algorithm: sha256WithRSAEncryption ab:0b:48:94:6e:20:89:73:e1:e0:85:2a:39:1b:fb:2b:01:81: 5e:b6:b6:5c:26:21:cc:b5:40:65:ba:53:ac:bd:71:91:2f:48: 39:65:ed:80:70:17:a1:96:98:aa:a9:77:46:60:6d:04:14:03: 7b:d7:a9:3c:da:c8:af:39:74:46:2a:c8:7c:c3:7e:89:b5:97: 78:25:ee:f6:81:70:03:d9:f1:28:76:39:96:b2:cb:d6:9d:b7: 0b:ab:b1:0e:90:4e:36:7f:aa:17:29:1f:a5:16:9e:05:31:23: 3b:15:ab:84:ef:89:ae:bf:0e:1e:1b:16:32:98:f7:68:44:5c: b5:2a:fe:19:73:c4:37:07:01:c5:40:3f:ea:78:30:9f:15:d6: 52:47:3a:38:c5:1d:1e:eb:37:85:25:11:27:12:27:70:fd:9c: b4:b0:22:45:f8:a3:1f:25:eb:c5:d5:7d:56:0e:40:0d:31:36: d7:6d:26:35:4e:8d:57:60:ed:6d:f0:eb:2d:2e:ff:2a:ff:b4: 8e:68:79:5e:f1:3c:19:76:98:34:9e:ce:59:55:73:88:88:91: 88:cb:cc:2b:e0:21:9a:90:55:ac:02:18:e8:15:5e:0f:99:d7: d8:6a:35:df:a0:d0:63:7d:e9:86:27:9d:69:b6:44:4b:8b:c1: 7a:0d:94:de -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBwAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw MTUyNTFaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEU5Qzg1QzY0ODU2RjNF QzMxREJFMUI1QzQwQ0NDMDdDNzdFNjQ5QTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC1fragn5VOtUb3lPgzMrfQpK2QOIFKANxbH2kuLvk7LCbtbRCQ ouTGXZGynG5BVZRijesf7l5wE6WCmUAS6ERx+kV6wXXBtbgpPNbDlLlmyyu8pqMN XuKqC62pEtEKQWDOtWXSVKg2pOfmhWgcbUmXM3PMhJA5WaBYR0rD8F4A2sd1UoPH QZ87X1L7eGAYcsShMRW/Y22o5RdtjA84BXZ8uGpKm547yozbt0YotS2exu/tzgNv RGmOLHF2BOumDtTf6pXki/ItO0ZXZiM0OrNRK49xxoRRghn+Oxz+uoPQWXbMIrxh QLsePrDUp8n5Pt5j1g2TOhQqKBcCpWJ7LQkZAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU6chcZIVvPsMdvhtcQMzAfHfmSagwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5LzZjaGNaSVZ2UHNNZHZodGNRTXpBZkhmbVNhZy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIBT1wwDQYJKoZIhvcNAQELBQADggEBAKsLSJRuIIlz4eCFKjkb+ysBgV62 tlwmIcy1QGW6U6y9cZEvSDll7YBwF6GWmKqpd0ZgbQQUA3vXqTzayK85dEYqyHzD fom1l3gl7vaBcAPZ8Sh2OZayy9adtwursQ6QTjZ/qhcpH6UWngUxIzsVq4Tvia6/ Dh4bFjKY92hEXLUq/hlzxDcHAcVAP+p4MJ8V1lJHOjjFHR7rN4UlEScSJ3D9nLSw IkX4ox8l68XVfVYOQA0xNtdtJjVOjVdg7W3w6y0u/yr/tI5oeV7xPBl2mDSezllV c4iIkYjLzCvgIZqQVawCGOgVXg+Z19hqNd+g0GN96YYnnWm2REuLwXoNlN4= -----END CERTIFICATE-----Generated at Fri Nov 22 16:45:39 2024 by rpki-client on console-ams.rpki-client.org