$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/6rhQBqlts5Oxefc1G43ffdcDvIY.roa File: 6rhQBqlts5Oxefc1G43ffdcDvIY.roa (raw, json) Hash identifier: K0njzgBoDwIoetk1xqhJEnLvMA5LdPUtAXV+SpH+VqM= Subject key identifier: EA:B8:50:06:A9:6D:B3:93:B1:79:F7:35:1B:8D:DF:7D:D7:03:BC:86 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 05EC Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/6rhQBqlts5Oxefc1G43ffdcDvIY.roa Signing time: Thu 29 Feb 2024 01:35:38 +0000 ROA not before: Thu 29 Feb 2024 01:35:38 +0000 ROA not after: Fri 14 Feb 2025 01:30:03 +0000 asID: 9605 IP address blocks: 1.66.92.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1516 (0x5ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Feb 29 01:35:38 2024 GMT Not After : Feb 14 01:30:03 2025 GMT Subject: CN=EAB85006A96DB393B179F7351B8DDF7DD703BC86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:5c:ea:9a:99:88:b0:f7:3b:cf:b9:34:47:a6: 68:30:1a:62:84:9a:54:7e:b1:ac:e2:df:c5:59:5f: a5:f9:02:61:90:38:2e:b5:28:5c:8e:ba:df:cc:68: 5d:1e:80:52:ac:1b:36:7d:f8:36:bf:c1:59:39:d9: 9f:d9:04:04:af:5a:24:08:f8:71:5c:d3:22:e3:c9: c8:52:51:58:5f:b3:fa:db:d6:3f:e7:c3:89:00:b3: 13:76:6b:9b:f5:21:1c:a2:22:7f:c2:e8:fb:b8:e5: df:a4:21:4c:b2:63:51:46:9c:be:29:6f:45:d1:f6: 7b:25:d0:8c:29:ac:85:84:5e:15:5f:fd:76:7a:a3: 0d:e5:17:20:a8:6a:ca:f8:c5:a1:7a:76:cf:28:74: 75:c1:a9:0f:71:f9:2b:cc:d6:54:aa:a7:e5:fe:35: 07:41:a6:09:75:50:8f:f2:a0:9f:2a:a3:18:8c:bd: 0d:d9:db:3d:72:fa:e7:46:3a:1e:57:3e:bc:9a:2f: fe:c1:a0:36:7d:12:6e:69:eb:6a:88:85:9f:9d:fd: 70:f3:aa:3b:6c:dc:f6:42:8f:05:53:68:5f:59:c2: 54:b5:70:1f:d0:21:ea:55:1e:ba:89:10:f0:71:bd: c9:ad:5d:57:04:7c:05:85:5b:0b:ac:9b:46:00:bb: 4a:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:B8:50:06:A9:6D:B3:93:B1:79:F7:35:1B:8D:DF:7D:D7:03:BC:86 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/6rhQBqlts5Oxefc1G43ffdcDvIY.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.66.92.0/24 Signature Algorithm: sha256WithRSAEncryption 96:4d:60:0f:86:72:72:5a:d5:2e:47:a9:ff:00:c6:3c:83:3c: 5e:e8:79:f8:c7:43:01:d5:4b:4b:22:74:01:58:bd:cd:1e:8c: 7c:bd:ae:fb:cf:5f:75:f7:5f:6a:dd:3b:48:05:ed:9e:2f:bb: 1a:58:51:c2:f9:0c:3e:20:b5:b8:36:44:74:9d:64:68:c3:84: bc:7f:99:6e:8a:a9:b7:fa:8d:b6:a6:72:c1:d2:b4:b5:ff:90: 68:a8:dd:a4:52:0b:4f:ee:4d:86:b1:fd:35:b7:f1:94:69:d6: 38:23:1d:ec:4a:82:c9:40:19:4a:18:d7:50:33:d0:cc:71:8a: 51:77:c6:8c:07:4c:23:95:4a:78:bc:09:30:9d:a9:dc:c6:94: 1a:20:92:8e:db:eb:86:10:c0:77:2f:45:d8:ed:71:b2:87:80: 6e:4c:05:42:34:f6:02:63:86:7f:46:a7:f8:0f:2d:83:4a:2b: 8f:fb:70:73:b8:76:ad:25:45:3d:5d:b2:86:d2:3f:13:11:83: e0:0f:bd:60:c3:17:4f:9a:34:08:51:e4:d6:6c:88:8a:29:01: 9a:8d:c4:25:0a:da:dd:70:07:4c:d3:ca:2e:75:18:8f:5f:8a: a6:fc:3d:34:c2:43:8a:43:c0:65:e1:ec:03:5a:69:91:87:b8: 0d:bc:46:3d -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBewwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDAyMjkw MTM1MzhaFw0yNTAyMTQwMTMwMDNaMDMxMTAvBgNVBAMTKEVBQjg1MDA2QTk2REIz OTNCMTc5RjczNTFCOERERjdERDcwM0JDODYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDcXOqamYiw9zvPuTRHpmgwGmKEmlR+sazi38VZX6X5AmGQOC61 KFyOut/MaF0egFKsGzZ9+Da/wVk52Z/ZBASvWiQI+HFc0yLjychSUVhfs/rb1j/n w4kAsxN2a5v1IRyiIn/C6Pu45d+kIUyyY1FGnL4pb0XR9nsl0IwprIWEXhVf/XZ6 ow3lFyCoasr4xaF6ds8odHXBqQ9x+SvM1lSqp+X+NQdBpgl1UI/yoJ8qoxiMvQ3Z 2z1y+udGOh5XPryaL/7BoDZ9Em5p62qIhZ+d/XDzqjts3PZCjwVTaF9ZwlS1cB/Q IepVHrqJEPBxvcmtXVcEfAWFWwusm0YAu0qLAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU6rhQBqlts5Oxefc1G43ffdcDvIYwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5LzZyaFFCcWx0czVPeGVmYzFHNDNmZmRjRHZJWS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAABQlwwDQYJKoZIhvcNAQELBQADggEBAJZNYA+GcnJa1S5Hqf8AxjyDPF7o efjHQwHVS0sidAFYvc0ejHy9rvvPX3X3X2rdO0gF7Z4vuxpYUcL5DD4gtbg2RHSd ZGjDhLx/mW6Kqbf6jbamcsHStLX/kGio3aRSC0/uTYax/TW38ZRp1jgjHexKgslA GUoY11Az0MxxilF3xowHTCOVSni8CTCdqdzGlBogko7b64YQwHcvRdjtcbKHgG5M BUI09gJjhn9Gp/gPLYNKK4/7cHO4dq0lRT1dsobSPxMRg+APvWDDF0+aNAhR5NZs iIopAZqNxCUK2t1wB0zTyi51GI9fiqb8PTTCQ4pDwGXh7ANaaZGHuA28Rj0= -----END CERTIFICATE-----Generated at Sat Jun 1 13:38:46 2024 by rpki-client on console-fra.rpki-client.org