$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/7axzZNghvrE6fsjM8VziDmM1luc.roa File: 7axzZNghvrE6fsjM8VziDmM1luc.roa (raw, json) Hash identifier: NJm5+baGnZQflwHJPGXVwBO72kFesg20aNLJGU0UorM= Subject key identifier: ED:AC:73:64:D8:21:BE:B1:3A:7E:C8:CC:F1:5C:E2:0E:63:35:96:E7 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0209 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/7axzZNghvrE6fsjM8VziDmM1luc.roa Signing time: Tue 30 May 2023 16:29:29 +0000 ROA not before: Tue 30 May 2023 16:29:29 +0000 ROA not after: Tue 14 May 2024 01:30:02 +0000 asID: 9605 IP address blocks: 1.79.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 May 2024 13:36:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 521 (0x209) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: May 30 16:29:29 2023 GMT Not After : May 14 01:30:02 2024 GMT Subject: CN=EDAC7364D821BEB13A7EC8CCF15CE20E633596E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:45:6b:a6:7c:95:d0:5b:4f:38:1c:23:68:39: ac:e9:df:0d:7d:9b:53:cd:32:da:29:96:ba:3a:64: b6:cd:7c:e7:5b:d9:1d:cc:54:30:02:bc:10:86:96: 00:96:e0:b5:7a:77:56:28:48:a5:5e:0d:38:04:5d: 6b:99:30:36:28:61:94:5f:34:47:ef:8f:85:07:2e: 3d:2c:61:49:05:7f:9c:d9:ae:0d:8f:31:9a:30:4f: 39:58:39:94:e6:1b:49:b1:ad:29:36:e9:f2:31:1c: 57:6d:3c:c9:b5:79:e5:5b:a7:74:2f:cd:de:c3:06: be:80:dc:14:2c:07:e9:7a:53:f5:6a:e9:fa:bf:33: d2:fc:23:66:bb:ad:c0:e5:48:19:84:56:bb:66:be: 1b:f8:cb:f0:34:65:2a:1d:5a:5a:c9:32:c0:24:36: 9e:c2:1f:1f:e4:74:64:e4:00:ab:88:ca:17:5e:57: 53:37:72:85:d6:4f:d2:47:6e:ad:ce:23:bc:6c:d8: 03:ec:bd:04:fd:31:63:7b:3d:71:67:5a:c5:f1:2d: 03:22:2e:cd:0f:2f:f0:ad:04:cd:ef:de:8f:d2:da: 1e:84:45:21:b9:57:6b:2e:b1:50:df:2a:fb:0c:4c: 0c:d5:54:bf:f9:ea:b0:6b:42:cb:21:6c:01:0f:23: f4:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:AC:73:64:D8:21:BE:B1:3A:7E:C8:CC:F1:5C:E2:0E:63:35:96:E7 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/7axzZNghvrE6fsjM8VziDmM1luc.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.79.168.0/22 Signature Algorithm: sha256WithRSAEncryption 08:c0:ef:62:01:7b:f6:5e:6c:97:4b:ec:b4:2a:36:6d:53:81: dd:eb:fa:80:36:ac:eb:3c:a5:cd:b8:76:f5:0b:f5:7c:0f:da: 42:bf:7b:e2:af:b5:2d:d8:58:f5:05:fe:2b:34:fe:00:fb:b9: d6:a5:11:f5:9f:30:e2:0d:d8:e1:f6:4e:a6:33:cc:da:58:e8: 6f:d7:a0:10:cd:3d:e1:36:0f:ab:5f:8d:c1:47:d3:6d:60:92: 2f:eb:07:bb:43:99:d1:33:33:5d:59:42:4e:f6:f9:8b:27:03: eb:38:e1:ec:74:ce:6c:9c:21:b7:08:bb:85:c7:5d:cd:26:84: b7:d1:8d:87:32:ee:32:36:8c:32:44:33:be:e0:e7:c3:ca:48: 42:8b:a9:90:ad:c0:e7:0e:d6:19:35:3c:06:2e:80:73:fa:89: c8:ff:ae:3c:58:00:6b:ad:72:a9:6a:72:d1:ac:e8:b3:35:73: 9e:c4:63:50:5c:43:9d:70:f8:df:9b:af:b7:05:6f:9a:e3:9f: a4:69:fe:ef:98:fc:81:db:ba:df:bc:dc:49:94:58:78:0d:d7: 76:6c:14:5a:35:09:59:ab:0d:22:3b:e9:f2:8f:cf:00:49:1c: 82:ec:68:a8:4a:15:5b:73:e7:d2:2a:70:66:a7:0d:60:c1:8e: e5:fc:ab:20 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAgkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA1MzAx NjI5MjlaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKEVEQUM3MzY0RDgyMUJF QjEzQTdFQzhDQ0YxNUNFMjBFNjMzNTk2RTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC0RWumfJXQW084HCNoOazp3w19m1PNMtoplro6ZLbNfOdb2R3M VDACvBCGlgCW4LV6d1YoSKVeDTgEXWuZMDYoYZRfNEfvj4UHLj0sYUkFf5zZrg2P MZowTzlYOZTmG0mxrSk26fIxHFdtPMm1eeVbp3Qvzd7DBr6A3BQsB+l6U/Vq6fq/ M9L8I2a7rcDlSBmEVrtmvhv4y/A0ZSodWlrJMsAkNp7CHx/kdGTkAKuIyhdeV1M3 coXWT9JHbq3OI7xs2APsvQT9MWN7PXFnWsXxLQMiLs0PL/CtBM3v3o/S2h6ERSG5 V2susVDfKvsMTAzVVL/56rBrQsshbAEPI/RJAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU7axzZNghvrE6fsjM8VziDmM1lucwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5LzdheHpaTmdodnJFNmZzak04VnppRG1NMWx1Yy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIBT6gwDQYJKoZIhvcNAQELBQADggEBAAjA72IBe/ZebJdL7LQqNm1Tgd3r +oA2rOs8pc24dvUL9XwP2kK/e+KvtS3YWPUF/is0/gD7udalEfWfMOIN2OH2TqYz zNpY6G/XoBDNPeE2D6tfjcFH021gki/rB7tDmdEzM11ZQk72+YsnA+s44ex0zmyc IbcIu4XHXc0mhLfRjYcy7jI2jDJEM77g58PKSEKLqZCtwOcO1hk1PAYugHP6icj/ rjxYAGutcqlqctGs6LM1c57EY1BcQ51w+N+br7cFb5rjn6Rp/u+Y/IHbut+83EmU WHgN13ZsFFo1CVmrDSI76fKPzwBJHILsaKhKFVtz59IqcGanDWDBjuX8qyA= -----END CERTIFICATE-----Generated at Sat Apr 27 10:15:55 2024 by rpki-client on console-ams.rpki-client.org