$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/7ebHXlL4hSZtMkXWt6-EBb2pPzo.roa File: 7ebHXlL4hSZtMkXWt6-EBb2pPzo.roa (raw, json) Hash identifier: 8y43KoNQJlrobChAkSAgt7/8Q++mKhtKl0mqTytARdE= Subject key identifier: ED:E6:C7:5E:52:F8:85:26:6D:32:45:D6:B7:AF:84:05:BD:A9:3F:3A Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 06D0 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/7ebHXlL4hSZtMkXWt6-EBb2pPzo.roa Signing time: Tue 30 Apr 2024 01:47:02 +0000 ROA not before: Tue 30 Apr 2024 01:47:02 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 1.72.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1744 (0x6d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 30 01:47:02 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=EDE6C75E52F885266D3245D6B7AF8405BDA93F3A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:70:23:a8:93:60:f1:5f:9e:82:90:18:4a:24: 6f:5b:32:7d:13:4a:15:53:5d:e7:6f:c2:f8:e9:47: 85:54:7a:9f:d1:7c:d3:bd:cb:7e:9a:cc:63:81:9c: b7:27:77:0a:9b:e0:b4:af:d3:28:bd:c9:af:62:77: e1:c3:65:fe:f6:a5:60:cd:09:07:4f:e4:4a:35:fe: 8b:26:ff:a9:9e:f1:37:5a:73:25:a7:d6:b4:ce:d7: 97:9b:18:b7:6d:19:75:f4:ce:65:5d:ea:e7:f4:a9: bf:4b:6c:a7:c5:e2:8b:4d:23:eb:c9:65:a5:f4:1c: 4f:fd:96:b0:56:29:07:22:e1:9b:4b:fe:43:6a:c3: e1:88:d6:ce:8e:2a:06:14:94:a6:80:d5:f6:4e:3d: d7:7b:00:b0:4d:bd:dc:83:19:cb:8b:df:87:db:92: de:de:bc:69:2c:06:2e:ea:33:0e:4e:2d:99:74:cf: 27:4e:a6:8b:b5:2a:55:02:22:8c:cf:1e:12:a2:a5: f5:37:bb:fe:8a:a4:75:4c:e5:64:76:17:6f:e6:99: ad:c4:fc:d2:b9:73:95:28:14:12:dd:b7:77:d4:02: 7c:f9:d0:24:5c:d8:82:8c:53:02:04:5b:84:3d:8e: d9:92:c1:1d:fc:91:a9:14:75:1b:8e:33:e2:63:66: b5:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:E6:C7:5E:52:F8:85:26:6D:32:45:D6:B7:AF:84:05:BD:A9:3F:3A X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/7ebHXlL4hSZtMkXWt6-EBb2pPzo.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.72.128.0/18 Signature Algorithm: sha256WithRSAEncryption ac:13:14:41:23:33:5e:0a:f9:07:07:69:ce:2b:d8:5a:a3:44: f7:49:75:c4:af:cd:b5:d6:8a:81:ef:07:50:08:a4:a2:4e:26: 88:fb:04:c3:c1:e2:ae:ec:fa:0e:ae:44:30:02:1f:20:9d:16: 56:24:1c:d2:91:52:2b:57:dd:32:8b:9a:87:89:f0:d4:dd:0a: 32:a3:92:61:67:19:71:86:3f:16:5c:74:42:ad:17:59:76:81: af:c6:c1:d7:e1:25:a5:81:3e:97:6a:98:aa:01:d3:59:1c:b5: 5d:22:94:72:04:80:5a:e7:9f:50:a2:8a:97:a0:00:24:98:95: d4:45:21:f0:ff:61:01:66:e9:29:73:e6:1b:05:7f:68:fb:7c: 9c:f2:3d:4d:5a:fd:3f:2e:48:a4:06:57:f6:a4:92:21:4b:23: 34:1b:5e:9f:1c:da:e8:b8:3b:0c:b9:9d:c0:05:72:8e:30:5f: 9c:b7:1e:3e:b4:bc:5d:0d:53:db:5f:f0:fe:5b:43:2c:e8:7f: 6e:9e:4d:c6:9d:47:9a:5d:5f:04:ab:3e:0e:96:68:55:f6:2f: 56:6f:33:ac:7a:24:5f:c5:7c:b8:c9:5f:c1:1b:2d:69:45:29: ee:b7:0d:a3:8d:a9:29:9f:76:2b:07:dd:85:2a:d4:b0:84:6c: 97:c8:b8:33 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBtAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw MTQ3MDJaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEVERTZDNzVFNTJGODg1 MjY2RDMyNDVENkI3QUY4NDA1QkRBOTNGM0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC5cCOok2DxX56CkBhKJG9bMn0TShVTXedvwvjpR4VUep/RfNO9 y36azGOBnLcndwqb4LSv0yi9ya9id+HDZf72pWDNCQdP5Eo1/osm/6me8TdacyWn 1rTO15ebGLdtGXX0zmVd6uf0qb9LbKfF4otNI+vJZaX0HE/9lrBWKQci4ZtL/kNq w+GI1s6OKgYUlKaA1fZOPdd7ALBNvdyDGcuL34fbkt7evGksBi7qMw5OLZl0zydO pou1KlUCIozPHhKipfU3u/6KpHVM5WR2F2/mma3E/NK5c5UoFBLdt3fUAnz50CRc 2IKMUwIEW4Q9jtmSwR38kakUdRuOM+JjZrXfAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU7ebHXlL4hSZtMkXWt6+EBb2pPzowHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5LzdlYkhYbEw0aFNadE1rWFd0Ni1FQmIycFB6by5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAYBSIAwDQYJKoZIhvcNAQELBQADggEBAKwTFEEjM14K+QcHac4r2FqjRPdJ dcSvzbXWioHvB1AIpKJOJoj7BMPB4q7s+g6uRDACHyCdFlYkHNKRUitX3TKLmoeJ 8NTdCjKjkmFnGXGGPxZcdEKtF1l2ga/GwdfhJaWBPpdqmKoB01kctV0ilHIEgFrn n1CiipegACSYldRFIfD/YQFm6Slz5hsFf2j7fJzyPU1a/T8uSKQGV/akkiFLIzQb Xp8c2ui4Owy5ncAFco4wX5y3Hj60vF0NU9tf8P5bQyzof26eTcadR5pdXwSrPg6W aFX2L1ZvM6x6JF/FfLjJX8EbLWlFKe63DaONqSmfdisH3YUq1LCEbJfIuDM= -----END CERTIFICATE-----Generated at Sat Jun 1 13:38:46 2024 by rpki-client on console-fra.rpki-client.org