$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/7juzXBH2c5ikRhTFNmWJ0eEVhxc.roa File: 7juzXBH2c5ikRhTFNmWJ0eEVhxc.roa (raw, json) Hash identifier: SqagbR8ZmWES9xcJ3er/V2poadgh1x6yLoZfyipN+q8= Subject key identifier: EE:3B:B3:5C:11:F6:73:98:A4:46:14:C5:36:65:89:D1:E1:15:87:17 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 04E8 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/7juzXBH2c5ikRhTFNmWJ0eEVhxc.roa Signing time: Thu 27 Jul 2023 16:50:15 +0000 ROA not before: Thu 27 Jul 2023 16:50:15 +0000 ROA not after: Sun 14 Jul 2024 01:30:03 +0000 asID: 9605 IP address blocks: 1.72.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1256 (0x4e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jul 27 16:50:15 2023 GMT Not After : Jul 14 01:30:03 2024 GMT Subject: CN=EE3BB35C11F67398A44614C5366589D1E1158717 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:8c:c0:9b:43:5c:1e:8f:9a:0b:2c:e9:6b:6d: bb:17:12:4f:e6:7e:73:eb:2b:01:78:81:c7:8b:06: b2:dc:c2:e7:f2:0b:58:92:ed:ab:b7:e8:3a:28:16: 71:0d:46:f5:c9:a1:50:15:89:cf:24:e3:04:d6:24: 8d:b3:c5:a5:63:cc:27:26:6c:41:31:31:97:37:07: d4:b7:f9:2b:f1:1f:47:df:06:94:6e:41:fa:d7:78: eb:e0:4a:24:18:44:40:bc:77:9b:90:fb:72:89:60: 96:57:8d:30:6a:f0:3f:a2:e1:29:50:55:d5:84:94: 4a:7d:50:bb:9f:2d:40:63:ad:c3:5b:4c:c5:84:1a: 35:eb:a6:57:b3:b2:7b:60:9a:f1:d7:aa:54:72:7e: 69:73:fd:cb:38:d9:32:55:63:7a:6b:e5:5b:cf:32: d1:03:84:ce:7c:65:fa:da:ba:91:aa:a0:dd:4a:85: 01:99:7c:b8:b8:fe:ce:e8:0a:86:66:74:02:26:30: f0:a8:7f:df:64:bb:a8:f5:f0:3b:12:e7:63:40:74: fd:8d:b7:4f:d9:47:e7:10:14:a5:f6:a9:41:c6:24: fb:e1:eb:78:86:32:ba:f0:16:9d:f8:b7:8f:26:a9: 42:ee:41:b9:bd:9e:3a:a8:6b:7c:65:c2:f1:23:27: bf:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:3B:B3:5C:11:F6:73:98:A4:46:14:C5:36:65:89:D1:E1:15:87:17 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/7juzXBH2c5ikRhTFNmWJ0eEVhxc.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.72.11.0/24 Signature Algorithm: sha256WithRSAEncryption b4:09:35:40:f6:df:d2:95:a1:39:2f:18:f0:2e:fc:85:0a:03: 1b:66:c0:ae:bb:b3:e7:08:ba:e9:fc:8e:29:5c:3c:8b:79:2b: fc:b5:a6:1e:c3:33:1d:9d:7d:31:d7:83:b6:70:50:ad:36:95: ca:5e:75:dd:b3:0b:07:1d:0c:3d:b9:04:47:32:ec:4f:5f:44: fa:8e:77:24:2f:2a:bc:79:b6:3b:10:85:16:8e:2a:17:4d:a1: ff:9d:4f:f4:da:06:66:50:5b:87:11:54:c4:78:8d:a5:35:a9: fc:16:01:c0:18:83:7f:e4:d2:2f:fa:7a:7b:32:43:f9:e6:0a: 90:4c:54:b9:c7:8f:95:a3:08:83:36:c0:c0:da:b3:04:2d:16: 08:36:db:1c:f0:e9:b6:4b:2a:f1:b1:86:07:4c:58:cd:3e:25: 05:eb:91:26:91:24:e0:b4:42:55:bb:29:71:73:56:3b:91:54: e4:37:12:47:e0:60:50:79:e4:98:e2:b5:37:64:aa:ce:93:3f: 15:ce:77:06:b3:d2:5b:a0:95:f6:09:6c:5e:4a:c6:09:5c:1e: 6a:ca:76:d0:2f:dd:18:ba:aa:b7:df:f7:a5:cd:2e:92:ee:bd: 35:88:72:37:a1:b3:42:05:d8:9b:34:13:59:6b:17:69:ba:d3: d0:1e:4a:c4 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBOgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA3Mjcx NjUwMTVaFw0yNDA3MTQwMTMwMDNaMDMxMTAvBgNVBAMTKEVFM0JCMzVDMTFGNjcz OThBNDQ2MTRDNTM2NjU4OUQxRTExNTg3MTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCujMCbQ1wej5oLLOlrbbsXEk/mfnPrKwF4gceLBrLcwufyC1iS 7au36DooFnENRvXJoVAVic8k4wTWJI2zxaVjzCcmbEExMZc3B9S3+SvxH0ffBpRu QfrXeOvgSiQYREC8d5uQ+3KJYJZXjTBq8D+i4SlQVdWElEp9ULufLUBjrcNbTMWE GjXrplezsntgmvHXqlRyfmlz/cs42TJVY3pr5VvPMtEDhM58ZfraupGqoN1KhQGZ fLi4/s7oCoZmdAImMPCof99ku6j18DsS52NAdP2Nt0/ZR+cQFKX2qUHGJPvh63iG MrrwFp34t48mqULuQbm9njqoa3xlwvEjJ789AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU7juzXBH2c5ikRhTFNmWJ0eEVhxcwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5LzdqdXpYQkgyYzVpa1JoVEZObVdKMGVFVmh4Yy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAABSAswDQYJKoZIhvcNAQELBQADggEBALQJNUD239KVoTkvGPAu/IUKAxtm wK67s+cIuun8jilcPIt5K/y1ph7DMx2dfTHXg7ZwUK02lcpedd2zCwcdDD25BEcy 7E9fRPqOdyQvKrx5tjsQhRaOKhdNof+dT/TaBmZQW4cRVMR4jaU1qfwWAcAYg3/k 0i/6ensyQ/nmCpBMVLnHj5WjCIM2wMDaswQtFgg22xzw6bZLKvGxhgdMWM0+JQXr kSaRJOC0QlW7KXFzVjuRVOQ3EkfgYFB55JjitTdkqs6TPxXOdwaz0luglfYJbF5K xglcHmrKdtAv3Ri6qrff96XNLpLuvTWIcjehs0IF2Js0E1lrF2m609AeSsQ= -----END CERTIFICATE-----Generated at Sat Jun 1 13:38:46 2024 by rpki-client on console-fra.rpki-client.org