$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/8FtbOZyCkn-yg0PLDYHF51UhH4k.roa File: 8FtbOZyCkn-yg0PLDYHF51UhH4k.roa (raw, json) Hash identifier: qSB2Vl7AEk1TPntaTF/0QjHhciT3dbJyNnbUwV8jdQo= Subject key identifier: F0:5B:5B:39:9C:82:92:7F:B2:83:43:CB:0D:81:C5:E7:55:21:1F:89 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 076D Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/8FtbOZyCkn-yg0PLDYHF51UhH4k.roa Signing time: Tue 30 Apr 2024 02:01:44 +0000 ROA not before: Tue 30 Apr 2024 02:01:44 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 1.79.32.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1901 (0x76d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 30 02:01:44 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=F05B5B399C82927FB28343CB0D81C5E755211F89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:c2:d6:e7:00:9e:a9:6e:b0:ca:af:c2:95:a4: 7a:6c:57:ba:28:05:5b:95:9b:08:13:00:51:27:e7: 04:df:26:ce:44:a9:37:98:7c:d4:e9:17:90:fb:f4: f6:4e:1b:9e:3e:1c:35:7e:15:c9:14:1e:78:59:ba: 59:03:10:5f:f2:be:68:50:37:30:3b:62:5f:df:c8: 41:9c:34:9b:97:45:6b:5a:a5:4b:e4:2f:7b:79:12: 6a:4b:c4:1a:be:ec:d0:cc:46:b6:1c:af:cc:87:9c: c2:14:45:16:26:94:ea:37:42:5b:5a:97:5d:7f:3d: 9c:b4:cf:96:67:db:36:15:5d:ea:41:9a:85:be:88: cb:f8:b2:7e:2c:6d:44:1e:29:ae:9e:0a:c6:a8:5a: 3f:ea:47:36:36:51:38:98:6a:72:5b:fe:79:bc:f4: 9b:16:da:82:94:d3:44:32:97:fa:a6:5e:b1:64:4a: 6e:37:77:8a:9e:41:c3:0d:01:ee:dc:ea:59:e5:b1: 3c:06:ca:8d:b3:8d:d5:4c:2b:6c:bc:fd:80:80:13: 65:13:8a:84:a4:77:15:d1:8b:e7:d3:29:19:0a:31: ac:02:86:2e:08:b0:4a:39:64:34:2d:fc:a2:d8:bd: 69:84:c1:61:b7:ba:74:5b:28:6d:af:dc:7c:c3:3c: b8:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:5B:5B:39:9C:82:92:7F:B2:83:43:CB:0D:81:C5:E7:55:21:1F:89 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/8FtbOZyCkn-yg0PLDYHF51UhH4k.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.79.32.0/23 Signature Algorithm: sha256WithRSAEncryption c9:fa:c7:2e:99:2e:43:aa:88:bc:a5:21:52:cf:0f:b5:d0:5c: fa:ee:e3:a1:1f:90:d2:94:b0:d9:17:77:21:9d:92:2e:bf:ec: 4e:f4:8b:43:3f:2a:eb:b3:50:26:8a:e4:86:35:d3:32:71:59: 49:14:2c:2b:63:fa:04:f0:d7:2a:a5:ab:e5:d3:79:8c:9f:63: 36:96:2c:08:01:4e:d5:8c:6a:fc:6c:e2:ee:6f:85:4d:8b:a8: 63:45:a6:2f:b1:32:6f:81:cd:fb:5a:19:4e:76:ef:ab:48:61: a2:21:55:8d:ec:5e:bd:3a:58:14:06:80:56:ba:1c:6f:6f:0b: fc:a8:c5:4a:bd:dd:84:db:1a:2c:ce:f4:40:8a:c0:70:60:26: 41:9f:10:aa:67:19:8c:dd:f4:44:37:fd:d8:7d:5f:3f:09:aa: 53:41:3e:d2:2c:79:ef:16:b8:93:92:63:ad:47:a3:10:74:b7: ff:71:bb:cc:ed:3f:e3:c5:98:3b:25:6b:4f:d8:fa:8b:69:e1: 82:fd:68:45:ba:fe:6e:95:5f:bf:ee:75:4f:61:04:f5:f2:ce: a0:51:01:b7:07:8c:06:bc:90:9d:be:88:47:b7:30:ef:e2:b1: 93:e7:b0:15:24:84:3d:45:5b:65:d1:8a:e7:9e:d1:e6:33:85: 95:5c:6b:0d -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICB20wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw MjAxNDRaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEYwNUI1QjM5OUM4Mjky N0ZCMjgzNDNDQjBEODFDNUU3NTUyMTFGODkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDqwtbnAJ6pbrDKr8KVpHpsV7ooBVuVmwgTAFEn5wTfJs5EqTeY fNTpF5D79PZOG54+HDV+FckUHnhZulkDEF/yvmhQNzA7Yl/fyEGcNJuXRWtapUvk L3t5EmpLxBq+7NDMRrYcr8yHnMIURRYmlOo3Qltal11/PZy0z5Zn2zYVXepBmoW+ iMv4sn4sbUQeKa6eCsaoWj/qRzY2UTiYanJb/nm89JsW2oKU00Qyl/qmXrFkSm43 d4qeQcMNAe7c6lnlsTwGyo2zjdVMK2y8/YCAE2UTioSkdxXRi+fTKRkKMawChi4I sEo5ZDQt/KLYvWmEwWG3unRbKG2v3HzDPLgXAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU8FtbOZyCkn+yg0PLDYHF51UhH4kwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5LzhGdGJPWnlDa24teWcwUExEWUhGNTFVaEg0ay5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEBTyAwDQYJKoZIhvcNAQELBQADggEBAMn6xy6ZLkOqiLylIVLPD7XQXPru 46EfkNKUsNkXdyGdki6/7E70i0M/KuuzUCaK5IY10zJxWUkULCtj+gTw1yqlq+XT eYyfYzaWLAgBTtWMavxs4u5vhU2LqGNFpi+xMm+BzftaGU5276tIYaIhVY3sXr06 WBQGgFa6HG9vC/yoxUq93YTbGizO9ECKwHBgJkGfEKpnGYzd9EQ3/dh9Xz8JqlNB PtIsee8WuJOSY61HoxB0t/9xu8ztP+PFmDsla0/Y+otp4YL9aEW6/m6VX7/udU9h BPXyzqBRAbcHjAa8kJ2+iEe3MO/isZPnsBUkhD1FW2XRiuee0eYzhZVcaw0= -----END CERTIFICATE-----Generated at Sat Jun 1 13:38:46 2024 by rpki-client on console-fra.rpki-client.org