$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/8R1mwClv5uDpjzpq9Yn4CVN9IOA.roa File: 8R1mwClv5uDpjzpq9Yn4CVN9IOA.roa (raw, json) Hash identifier: B4ZV3KQmeSdZoZk1h6jdKsenf8NqAbBO4tioPWLG/O8= Subject key identifier: F1:1D:66:C0:29:6F:E6:E0:E9:8F:3A:6A:F5:89:F8:09:53:7D:20:E0 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 09E3 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/8R1mwClv5uDpjzpq9Yn4CVN9IOA.roa Signing time: Sun 30 Jun 2024 01:42:19 +0000 ROA not before: Sun 30 Jun 2024 01:42:19 +0000 ROA not after: Tue 24 Jun 2025 10:46:45 +0000 asID: 9605 IP address blocks: 1.76.226.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 22:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2531 (0x9e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 30 01:42:19 2024 GMT Not After : Jun 24 10:46:45 2025 GMT Subject: CN=F11D66C0296FE6E0E98F3A6AF589F809537D20E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:46:43:98:94:8c:8c:11:d4:21:9b:7d:3b:8e: 62:8c:43:16:75:69:5f:a3:70:78:88:82:4c:1f:99: 12:bd:05:8a:ba:a0:42:87:37:6d:46:9a:dd:4d:7a: 66:54:d7:78:08:82:94:8a:4b:dc:74:70:7e:7f:c0: ed:a9:e8:be:60:64:56:c0:29:77:d1:27:c8:b2:3b: 5f:6f:53:58:f2:6e:6d:d2:da:e3:e0:1f:5d:61:6e: 5e:e8:82:f3:ce:5f:55:a5:fd:95:86:76:6a:b2:38: 34:12:f4:c1:d7:d5:eb:3b:f3:27:8d:36:6e:37:02: d5:28:02:fb:f3:81:3e:52:97:d1:7b:97:41:57:24: 7b:5e:af:ed:90:98:bd:91:85:61:93:8f:c0:23:4c: 1c:89:8c:09:b5:67:d7:2c:3d:bc:87:a7:ac:19:9c: f4:a7:6a:59:c2:73:3f:2a:ea:07:b6:b7:02:c3:7d: c2:c8:aa:96:5c:5e:33:bb:9a:4d:10:ed:9e:24:18: 10:8e:04:e6:9b:71:4e:42:9e:b4:80:53:bd:8c:1a: 89:83:29:e2:06:d4:68:57:03:70:d3:a6:44:fd:1f: 67:41:b1:38:41:7a:19:f2:b0:47:29:49:b3:14:10: ef:31:18:8f:9c:ef:be:ca:c1:31:11:a4:fb:29:4f: 48:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:1D:66:C0:29:6F:E6:E0:E9:8F:3A:6A:F5:89:F8:09:53:7D:20:E0 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/8R1mwClv5uDpjzpq9Yn4CVN9IOA.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.76.226.0/23 Signature Algorithm: sha256WithRSAEncryption 12:b9:1a:81:73:cb:a3:a8:ad:ea:66:d2:41:c4:0e:1e:85:cf: d2:e4:19:f3:bf:8a:0f:38:24:5c:bc:fc:c4:78:2d:b6:bb:45: 8a:24:f8:23:4f:8f:9f:5d:97:30:65:2e:db:d8:7c:d7:fd:bf: 98:41:19:97:83:bd:61:6e:77:6c:81:4f:6b:48:1c:29:ea:a0: 62:c5:b3:af:9b:ee:7b:2b:03:25:86:3f:95:bf:a5:e5:51:82: f4:92:67:c1:a8:a9:a8:1a:ac:ba:82:7c:26:2a:1f:db:36:38: 0f:4b:9b:5c:2c:88:7e:bb:78:5a:5c:37:ca:29:d6:2a:ce:ed: 34:3d:1a:8e:d8:1b:93:0d:e0:99:41:9a:bc:7e:77:7c:72:c4: 07:d3:31:7e:6e:33:a0:c1:ea:fe:a5:d4:06:e6:95:76:0f:ed: e4:89:25:f1:d7:10:86:20:f1:e6:8f:2d:2c:60:3d:d8:e7:c7: b7:ab:c1:26:f0:8a:3b:93:da:73:0c:0b:e6:95:1d:29:d1:cd: 2c:49:63:4c:96:73:79:57:50:eb:30:52:c9:03:bf:fc:04:2b: 15:71:95:ee:90:10:52:a8:65:35:3e:90:9e:92:c0:53:d7:71: 64:57:09:24:0a:3a:08:f4:c3:50:e6:a9:01:98:b2:45:7d:1d: 48:f1:47:9b -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCeMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA2MzAw MTQyMTlaFw0yNTA2MjQxMDQ2NDVaMDMxMTAvBgNVBAMTKEYxMUQ2NkMwMjk2RkU2 RTBFOThGM0E2QUY1ODlGODA5NTM3RDIwRTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC8RkOYlIyMEdQhm307jmKMQxZ1aV+jcHiIgkwfmRK9BYq6oEKH N21Gmt1NemZU13gIgpSKS9x0cH5/wO2p6L5gZFbAKXfRJ8iyO19vU1jybm3S2uPg H11hbl7ogvPOX1Wl/ZWGdmqyODQS9MHX1es78yeNNm43AtUoAvvzgT5Sl9F7l0FX JHter+2QmL2RhWGTj8AjTByJjAm1Z9csPbyHp6wZnPSnalnCcz8q6ge2twLDfcLI qpZcXjO7mk0Q7Z4kGBCOBOabcU5CnrSAU72MGomDKeIG1GhXA3DTpkT9H2dBsThB ehnysEcpSbMUEO8xGI+c777KwTERpPspT0jlAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU8R1mwClv5uDpjzpq9Yn4CVN9IOAwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5LzhSMW13Q2x2NXVEcGp6cHE5WW40Q1ZOOUlPQS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEBTOIwDQYJKoZIhvcNAQELBQADggEBABK5GoFzy6Oorepm0kHEDh6Fz9Lk GfO/ig84JFy8/MR4Lba7RYok+CNPj59dlzBlLtvYfNf9v5hBGZeDvWFud2yBT2tI HCnqoGLFs6+b7nsrAyWGP5W/peVRgvSSZ8GoqagarLqCfCYqH9s2OA9Lm1wsiH67 eFpcN8op1irO7TQ9Go7YG5MN4JlBmrx+d3xyxAfTMX5uM6DB6v6l1AbmlXYP7eSJ JfHXEIYg8eaPLSxgPdjnx7erwSbwijuT2nMMC+aVHSnRzSxJY0yWc3lXUOswUskD v/wEKxVxle6QEFKoZTU+kJ6SwFPXcWRXCSQKOgj0w1DmqQGYskV9HUjxR5s= -----END CERTIFICATE-----Generated at Mon Nov 25 23:59:09 2024 by rpki-client on console-fra.rpki-client.org