$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/8Wl69hsnAygRhOCUDeB7gJltVMA.roa File: 8Wl69hsnAygRhOCUDeB7gJltVMA.roa (raw, json) Hash identifier: bDbQg+Gtm/q+jhw3aLfKUm8mAEh42sv6aJSdxSRAF0M= Subject key identifier: F1:69:7A:F6:1B:27:03:28:11:84:E0:94:0D:E0:7B:80:99:6D:54:C0 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0534 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/8Wl69hsnAygRhOCUDeB7gJltVMA.roa Signing time: Thu 27 Jul 2023 16:54:15 +0000 ROA not before: Thu 27 Jul 2023 16:54:15 +0000 ROA not after: Sun 14 Jul 2024 01:30:03 +0000 asID: 9605 IP address blocks: 1.76.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1332 (0x534) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jul 27 16:54:15 2023 GMT Not After : Jul 14 01:30:03 2024 GMT Subject: CN=F1697AF61B2703281184E0940DE07B80996D54C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:14:79:14:c7:c3:be:9b:ff:6a:b2:70:55:2a: 5f:18:08:2a:6e:04:1b:72:99:e1:01:4e:31:3d:be: 0a:07:04:e6:76:bf:21:f9:24:c8:c8:bf:48:e3:dd: e5:05:61:5a:6b:3d:af:f7:3e:fa:69:3f:f6:25:b6: b2:98:2f:c4:ae:9f:80:e9:8c:a5:5a:5c:8a:dd:44: e3:1e:ef:30:1a:f5:d0:36:12:a8:66:e4:12:a9:52: 69:af:48:da:1c:60:ed:6b:c6:cf:df:35:d0:24:ff: 6b:d4:87:0b:18:83:3c:9b:97:8d:57:e3:5c:ab:d2: 6d:31:29:f5:a2:b4:7f:6f:5a:62:8a:71:f2:7c:41: b5:6b:db:56:12:57:b1:32:9b:1e:de:9f:f9:2d:79: 5f:e9:f5:8e:4a:2a:6e:0a:4f:19:84:2e:d8:f3:72: 00:e7:f0:a8:02:1d:22:e4:86:57:a7:d8:4f:ae:56: 04:8f:e1:37:c7:f0:aa:6e:0a:97:1d:56:3e:b4:20: a3:07:d7:5f:6d:e4:76:7d:6e:ab:26:13:6d:13:6c: 89:f2:e7:72:5e:8e:b7:9f:8f:d2:1e:02:58:00:f3: f0:cb:63:7d:5f:18:dc:bb:44:83:28:f2:c3:f8:ad: fa:c5:5a:54:02:05:db:11:0e:1f:de:7a:bd:c2:e9: 76:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:69:7A:F6:1B:27:03:28:11:84:E0:94:0D:E0:7B:80:99:6D:54:C0 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/8Wl69hsnAygRhOCUDeB7gJltVMA.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.76.48.0/20 Signature Algorithm: sha256WithRSAEncryption 8e:2d:52:75:da:fb:98:a2:a4:db:39:ea:75:81:c5:31:9f:0b: 20:71:2f:d8:4a:3b:23:fb:80:03:b3:92:72:fb:75:df:a0:11: d0:86:86:8e:25:86:43:b5:6d:7f:e1:47:a7:7b:20:7b:43:75: be:8a:14:b7:a7:d3:fd:8f:17:a2:70:58:37:00:9c:af:d5:e5: b2:9c:91:cf:f3:ad:51:eb:f4:40:5a:9a:83:2c:46:21:fc:66: bd:32:68:09:b0:07:b9:95:33:44:f9:ba:ca:0d:6d:30:f6:4a: e6:d1:e6:3d:7d:5d:65:ee:bd:c5:7a:df:9c:01:6e:07:0f:17: 3c:a2:4e:b9:e8:7e:2f:c5:15:8c:df:6b:99:11:eb:67:f4:ab: b5:71:bf:6b:3d:50:80:46:7e:04:09:71:51:98:ef:dd:98:59: 9d:3d:08:e2:25:0f:f3:fd:dc:16:7c:31:a1:ed:0a:c7:65:60: cf:e2:3d:9a:88:da:90:c5:ae:18:ec:ef:1f:9b:6e:8d:e0:d2: 7c:f2:b1:98:c6:87:30:02:aa:02:ea:3a:50:57:e6:0c:0e:3b: 4e:cb:a8:02:67:81:49:dc:e8:03:0f:0e:86:27:fc:08:f9:71: 5b:57:5c:24:3a:f8:99:f0:7c:07:cd:fe:87:16:3a:83:f1:e8: dc:6c:5a:be -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBTQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA3Mjcx NjU0MTVaFw0yNDA3MTQwMTMwMDNaMDMxMTAvBgNVBAMTKEYxNjk3QUY2MUIyNzAz MjgxMTg0RTA5NDBERTA3QjgwOTk2RDU0QzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDLFHkUx8O+m/9qsnBVKl8YCCpuBBtymeEBTjE9vgoHBOZ2vyH5 JMjIv0jj3eUFYVprPa/3PvppP/YltrKYL8Sun4DpjKVaXIrdROMe7zAa9dA2Eqhm 5BKpUmmvSNocYO1rxs/fNdAk/2vUhwsYgzybl41X41yr0m0xKfWitH9vWmKKcfJ8 QbVr21YSV7Eymx7en/kteV/p9Y5KKm4KTxmELtjzcgDn8KgCHSLkhlen2E+uVgSP 4TfH8KpuCpcdVj60IKMH119t5HZ9bqsmE20TbIny53Jejrefj9IeAlgA8/DLY31f GNy7RIMo8sP4rfrFWlQCBdsRDh/eer3C6XbLAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU8Wl69hsnAygRhOCUDeB7gJltVMAwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5LzhXbDY5aHNuQXlnUmhPQ1VEZUI3Z0psdFZNQS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQBTDAwDQYJKoZIhvcNAQELBQADggEBAI4tUnXa+5iipNs56nWBxTGfCyBx L9hKOyP7gAOzknL7dd+gEdCGho4lhkO1bX/hR6d7IHtDdb6KFLen0/2PF6JwWDcA nK/V5bKckc/zrVHr9EBamoMsRiH8Zr0yaAmwB7mVM0T5usoNbTD2SubR5j19XWXu vcV635wBbgcPFzyiTrnofi/FFYzfa5kR62f0q7Vxv2s9UIBGfgQJcVGY792YWZ09 COIlD/P93BZ8MaHtCsdlYM/iPZqI2pDFrhjs7x+bbo3g0nzysZjGhzACqgLqOlBX 5gwOO07LqAJngUnc6AMPDoYn/Aj5cVtXXCQ6+JnwfAfN/ocWOoPx6NxsWr4= -----END CERTIFICATE-----Generated at Sat Jun 1 13:38:46 2024 by rpki-client on console-fra.rpki-client.org