$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/8rDMjoYsUiCos8vfHISXPXGOR6Y.roa File: 8rDMjoYsUiCos8vfHISXPXGOR6Y.roa (raw, json) Hash identifier: P/x5wKab9zlm9J9tels+wLidFD8+UxYSHZFOT47lAS0= Subject key identifier: F2:B0:CC:8E:86:2C:52:20:A8:B3:CB:DF:1C:84:97:3D:71:8E:47:A6 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0A19 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/8rDMjoYsUiCos8vfHISXPXGOR6Y.roa Signing time: Sun 30 Jun 2024 01:44:24 +0000 ROA not before: Sun 30 Jun 2024 01:44:24 +0000 ROA not after: Tue 24 Jun 2025 10:46:45 +0000 asID: 9605 IP address blocks: 220.159.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 12:58:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2585 (0xa19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 30 01:44:24 2024 GMT Not After : Jun 24 10:46:45 2025 GMT Subject: CN=F2B0CC8E862C5220A8B3CBDF1C84973D718E47A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:6e:37:15:0c:43:53:e9:8f:c4:1f:97:f7:d1: e9:5b:ef:0a:83:85:07:bf:2c:d9:67:b8:09:9a:40: 09:f6:ef:3d:a2:0f:79:bc:7a:47:a0:fb:8d:6e:10: 88:73:69:fd:ee:81:c8:a4:ce:37:c3:01:a0:e4:7d: 7c:c6:2c:37:6c:1c:b8:0a:f9:d7:ae:b0:26:b7:ed: f8:bd:4f:d0:a5:a7:62:b7:67:58:94:1c:e1:77:af: ae:b4:97:8d:95:10:20:bc:22:ce:39:39:3b:cf:d8: 74:8a:7b:3b:41:52:41:f5:6c:7e:85:f6:91:08:9e: 7b:c7:3c:d3:b5:cf:e1:34:24:af:ef:dd:ba:7f:76: cd:9c:45:ba:6c:93:fd:08:4e:5b:7a:87:fb:c7:03: d2:5b:a9:bd:30:5a:8e:84:0e:1a:57:98:97:68:50: 4c:f9:f5:d9:7d:5d:2e:1e:3a:37:c5:c9:29:4e:b8: 0f:ac:d5:f2:b5:d6:01:b7:ac:d5:c0:69:39:46:c9: 1b:90:c9:01:02:37:70:55:04:5d:07:ea:ba:5e:3e: 3e:73:76:04:56:f2:2f:c6:a5:75:20:e9:e0:29:b8: a7:07:4c:ee:ff:56:f7:cb:a8:6e:31:67:31:a0:78: 53:34:5d:8f:48:44:fb:c5:69:ca:a0:fc:99:62:21: f9:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:B0:CC:8E:86:2C:52:20:A8:B3:CB:DF:1C:84:97:3D:71:8E:47:A6 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/8rDMjoYsUiCos8vfHISXPXGOR6Y.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 220.159.220.0/22 Signature Algorithm: sha256WithRSAEncryption 81:b6:49:8e:27:a2:d4:96:85:1d:06:04:ea:52:bc:10:cb:b8: cd:aa:75:43:9f:71:d2:f6:9c:f2:80:a2:da:b8:de:b0:3e:1d: 70:66:eb:17:61:a3:70:06:83:d1:c8:1f:fc:5c:bc:69:6e:41: d5:34:8c:0f:07:29:6a:fa:57:ab:45:37:8d:b1:b7:4f:c3:8b: 1f:40:82:92:74:8c:96:5e:59:e5:11:1d:e2:be:c3:29:1e:4e: 8b:0a:47:f5:ec:70:7f:23:2d:04:0e:2e:5c:f9:6d:c4:63:d4: 0a:57:23:a7:cf:38:39:c8:69:8f:d2:23:ac:46:f0:a5:56:15: b4:c3:ea:ad:b8:53:cc:dc:56:4e:a0:22:e3:fb:ea:ea:e3:6d: 8e:21:ac:0a:a7:43:5c:4c:53:cb:be:52:dc:82:0d:e2:9c:7e: ae:dc:ab:67:dd:06:d6:51:07:5e:62:07:22:f4:0b:26:7f:d1: 8f:70:06:d7:f2:b4:70:ec:1d:b2:23:01:f8:b0:12:af:6c:72: 2d:3e:71:a3:11:4d:b8:7d:25:54:39:e7:7f:c1:9c:b6:91:de: b5:33:e5:4d:39:b6:c2:44:84:9e:0e:f8:81:c2:94:19:28:58: c2:75:95:90:d8:ee:f3:28:95:c4:4c:5b:05:a0:fb:f4:99:9d: 48:0f:53:27 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICChkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA2MzAw MTQ0MjRaFw0yNTA2MjQxMDQ2NDVaMDMxMTAvBgNVBAMTKEYyQjBDQzhFODYyQzUy MjBBOEIzQ0JERjFDODQ5NzNENzE4RTQ3QTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCrbjcVDENT6Y/EH5f30elb7wqDhQe/LNlnuAmaQAn27z2iD3m8 ekeg+41uEIhzaf3ugcikzjfDAaDkfXzGLDdsHLgK+deusCa37fi9T9Clp2K3Z1iU HOF3r660l42VECC8Is45OTvP2HSKeztBUkH1bH6F9pEInnvHPNO1z+E0JK/v3bp/ ds2cRbpsk/0ITlt6h/vHA9Jbqb0wWo6EDhpXmJdoUEz59dl9XS4eOjfFySlOuA+s 1fK11gG3rNXAaTlGyRuQyQECN3BVBF0H6rpePj5zdgRW8i/GpXUg6eApuKcHTO7/ VvfLqG4xZzGgeFM0XY9IRPvFacqg/JliIflPAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU8rDMjoYsUiCos8vfHISXPXGOR6YwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5LzhyRE1qb1lzVWlDb3M4dmZISVNYUFhHT1I2WS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBALcn9wwDQYJKoZIhvcNAQELBQADggEBAIG2SY4notSWhR0GBOpSvBDLuM2q dUOfcdL2nPKAotq43rA+HXBm6xdho3AGg9HIH/xcvGluQdU0jA8HKWr6V6tFN42x t0/Dix9AgpJ0jJZeWeURHeK+wykeTosKR/XscH8jLQQOLlz5bcRj1ApXI6fPODnI aY/SI6xG8KVWFbTD6q24U8zcVk6gIuP76urjbY4hrAqnQ1xMU8u+UtyCDeKcfq7c q2fdBtZRB15iByL0CyZ/0Y9wBtfytHDsHbIjAfiwEq9sci0+caMRTbh9JVQ553/B nLaR3rUz5U05tsJEhJ4O+IHClBkoWMJ1lZDY7vMolcRMWwWg+/SZnUgPUyc= -----END CERTIFICATE-----Generated at Fri Nov 22 14:21:19 2024 by rpki-client on console-ams.rpki-client.org