$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/8wJwbbqK3nvcgmACG2Mrk-Y1ytQ.roa File: 8wJwbbqK3nvcgmACG2Mrk-Y1ytQ.roa (raw, json) Hash identifier: RUhSWFScy2Bmb3KPE1LcdeJj45eEJd+2/6k8dGv1qXM= Subject key identifier: F3:02:70:6D:BA:8A:DE:7B:DC:82:60:02:1B:63:2B:93:E6:35:CA:D4 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 096C Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/8wJwbbqK3nvcgmACG2Mrk-Y1ytQ.roa Signing time: Sun 30 Jun 2024 01:33:37 +0000 ROA not before: Sun 30 Jun 2024 01:33:37 +0000 ROA not after: Tue 24 Jun 2025 10:46:45 +0000 asID: 9605 IP address blocks: 1.76.74.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:41:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2412 (0x96c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 30 01:33:37 2024 GMT Not After : Jun 24 10:46:45 2025 GMT Subject: CN=F302706DBA8ADE7BDC8260021B632B93E635CAD4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:1b:a7:5e:a3:20:e1:ef:d4:f6:1c:4e:19:66: 0c:d0:53:4c:61:d6:91:76:68:d4:f0:d9:84:ef:c0: d9:e8:ce:82:5b:b8:7c:cc:d9:9f:db:97:4f:e1:42: 2f:d3:0f:4a:ed:52:4c:62:0c:60:0a:f9:04:01:10: 1c:8e:03:ed:85:6b:ae:bb:51:70:96:91:43:3c:dd: 30:3f:8a:42:72:cc:81:96:25:92:b8:68:2e:ad:3d: b9:a9:a2:5d:76:6d:d6:75:69:94:9b:f4:eb:5f:83: 64:52:e7:bb:cc:22:81:4a:8f:44:fa:82:08:bb:17: 9d:5e:29:51:9e:3f:21:0c:06:09:08:bb:35:82:a8: 09:82:16:3e:37:3a:3a:d6:1e:4a:58:2a:3d:71:29: 9c:1b:e9:84:0b:41:4e:92:59:14:2e:19:19:cb:6d: 48:95:e7:3b:1a:2f:09:c2:d2:c1:22:e3:87:85:c2: 1b:88:40:46:7b:09:c8:ba:87:75:e0:ab:98:2d:b5: c3:88:65:0b:8b:1f:42:b3:57:f7:11:9c:9d:1e:f3: 5f:25:7b:1f:3c:61:c6:61:8b:52:d6:34:3d:f0:9d: 30:fb:5a:68:8e:ae:3b:93:a2:c4:9b:8e:fe:68:ba: 42:6e:e9:bb:05:a4:39:8c:52:d6:9c:4d:6b:3d:05: be:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:02:70:6D:BA:8A:DE:7B:DC:82:60:02:1B:63:2B:93:E6:35:CA:D4 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/8wJwbbqK3nvcgmACG2Mrk-Y1ytQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.76.74.0/23 Signature Algorithm: sha256WithRSAEncryption 5a:67:7d:e5:f4:a1:be:00:b9:27:99:23:e0:a9:fd:81:53:0f: 8f:af:c8:d9:2c:33:f2:7b:69:a6:b8:49:4c:ed:67:c5:70:a1: ba:2f:0c:c6:d6:2c:52:1c:90:d3:44:f7:33:af:ef:46:79:02: 97:9a:fd:b7:4a:3b:df:44:76:74:5e:1e:92:e9:49:f6:56:05: d1:d9:b5:8c:77:4c:53:fc:20:be:90:1d:ec:36:30:0a:8f:04: a1:d7:d2:8e:46:46:3e:a7:e6:f0:9b:04:6e:53:29:7f:2b:74: a7:9c:19:75:85:ea:79:2a:20:ea:ea:44:75:10:d1:ca:e3:02: 50:f7:3e:19:26:fd:78:d0:d5:6e:5e:59:85:7f:2f:9f:24:b2: dc:ac:d2:44:79:0e:c8:34:f2:88:84:38:67:8b:53:ac:ef:6b: 8f:89:21:bf:ab:11:6f:4f:eb:d6:9b:77:15:d3:40:54:59:9e: b2:db:38:76:ae:a5:40:52:c8:bb:18:5a:6f:5a:ba:09:7b:bd: 1d:fd:70:02:01:d7:f2:38:01:a8:a3:dc:57:74:2c:43:92:9e: 09:94:5f:92:d1:51:7f:ab:8e:20:62:bf:17:54:15:5f:d4:48: 81:0b:45:4b:f2:27:ab:c9:3c:04:17:cd:80:ba:a1:fa:40:b2: e9:eb:cc:6c -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCWwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA2MzAw MTMzMzdaFw0yNTA2MjQxMDQ2NDVaMDMxMTAvBgNVBAMTKEYzMDI3MDZEQkE4QURF N0JEQzgyNjAwMjFCNjMyQjkzRTYzNUNBRDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDHG6deoyDh79T2HE4ZZgzQU0xh1pF2aNTw2YTvwNnozoJbuHzM 2Z/bl0/hQi/TD0rtUkxiDGAK+QQBEByOA+2Fa667UXCWkUM83TA/ikJyzIGWJZK4 aC6tPbmpol12bdZ1aZSb9Otfg2RS57vMIoFKj0T6ggi7F51eKVGePyEMBgkIuzWC qAmCFj43OjrWHkpYKj1xKZwb6YQLQU6SWRQuGRnLbUiV5zsaLwnC0sEi44eFwhuI QEZ7Cci6h3Xgq5gttcOIZQuLH0KzV/cRnJ0e818lex88YcZhi1LWND3wnTD7WmiO rjuTosSbjv5oukJu6bsFpDmMUtacTWs9Bb6JAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU8wJwbbqK3nvcgmACG2Mrk+Y1ytQwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5Lzh3SndiYnFLM252Y2dtQUNHMk1yay1ZMXl0US5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEBTEowDQYJKoZIhvcNAQELBQADggEBAFpnfeX0ob4AuSeZI+Cp/YFTD4+v yNksM/J7aaa4SUztZ8VwobovDMbWLFIckNNE9zOv70Z5Apea/bdKO99EdnReHpLp SfZWBdHZtYx3TFP8IL6QHew2MAqPBKHX0o5GRj6n5vCbBG5TKX8rdKecGXWF6nkq IOrqRHUQ0crjAlD3Phkm/XjQ1W5eWYV/L58kstys0kR5Dsg08oiEOGeLU6zva4+J Ib+rEW9P69abdxXTQFRZnrLbOHaupUBSyLsYWm9augl7vR39cAIB1/I4Aaij3Fd0 LEOSngmUX5LRUX+rjiBivxdUFV/USIELRUvyJ6vJPAQXzYC6ofpAsunrzGw= -----END CERTIFICATE-----Generated at Fri Nov 22 15:23:59 2024 by rpki-client on console-fra.rpki-client.org