$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/AeQjZLDc_0zmAUJ81JbBKhM3ixk.roa File: AeQjZLDc_0zmAUJ81JbBKhM3ixk.roa (raw, json) Hash identifier: 05WlY5IJKcNxmYNOQdXunUS6AOv97Em0MDLbGpBfjjs= Subject key identifier: 01:E4:23:64:B0:DC:FF:4C:E6:01:42:7C:D4:96:C1:2A:13:37:8B:19 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 083D Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/AeQjZLDc_0zmAUJ81JbBKhM3ixk.roa Signing time: Tue 30 Apr 2024 02:14:31 +0000 ROA not before: Tue 30 Apr 2024 02:14:31 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 211.14.92.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2109 (0x83d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 30 02:14:31 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=01E42364B0DCFF4CE601427CD496C12A13378B19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:9c:a8:2b:b8:0a:36:c6:f8:ba:b6:8b:c5:03: 44:9e:b6:57:29:3a:e0:a6:09:85:18:0f:ed:d5:54: 2e:56:b2:52:f6:08:b6:2c:e9:e1:2b:06:71:0e:23: c0:23:36:66:9f:b3:fd:20:84:63:32:1f:54:34:3e: 80:fd:6e:56:0a:2e:42:ff:fa:d7:9f:f6:08:08:c0: ab:30:34:1f:d6:1b:85:b6:dc:19:e3:cb:e5:ff:79: fc:4a:07:7c:90:eb:ec:27:eb:93:54:fb:62:e1:97: 36:c6:e7:cf:54:f0:fc:9c:3e:1a:79:c0:e6:6f:c5: c2:09:be:9a:4f:91:d5:59:e2:68:f5:92:27:dc:ed: d5:b6:e3:62:ed:7e:4e:6a:ae:b5:a7:f8:9d:b2:d8: d3:93:ed:c4:25:27:14:49:82:56:cd:b8:58:b7:5b: 52:f6:32:e2:76:08:ad:2c:fa:4d:ee:c4:09:ab:c6: 3a:73:90:ea:e4:1f:3d:4f:b9:bb:7f:38:67:d6:8e: a1:36:37:56:6d:ee:0f:b7:f6:eb:b8:5a:b6:b7:69: 57:86:6a:fb:bb:00:ea:96:b9:30:7a:ac:3c:05:60: 9a:32:0c:39:8f:4b:88:c7:03:9f:55:e1:a7:70:54: 6e:d8:ca:5e:5e:7e:52:16:17:b6:4b:3f:d9:06:f1: a0:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:E4:23:64:B0:DC:FF:4C:E6:01:42:7C:D4:96:C1:2A:13:37:8B:19 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/AeQjZLDc_0zmAUJ81JbBKhM3ixk.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 211.14.92.0/23 Signature Algorithm: sha256WithRSAEncryption 9a:64:5a:76:81:d5:e5:c8:d9:c1:f8:2a:b8:ee:48:96:70:fb: 0c:93:f6:a8:0f:e9:5f:1a:2d:08:59:ee:45:eb:4f:6c:04:ab: e2:75:44:31:20:b0:89:4e:ea:b1:5a:26:1f:6a:6f:82:b4:86: 04:f1:24:82:cd:e8:c0:ec:4e:cb:76:85:87:85:75:2d:1e:ef: 9c:82:e3:68:58:8c:dc:28:9a:6b:0b:b2:2b:45:bf:f8:09:3a: 1a:95:23:80:74:bf:7d:4f:a3:ed:d8:ee:e8:67:47:42:06:08: 73:fb:c6:b4:c8:48:5d:98:7c:9e:ac:48:f3:73:22:2e:b1:d5: 8b:bf:f6:ca:e3:a7:3d:28:5f:a4:c3:a0:3b:2d:43:91:b9:2b: 6a:7e:6a:f0:75:58:43:03:96:3b:12:ac:ca:dc:cd:7c:82:fa: 28:99:09:03:61:2f:2a:6a:43:81:33:a7:7e:7c:6c:b6:d0:14: cc:89:cb:48:f0:9b:09:64:b4:d9:a0:8c:da:89:c2:4a:40:78: cb:c8:fa:9b:a7:68:69:1d:ea:a7:c8:a3:ea:e7:c8:7c:b0:66: 30:25:83:43:ee:ae:98:c3:8e:c8:6f:cd:d5:2a:46:47:db:e8: 37:af:ac:f9:5d:68:94:52:59:bc:91:8e:da:76:f1:c0:34:c4: d3:03:21:39 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCD0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw MjE0MzFaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDAxRTQyMzY0QjBEQ0ZG NENFNjAxNDI3Q0Q0OTZDMTJBMTMzNzhCMTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDMnKgruAo2xvi6tovFA0SetlcpOuCmCYUYD+3VVC5WslL2CLYs 6eErBnEOI8AjNmafs/0ghGMyH1Q0PoD9blYKLkL/+tef9ggIwKswNB/WG4W23Bnj y+X/efxKB3yQ6+wn65NU+2LhlzbG589U8PycPhp5wOZvxcIJvppPkdVZ4mj1kifc 7dW242Ltfk5qrrWn+J2y2NOT7cQlJxRJglbNuFi3W1L2MuJ2CK0s+k3uxAmrxjpz kOrkHz1Pubt/OGfWjqE2N1Zt7g+39uu4Wra3aVeGavu7AOqWuTB6rDwFYJoyDDmP S4jHA59V4adwVG7Yyl5eflIWF7ZLP9kG8aDvAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUAeQjZLDc/0zmAUJ81JbBKhM3ixkwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0FlUWpaTERjXzB6bUFVSjgxSmJCS2hNM2l4ay5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAHTDlwwDQYJKoZIhvcNAQELBQADggEBAJpkWnaB1eXI2cH4KrjuSJZw+wyT 9qgP6V8aLQhZ7kXrT2wEq+J1RDEgsIlO6rFaJh9qb4K0hgTxJILN6MDsTst2hYeF dS0e75yC42hYjNwommsLsitFv/gJOhqVI4B0v31Po+3Y7uhnR0IGCHP7xrTISF2Y fJ6sSPNzIi6x1Yu/9srjpz0oX6TDoDstQ5G5K2p+avB1WEMDljsSrMrczXyC+iiZ CQNhLypqQ4Ezp358bLbQFMyJy0jwmwlktNmgjNqJwkpAeMvI+punaGkd6qfIo+rn yHywZjAlg0PurpjDjshvzdUqRkfb6DevrPldaJRSWbyRjtp28cA0xNMDITk= -----END CERTIFICATE-----Generated at Sat Jun 1 13:38:46 2024 by rpki-client on console-fra.rpki-client.org