$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/CKgZCPwFOg9Rq_bU9nWGTjm5paw.roa File: CKgZCPwFOg9Rq_bU9nWGTjm5paw.roa (raw, json) Hash identifier: Qu9jaIKR+pNNGl8vN7t2aJalQl/PEeni4oJDazfeydE= Subject key identifier: 08:A8:19:08:FC:05:3A:0F:51:AB:F6:D4:F6:75:86:4E:39:B9:A5:AC Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 06E5 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/CKgZCPwFOg9Rq_bU9nWGTjm5paw.roa Signing time: Tue 30 Apr 2024 01:49:39 +0000 ROA not before: Tue 30 Apr 2024 01:49:39 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 1.79.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 23 Jun 2024 11:53:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1765 (0x6e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 30 01:49:39 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=08A81908FC053A0F51ABF6D4F675864E39B9A5AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:09:12:7e:90:55:44:d6:f1:bf:2d:c0:36:f1: 1b:f4:a8:c3:95:39:f4:2a:ad:1c:9a:c9:cd:9e:10: 3e:b3:74:be:ee:64:11:fc:35:b0:a0:b9:84:27:f1: d0:03:b4:82:70:b5:cb:24:2e:77:01:78:26:9a:b4: cd:7e:18:76:03:f1:14:0e:1b:d6:bd:90:aa:13:96: d3:63:1e:93:28:e5:10:0e:a0:85:a7:f1:f2:7d:1f: 9c:30:38:47:0b:aa:28:ef:64:f8:85:23:72:19:46: d9:ab:54:26:a4:e7:ab:5c:2c:77:4f:4b:27:64:a6: b4:6d:87:8c:88:ff:cf:ce:10:a4:56:2c:4d:b1:71: 6a:22:cc:e8:c0:5f:59:f4:26:4d:10:f7:44:13:46: dd:4a:11:a4:94:74:fc:83:55:b2:39:24:c9:53:12: 01:e5:64:46:1b:c2:3a:05:61:1c:b9:d9:28:f7:8d: 39:d5:65:0d:b0:07:a8:30:62:be:68:2f:63:65:73: 0c:c7:b0:f7:a9:6f:4e:de:12:a4:bb:43:28:77:1c: 50:ea:10:d3:ad:4e:78:53:90:30:95:a0:6b:56:98: cb:25:fd:28:36:37:4a:7d:65:06:a4:92:34:46:80: d1:45:df:59:20:f8:8b:ae:7e:1d:58:0e:f6:ab:a5: 4b:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:A8:19:08:FC:05:3A:0F:51:AB:F6:D4:F6:75:86:4E:39:B9:A5:AC X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/CKgZCPwFOg9Rq_bU9nWGTjm5paw.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.79.31.0/24 Signature Algorithm: sha256WithRSAEncryption 40:ba:4f:b9:1d:99:a7:ef:49:6c:c7:fe:cf:27:6a:09:95:ca: 0f:36:c5:f4:02:b5:fc:89:eb:65:be:00:0e:ac:d2:36:69:28: e6:1f:2d:7b:4c:2a:4f:6a:f2:5d:00:7d:aa:f9:de:ee:a6:64: 9f:fe:c2:1d:f5:dc:fb:94:cf:18:30:cb:76:af:90:e7:79:c9: bb:cb:a7:58:50:ad:f4:03:bb:78:7f:3c:7f:6e:79:d6:3a:7a: 19:a9:7f:6e:c3:4c:0b:6c:31:d1:eb:98:38:ef:12:63:1f:c8: b3:e8:7d:41:28:a0:bc:0f:e8:2c:85:54:3f:95:8f:ee:dd:71: 88:da:6a:03:e3:0d:f6:cb:ab:7b:6a:bb:41:80:ce:ca:ef:18: 11:10:06:3e:8f:e5:0d:e8:d1:f0:ca:06:1d:b4:88:bf:a5:c4: 4b:6c:ef:bf:3a:18:c2:ae:58:4e:5d:fb:1d:2e:c8:00:fd:a0: 89:f2:a9:08:9d:5a:df:30:45:fb:5a:2f:4c:c6:d3:e1:56:8c: 94:e2:36:23:25:1c:26:ff:ad:62:15:1f:23:11:52:dc:d7:19: 6a:00:69:aa:38:06:fa:a5:eb:b3:fa:59:9c:36:df:13:d9:c6: 80:5b:d6:c3:36:a9:5a:09:d2:d8:2f:36:5a:24:28:23:fd:be: 87:6a:bc:4f -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBuUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw MTQ5MzlaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDA4QTgxOTA4RkMwNTNB MEY1MUFCRjZENEY2NzU4NjRFMzlCOUE1QUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCkCRJ+kFVE1vG/LcA28Rv0qMOVOfQqrRyayc2eED6zdL7uZBH8 NbCguYQn8dADtIJwtcskLncBeCaatM1+GHYD8RQOG9a9kKoTltNjHpMo5RAOoIWn 8fJ9H5wwOEcLqijvZPiFI3IZRtmrVCak56tcLHdPSydkprRth4yI/8/OEKRWLE2x cWoizOjAX1n0Jk0Q90QTRt1KEaSUdPyDVbI5JMlTEgHlZEYbwjoFYRy52Sj3jTnV ZQ2wB6gwYr5oL2NlcwzHsPepb07eEqS7Qyh3HFDqENOtTnhTkDCVoGtWmMsl/Sg2 N0p9ZQakkjRGgNFF31kg+Iuufh1YDvarpUuVAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUCKgZCPwFOg9Rq/bU9nWGTjm5pawwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0NLZ1pDUHdGT2c5UnFfYlU5bldHVGptNXBhdy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAABTx8wDQYJKoZIhvcNAQELBQADggEBAEC6T7kdmafvSWzH/s8nagmVyg82 xfQCtfyJ62W+AA6s0jZpKOYfLXtMKk9q8l0Afar53u6mZJ/+wh313PuUzxgwy3av kOd5ybvLp1hQrfQDu3h/PH9uedY6ehmpf27DTAtsMdHrmDjvEmMfyLPofUEooLwP 6CyFVD+Vj+7dcYjaagPjDfbLq3tqu0GAzsrvGBEQBj6P5Q3o0fDKBh20iL+lxEts 7786GMKuWE5d+x0uyAD9oInyqQidWt8wRftaL0zG0+FWjJTiNiMlHCb/rWIVHyMR UtzXGWoAaao4Bvql67P6WZw23xPZxoBb1sM2qVoJ0tgvNlokKCP9vodqvE8= -----END CERTIFICATE-----Generated at Sun Jun 16 14:31:52 2024 by rpki-client on console-ams.rpki-client.org