$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/EYpOEOZxs7i9xpVAkduEsc6gigI.roa File: EYpOEOZxs7i9xpVAkduEsc6gigI.roa (raw, json) Hash identifier: QZwX9p/KB7q5u6KbOrNcpvo+DAFXhEXB/3djcuBvy/c= Subject key identifier: 11:8A:4E:10:E6:71:B3:B8:BD:C6:95:40:91:DB:84:B1:CE:A0:8A:02 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0629 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/EYpOEOZxs7i9xpVAkduEsc6gigI.roa Signing time: Thu 29 Feb 2024 01:41:03 +0000 ROA not before: Thu 29 Feb 2024 01:41:03 +0000 ROA not after: Fri 14 Feb 2025 01:30:03 +0000 asID: 9605 IP address blocks: 1.72.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1577 (0x629) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Feb 29 01:41:03 2024 GMT Not After : Feb 14 01:30:03 2025 GMT Subject: CN=118A4E10E671B3B8BDC6954091DB84B1CEA08A02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ff:29:ef:a0:a1:4e:9b:13:14:94:de:55:57: 40:bd:19:bc:ec:8c:ea:74:5e:3e:e8:e5:35:20:c4: 99:e4:d7:cd:04:c8:3b:af:77:94:d4:9b:82:96:92: ed:36:35:b0:17:97:ad:88:88:d7:44:68:7a:2f:07: 75:1f:6c:42:63:33:d4:4c:6a:5b:b0:04:e9:ee:d4: 2a:a5:b0:ab:11:f5:75:1a:99:9c:ec:03:48:fe:8f: 15:0f:d7:7e:e5:b9:9c:dc:e9:88:f6:42:9a:0a:91: bf:e5:96:15:ff:81:5b:93:cc:1d:55:63:46:ea:d7: 82:01:c1:37:72:ca:b8:ea:cd:5d:8e:f7:99:d1:2f: ae:30:bc:b4:0f:ca:c5:03:7c:06:3c:4a:0d:89:8a: 68:21:b8:37:52:61:66:01:2a:57:cf:5f:4f:30:07: 27:cb:e6:67:71:39:9e:d0:3e:5d:86:6f:f4:46:fe: 50:16:7d:f5:54:42:94:a8:81:d9:e0:9b:11:c0:8f: 5e:b4:a6:37:65:35:5d:44:4c:69:83:88:f6:75:8e: 0d:39:39:a6:bb:89:f0:b7:b4:7f:5f:ed:0c:4d:00: e2:e1:df:2c:e6:1c:4b:c7:65:29:71:a6:c7:d7:55: b1:59:d7:5c:93:a7:6b:9d:a2:6f:15:1b:48:09:6b: ec:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:8A:4E:10:E6:71:B3:B8:BD:C6:95:40:91:DB:84:B1:CE:A0:8A:02 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/EYpOEOZxs7i9xpVAkduEsc6gigI.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.72.4.0/24 Signature Algorithm: sha256WithRSAEncryption df:fb:b0:14:73:bd:f5:ec:e2:53:e2:90:ae:af:e1:11:02:bc: 7f:3c:ba:91:79:de:cc:f0:8a:8a:3b:1a:1f:f6:06:46:a6:d6: 89:b8:9b:c4:5f:7e:88:88:d6:d6:a0:09:ec:14:83:34:6f:a0: 88:81:a2:b7:fa:54:2e:47:37:1d:13:9a:13:c9:b4:99:74:6d: fd:62:80:fb:a8:28:88:89:d5:bd:da:5b:cc:c7:4b:da:45:94: 2e:ac:0b:1b:a0:25:cb:d8:79:f8:22:14:a6:37:32:36:b8:f3: b5:8d:58:0c:d7:86:f1:18:f9:6e:d9:fb:f4:10:1b:88:56:f6: 49:90:5c:21:95:06:48:f1:42:28:92:37:99:95:bc:3f:7c:23: 87:7c:e4:67:f5:c4:4c:cd:78:5e:c6:c6:07:d6:64:90:8c:d1: 05:9f:7f:56:7e:80:43:67:45:51:31:fe:af:51:17:18:ed:47: 5d:ac:38:0d:fe:f0:10:51:c6:87:d9:d6:f6:04:b4:d1:c5:dd: 95:e6:ca:63:c3:66:dc:5a:4f:3c:f1:2f:25:66:f1:ca:a4:46: e7:71:24:79:19:28:ef:a4:5d:e9:e9:2c:56:ef:f1:6e:03:4a: a0:a2:26:2d:8c:2f:ea:b0:e6:b5:06:6c:b8:6b:e2:1d:a4:91: 6c:94:e4:90 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBikwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDAyMjkw MTQxMDNaFw0yNTAyMTQwMTMwMDNaMDMxMTAvBgNVBAMTKDExOEE0RTEwRTY3MUIz QjhCREM2OTU0MDkxREI4NEIxQ0VBMDhBMDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+/ynvoKFOmxMUlN5VV0C9GbzsjOp0Xj7o5TUgxJnk180EyDuv d5TUm4KWku02NbAXl62IiNdEaHovB3UfbEJjM9RMaluwBOnu1CqlsKsR9XUamZzs A0j+jxUP137luZzc6Yj2QpoKkb/llhX/gVuTzB1VY0bq14IBwTdyyrjqzV2O95nR L64wvLQPysUDfAY8Sg2JimghuDdSYWYBKlfPX08wByfL5mdxOZ7QPl2Gb/RG/lAW ffVUQpSogdngmxHAj160pjdlNV1ETGmDiPZ1jg05Oaa7ifC3tH9f7QxNAOLh3yzm HEvHZSlxpsfXVbFZ11yTp2udom8VG0gJa+yVAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUEYpOEOZxs7i9xpVAkduEsc6gigIwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0VZcE9FT1p4czdpOXhwVkFrZHVFc2M2Z2lnSS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAABSAQwDQYJKoZIhvcNAQELBQADggEBAN/7sBRzvfXs4lPikK6v4RECvH88 upF53szwioo7Gh/2Bkam1om4m8RffoiI1tagCewUgzRvoIiBorf6VC5HNx0TmhPJ tJl0bf1igPuoKIiJ1b3aW8zHS9pFlC6sCxugJcvYefgiFKY3Mja487WNWAzXhvEY +W7Z+/QQG4hW9kmQXCGVBkjxQiiSN5mVvD98I4d85Gf1xEzNeF7GxgfWZJCM0QWf f1Z+gENnRVEx/q9RFxjtR12sOA3+8BBRxofZ1vYEtNHF3ZXmymPDZtxaTzzxLyVm 8cqkRudxJHkZKO+kXenpLFbv8W4DSqCiJi2ML+qw5rUGbLhr4h2kkWyU5JA= -----END CERTIFICATE-----Generated at Sat Jun 1 13:38:46 2024 by rpki-client on console-fra.rpki-client.org