$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Ggvi7PX71Y4Sw7CQ6kqeMG8qMeM.roa File: Ggvi7PX71Y4Sw7CQ6kqeMG8qMeM.roa (raw, json) Hash identifier: HbaijFL/0pa/3Y6qjRaskpKJQ/jOvtYmYZHCyajauss= Subject key identifier: 1A:0B:E2:EC:F5:FB:D5:8E:12:C3:B0:90:EA:4A:9E:30:6F:2A:31:E3 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 090C Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Ggvi7PX71Y4Sw7CQ6kqeMG8qMeM.roa Signing time: Tue 30 Apr 2024 02:28:42 +0000 ROA not before: Tue 30 Apr 2024 02:28:42 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 1.75.210.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2316 (0x90c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 30 02:28:42 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=1A0BE2ECF5FBD58E12C3B090EA4A9E306F2A31E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:af:ea:59:d5:8f:e0:cc:40:1c:c4:2b:ef:49: fe:e2:66:7b:47:e1:61:ce:d3:0e:63:54:7e:a1:20: 88:49:06:23:9c:80:ed:72:1a:cb:c9:6f:23:a3:bb: 70:b0:5b:f1:25:8d:e6:5f:1a:9a:ee:9b:f4:d6:df: 39:69:46:85:ea:c7:9c:35:82:2d:58:04:5c:66:be: 3c:5e:f1:ea:75:de:16:ce:1b:37:08:e4:d7:a7:d2: 4b:4e:d1:ad:0a:d5:93:65:53:22:fc:3d:b5:22:6b: a1:8f:28:d5:da:9f:aa:07:28:59:85:54:83:b4:bc: a0:2a:11:83:4a:a4:75:e4:71:b4:ac:82:fd:6e:5b: ae:d6:01:21:fe:54:24:86:10:43:29:fe:f3:50:c8: 39:18:79:71:fe:61:af:d0:92:d0:5b:96:c4:20:4c: 68:e6:a2:85:70:fb:d6:8e:06:97:58:2c:be:bf:ba: 8d:68:29:86:37:10:21:45:1d:b3:fc:f6:9c:20:1a: d0:ee:d1:08:c1:82:77:fe:ef:91:7a:c8:d0:30:35: d4:1b:9c:d6:d1:21:1d:d8:33:7f:08:9b:64:6e:c9: 39:a3:68:ea:b0:27:b5:59:03:cb:97:5a:50:86:75: fc:5b:4b:8c:0b:3a:df:9d:dd:a8:72:90:c8:8d:f3: e5:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:0B:E2:EC:F5:FB:D5:8E:12:C3:B0:90:EA:4A:9E:30:6F:2A:31:E3 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Ggvi7PX71Y4Sw7CQ6kqeMG8qMeM.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.75.210.0/23 Signature Algorithm: sha256WithRSAEncryption 14:8d:17:18:61:d2:0f:3e:bf:be:c2:58:24:93:bb:ad:13:74: 2e:49:fa:c4:c8:40:84:a4:00:e2:a8:3c:d9:4e:b2:14:89:10: 4e:c4:e8:2f:a9:8c:41:55:84:a6:ff:b6:3c:fe:8f:01:ed:c4: 91:0c:72:98:d9:4a:20:df:b1:2b:a0:ff:97:94:4b:c2:d7:a9: 69:71:2c:98:97:d2:5e:7e:ae:80:95:6d:bc:94:0f:f4:49:78: e0:09:c9:be:1a:4d:fc:4e:25:86:58:cc:93:e6:e6:77:e4:fc: 83:dd:49:3a:23:b4:82:2a:3f:69:ce:4e:59:fe:b9:92:a2:20: 08:9c:75:15:3f:c3:18:3f:f3:9d:7b:8b:c8:11:91:17:8b:54: 07:e1:91:93:12:cd:e1:9f:10:a7:9b:71:d3:18:ff:6a:80:77: 87:43:e1:f0:e8:7b:7b:c0:c9:02:8c:9b:df:e3:70:3e:5c:7d: 35:c0:5f:4f:3a:34:e4:7d:dc:08:ed:2d:5b:85:86:60:c5:4b: 2f:3a:89:f8:9b:b7:fe:5f:3c:0b:9a:d2:fa:3b:8f:04:14:9b: 51:ee:9c:c0:98:8c:24:d7:13:28:27:7d:de:ba:3c:ba:3e:e0: 2a:c3:86:df:df:e9:79:17:28:b5:e0:54:3e:85:ed:e5:b8:aa: 57:e1:40:24 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCQwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw MjI4NDJaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDFBMEJFMkVDRjVGQkQ1 OEUxMkMzQjA5MEVBNEE5RTMwNkYyQTMxRTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDWr+pZ1Y/gzEAcxCvvSf7iZntH4WHO0w5jVH6hIIhJBiOcgO1y GsvJbyOju3CwW/EljeZfGprum/TW3zlpRoXqx5w1gi1YBFxmvjxe8ep13hbOGzcI 5Nen0ktO0a0K1ZNlUyL8PbUia6GPKNXan6oHKFmFVIO0vKAqEYNKpHXkcbSsgv1u W67WASH+VCSGEEMp/vNQyDkYeXH+Ya/QktBblsQgTGjmooVw+9aOBpdYLL6/uo1o KYY3ECFFHbP89pwgGtDu0QjBgnf+75F6yNAwNdQbnNbRIR3YM38Im2RuyTmjaOqw J7VZA8uXWlCGdfxbS4wLOt+d3ahykMiN8+XvAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUGgvi7PX71Y4Sw7CQ6kqeMG8qMeMwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0dndmk3UFg3MVk0U3c3Q1E2a3FlTUc4cU1lTS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEBS9IwDQYJKoZIhvcNAQELBQADggEBABSNFxhh0g8+v77CWCSTu60TdC5J +sTIQISkAOKoPNlOshSJEE7E6C+pjEFVhKb/tjz+jwHtxJEMcpjZSiDfsSug/5eU S8LXqWlxLJiX0l5+roCVbbyUD/RJeOAJyb4aTfxOJYZYzJPm5nfk/IPdSTojtIIq P2nOTln+uZKiIAicdRU/wxg/8517i8gRkReLVAfhkZMSzeGfEKebcdMY/2qAd4dD 4fDoe3vAyQKMm9/jcD5cfTXAX086NOR93AjtLVuFhmDFSy86ifibt/5fPAua0vo7 jwQUm1HunMCYjCTXEygnfd66PLo+4CrDht/f6XkXKLXgVD6F7eW4qlfhQCQ= -----END CERTIFICATE-----Generated at Sat Jun 1 13:38:47 2024 by rpki-client on console-fra.rpki-client.org