$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/HRiOQVpAT2MrawKZicz4vdEP4UM.roa File: HRiOQVpAT2MrawKZicz4vdEP4UM.roa (raw, json) Hash identifier: N6lFf25JG/mKIIUPLsM/nmkDw7OMEzj+jwNJLjYSNJE= Subject key identifier: 1D:18:8E:41:5A:40:4F:63:2B:6B:02:99:89:CC:F8:BD:D1:0F:E1:43 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 09CA Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/HRiOQVpAT2MrawKZicz4vdEP4UM.roa Signing time: Sun 30 Jun 2024 01:40:27 +0000 ROA not before: Sun 30 Jun 2024 01:40:27 +0000 ROA not after: Tue 24 Jun 2025 10:46:45 +0000 asID: 9605 IP address blocks: 110.161.192.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:41:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2506 (0x9ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 30 01:40:27 2024 GMT Not After : Jun 24 10:46:45 2025 GMT Subject: CN=1D188E415A404F632B6B029989CCF8BDD10FE143 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:9f:b5:9b:f5:47:e4:a0:85:7f:d7:eb:62:12: f8:d3:6f:df:06:c3:de:0a:d4:78:80:e3:33:f2:bb: 07:f6:64:d3:c4:a3:c1:60:52:a3:57:84:31:1f:25: c5:08:b2:83:ff:64:6d:f1:d7:2d:53:01:ac:0f:d2: c7:62:8f:15:0a:7d:24:a0:56:ee:11:92:19:6d:d0: f6:7d:63:41:67:8e:f0:08:92:84:0d:46:09:bb:b1: 0e:4a:74:0f:4c:85:2c:7c:e9:53:97:de:8a:cd:73: 3d:e5:1e:d0:f6:b4:e3:e9:17:22:98:b7:eb:b0:ef: f0:4a:66:30:22:7e:0a:54:26:73:bb:18:f0:7d:0a: 05:ac:14:ff:53:4b:60:10:c8:44:1b:2c:05:58:33: 8f:2d:2d:11:dc:8c:51:5c:3e:53:5b:67:f3:54:24: 6b:46:8b:9c:0d:7c:71:ca:b4:9d:5f:7e:b3:cc:27: d6:92:57:12:99:59:0e:0c:8e:92:33:8d:00:87:2e: 31:9b:95:58:af:c2:85:df:66:da:c5:92:4e:b6:20: f4:52:2d:5d:ad:0e:4d:df:5b:4d:cc:fe:88:47:7d: 01:e3:3a:f1:a8:b5:a4:73:bd:b3:d1:c0:b8:6c:9d: 8f:1c:dd:68:92:62:4f:8f:2a:c9:3d:5c:39:fd:55: d6:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:18:8E:41:5A:40:4F:63:2B:6B:02:99:89:CC:F8:BD:D1:0F:E1:43 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/HRiOQVpAT2MrawKZicz4vdEP4UM.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 110.161.192.0/23 Signature Algorithm: sha256WithRSAEncryption d3:56:80:2d:87:a7:70:93:36:1d:33:3d:e3:5d:2a:bb:f4:75: d5:b2:63:14:81:c7:a8:ed:7f:a1:54:61:f6:98:e2:2c:6d:95: 0c:e9:62:a6:68:f9:df:e8:43:38:10:de:0c:de:29:91:a3:61: 62:ee:97:a8:10:38:5a:76:61:4d:8c:02:4a:8a:d6:07:f6:9c: 7f:f0:74:d7:f2:a2:ab:21:24:df:eb:64:f1:1e:4a:dd:83:e5: 5f:bf:27:ca:79:3d:20:a9:ba:e7:ae:3f:21:d0:e1:84:e6:33: 9f:72:1e:2c:f1:f0:20:27:5d:52:55:c3:74:3c:f7:c6:a0:e0: 8a:e6:b7:a1:49:bb:11:a6:a1:b5:34:12:49:10:71:8d:f8:7f: 03:22:ac:0e:a8:bf:ec:0d:c9:aa:ee:40:12:5c:bc:95:d1:72: 6a:13:73:d1:48:4f:15:50:e6:ff:6f:f6:b9:6b:79:bf:b8:95: 8b:d6:2c:e6:ed:2b:ee:14:34:3c:4d:ac:9d:e6:b3:7c:c7:b4: 85:18:05:18:fd:ef:1e:d7:4c:64:cf:0e:15:36:7f:61:b6:99: 00:5e:d7:39:d6:5c:92:b7:ca:c1:51:4b:7f:61:b6:85:a0:2a: 69:e6:d8:98:e6:81:fa:13:1e:65:82:b8:c8:f3:eb:bd:8d:cd: f3:8b:ad:28 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCcowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA2MzAw MTQwMjdaFw0yNTA2MjQxMDQ2NDVaMDMxMTAvBgNVBAMTKDFEMTg4RTQxNUE0MDRG NjMyQjZCMDI5OTg5Q0NGOEJERDEwRkUxNDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC/n7Wb9UfkoIV/1+tiEvjTb98Gw94K1HiA4zPyuwf2ZNPEo8Fg UqNXhDEfJcUIsoP/ZG3x1y1TAawP0sdijxUKfSSgVu4Rkhlt0PZ9Y0FnjvAIkoQN Rgm7sQ5KdA9MhSx86VOX3orNcz3lHtD2tOPpFyKYt+uw7/BKZjAifgpUJnO7GPB9 CgWsFP9TS2AQyEQbLAVYM48tLRHcjFFcPlNbZ/NUJGtGi5wNfHHKtJ1ffrPMJ9aS VxKZWQ4MjpIzjQCHLjGblVivwoXfZtrFkk62IPRSLV2tDk3fW03M/ohHfQHjOvGo taRzvbPRwLhsnY8c3WiSYk+PKsk9XDn9VdY/AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUHRiOQVpAT2MrawKZicz4vdEP4UMwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0hSaU9RVnBBVDJNcmF3S1ppY3o0dmRFUDRVTS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFuocAwDQYJKoZIhvcNAQELBQADggEBANNWgC2Hp3CTNh0zPeNdKrv0ddWy YxSBx6jtf6FUYfaY4ixtlQzpYqZo+d/oQzgQ3gzeKZGjYWLul6gQOFp2YU2MAkqK 1gf2nH/wdNfyoqshJN/rZPEeSt2D5V+/J8p5PSCpuueuPyHQ4YTmM59yHizx8CAn XVJVw3Q898ag4Irmt6FJuxGmobU0EkkQcY34fwMirA6ov+wNyaruQBJcvJXRcmoT c9FITxVQ5v9v9rlreb+4lYvWLObtK+4UNDxNrJ3ms3zHtIUYBRj97x7XTGTPDhU2 f2G2mQBe1znWXJK3ysFRS39htoWgKmnm2JjmgfoTHmWCuMjz672NzfOLrSg= -----END CERTIFICATE-----Generated at Fri Nov 22 15:23:59 2024 by rpki-client on console-fra.rpki-client.org