$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/IM2Rrzb_wuXfggPGm3NrbM7fbak.roa File: IM2Rrzb_wuXfggPGm3NrbM7fbak.roa (raw, json) Hash identifier: jbpRX6Fg2V+0ljMSLklTAoF+vfTw6AhNwcfw3SDWD4s= Subject key identifier: 20:CD:91:AF:36:FF:C2:E5:DF:82:03:C6:9B:73:6B:6C:CE:DF:6D:A9 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0A6C Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/IM2Rrzb_wuXfggPGm3NrbM7fbak.roa Signing time: Sun 30 Jun 2024 01:50:27 +0000 ROA not before: Sun 30 Jun 2024 01:50:27 +0000 ROA not after: Tue 24 Jun 2025 10:46:45 +0000 asID: 9605 IP address blocks: 219.114.164.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Dec 2024 00:11:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2668 (0xa6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 30 01:50:27 2024 GMT Not After : Jun 24 10:46:45 2025 GMT Subject: CN=20CD91AF36FFC2E5DF8203C69B736B6CCEDF6DA9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:72:bd:97:43:b1:f2:72:4a:6b:c0:52:f4:07: 16:3f:34:4b:e3:05:18:8b:ce:6b:1e:92:cc:fe:51: b6:68:98:c0:a6:ed:9d:a1:6f:49:ae:57:ee:05:6c: 1f:6c:ae:4a:c3:d1:6d:40:a6:c3:68:d5:62:44:71: ef:6f:2d:11:f8:f8:5e:16:b7:2b:34:4d:e2:a4:84: 5f:87:65:88:e7:a2:e1:36:ef:b8:26:86:9b:64:ab: a1:0d:de:54:1c:f4:ff:39:84:9e:f9:66:08:66:9b: 57:c6:4a:b3:48:99:93:ee:d9:55:0c:aa:6d:48:c3: cf:15:75:11:5d:53:4d:a5:57:9e:f6:c5:bc:af:3f: 44:77:2b:5f:42:5e:ef:dd:b1:20:f9:bd:43:64:6e: 2e:0b:f2:5b:3c:77:13:55:e8:f1:a4:d9:7c:91:e1: fc:4d:76:d9:05:67:50:26:1c:ec:af:4e:ff:ed:da: 87:58:85:6b:d7:1c:97:7d:44:eb:1b:07:e4:81:09: e1:1d:52:f9:bf:a7:e0:5a:1f:a2:ba:bd:3c:04:70: bf:27:5e:45:0b:89:96:6f:be:55:41:eb:28:a5:1f: c1:b7:39:a3:e7:fa:9e:43:e3:95:8d:56:3f:21:88: dd:83:bc:79:1f:2d:8a:39:f3:c3:8a:a8:ee:3a:10: f6:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:CD:91:AF:36:FF:C2:E5:DF:82:03:C6:9B:73:6B:6C:CE:DF:6D:A9 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/IM2Rrzb_wuXfggPGm3NrbM7fbak.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 219.114.164.0/22 Signature Algorithm: sha256WithRSAEncryption cb:f8:cd:23:f3:85:79:e7:90:c6:2a:6a:ff:a8:37:e4:25:d1: 05:c9:75:14:66:80:9e:ea:d4:0f:27:da:ce:3f:1f:09:81:20: 30:41:be:03:27:15:3c:25:e2:c4:68:71:bf:7f:1e:7f:b2:0c: bf:af:76:3c:8f:f2:ed:5a:d6:4e:65:d9:40:d2:c5:15:9a:53: 3f:1a:c1:bd:bf:6f:e7:40:96:f0:82:17:40:9b:b7:95:61:b5: d6:09:de:f1:b1:16:46:a8:c9:61:38:15:5d:ca:a3:4a:93:8a: 4c:e9:d5:f0:11:92:fc:e1:80:52:07:6e:aa:87:46:d6:a5:ca: 6b:9a:1c:2f:4d:67:82:8c:01:dd:c7:91:69:d6:ee:86:07:cd: 21:a4:1f:25:06:95:ca:c3:48:65:2b:ed:43:db:a2:c6:23:fe: b3:7d:2c:2e:c6:5a:cf:ca:ed:db:39:3c:38:75:97:32:25:84: ff:8f:7c:c7:c3:87:2c:0e:28:52:82:9b:b1:6c:9c:4f:1c:de: c3:37:67:83:8d:f4:55:22:3a:07:1d:79:67:54:0e:5f:95:4a: 63:2d:1f:9f:5f:92:ae:61:61:f3:f8:c8:85:19:36:ec:50:1a: e7:74:95:b4:23:97:37:cd:75:94:9f:b3:63:c2:37:d0:c7:77: 03:d4:53:a2 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCmwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA2MzAw MTUwMjdaFw0yNTA2MjQxMDQ2NDVaMDMxMTAvBgNVBAMTKDIwQ0Q5MUFGMzZGRkMy RTVERjgyMDNDNjlCNzM2QjZDQ0VERjZEQTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDScr2XQ7HyckprwFL0BxY/NEvjBRiLzmseksz+UbZomMCm7Z2h b0muV+4FbB9srkrD0W1ApsNo1WJEce9vLRH4+F4Wtys0TeKkhF+HZYjnouE277gm hptkq6EN3lQc9P85hJ75Zghmm1fGSrNImZPu2VUMqm1Iw88VdRFdU02lV572xbyv P0R3K19CXu/dsSD5vUNkbi4L8ls8dxNV6PGk2XyR4fxNdtkFZ1AmHOyvTv/t2odY hWvXHJd9ROsbB+SBCeEdUvm/p+BaH6K6vTwEcL8nXkULiZZvvlVB6yilH8G3OaPn +p5D45WNVj8hiN2DvHkfLYo588OKqO46EPbzAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUIM2Rrzb/wuXfggPGm3NrbM7fbakwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0lNMlJyemJfd3VYZmdnUEdtM05yYk03ZmJhay5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBALbcqQwDQYJKoZIhvcNAQELBQADggEBAMv4zSPzhXnnkMYqav+oN+Ql0QXJ dRRmgJ7q1A8n2s4/HwmBIDBBvgMnFTwl4sRocb9/Hn+yDL+vdjyP8u1a1k5l2UDS xRWaUz8awb2/b+dAlvCCF0Cbt5VhtdYJ3vGxFkaoyWE4FV3Ko0qTikzp1fARkvzh gFIHbqqHRtalymuaHC9NZ4KMAd3HkWnW7oYHzSGkHyUGlcrDSGUr7UPbosYj/rN9 LC7GWs/K7ds5PDh1lzIlhP+PfMfDhywOKFKCm7FsnE8c3sM3Z4ON9FUiOgcdeWdU Dl+VSmMtH59fkq5hYfP4yIUZNuxQGud0lbQjlzfNdZSfs2PCN9DHdwPUU6I= -----END CERTIFICATE-----Generated at Tue Nov 26 02:17:10 2024 by rpki-client on console-fra.rpki-client.org