$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/IPPgCoLlJtsWVDEimybgZPISBQo.roa File: IPPgCoLlJtsWVDEimybgZPISBQo.roa (raw, json) Hash identifier: +s4ub4rHoDUIsWwMnjuf/GA0v5C9DURkQmMXeAUy8nY= Subject key identifier: 20:F3:E0:0A:82:E5:26:DB:16:54:31:22:9B:26:E0:64:F2:12:05:0A Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 086E Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/IPPgCoLlJtsWVDEimybgZPISBQo.roa Signing time: Tue 30 Apr 2024 02:18:29 +0000 ROA not before: Tue 30 Apr 2024 02:18:29 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 1.76.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2158 (0x86e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 30 02:18:29 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=20F3E00A82E526DB165431229B26E064F212050A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:26:ea:80:01:ee:9b:45:e4:cd:a7:5d:d7:f5: 71:c7:95:f9:d6:0a:a4:2d:0b:a9:b9:2e:f3:83:f1: 4a:3e:b9:d4:27:5e:7a:ce:8c:c8:fd:3c:d5:01:6f: 10:74:c8:08:db:7f:a8:81:ef:f9:7a:f7:07:be:31: 3d:f4:30:f9:b8:8e:8d:0c:76:c1:f8:c1:81:58:d7: 6c:00:34:cb:0b:ac:3d:0f:28:e9:34:5f:7a:ab:54: a6:42:e7:b0:65:ed:7b:fa:85:31:a1:87:b4:7d:4e: 45:66:3c:0b:ad:3f:07:16:4c:71:d9:33:aa:5e:ea: ab:ed:ed:dd:c1:85:9d:0c:a3:ad:9f:8e:8e:80:b5: b3:52:d6:3c:84:22:a5:cb:58:4e:05:96:29:97:e8: b2:ad:d0:f1:21:0f:22:0c:ff:20:62:72:c8:1d:e2: 76:8a:02:9a:5c:96:43:d9:a3:0d:38:66:d2:ea:ff: 2c:19:4b:db:a9:dd:51:d4:59:99:7c:18:06:53:fb: a4:ab:3a:90:7f:6c:1d:3a:a9:d9:7a:d9:e3:a7:90: e4:14:3f:36:23:0f:e3:0c:a9:71:cd:c9:39:d3:a4: ea:fd:62:92:1a:48:69:9d:8d:a6:1f:f2:c8:54:3f: 8b:12:18:95:da:d0:35:4f:8a:2a:ce:86:b6:1a:0d: 46:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:F3:E0:0A:82:E5:26:DB:16:54:31:22:9B:26:E0:64:F2:12:05:0A X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/IPPgCoLlJtsWVDEimybgZPISBQo.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.76.224.0/22 Signature Algorithm: sha256WithRSAEncryption 24:ee:36:4e:a1:68:b8:6f:20:59:e0:fd:ef:bc:97:e5:e8:ce: 3e:c1:59:1d:69:92:e5:ea:23:6a:26:91:ac:0b:94:0d:dd:c6: d4:9a:18:8b:30:70:10:91:3e:ac:d2:2a:8b:32:18:f3:08:45: 2b:f5:70:50:29:dc:eb:18:99:c3:05:87:57:b4:45:3d:56:5c: 8d:26:07:b4:07:a0:a8:78:54:b3:6a:1b:9a:66:0a:1b:90:2f: 1b:2a:9f:8e:27:f8:52:09:1e:41:4a:fd:9f:d5:f9:01:97:e9: bd:4c:41:92:ef:22:d2:72:87:af:3e:e0:c6:83:44:ff:47:94: c9:af:51:84:d5:58:e0:33:e2:c0:74:a1:c1:d9:00:c5:be:0a: 3c:5e:21:74:05:5f:f1:6b:b7:5e:9c:fb:10:94:4a:16:94:56: 9e:4b:02:78:ae:36:7b:48:76:3b:fc:5e:0f:71:61:8f:bc:21: 3c:d7:3e:cd:33:35:60:16:5e:4e:93:9f:a5:31:07:b0:40:0c: aa:07:84:ba:c2:e8:b9:bc:3a:8b:1f:9e:85:db:6a:3e:7b:9b: b1:2e:50:99:78:df:d1:b9:91:8e:bb:3b:fe:dd:ac:9b:95:24: 72:b1:0e:86:0b:e6:4a:a5:2d:bd:f8:55:fb:5c:af:24:d8:16: 55:c0:f2:4d -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCG4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw MjE4MjlaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDIwRjNFMDBBODJFNTI2 REIxNjU0MzEyMjlCMjZFMDY0RjIxMjA1MEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDbJuqAAe6bReTNp13X9XHHlfnWCqQtC6m5LvOD8Uo+udQnXnrO jMj9PNUBbxB0yAjbf6iB7/l69we+MT30MPm4jo0MdsH4wYFY12wANMsLrD0PKOk0 X3qrVKZC57Bl7Xv6hTGhh7R9TkVmPAutPwcWTHHZM6pe6qvt7d3BhZ0Mo62fjo6A tbNS1jyEIqXLWE4FlimX6LKt0PEhDyIM/yBicsgd4naKAppclkPZow04ZtLq/ywZ S9up3VHUWZl8GAZT+6SrOpB/bB06qdl62eOnkOQUPzYjD+MMqXHNyTnTpOr9YpIa SGmdjaYf8shUP4sSGJXa0DVPiirOhrYaDUbvAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUIPPgCoLlJtsWVDEimybgZPISBQowHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0lQUGdDb0xsSnRzV1ZERWlteWJnWlBJU0JRby5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIBTOAwDQYJKoZIhvcNAQELBQADggEBACTuNk6haLhvIFng/e+8l+Xozj7B WR1pkuXqI2omkawLlA3dxtSaGIswcBCRPqzSKosyGPMIRSv1cFAp3OsYmcMFh1e0 RT1WXI0mB7QHoKh4VLNqG5pmChuQLxsqn44n+FIJHkFK/Z/V+QGX6b1MQZLvItJy h68+4MaDRP9HlMmvUYTVWOAz4sB0ocHZAMW+CjxeIXQFX/Frt16c+xCUShaUVp5L AniuNntIdjv8Xg9xYY+8ITzXPs0zNWAWXk6Tn6UxB7BADKoHhLrC6Lm8OosfnoXb aj57m7EuUJl439G5kY67O/7drJuVJHKxDoYL5kqlLb34VftcryTYFlXA8k0= -----END CERTIFICATE-----Generated at Sat Jun 1 15:54:30 2024 by rpki-client on console-ams.rpki-client.org