$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ImWfVCfBEoIx-Vt6dL3tuIHa6p4.roa File: ImWfVCfBEoIx-Vt6dL3tuIHa6p4.roa (raw, json) Hash identifier: 4qBk/Sqwj9ar0E+dPoH+ooIzkUp9EI5tKD/1T4ecqkc= Subject key identifier: 22:65:9F:54:27:C1:12:82:31:F9:5B:7A:74:BD:ED:B8:81:DA:EA:9E Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 09F3 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ImWfVCfBEoIx-Vt6dL3tuIHa6p4.roa Signing time: Sun 30 Jun 2024 01:42:26 +0000 ROA not before: Sun 30 Jun 2024 01:42:26 +0000 ROA not after: Tue 24 Jun 2025 10:46:45 +0000 asID: 9605 IP address blocks: 1.79.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 22:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2547 (0x9f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 30 01:42:26 2024 GMT Not After : Jun 24 10:46:45 2025 GMT Subject: CN=22659F5427C1128231F95B7A74BDEDB881DAEA9E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:4d:c5:bd:76:f1:d1:45:57:9f:3f:97:cd:86: 8c:3a:64:09:43:e1:9e:b1:56:3d:29:ec:05:64:84: b4:0e:16:2e:8a:cc:f5:eb:90:e6:c9:79:d9:a3:85: 0d:81:f4:84:06:dd:a7:2d:fe:1a:35:3c:84:01:1f: 42:8d:91:56:95:fa:4e:66:a4:9d:8b:f4:b5:b1:38: d1:2f:63:41:54:e9:e3:e3:19:12:43:09:bd:3a:a5: 75:5a:eb:ff:fa:8e:af:2e:3c:74:a2:9f:f2:54:96: 66:2b:85:c0:c5:59:bb:23:39:ca:4e:26:48:eb:26: f3:7e:3e:7c:a0:f0:a3:67:85:1b:c2:0e:9e:57:48: f8:42:db:cf:3a:a8:8a:30:ca:2a:22:11:93:22:03: 5e:db:49:33:49:88:7c:27:11:44:c2:51:cd:47:6b: 6f:8d:c7:f4:2e:0d:53:4c:33:ee:c4:5e:22:d2:1b: 48:99:b4:1f:e1:01:ad:8b:fb:c5:c8:ef:68:c8:08: a3:11:70:3a:41:37:bb:12:46:88:20:35:b5:ed:21: 02:cb:6a:be:ef:17:73:b9:3d:7d:6a:fe:8d:d6:db: 55:a2:60:1d:07:44:22:b9:c7:3d:b2:07:89:9e:f1: 4f:0e:06:f7:15:5c:4c:52:50:30:c2:20:8f:8b:78: 5b:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:65:9F:54:27:C1:12:82:31:F9:5B:7A:74:BD:ED:B8:81:DA:EA:9E X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ImWfVCfBEoIx-Vt6dL3tuIHa6p4.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.79.120.0/21 Signature Algorithm: sha256WithRSAEncryption c0:af:af:70:b0:c8:7a:4a:b8:f9:68:d2:98:24:88:f1:64:30: 1e:19:5e:e2:99:ef:49:f4:94:b9:e6:c7:aa:2b:fc:b2:1f:a7: 0b:c2:09:0a:08:72:fd:39:67:a0:1d:1d:b2:f6:0b:03:a3:35: 0a:24:70:85:a9:cf:56:bf:35:e2:33:ff:cf:f4:0b:dc:7b:d5: d2:06:4d:01:40:39:4b:4d:a1:97:fc:84:93:f4:b3:7f:75:5b: 25:8a:cd:f7:3e:cb:0e:e5:11:0f:80:50:41:c4:0d:7d:8f:64: 08:9c:d1:1d:75:9a:a7:1a:ee:75:2a:3b:e0:6c:8c:8b:08:a0: af:9e:d5:4b:ef:f4:96:a0:83:8c:5b:a5:00:f0:1f:f8:9f:e7: 3f:1f:00:68:27:ec:ec:a0:59:44:82:ff:cc:93:71:8b:1e:a6: 4b:47:35:6c:8f:98:d8:46:b6:bb:fd:7f:a4:0e:7d:5e:7c:a2: be:9e:cd:41:f1:40:fb:aa:f6:6d:c3:e6:b8:f8:15:65:83:57: 6f:af:6f:36:3c:03:d0:83:41:87:21:f7:9e:39:da:5c:64:c4: a5:5d:47:ef:57:c1:7b:18:f8:1a:74:19:2b:f5:71:1c:ea:8d: 5b:43:ae:1b:4d:ac:f5:c4:3b:4f:b5:27:08:3a:09:33:8d:d8: b8:ab:27:15 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCfMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA2MzAw MTQyMjZaFw0yNTA2MjQxMDQ2NDVaMDMxMTAvBgNVBAMTKDIyNjU5RjU0MjdDMTEy ODIzMUY5NUI3QTc0QkRFREI4ODFEQUVBOUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC5TcW9dvHRRVefP5fNhow6ZAlD4Z6xVj0p7AVkhLQOFi6KzPXr kObJedmjhQ2B9IQG3act/ho1PIQBH0KNkVaV+k5mpJ2L9LWxONEvY0FU6ePjGRJD Cb06pXVa6//6jq8uPHSin/JUlmYrhcDFWbsjOcpOJkjrJvN+Pnyg8KNnhRvCDp5X SPhC2886qIowyioiEZMiA17bSTNJiHwnEUTCUc1Ha2+Nx/QuDVNMM+7EXiLSG0iZ tB/hAa2L+8XI72jICKMRcDpBN7sSRoggNbXtIQLLar7vF3O5PX1q/o3W21WiYB0H RCK5xz2yB4me8U8OBvcVXExSUDDCII+LeFuNAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUImWfVCfBEoIx+Vt6dL3tuIHa6p4wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0ltV2ZWQ2ZCRW9JeC1WdDZkTDN0dUlIYTZwNC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMBT3gwDQYJKoZIhvcNAQELBQADggEBAMCvr3CwyHpKuPlo0pgkiPFkMB4Z XuKZ70n0lLnmx6or/LIfpwvCCQoIcv05Z6AdHbL2CwOjNQokcIWpz1a/NeIz/8/0 C9x71dIGTQFAOUtNoZf8hJP0s391WyWKzfc+yw7lEQ+AUEHEDX2PZAic0R11mqca 7nUqO+BsjIsIoK+e1Uvv9Jagg4xbpQDwH/if5z8fAGgn7OygWUSC/8yTcYsepktH NWyPmNhGtrv9f6QOfV58or6ezUHxQPuq9m3D5rj4FWWDV2+vbzY8A9CDQYch9545 2lxkxKVdR+9XwXsY+Bp0GSv1cRzqjVtDrhtNrPXEO0+1Jwg6CTON2LirJxU= -----END CERTIFICATE-----Generated at Mon Nov 25 23:54:41 2024 by rpki-client on console-ams.rpki-client.org