$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/KexURCfBU4fNZ9MMecaGa3kShQI.roa File: KexURCfBU4fNZ9MMecaGa3kShQI.roa (raw, json) Hash identifier: qDjlwLUTjGCnx3Tv39uTH3Tiy5T7mudm6du/3L+0d6k= Subject key identifier: 29:EC:54:44:27:C1:53:87:CD:67:D3:0C:79:C6:86:6B:79:12:85:02 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 091F Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/KexURCfBU4fNZ9MMecaGa3kShQI.roa Signing time: Tue 30 Apr 2024 02:30:25 +0000 ROA not before: Tue 30 Apr 2024 02:30:25 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 183.74.8.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2335 (0x91f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 30 02:30:25 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=29EC544427C15387CD67D30C79C6866B79128502 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:38:35:a3:64:df:fd:5c:52:9a:95:41:ea:3b: de:45:cb:da:94:78:45:63:7d:9e:a9:03:cf:d4:3d: d5:c1:05:6b:12:6b:66:bb:17:f1:a6:d0:d4:b8:e4: 47:d6:e4:01:86:ca:b4:dd:d3:1a:38:b8:f6:a7:f4: dc:11:2b:4c:1a:b3:1e:a8:81:c0:d6:a9:0e:f4:c8: 37:9b:2d:e9:b4:2f:7c:e8:a1:bb:69:ea:9f:10:23: 7a:be:ad:22:4d:1b:64:40:9b:fc:41:c4:7a:28:10: 7b:f0:63:26:df:71:a1:81:a4:33:da:47:00:b2:4f: b8:fc:b6:5e:51:f3:33:31:85:fe:6a:8a:43:03:32: 55:53:ff:55:98:08:29:e4:1c:85:3a:57:68:04:39: 27:82:60:a5:c1:74:ab:b9:9a:d7:da:11:ee:ba:8c: 3e:c1:d0:45:f0:bc:9a:2f:e1:9f:c7:fc:e5:25:16: 0a:c0:a1:ec:47:e2:14:ed:3a:ae:05:aa:bc:ab:14: 89:68:77:af:ee:2c:8e:06:2b:53:97:a2:fe:68:d6: d6:d0:37:b2:23:34:6e:a0:b5:4b:a6:63:b0:c8:cf: 58:7b:e2:82:35:5a:31:8b:59:da:87:5a:52:f5:87: 00:08:80:19:62:37:b3:c2:12:8f:b7:3a:35:7b:bb: a7:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:EC:54:44:27:C1:53:87:CD:67:D3:0C:79:C6:86:6B:79:12:85:02 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/KexURCfBU4fNZ9MMecaGa3kShQI.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 183.74.8.0/23 Signature Algorithm: sha256WithRSAEncryption 0f:b8:12:40:16:bd:be:bb:89:a8:c2:e1:b3:6b:e1:0e:b3:0a: 29:27:73:6e:94:ec:4d:4e:80:66:76:30:b3:47:17:ab:40:65: 1c:8e:6c:6f:24:c1:78:2e:43:6b:66:7a:ad:7d:83:15:93:3a: 30:55:4e:eb:2b:21:26:12:51:c3:91:cb:1a:57:d6:a9:60:7f: 70:5d:4f:3c:85:cb:61:b3:76:5b:5c:9e:e3:41:48:a7:80:8f: 4e:33:43:4b:b3:ff:fd:88:04:5a:0d:8c:00:0b:5c:7b:7b:14: 46:6a:b3:b6:c4:f3:1e:59:3d:ed:45:0c:bd:d5:a6:3e:12:67: 7b:e3:fb:2a:d1:83:19:ad:60:2e:82:c3:44:dc:ab:f2:d3:0c: 50:f2:15:42:ac:d3:2d:58:76:e8:3c:24:bb:6e:cf:bb:dc:16: 43:a3:f6:ce:40:de:1f:58:2d:f3:ca:7f:d1:21:45:36:de:db: 58:40:fb:f7:55:7a:7c:50:58:dd:81:30:0f:10:fb:ec:fc:c4: 03:d9:71:40:6a:33:a2:b4:a4:33:30:2d:94:71:2b:b1:fb:83: 6f:56:ad:a9:fc:d0:04:c9:ca:41:5f:c6:f0:99:03:be:99:07: da:ab:e9:8f:2a:10:e3:39:1d:c6:76:b5:02:63:df:a3:56:f6: 94:74:4f:13 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCR8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw MjMwMjVaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDI5RUM1NDQ0MjdDMTUz ODdDRDY3RDMwQzc5QzY4NjZCNzkxMjg1MDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCUODWjZN/9XFKalUHqO95Fy9qUeEVjfZ6pA8/UPdXBBWsSa2a7 F/Gm0NS45EfW5AGGyrTd0xo4uPan9NwRK0wasx6ogcDWqQ70yDebLem0L3zoobtp 6p8QI3q+rSJNG2RAm/xBxHooEHvwYybfcaGBpDPaRwCyT7j8tl5R8zMxhf5qikMD MlVT/1WYCCnkHIU6V2gEOSeCYKXBdKu5mtfaEe66jD7B0EXwvJov4Z/H/OUlFgrA oexH4hTtOq4FqryrFIlod6/uLI4GK1OXov5o1tbQN7IjNG6gtUumY7DIz1h74oI1 WjGLWdqHWlL1hwAIgBliN7PCEo+3OjV7u6dvAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUKexURCfBU4fNZ9MMecaGa3kShQIwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0tleFVSQ2ZCVTRmTlo5TU1lY2FHYTNrU2hRSS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAG3SggwDQYJKoZIhvcNAQELBQADggEBAA+4EkAWvb67iajC4bNr4Q6zCikn c26U7E1OgGZ2MLNHF6tAZRyObG8kwXguQ2tmeq19gxWTOjBVTusrISYSUcORyxpX 1qlgf3BdTzyFy2GzdltcnuNBSKeAj04zQ0uz//2IBFoNjAALXHt7FEZqs7bE8x5Z Pe1FDL3Vpj4SZ3vj+yrRgxmtYC6Cw0Tcq/LTDFDyFUKs0y1Ydug8JLtuz7vcFkOj 9s5A3h9YLfPKf9EhRTbe21hA+/dVenxQWN2BMA8Q++z8xAPZcUBqM6K0pDMwLZRx K7H7g29Wran80ATJykFfxvCZA76ZB9qr6Y8qEOM5HcZ2tQJj36NW9pR0TxM= -----END CERTIFICATE-----Generated at Sat Jun 1 15:54:30 2024 by rpki-client on console-ams.rpki-client.org