$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/KxCHaFbcsEjT6on0V226aJAZxq8.roa File: KxCHaFbcsEjT6on0V226aJAZxq8.roa (raw, json) Hash identifier: X82Y0krMZ/+E7WSNrI3I5CdDA7Dh1CYbbXZPhiLHOIo= Subject key identifier: 2B:10:87:68:56:DC:B0:48:D3:EA:89:F4:57:6D:BA:68:90:19:C6:AF Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 061A Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/KxCHaFbcsEjT6on0V226aJAZxq8.roa Signing time: Thu 29 Feb 2024 01:38:33 +0000 ROA not before: Thu 29 Feb 2024 01:38:33 +0000 ROA not after: Fri 14 Feb 2025 01:30:03 +0000 asID: 9605 IP address blocks: 1.75.8.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1562 (0x61a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Feb 29 01:38:33 2024 GMT Not After : Feb 14 01:30:03 2025 GMT Subject: CN=2B10876856DCB048D3EA89F4576DBA689019C6AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:3f:75:25:fc:54:db:9a:6c:57:d1:31:ff:63: 48:c6:67:b4:fc:c9:fa:05:70:bf:a1:da:ba:8e:2c: bc:0c:2e:40:b5:70:a4:97:2b:4c:37:1b:08:1f:62: d1:1d:cb:7b:98:32:ec:b7:9e:5c:b9:6c:f8:04:7a: be:55:00:95:de:95:e4:5f:43:18:44:68:bd:83:93: f9:6d:95:93:1f:08:68:9d:d7:9c:cd:2c:b2:ce:7d: 95:66:dd:62:84:12:8c:51:1d:20:e0:b8:49:38:bb: ff:4e:e6:7b:c5:30:6b:48:46:6e:ed:5a:d2:6e:78: 5b:17:5b:32:08:76:02:e2:52:f5:d1:96:c5:2f:35: 87:d9:97:d9:3f:57:eb:15:47:3c:a1:53:ea:b4:ac: e1:99:d0:9d:18:20:ab:3e:ef:50:2f:e9:ce:d2:04: a5:f9:30:b7:07:6d:c5:8c:f4:bc:a6:c4:06:43:b5: 53:ce:e1:8a:cf:38:08:f9:a2:74:5a:0c:8c:a8:fc: c1:c5:62:b2:dd:22:db:7f:95:fc:5c:2c:f3:dd:30: 9f:52:78:6d:37:94:a1:c1:f7:07:9f:a4:e5:27:f9: 12:fa:33:07:16:9a:96:17:53:88:ee:0a:4a:a2:33: 16:56:ba:e9:05:a7:5d:0a:59:39:5c:bd:65:ce:3a: 79:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:10:87:68:56:DC:B0:48:D3:EA:89:F4:57:6D:BA:68:90:19:C6:AF X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/KxCHaFbcsEjT6on0V226aJAZxq8.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.75.8.0/23 Signature Algorithm: sha256WithRSAEncryption d5:c9:32:63:31:d6:da:31:1d:64:37:3a:ad:27:52:74:63:92: 81:93:fc:03:cd:69:6f:93:f6:2d:c0:7c:86:b5:ca:5a:bb:ad: d2:7b:8d:f0:6e:64:d3:12:71:26:43:90:6b:dd:10:4e:e2:6c: 4b:61:0d:a3:82:8d:aa:63:88:6a:51:02:cb:0e:be:1b:2c:9e: 28:80:a3:db:c5:00:0e:77:84:f3:db:3a:dc:56:0f:9f:ba:67: de:43:99:4c:cf:15:2e:6a:76:49:9d:bb:89:44:c3:70:99:09: 13:e4:86:7e:de:ff:37:84:f5:04:a1:d3:23:70:7b:9c:e6:70: 41:bb:3e:46:23:dd:58:5c:5f:c9:37:2c:f3:10:5f:ec:cd:82: 80:84:ed:16:e4:5c:50:92:ed:05:d6:f9:8d:7e:34:8d:52:fc: 15:a3:8c:21:f4:f0:c3:f7:a3:48:40:84:4a:2c:54:bf:ae:7f: 77:44:c2:8d:e5:df:ce:57:96:62:c8:62:0e:92:64:fb:0a:1d: 20:ee:48:86:24:9f:94:20:e2:ef:dd:25:1a:14:73:0d:f7:41: 5e:19:b2:bc:09:e4:27:7d:a2:56:50:e5:1e:94:80:30:d7:73: 89:e5:bb:b3:58:32:0b:80:e0:ac:27:04:b4:24:a4:05:b6:fd: 22:09:7a:45 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBhowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDAyMjkw MTM4MzNaFw0yNTAyMTQwMTMwMDNaMDMxMTAvBgNVBAMTKDJCMTA4NzY4NTZEQ0Iw NDhEM0VBODlGNDU3NkRCQTY4OTAxOUM2QUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD0P3Ul/FTbmmxX0TH/Y0jGZ7T8yfoFcL+h2rqOLLwMLkC1cKSX K0w3GwgfYtEdy3uYMuy3nly5bPgEer5VAJXeleRfQxhEaL2Dk/ltlZMfCGid15zN LLLOfZVm3WKEEoxRHSDguEk4u/9O5nvFMGtIRm7tWtJueFsXWzIIdgLiUvXRlsUv NYfZl9k/V+sVRzyhU+q0rOGZ0J0YIKs+71Av6c7SBKX5MLcHbcWM9LymxAZDtVPO 4YrPOAj5onRaDIyo/MHFYrLdItt/lfxcLPPdMJ9SeG03lKHB9wefpOUn+RL6MwcW mpYXU4juCkqiMxZWuukFp10KWTlcvWXOOnkjAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUKxCHaFbcsEjT6on0V226aJAZxq8wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0t4Q0hhRmJjc0VqVDZvbjBWMjI2YUpBWnhxOC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEBSwgwDQYJKoZIhvcNAQELBQADggEBANXJMmMx1toxHWQ3Oq0nUnRjkoGT /APNaW+T9i3AfIa1ylq7rdJ7jfBuZNMScSZDkGvdEE7ibEthDaOCjapjiGpRAssO vhssniiAo9vFAA53hPPbOtxWD5+6Z95DmUzPFS5qdkmdu4lEw3CZCRPkhn7e/zeE 9QSh0yNwe5zmcEG7PkYj3VhcX8k3LPMQX+zNgoCE7RbkXFCS7QXW+Y1+NI1S/BWj jCH08MP3o0hAhEosVL+uf3dEwo3l385XlmLIYg6SZPsKHSDuSIYkn5Qg4u/dJRoU cw33QV4ZsrwJ5Cd9olZQ5R6UgDDXc4nlu7NYMguA4KwnBLQkpAW2/SIJekU= -----END CERTIFICATE-----Generated at Sat Jun 1 15:54:30 2024 by rpki-client on console-ams.rpki-client.org