$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Lastq5qgr2iaxoSE_SjE-f8zpHY.roa File: Lastq5qgr2iaxoSE_SjE-f8zpHY.roa (raw, json) Hash identifier: N+/Eh41v8x4B5c62Z72+kfErhwOpeRtOSwezJXxGLg8= Subject key identifier: 2D:AB:2D:AB:9A:A0:AF:68:9A:C6:84:84:FD:28:C4:F9:FF:33:A4:76 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0956 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Lastq5qgr2iaxoSE_SjE-f8zpHY.roa Signing time: Sun 30 Jun 2024 01:29:39 +0000 ROA not before: Sun 30 Jun 2024 01:29:39 +0000 ROA not after: Tue 24 Jun 2025 10:46:45 +0000 asID: 9605 IP address blocks: 1.67.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:41:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2390 (0x956) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 30 01:29:39 2024 GMT Not After : Jun 24 10:46:45 2025 GMT Subject: CN=2DAB2DAB9AA0AF689AC68484FD28C4F9FF33A476 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a2:f7:e0:04:93:fd:e1:c5:2d:fb:b0:b8:fd: a7:25:b6:f2:e8:6c:ca:64:53:cd:8c:73:3e:12:2e: 8c:ed:c0:1a:08:c2:44:6a:57:ce:fb:3a:52:30:94: 0e:53:3b:5c:fc:c8:7a:50:a0:91:46:8a:7c:59:80: 88:3d:16:16:49:ef:4d:a7:ba:6f:38:f9:c0:89:9a: fe:27:90:c1:50:00:67:1c:4c:9a:27:5d:3c:d4:21: 17:99:1e:65:9d:7d:ba:1b:f8:7b:c3:57:82:57:ef: 33:3c:3f:39:30:53:2b:70:22:27:b5:43:65:c4:20: 88:79:5b:54:b9:0c:db:36:c0:0a:f2:63:b7:3f:25: f9:06:69:cc:b9:1f:c3:4b:71:51:19:ff:21:3a:91: 18:33:3c:fa:81:93:10:83:66:02:63:72:12:1d:06: 9d:b3:ea:b0:ca:7b:48:08:67:f9:70:47:3f:69:48: d9:7a:83:bc:3d:42:28:ee:f7:13:11:e5:7b:ee:57: 56:f2:2f:1d:b5:91:ae:8a:8a:fc:46:14:ff:03:03: 7c:b3:2d:0c:89:eb:ca:37:39:79:2a:8f:6b:04:7c: 4b:2b:07:ee:84:42:49:94:f3:d9:29:0e:f2:fa:7b: 3b:64:d0:9a:e9:c1:16:a2:a0:70:20:4f:c2:a8:c7: 0b:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:AB:2D:AB:9A:A0:AF:68:9A:C6:84:84:FD:28:C4:F9:FF:33:A4:76 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Lastq5qgr2iaxoSE_SjE-f8zpHY.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.67.236.0/24 Signature Algorithm: sha256WithRSAEncryption ce:5f:bc:01:da:55:74:93:f7:5e:92:4b:e6:53:cd:33:bd:55: f3:54:ac:87:30:d3:c5:c4:ca:84:1d:e5:d2:0a:5d:e0:2f:d2: 62:bd:cf:bc:00:c3:cc:e1:a1:e2:27:1a:9f:f1:d9:ec:2f:76: 4e:08:61:7a:aa:6b:34:5a:d3:3b:b3:9c:49:6d:1d:b1:4e:37: e4:e6:3c:1c:5e:0f:1d:41:15:30:61:3c:59:67:40:89:ff:88: bf:d4:e7:c4:84:1c:b2:5a:c9:1d:19:74:e1:dc:c9:fb:a2:39: 27:6d:18:05:2b:c1:23:02:33:7a:ce:5f:44:a8:2b:e9:d7:b7: 5f:99:c5:d3:a4:3b:8a:a5:ff:dd:8f:c6:05:aa:60:5e:13:c7: c9:6c:d6:8d:1b:86:e2:22:5a:dd:50:35:de:8e:e0:5a:2e:4f: db:2a:d1:ca:e6:15:b6:82:d6:08:58:14:f0:ee:aa:74:09:2d: 9c:28:c2:ff:67:32:1f:3a:b9:b7:ae:18:33:01:79:bd:ab:5c: 8c:92:3d:1f:49:c9:ea:d4:b3:28:30:a8:c0:ef:44:7f:8f:db: 80:5f:02:3e:86:b1:d5:b6:e9:8e:6d:4c:8f:39:8e:cf:01:4e: ed:42:bc:0d:b6:57:82:4f:83:23:14:7b:cb:27:24:ce:4d:83: 5e:cc:83:bc -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCVYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA2MzAw MTI5MzlaFw0yNTA2MjQxMDQ2NDVaMDMxMTAvBgNVBAMTKDJEQUIyREFCOUFBMEFG Njg5QUM2ODQ4NEZEMjhDNEY5RkYzM0E0NzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDIovfgBJP94cUt+7C4/acltvLobMpkU82Mcz4SLoztwBoIwkRq V877OlIwlA5TO1z8yHpQoJFGinxZgIg9FhZJ702num84+cCJmv4nkMFQAGccTJon XTzUIReZHmWdfbob+HvDV4JX7zM8PzkwUytwIie1Q2XEIIh5W1S5DNs2wAryY7c/ JfkGacy5H8NLcVEZ/yE6kRgzPPqBkxCDZgJjchIdBp2z6rDKe0gIZ/lwRz9pSNl6 g7w9Qiju9xMR5XvuV1byLx21ka6KivxGFP8DA3yzLQyJ68o3OXkqj2sEfEsrB+6E QkmU89kpDvL6eztk0JrpwRaioHAgT8KoxwtRAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQULastq5qgr2iaxoSE/SjE+f8zpHYwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0xhc3RxNXFncjJpYXhvU0VfU2pFLWY4enBIWS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAABQ+wwDQYJKoZIhvcNAQELBQADggEBAM5fvAHaVXST916SS+ZTzTO9VfNU rIcw08XEyoQd5dIKXeAv0mK9z7wAw8zhoeInGp/x2ewvdk4IYXqqazRa0zuznElt HbFON+TmPBxeDx1BFTBhPFlnQIn/iL/U58SEHLJayR0ZdOHcyfuiOSdtGAUrwSMC M3rOX0SoK+nXt1+ZxdOkO4ql/92PxgWqYF4Tx8ls1o0bhuIiWt1QNd6O4FouT9sq 0crmFbaC1ghYFPDuqnQJLZwowv9nMh86ubeuGDMBeb2rXIySPR9JyerUsygwqMDv RH+P24BfAj6GsdW26Y5tTI85js8BTu1CvA22V4JPgyMUe8snJM5Ng17Mg7w= -----END CERTIFICATE-----Generated at Fri Nov 22 15:24:00 2024 by rpki-client on console-fra.rpki-client.org