$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/OL6XvkPdmgXWpI1OhWpLE038ghA.roa File: OL6XvkPdmgXWpI1OhWpLE038ghA.roa (raw, json) Hash identifier: BI/xxOh+U5x4dWA6O1PNvGDIBJyGyziKwxKphp8IfRY= Subject key identifier: 38:BE:97:BE:43:DD:9A:05:D6:A4:8D:4E:85:6A:4B:13:4D:FC:82:10 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0469 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/OL6XvkPdmgXWpI1OhWpLE038ghA.roa Signing time: Thu 27 Jul 2023 16:44:02 +0000 ROA not before: Thu 27 Jul 2023 16:44:02 +0000 ROA not after: Sun 14 Jul 2024 01:30:03 +0000 asID: 9605 IP address blocks: 1.76.148.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1129 (0x469) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jul 27 16:44:02 2023 GMT Not After : Jul 14 01:30:03 2024 GMT Subject: CN=38BE97BE43DD9A05D6A48D4E856A4B134DFC8210 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:d4:46:02:ea:a3:08:5b:81:df:d8:45:11:d4: 85:14:1a:20:f9:86:b9:cf:16:46:0b:70:89:d5:8d: 22:e0:58:2f:44:a7:be:68:66:1f:aa:c3:34:cd:61: ae:c7:fc:73:4f:52:b4:f2:eb:bc:de:54:62:6f:1a: 11:ca:e8:2b:9d:e6:81:44:55:0e:13:f1:fc:b2:fa: 81:70:88:8c:b5:8d:39:62:86:cf:16:29:63:47:76: d6:18:fb:d0:5a:73:5b:a4:c4:ef:0b:52:a4:97:5e: d9:ed:85:68:59:b0:a5:fb:cc:b7:32:17:18:73:33: c0:2c:62:f7:29:02:79:05:d0:86:2d:16:53:5c:9d: 6a:88:19:e1:eb:5a:df:d8:9a:43:d6:25:76:59:38: 68:0d:0f:c0:22:05:46:25:d6:38:62:f3:2c:40:37: e3:26:f7:b7:00:94:a3:73:12:c5:69:36:4a:2c:53: 31:20:d6:39:d5:6e:ae:72:d2:10:bf:b9:5d:19:2f: 33:5b:4c:89:01:3a:59:bc:43:92:e6:b9:9e:60:17: 43:6d:57:05:13:e7:08:82:51:4a:a2:12:b1:3f:dc: ca:55:29:5a:6a:df:43:df:1d:20:88:68:5d:0b:e2: 87:44:39:b0:ca:85:36:57:d7:5f:a0:82:3e:f7:c8: 50:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:BE:97:BE:43:DD:9A:05:D6:A4:8D:4E:85:6A:4B:13:4D:FC:82:10 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/OL6XvkPdmgXWpI1OhWpLE038ghA.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.76.148.0/23 Signature Algorithm: sha256WithRSAEncryption 5a:a5:59:bd:d3:2f:50:22:e7:1b:9f:f7:38:ca:bf:ca:19:4e: e8:c8:55:00:03:f1:d6:ca:e9:97:b1:15:aa:9b:7a:7b:65:f0: 1a:ad:90:5d:09:01:80:b6:35:ee:6a:9c:e5:6d:1a:81:d9:43: 7b:00:90:ac:7b:43:93:28:01:90:d2:8a:90:ae:1b:a5:e9:bd: 86:bf:70:0b:5d:86:3b:2d:e1:d6:8a:39:36:74:d9:c3:67:63: 6c:59:32:59:ee:a8:a8:2e:ae:39:02:10:45:32:7e:6e:6e:1a: 90:09:2c:0d:5f:8a:56:31:38:57:63:5f:2d:34:81:5f:09:3e: 32:72:0a:ce:71:19:b5:54:c4:39:69:e2:44:1e:ef:7f:71:0e: d9:a1:33:4c:3d:89:84:35:66:c8:65:ac:ab:c3:22:98:93:67: f4:8d:e0:65:29:3d:fc:be:4b:c7:58:1b:87:1b:ed:3d:4e:29: 4c:a3:77:4d:43:43:b6:c3:15:ac:04:3c:6c:9f:c0:c2:64:7b: 03:0f:15:3e:19:1b:d8:06:7f:9d:1e:75:a1:f1:01:c5:b3:6a: 67:43:68:00:2f:7a:69:94:e7:be:06:bf:77:16:8f:73:2c:5f: 24:f0:a1:27:12:46:29:95:97:71:1e:6c:b6:3d:2d:82:e0:66: 31:86:25:c8 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBGkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA3Mjcx NjQ0MDJaFw0yNDA3MTQwMTMwMDNaMDMxMTAvBgNVBAMTKDM4QkU5N0JFNDNERDlB MDVENkE0OEQ0RTg1NkE0QjEzNERGQzgyMTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDY1EYC6qMIW4Hf2EUR1IUUGiD5hrnPFkYLcInVjSLgWC9Ep75o Zh+qwzTNYa7H/HNPUrTy67zeVGJvGhHK6Cud5oFEVQ4T8fyy+oFwiIy1jTlihs8W KWNHdtYY+9Bac1ukxO8LUqSXXtnthWhZsKX7zLcyFxhzM8AsYvcpAnkF0IYtFlNc nWqIGeHrWt/YmkPWJXZZOGgND8AiBUYl1jhi8yxAN+Mm97cAlKNzEsVpNkosUzEg 1jnVbq5y0hC/uV0ZLzNbTIkBOlm8Q5LmuZ5gF0NtVwUT5wiCUUqiErE/3MpVKVpq 30PfHSCIaF0L4odEObDKhTZX11+ggj73yFD/AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUOL6XvkPdmgXWpI1OhWpLE038ghAwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L09MNlh2a1BkbWdYV3BJMU9oV3BMRTAzOGdoQS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEBTJQwDQYJKoZIhvcNAQELBQADggEBAFqlWb3TL1Ai5xuf9zjKv8oZTujI VQAD8dbK6ZexFaqbentl8BqtkF0JAYC2Ne5qnOVtGoHZQ3sAkKx7Q5MoAZDSipCu G6XpvYa/cAtdhjst4daKOTZ02cNnY2xZMlnuqKgurjkCEEUyfm5uGpAJLA1filYx OFdjXy00gV8JPjJyCs5xGbVUxDlp4kQe739xDtmhM0w9iYQ1ZshlrKvDIpiTZ/SN 4GUpPfy+S8dYG4cb7T1OKUyjd01DQ7bDFawEPGyfwMJkewMPFT4ZG9gGf50edaHx AcWzamdDaAAvemmU574Gv3cWj3MsXyTwoScSRimVl3EebLY9LYLgZjGGJcg= -----END CERTIFICATE-----Generated at Sat Jun 1 13:38:47 2024 by rpki-client on console-fra.rpki-client.org