$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/OXYFa5OdsB8tDQPwK7NFbrFpXno.roa File: OXYFa5OdsB8tDQPwK7NFbrFpXno.roa (raw, json) Hash identifier: gWP6IYo/7i0ZcSqMlzTN+0HC/CFQ4dlukohMTo2+CMY= Subject key identifier: 39:76:05:6B:93:9D:B0:1F:2D:0D:03:F0:2B:B3:45:6E:B1:69:5E:7A Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0ABC Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/OXYFa5OdsB8tDQPwK7NFbrFpXno.roa Signing time: Wed 31 Jul 2024 01:28:56 +0000 ROA not before: Wed 31 Jul 2024 01:28:56 +0000 ROA not after: Tue 15 Jul 2025 01:30:02 +0000 asID: 9605 IP address blocks: 49.109.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:41:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2748 (0xabc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jul 31 01:28:56 2024 GMT Not After : Jul 15 01:30:02 2025 GMT Subject: CN=3976056B939DB01F2D0D03F02BB3456EB1695E7A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a1:2e:70:d8:3a:49:35:ea:53:d1:b0:91:06: 29:00:85:52:e5:6a:46:fe:f6:b7:ba:17:f5:ce:9f: a0:73:f1:ca:da:c5:3f:3a:c2:36:25:7e:92:d6:70: 21:b5:7d:1e:df:2c:a3:a3:2e:bb:7b:4e:a5:dc:a2: 62:5a:aa:5b:92:2f:64:3d:d9:fd:06:bc:8f:46:1c: 65:98:3a:a3:8d:ac:f5:3a:d7:c2:22:f8:98:33:bc: 62:ee:41:c6:c7:66:14:7d:b1:c0:2e:a8:d0:7a:1a: da:f2:17:74:1a:cd:de:34:34:1c:47:14:cf:37:3e: 96:f5:74:9a:20:03:c6:cc:8e:af:7a:1e:0c:f1:1f: 10:10:59:7d:a5:b8:e2:a7:51:48:b9:0a:0b:12:e2: 06:0c:fd:ba:74:33:26:a7:2b:53:ad:9b:ea:b7:23: c3:fa:08:d2:6f:55:a9:0d:2c:34:9d:6c:d3:85:48: 0f:4b:31:84:04:14:7e:77:a7:8f:86:de:7d:b5:a9: 3c:80:9a:58:23:ff:40:7f:63:75:d1:63:6d:76:1b: be:dc:76:29:07:18:f1:d0:ee:19:e0:8f:16:c5:39: cf:a4:b2:3b:6a:67:40:3b:39:d0:59:c3:af:49:a2: 10:21:e2:fe:55:12:ac:c2:cd:30:55:45:e7:5f:0b: a8:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:76:05:6B:93:9D:B0:1F:2D:0D:03:F0:2B:B3:45:6E:B1:69:5E:7A X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/OXYFa5OdsB8tDQPwK7NFbrFpXno.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.109.32.0/19 Signature Algorithm: sha256WithRSAEncryption 39:20:a3:38:2a:a0:d9:03:1f:00:8e:34:14:b7:2e:4b:a8:e6: 12:3f:80:ed:9a:eb:04:b0:d0:ff:7b:6b:ac:cd:30:1d:ea:43: e0:80:e3:7a:17:a6:ae:a4:c7:46:96:7d:55:48:91:90:9b:1a: 85:d7:8f:96:22:e8:dd:2a:23:11:82:41:80:a3:ac:0f:ec:7a: 54:aa:44:68:55:df:9a:17:cb:34:d4:a2:2d:4e:81:46:97:58: ae:f6:88:6e:19:e0:d0:e4:be:72:bc:f8:c7:75:53:25:97:70: 4f:4b:0b:ff:99:fe:5f:7d:90:3b:b4:4c:ae:e0:ed:b9:e0:fb: 09:c8:8f:6a:bf:90:3b:e9:d2:ff:18:1b:5c:89:df:0f:21:54: 66:9f:f6:53:ba:42:a8:11:93:e8:fb:db:4c:49:04:43:8f:aa: b6:b0:43:31:2b:70:b5:d8:2e:ee:8f:b2:7e:37:0e:a8:c6:a4: 69:8d:21:3f:b3:77:d8:ca:4d:96:fb:5d:31:69:bc:6d:5e:4f: 02:b0:37:04:08:42:b6:d5:58:2b:93:fe:02:05:12:aa:ab:d5: 65:2c:ac:48:07:84:9a:b7:87:d0:e8:f0:20:ad:1b:cf:73:ca: a0:81:91:79:ed:11:b5:43:87:33:be:df:12:e2:e8:12:8f:9a: d5:e9:4c:05 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCrwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA3MzEw MTI4NTZaFw0yNTA3MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDM5NzYwNTZCOTM5REIw MUYyRDBEMDNGMDJCQjM0NTZFQjE2OTVFN0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCroS5w2DpJNepT0bCRBikAhVLlakb+9re6F/XOn6Bz8craxT86 wjYlfpLWcCG1fR7fLKOjLrt7TqXcomJaqluSL2Q92f0GvI9GHGWYOqONrPU618Ii +JgzvGLuQcbHZhR9scAuqNB6GtryF3Qazd40NBxHFM83Ppb1dJogA8bMjq96Hgzx HxAQWX2luOKnUUi5CgsS4gYM/bp0MyanK1Otm+q3I8P6CNJvVakNLDSdbNOFSA9L MYQEFH53p4+G3n21qTyAmlgj/0B/Y3XRY212G77cdikHGPHQ7hngjxbFOc+ksjtq Z0A7OdBZw69JohAh4v5VEqzCzTBVRedfC6gPAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUOXYFa5OdsB8tDQPwK7NFbrFpXnowHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L09YWUZhNU9kc0I4dERRUHdLN05GYnJGcFhuby5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAUxbSAwDQYJKoZIhvcNAQELBQADggEBADkgozgqoNkDHwCONBS3Lkuo5hI/ gO2a6wSw0P97a6zNMB3qQ+CA43oXpq6kx0aWfVVIkZCbGoXXj5Yi6N0qIxGCQYCj rA/selSqRGhV35oXyzTUoi1OgUaXWK72iG4Z4NDkvnK8+Md1UyWXcE9LC/+Z/l99 kDu0TK7g7bng+wnIj2q/kDvp0v8YG1yJ3w8hVGaf9lO6QqgRk+j720xJBEOPqraw QzErcLXYLu6Psn43DqjGpGmNIT+zd9jKTZb7XTFpvG1eTwKwNwQIQrbVWCuT/gIF Eqqr1WUsrEgHhJq3h9Do8CCtG89zyqCBkXntEbVDhzO+3xLi6BKPmtXpTAU= -----END CERTIFICATE-----Generated at Fri Nov 22 15:24:00 2024 by rpki-client on console-fra.rpki-client.org