$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/PImYc1KAkxX07pIZxQ3iCFkxRQE.roa File: PImYc1KAkxX07pIZxQ3iCFkxRQE.roa (raw, json) Hash identifier: f4EgeyB/o0xmzUdGniyDQLnP6zYDGTXUPoG2CKZOkdY= Subject key identifier: 3C:89:98:73:52:80:93:15:F4:EE:92:19:C5:0D:E2:08:59:31:45:01 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 01D2 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/PImYc1KAkxX07pIZxQ3iCFkxRQE.roa Signing time: Wed 24 May 2023 16:40:34 +0000 ROA not before: Wed 24 May 2023 16:40:34 +0000 ROA not after: Tue 14 May 2024 01:30:02 +0000 asID: 9605 IP address blocks: 1.78.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 May 2024 13:36:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 466 (0x1d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: May 24 16:40:34 2023 GMT Not After : May 14 01:30:02 2024 GMT Subject: CN=3C89987352809315F4EE9219C50DE20859314501 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:b9:85:64:1d:79:d9:f2:4f:40:01:53:e2:bf: dd:f4:ff:0c:f0:d0:be:be:4b:d8:1b:af:21:e7:6b: f7:4a:c8:33:e2:8d:1c:b1:5f:4f:2e:9f:37:ba:d7: 78:71:24:7c:9e:d9:82:69:14:8f:12:d1:83:f9:1c: 7f:02:20:c5:b6:08:a3:38:d5:77:f0:18:f1:e9:45: 9c:40:6d:ff:ca:0a:3e:09:51:ff:71:cb:77:e1:2d: d0:07:35:70:c8:50:b4:13:a2:0f:e6:75:68:a6:98: 52:cf:63:a1:5e:43:98:68:6e:e7:1a:f7:4a:6f:79: cb:8f:6c:a1:c3:fd:62:d7:39:fb:a8:5b:1e:43:37: 26:a7:3a:2a:70:f2:48:ce:ba:82:ab:c4:99:3f:90: 75:34:7f:32:a2:20:2b:21:33:5e:31:3a:59:f7:b0: 68:c7:9f:f3:b3:30:b3:7d:b6:26:79:b2:7d:bc:f5: f1:60:57:34:58:99:06:8b:91:2a:a5:3e:32:85:28: 00:7a:5a:56:e5:a5:5a:f7:04:4b:1c:5d:63:f6:20: 9f:cf:a2:ab:fa:5c:b4:f0:9d:19:ad:11:82:ce:4b: 25:9b:aa:ae:d7:f3:02:31:c6:75:e3:9a:b2:8f:20: 68:09:7f:ad:85:19:8c:62:aa:1a:03:ae:0a:89:d4: 1f:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:89:98:73:52:80:93:15:F4:EE:92:19:C5:0D:E2:08:59:31:45:01 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/PImYc1KAkxX07pIZxQ3iCFkxRQE.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.78.8.0/22 Signature Algorithm: sha256WithRSAEncryption df:e8:e8:39:ae:a0:30:6c:86:0f:8a:f2:0a:a1:fe:42:38:f8: 59:2c:6e:28:c4:41:c8:5b:98:f1:f0:a1:c4:73:db:71:85:a6: 5f:7a:6f:cc:9d:52:5d:2e:99:80:6b:c8:ee:6d:55:42:8c:4e: 7a:d7:ff:e6:b4:4b:79:9c:f5:75:d4:a7:f1:3f:da:b8:dd:a4: f5:62:7a:07:5b:7c:44:7b:a4:62:d1:4d:d3:c3:21:e8:a5:15: 59:fb:7e:1f:15:6e:75:05:89:bd:3c:8f:c0:15:2a:f6:74:f6: 9e:16:e0:d4:ee:88:ce:b8:ac:3b:ef:32:10:6b:5e:cb:cf:97: 75:02:3a:0b:5a:6a:2e:5c:56:48:cd:b7:d6:be:08:4e:cd:9a: c8:ab:43:78:aa:c8:52:a5:45:68:a9:38:a7:ca:ae:fe:78:0f: 1d:3b:85:27:17:bc:97:2e:93:36:f6:8b:a7:f7:f4:a7:33:06: f6:1b:6b:d2:06:aa:c6:6f:ed:fe:a2:b9:e9:c8:b6:4f:7e:a6: 4c:6c:ce:8c:75:c9:e5:3f:2f:ab:d5:d5:2a:53:4b:97:cc:31: 53:06:81:12:cb:b1:a4:da:07:12:09:7c:62:d1:06:92:8b:56: d8:96:b9:ea:44:84:a1:3d:57:73:3a:96:7b:f5:ad:aa:79:85: 8c:f5:1e:ca -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAdIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA1MjQx NjQwMzRaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDNDODk5ODczNTI4MDkz MTVGNEVFOTIxOUM1MERFMjA4NTkzMTQ1MDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDguYVkHXnZ8k9AAVPiv930/wzw0L6+S9gbryHna/dKyDPijRyx X08unze613hxJHye2YJpFI8S0YP5HH8CIMW2CKM41XfwGPHpRZxAbf/KCj4JUf9x y3fhLdAHNXDIULQTog/mdWimmFLPY6FeQ5hobuca90pvecuPbKHD/WLXOfuoWx5D NyanOipw8kjOuoKrxJk/kHU0fzKiICshM14xOln3sGjHn/OzMLN9tiZ5sn289fFg VzRYmQaLkSqlPjKFKAB6WlblpVr3BEscXWP2IJ/Poqv6XLTwnRmtEYLOSyWbqq7X 8wIxxnXjmrKPIGgJf62FGYxiqhoDrgqJ1B8dAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUPImYc1KAkxX07pIZxQ3iCFkxRQEwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1BJbVljMUtBa3hYMDdwSVp4UTNpQ0ZreFJRRS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIBTggwDQYJKoZIhvcNAQELBQADggEBAN/o6DmuoDBshg+K8gqh/kI4+Fks bijEQchbmPHwocRz23GFpl96b8ydUl0umYBryO5tVUKMTnrX/+a0S3mc9XXUp/E/ 2rjdpPViegdbfER7pGLRTdPDIeilFVn7fh8VbnUFib08j8AVKvZ09p4W4NTuiM64 rDvvMhBrXsvPl3UCOgtaai5cVkjNt9a+CE7NmsirQ3iqyFKlRWipOKfKrv54Dx07 hScXvJcukzb2i6f39KczBvYba9IGqsZv7f6iuenItk9+pkxszox1yeU/L6vV1SpT S5fMMVMGgRLLsaTaBxIJfGLRBpKLVtiWuepEhKE9V3M6lnv1rap5hYz1Hso= -----END CERTIFICATE-----Generated at Sat Apr 27 10:15:56 2024 by rpki-client on console-ams.rpki-client.org