$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/PQ2gyQ8pPupZ7Uj99W_JGZGOlRM.roa File: PQ2gyQ8pPupZ7Uj99W_JGZGOlRM.roa (raw, json) Hash identifier: 2TRX8Z9/OiZrDEjZ/0SUFyzcPDmfbkTVpUKtxkR8ktY= Subject key identifier: 3D:0D:A0:C9:0F:29:3E:EA:59:ED:48:FD:F5:6F:C9:19:91:8E:95:13 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 09A8 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/PQ2gyQ8pPupZ7Uj99W_JGZGOlRM.roa Signing time: Sun 30 Jun 2024 01:38:17 +0000 ROA not before: Sun 30 Jun 2024 01:38:17 +0000 ROA not after: Tue 24 Jun 2025 10:46:45 +0000 asID: 9605 IP address blocks: 220.159.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Dec 2024 00:11:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2472 (0x9a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 30 01:38:17 2024 GMT Not After : Jun 24 10:46:45 2025 GMT Subject: CN=3D0DA0C90F293EEA59ED48FDF56FC919918E9513 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:df:65:8a:b7:83:ff:23:81:82:4d:c2:b7:85: 82:52:f6:97:84:ff:1c:44:57:2e:c4:4f:51:c6:78: 63:fb:ba:94:cc:d6:b6:a3:c3:3b:7b:5b:a9:10:46: c5:32:01:9e:69:92:26:34:c5:1b:89:dc:00:ce:fa: 43:2c:15:5f:0f:c3:21:5e:8c:72:b4:e9:73:8e:15: 34:c8:07:af:f2:fc:8e:96:37:d1:6f:d6:ca:36:ff: d8:53:f0:39:87:5a:aa:c5:1a:db:5f:57:bc:47:d3: 43:4e:0b:68:53:a2:a4:f4:b8:b3:41:8a:71:88:30: 93:67:d5:dc:1d:4b:fe:34:53:ed:ba:79:b9:fb:d4: f0:91:ba:bf:01:2b:96:65:d0:cd:52:46:ab:04:24: 6f:7b:54:5d:d8:a3:e0:7f:a0:41:78:59:ab:d2:20: 2b:d2:6f:68:c9:35:09:b2:65:5e:26:99:73:ed:fd: d7:04:cf:7b:57:00:b3:39:12:8a:2b:d3:ec:65:18: 15:5e:b8:d2:1d:e5:a5:66:a9:b0:1d:69:3f:15:0e: c1:15:f1:40:9f:94:0a:1b:6e:f1:4d:1a:b8:43:88: 7c:80:09:03:33:2e:73:8d:da:b9:94:2d:12:5f:63: 7b:b0:fe:61:3a:c0:57:21:18:7a:23:e6:fd:ed:50: 0e:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:0D:A0:C9:0F:29:3E:EA:59:ED:48:FD:F5:6F:C9:19:91:8E:95:13 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/PQ2gyQ8pPupZ7Uj99W_JGZGOlRM.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 220.159.32.0/21 Signature Algorithm: sha256WithRSAEncryption ab:39:49:cb:ba:13:18:fb:44:c8:e7:39:09:0b:39:4c:3e:72: 0e:89:b7:23:e7:bc:97:7c:0c:77:ae:2e:3f:11:e0:ae:45:9e: 60:80:46:94:64:88:7c:69:af:66:aa:13:0f:5e:1c:f2:6f:c4: 27:9a:aa:28:89:dc:51:a7:87:3c:34:a4:2d:c9:fe:e7:70:d5: 91:e4:34:e7:a6:db:1d:7e:8f:5d:d4:f8:f9:ba:e8:fb:28:30: 3a:0a:33:2f:5a:45:bd:8c:7c:c3:e2:cf:43:ba:a1:d4:e5:c3: df:4c:db:91:57:d3:ac:3f:54:17:fa:17:f8:00:13:23:c8:4d: a0:58:95:90:3c:7e:70:77:5f:d1:78:6b:99:9c:3a:df:c7:7f: c3:5a:4a:4b:69:ca:ad:88:76:89:d6:13:7c:95:0d:0d:c4:0b: 6c:f9:c0:27:17:20:92:9b:6c:bc:3e:ae:e4:e0:00:96:b9:5b: 31:02:19:13:f6:63:45:83:6a:c0:ee:9c:5b:73:8c:2f:6e:fc: bc:e7:c1:07:55:e7:cb:ac:36:36:bb:a8:d1:59:58:f6:a7:dc: cd:0b:e5:95:d6:b3:01:c4:d4:0c:31:dc:11:e7:52:a7:55:36: 11:ed:c5:ff:b5:20:19:52:63:8e:5c:71:ec:da:fc:ae:45:ed: f5:5f:38:38 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCagwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA2MzAw MTM4MTdaFw0yNTA2MjQxMDQ2NDVaMDMxMTAvBgNVBAMTKDNEMERBMEM5MEYyOTNF RUE1OUVENDhGREY1NkZDOTE5OTE4RTk1MTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDc32WKt4P/I4GCTcK3hYJS9peE/xxEVy7ET1HGeGP7upTM1raj wzt7W6kQRsUyAZ5pkiY0xRuJ3ADO+kMsFV8PwyFejHK06XOOFTTIB6/y/I6WN9Fv 1so2/9hT8DmHWqrFGttfV7xH00NOC2hToqT0uLNBinGIMJNn1dwdS/40U+26ebn7 1PCRur8BK5Zl0M1SRqsEJG97VF3Yo+B/oEF4WavSICvSb2jJNQmyZV4mmXPt/dcE z3tXALM5Eoor0+xlGBVeuNId5aVmqbAdaT8VDsEV8UCflAobbvFNGrhDiHyACQMz LnON2rmULRJfY3uw/mE6wFchGHoj5v3tUA5fAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUPQ2gyQ8pPupZ7Uj99W/JGZGOlRMwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1BRMmd5UThwUHVwWjdVajk5V19KR1pHT2xSTS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAPcnyAwDQYJKoZIhvcNAQELBQADggEBAKs5Scu6Exj7RMjnOQkLOUw+cg6J tyPnvJd8DHeuLj8R4K5FnmCARpRkiHxpr2aqEw9eHPJvxCeaqiiJ3FGnhzw0pC3J /udw1ZHkNOem2x1+j13U+Pm66PsoMDoKMy9aRb2MfMPiz0O6odTlw99M25FX06w/ VBf6F/gAEyPITaBYlZA8fnB3X9F4a5mcOt/Hf8NaSktpyq2IdonWE3yVDQ3EC2z5 wCcXIJKbbLw+ruTgAJa5WzECGRP2Y0WDasDunFtzjC9u/LznwQdV58usNja7qNFZ WPan3M0L5ZXWswHE1Awx3BHnUqdVNhHtxf+1IBlSY45cceza/K5F7fVfODg= -----END CERTIFICATE-----Generated at Tue Nov 26 02:17:10 2024 by rpki-client on console-fra.rpki-client.org