$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/PTjrlu2lsgmpLAdgMvEabl1APGQ.roa File: PTjrlu2lsgmpLAdgMvEabl1APGQ.roa (raw, json) Hash identifier: piVjFvu5PtPte9N3KpRLq4tkYhU9T46ffdwKzZ1Kio0= Subject key identifier: 3D:38:EB:96:ED:A5:B2:09:A9:2C:07:60:32:F1:1A:6E:5D:40:3C:64 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0A59 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/PTjrlu2lsgmpLAdgMvEabl1APGQ.roa Signing time: Sun 30 Jun 2024 01:48:34 +0000 ROA not before: Sun 30 Jun 2024 01:48:34 +0000 ROA not after: Tue 24 Jun 2025 10:46:45 +0000 asID: 9605 IP address blocks: 220.159.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:41:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2649 (0xa59) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 30 01:48:34 2024 GMT Not After : Jun 24 10:46:45 2025 GMT Subject: CN=3D38EB96EDA5B209A92C076032F11A6E5D403C64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:2f:da:cf:e1:32:a4:c7:88:98:68:82:85:a8: fd:18:9d:72:47:07:85:4d:25:c1:06:d4:34:2f:19: 41:45:06:6c:05:55:e8:e3:d9:c2:b1:f2:19:ad:bd: a0:8a:8e:ff:20:1c:71:1e:14:19:f1:90:a9:3f:5e: 5f:86:35:eb:65:5c:75:66:ad:a9:49:82:cb:0e:4d: 21:55:a9:89:64:fc:8c:81:3f:e6:45:31:a0:fa:39: 3b:c6:f4:87:5b:ba:69:f3:55:22:c5:c7:1a:34:9b: ad:e2:2e:a0:be:fc:4d:a4:29:88:c2:da:c3:c8:85: 3d:23:d8:7a:c9:d9:50:12:11:8f:01:8e:e0:2b:ab: 90:a0:2f:28:70:95:0c:7d:92:b8:78:fb:bd:ec:4d: 2a:c4:08:e5:df:2a:e2:a9:de:b3:d0:67:70:90:e1: 5a:b3:dc:14:b9:16:de:35:05:8d:18:8e:a4:72:2f: dd:a8:75:cf:1e:a5:0e:5f:4e:7b:8a:f2:d2:b5:9c: 58:cc:16:ed:fe:12:d8:ad:dc:b0:3d:00:93:5e:30: d8:dc:17:1e:23:54:c1:94:7d:97:a5:01:e4:6a:34: 9b:1c:c3:a3:ef:3c:fe:da:6f:83:10:0f:06:6a:92: 71:69:07:9b:36:87:22:4b:06:ae:ae:42:1a:49:28: 62:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:38:EB:96:ED:A5:B2:09:A9:2C:07:60:32:F1:1A:6E:5D:40:3C:64 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/PTjrlu2lsgmpLAdgMvEabl1APGQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 220.159.230.0/24 Signature Algorithm: sha256WithRSAEncryption 50:c3:65:46:cb:8d:c5:5f:98:6f:60:fa:ae:f6:42:15:cd:7a: f2:18:dc:6b:6e:4a:d5:64:ef:4f:c5:6e:49:93:21:80:17:68: a2:13:04:e0:ac:b3:5e:67:72:cb:aa:ec:c2:65:2a:a3:02:96: 30:33:ea:9f:02:f0:bd:82:c7:35:77:ae:60:a2:46:99:b2:3c: 0f:f7:3b:68:e0:09:ee:fe:82:a7:89:30:66:c0:10:26:b6:9f: bb:3e:fc:7c:d8:fb:50:26:77:69:01:b6:60:2b:ac:dc:68:3a: 4f:91:4a:2b:26:d2:35:d9:34:23:42:cf:61:7f:bb:3f:6e:f2: 62:6d:81:b3:cc:51:e3:86:4d:97:df:1e:69:69:b8:45:3d:ca: a3:12:d2:1d:e9:35:52:2b:17:d0:f3:18:55:0e:45:fb:c2:f1: cb:af:78:c5:58:32:65:4f:ae:3a:9c:04:d1:5e:6d:af:29:d9: 03:3f:ea:cd:01:64:ea:bf:1c:20:93:66:17:6a:14:4e:0d:94: 90:0d:10:84:e6:20:a5:7d:10:53:85:1e:9d:44:8e:a3:fd:d9: f5:4e:2f:13:10:1f:d6:f3:98:7c:c8:b9:c5:f5:98:bf:05:6e: f7:57:28:23:3f:67:c8:64:d2:dd:9c:43:44:08:b5:8a:63:21: 8c:d2:6e:c1 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICClkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA2MzAw MTQ4MzRaFw0yNTA2MjQxMDQ2NDVaMDMxMTAvBgNVBAMTKDNEMzhFQjk2RURBNUIy MDlBOTJDMDc2MDMyRjExQTZFNUQ0MDNDNjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCtL9rP4TKkx4iYaIKFqP0YnXJHB4VNJcEG1DQvGUFFBmwFVejj 2cKx8hmtvaCKjv8gHHEeFBnxkKk/Xl+GNetlXHVmralJgssOTSFVqYlk/IyBP+ZF MaD6OTvG9IdbumnzVSLFxxo0m63iLqC+/E2kKYjC2sPIhT0j2HrJ2VASEY8BjuAr q5CgLyhwlQx9krh4+73sTSrECOXfKuKp3rPQZ3CQ4Vqz3BS5Ft41BY0YjqRyL92o dc8epQ5fTnuK8tK1nFjMFu3+Etit3LA9AJNeMNjcFx4jVMGUfZelAeRqNJscw6Pv PP7ab4MQDwZqknFpB5s2hyJLBq6uQhpJKGKZAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUPTjrlu2lsgmpLAdgMvEabl1APGQwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1BUanJsdTJsc2dtcExBZGdNdkVhYmwxQVBHUS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADcn+YwDQYJKoZIhvcNAQELBQADggEBAFDDZUbLjcVfmG9g+q72QhXNevIY 3GtuStVk70/FbkmTIYAXaKITBOCss15ncsuq7MJlKqMCljAz6p8C8L2CxzV3rmCi RpmyPA/3O2jgCe7+gqeJMGbAECa2n7s+/HzY+1Amd2kBtmArrNxoOk+RSism0jXZ NCNCz2F/uz9u8mJtgbPMUeOGTZffHmlpuEU9yqMS0h3pNVIrF9DzGFUORfvC8cuv eMVYMmVPrjqcBNFeba8p2QM/6s0BZOq/HCCTZhdqFE4NlJANEITmIKV9EFOFHp1E jqP92fVOLxMQH9bzmHzIucX1mL8FbvdXKCM/Z8hk0t2cQ0QItYpjIYzSbsE= -----END CERTIFICATE-----Generated at Fri Nov 22 15:24:00 2024 by rpki-client on console-fra.rpki-client.org