$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/PbnlUUGO8nT58fkIGQIQFsOKxI4.roa File: PbnlUUGO8nT58fkIGQIQFsOKxI4.roa (raw, json) Hash identifier: dh/dyewvOLWroVNPHtDnPQDwe8EraAY7wyKbm/T7mDo= Subject key identifier: 3D:B9:E5:51:41:8E:F2:74:F9:F1:F9:08:19:02:10:16:C3:8A:C4:8E Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 09A1 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/PbnlUUGO8nT58fkIGQIQFsOKxI4.roa Signing time: Sun 30 Jun 2024 01:38:13 +0000 ROA not before: Sun 30 Jun 2024 01:38:13 +0000 ROA not after: Tue 24 Jun 2025 10:46:45 +0000 asID: 9605 IP address blocks: 211.14.80.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2465 (0x9a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 30 01:38:13 2024 GMT Not After : Jun 24 10:46:45 2025 GMT Subject: CN=3DB9E551418EF274F9F1F90819021016C38AC48E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d6:6a:2b:6f:fb:00:62:15:18:ba:7b:34:79: ea:a3:52:20:c5:c8:3d:a2:e1:cb:65:b2:92:26:4c: 71:95:1c:43:f7:f9:c3:68:2d:25:a1:74:e1:8a:e6: 1a:bd:e8:e7:4a:04:cd:d5:f1:e2:73:68:e3:bf:88: 04:5f:c0:34:3c:a1:b6:bb:84:86:09:8a:43:3b:31: 60:8b:6e:d5:6d:dd:c5:36:b5:6a:d3:e7:9f:83:5d: 5a:8e:56:43:00:55:a6:f2:7d:38:51:f2:d7:c7:84: 83:da:0a:22:1b:04:77:6d:37:b1:d2:e6:9f:60:16: 06:4e:15:64:e2:7c:1b:b5:32:72:30:ab:7a:d2:5e: e9:fb:eb:32:c4:ff:b7:83:de:80:ab:5e:ef:0a:ff: c3:79:14:11:17:5c:98:55:9b:00:20:d0:69:96:a1: ef:9b:81:9c:d0:19:68:06:13:aa:23:94:ad:65:61: 5b:62:a0:93:3a:64:db:23:1c:03:3e:32:75:c4:1e: 0b:cc:01:7a:fa:05:b8:6c:96:09:ff:c3:c6:d3:1c: 17:a5:5d:9a:66:8b:f0:13:61:6b:af:86:4b:bc:53: 5c:85:14:be:46:16:5e:e7:92:25:c9:57:fb:c0:9e: 96:22:db:d6:fd:aa:5d:85:5f:44:81:37:34:eb:7e: 55:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:B9:E5:51:41:8E:F2:74:F9:F1:F9:08:19:02:10:16:C3:8A:C4:8E X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/PbnlUUGO8nT58fkIGQIQFsOKxI4.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 211.14.80.0/23 Signature Algorithm: sha256WithRSAEncryption a0:e0:3c:cf:62:23:cd:8d:c4:5c:04:8a:26:6e:ac:03:4f:7b: 3c:c4:f5:ac:c5:8f:cd:87:dc:85:f7:65:8e:5a:7b:a7:1b:89: 12:0b:3d:3d:fb:60:46:14:32:d8:78:93:0b:2c:71:f4:57:07: 9e:61:b7:e4:d3:eb:04:04:d3:72:e7:7a:97:78:cc:00:b2:95: 5e:28:79:32:e6:ff:c2:36:3a:b8:73:53:ee:5e:78:26:c9:e4: 87:92:75:ba:dd:68:39:51:9a:de:35:2c:eb:cd:cf:99:d9:0a: f4:9d:45:f0:17:e8:b6:93:e0:d5:ef:e7:8e:05:99:c6:7c:ce: ab:38:aa:f1:d3:9e:d4:92:1e:8d:27:04:fa:14:3a:95:1c:66: b0:28:e4:16:9a:13:fc:8e:3d:e2:05:05:ef:42:d4:01:c1:6a: ab:38:8d:8a:75:63:75:08:88:a8:2d:77:3b:f6:26:67:a2:71: a9:90:f0:c3:6c:03:35:57:7d:07:23:e6:d0:79:3f:34:f3:f5: 7a:a3:1b:10:3c:a4:18:02:c5:50:22:b3:1f:a1:22:e3:52:8a: 28:a3:93:ee:05:54:36:66:7f:f8:8e:03:31:0b:0e:3b:f7:4f: 07:b0:ca:62:6e:8c:87:7a:1f:de:13:7c:dc:13:a8:d4:f4:3e: ce:07:d9:9a -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCaEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA2MzAw MTM4MTNaFw0yNTA2MjQxMDQ2NDVaMDMxMTAvBgNVBAMTKDNEQjlFNTUxNDE4RUYy NzRGOUYxRjkwODE5MDIxMDE2QzM4QUM0OEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC11morb/sAYhUYuns0eeqjUiDFyD2i4ctlspImTHGVHEP3+cNo LSWhdOGK5hq96OdKBM3V8eJzaOO/iARfwDQ8oba7hIYJikM7MWCLbtVt3cU2tWrT 55+DXVqOVkMAVabyfThR8tfHhIPaCiIbBHdtN7HS5p9gFgZOFWTifBu1MnIwq3rS Xun76zLE/7eD3oCrXu8K/8N5FBEXXJhVmwAg0GmWoe+bgZzQGWgGE6ojlK1lYVti oJM6ZNsjHAM+MnXEHgvMAXr6Bbhslgn/w8bTHBelXZpmi/ATYWuvhku8U1yFFL5G Fl7nkiXJV/vAnpYi29b9ql2FX0SBNzTrflWPAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUPbnlUUGO8nT58fkIGQIQFsOKxI4wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1BibmxVVUdPOG5UNThma0lHUUlRRnNPS3hJNC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAHTDlAwDQYJKoZIhvcNAQELBQADggEBAKDgPM9iI82NxFwEiiZurANPezzE 9azFj82H3IX3ZY5ae6cbiRILPT37YEYUMth4kwsscfRXB55ht+TT6wQE03Lnepd4 zACylV4oeTLm/8I2OrhzU+5eeCbJ5IeSdbrdaDlRmt41LOvNz5nZCvSdRfAX6LaT 4NXv544FmcZ8zqs4qvHTntSSHo0nBPoUOpUcZrAo5BaaE/yOPeIFBe9C1AHBaqs4 jYp1Y3UIiKgtdzv2JmeicamQ8MNsAzVXfQcj5tB5PzTz9XqjGxA8pBgCxVAisx+h IuNSiiijk+4FVDZmf/iOAzELDjv3TwewymJujId6H94TfNwTqNT0Ps4H2Zo= -----END CERTIFICATE-----Generated at Sun Feb 16 22:12:57 2025 by rpki-client