$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Q22VJc0dVe4bF-pTWt5YcX_gR5s.roa File: Q22VJc0dVe4bF-pTWt5YcX_gR5s.roa (raw, json) Hash identifier: wjl3w/fWcizehWQdrxhKQIwn3pU599uFkKGmA+DvNS8= Subject key identifier: 43:6D:95:25:CD:1D:55:EE:1B:17:EA:53:5A:DE:58:71:7F:E0:47:9B Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 05F1 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Q22VJc0dVe4bF-pTWt5YcX_gR5s.roa Signing time: Thu 29 Feb 2024 01:35:41 +0000 ROA not before: Thu 29 Feb 2024 01:35:41 +0000 ROA not after: Fri 14 Feb 2025 01:30:03 +0000 asID: 9605 IP address blocks: 1.75.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1521 (0x5f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Feb 29 01:35:41 2024 GMT Not After : Feb 14 01:30:03 2025 GMT Subject: CN=436D9525CD1D55EE1B17EA535ADE58717FE0479B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c0:68:14:1e:bd:17:3f:fd:d4:d1:3c:1f:6a: 53:7f:44:3a:da:2f:a2:3c:0b:6b:61:fc:bd:91:b1: 9f:73:42:3e:88:82:a8:01:13:43:27:aa:65:7f:8b: 1b:b0:43:9a:26:6e:2e:2a:16:ce:71:0a:9e:58:7e: b4:96:21:96:26:5f:52:3a:ec:eb:95:67:ba:e6:c4: 99:46:1b:d0:ce:0a:83:a9:8b:68:56:ec:5b:9f:d4: 49:3d:81:bb:86:ad:ba:1d:18:ba:71:74:64:7b:29: d2:bb:30:3d:bc:6d:aa:8c:ec:e4:2a:94:85:d2:82: 34:d2:40:5a:71:43:30:63:f2:2a:cb:de:1b:32:b0: 34:9a:85:e9:b9:e5:dc:4b:08:87:9a:92:7b:cc:7e: c7:5a:14:87:3c:ae:84:cd:83:f7:a5:b4:05:7e:f2: f0:06:f4:e4:17:2b:08:ef:a9:56:70:64:8b:b9:53: 92:e8:78:8d:56:2e:36:53:69:ef:c6:a5:30:f9:77: 56:c8:b1:6a:57:a9:f8:49:31:f3:64:cf:f9:b1:1a: d0:9c:8d:c7:a6:72:0d:1d:30:4f:67:c7:ea:13:b3: bb:66:a4:6c:09:a3:06:2f:ab:5b:47:9e:85:b5:20: 74:ee:16:ba:9b:71:62:f6:89:5d:1b:41:b4:e9:fa: 22:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:6D:95:25:CD:1D:55:EE:1B:17:EA:53:5A:DE:58:71:7F:E0:47:9B X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Q22VJc0dVe4bF-pTWt5YcX_gR5s.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.75.224.0/22 Signature Algorithm: sha256WithRSAEncryption 97:ea:2d:fa:f5:ef:23:9d:3d:7d:97:76:f7:74:80:91:0f:70: c5:ad:bb:7b:8c:6f:82:0d:c9:2c:99:8d:fe:0a:50:c4:cb:a5: e9:9e:03:f4:53:bc:0f:63:4c:5f:1e:ab:01:ce:42:ed:73:8c: 61:6d:79:e3:c7:1b:e0:ab:d0:60:cf:d5:a2:c4:8e:25:fe:fe: 86:68:47:00:c4:bb:9c:86:0a:c7:c3:67:2f:45:8b:b3:6c:36: 13:f4:ac:f8:8b:52:ec:ef:0d:70:48:ff:fc:b4:52:09:19:b5: ab:75:f9:55:32:74:3e:b1:f8:0a:cf:49:a5:58:32:28:2b:28: 9a:50:52:74:5b:15:2e:9d:9f:4e:ee:45:b9:f1:8f:1e:18:cb: ae:04:48:e9:f8:aa:76:13:2b:2a:3f:e9:8d:c2:40:cb:4d:7d: bf:17:b8:09:9b:5b:e3:6c:02:fb:41:a7:c4:84:7f:04:d2:d6: be:b8:04:aa:1d:71:e7:28:77:a9:b3:b6:3a:d2:4c:ee:05:c2: 4e:6b:37:ee:09:eb:8d:b2:07:30:75:04:53:e0:a6:5f:81:dd: 3d:8c:ea:fd:db:e0:c4:09:1a:21:a4:55:fb:fd:4c:5b:30:3a: 27:9b:f5:09:92:f6:69:c9:19:99:4b:c9:8a:15:bd:44:5b:6a: e6:72:b1:11 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBfEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDAyMjkw MTM1NDFaFw0yNTAyMTQwMTMwMDNaMDMxMTAvBgNVBAMTKDQzNkQ5NTI1Q0QxRDU1 RUUxQjE3RUE1MzVBREU1ODcxN0ZFMDQ3OUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC9wGgUHr0XP/3U0TwfalN/RDraL6I8C2th/L2RsZ9zQj6IgqgB E0MnqmV/ixuwQ5ombi4qFs5xCp5YfrSWIZYmX1I67OuVZ7rmxJlGG9DOCoOpi2hW 7Fuf1Ek9gbuGrbodGLpxdGR7KdK7MD28baqM7OQqlIXSgjTSQFpxQzBj8irL3hsy sDSahem55dxLCIeaknvMfsdaFIc8roTNg/eltAV+8vAG9OQXKwjvqVZwZIu5U5Lo eI1WLjZTae/GpTD5d1bIsWpXqfhJMfNkz/mxGtCcjcemcg0dME9nx+oTs7tmpGwJ owYvq1tHnoW1IHTuFrqbcWL2iV0bQbTp+iIzAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUQ22VJc0dVe4bF+pTWt5YcX/gR5swHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1EyMlZKYzBkVmU0YkYtcFRXdDVZY1hfZ1I1cy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIBS+AwDQYJKoZIhvcNAQELBQADggEBAJfqLfr17yOdPX2Xdvd0gJEPcMWt u3uMb4INySyZjf4KUMTLpemeA/RTvA9jTF8eqwHOQu1zjGFteePHG+Cr0GDP1aLE jiX+/oZoRwDEu5yGCsfDZy9Fi7NsNhP0rPiLUuzvDXBI//y0UgkZtat1+VUydD6x +ArPSaVYMigrKJpQUnRbFS6dn07uRbnxjx4Yy64ESOn4qnYTKyo/6Y3CQMtNfb8X uAmbW+NsAvtBp8SEfwTS1r64BKodcecod6mztjrSTO4Fwk5rN+4J642yBzB1BFPg pl+B3T2M6v3b4MQJGiGkVfv9TFswOieb9QmS9mnJGZlLyYoVvURbauZysRE= -----END CERTIFICATE-----Generated at Sat Jun 1 15:54:30 2024 by rpki-client on console-ams.rpki-client.org