$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/RBQMX2gnPwZrs-dZ9hBOB858itw.roa File: RBQMX2gnPwZrs-dZ9hBOB858itw.roa (raw, json) Hash identifier: lbSH7z7tXyOK6ybh98EbQboOqUiMX8qL80zLA3YyFkg= Subject key identifier: 44:14:0C:5F:68:27:3F:06:6B:B3:E7:59:F6:10:4E:07:CE:7C:8A:DC Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 08B2 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/RBQMX2gnPwZrs-dZ9hBOB858itw.roa Signing time: Tue 30 Apr 2024 02:22:38 +0000 ROA not before: Tue 30 Apr 2024 02:22:38 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 1.78.16.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 22:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2226 (0x8b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 30 02:22:38 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=44140C5F68273F066BB3E759F6104E07CE7C8ADC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:17:62:b3:4b:8b:20:2c:07:3c:c4:23:73:45: b5:bf:2a:96:5a:b8:fb:9f:37:68:57:6f:e7:36:e5: 7f:83:08:02:16:73:b5:87:57:5f:6f:28:95:cc:72: 34:22:0e:4c:50:af:d9:57:c5:61:e0:1e:73:a8:aa: 9e:f5:b7:eb:fd:a9:a9:b1:8b:6b:73:ab:9d:9d:2e: fc:41:99:02:b7:8a:b6:76:69:70:ba:53:0b:0c:d6: 05:54:e7:d9:ce:e4:54:40:18:1e:4b:2e:62:3a:a1: f9:86:a3:53:d1:7c:ac:3f:07:78:f4:a7:e5:03:82: 21:31:02:11:7c:7c:85:3c:f3:e3:47:e2:53:b0:68: 0b:f0:14:42:4e:3a:bf:b0:88:9c:3c:13:c2:41:eb: 11:f1:de:af:ac:6d:79:c9:0a:68:95:1c:bc:ee:ca: f4:a5:78:71:5a:b6:74:b7:e2:66:f8:ab:14:65:7f: fd:cd:c4:2c:ff:cc:41:a0:13:72:fc:9d:09:3d:4a: e7:9a:c7:f1:da:f3:de:aa:7f:9c:89:5b:bb:a6:23: 45:06:6c:7e:54:f2:ec:13:0e:1f:07:d4:a7:9b:d0: a1:a4:c3:99:d4:11:b8:9d:94:12:70:fb:fa:6e:87: b5:e9:5b:fd:ca:4b:3f:5a:a8:be:a7:78:09:04:69: 2a:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:14:0C:5F:68:27:3F:06:6B:B3:E7:59:F6:10:4E:07:CE:7C:8A:DC X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/RBQMX2gnPwZrs-dZ9hBOB858itw.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.78.16.0/23 Signature Algorithm: sha256WithRSAEncryption c0:39:f0:e8:74:7b:f9:d7:2f:20:b5:96:5d:d1:40:b6:47:31: a7:5a:fc:d3:74:9f:d1:60:8e:09:22:7a:35:14:ad:52:c0:0e: a4:e0:bc:ca:41:49:ca:5b:55:8d:d1:c4:bc:eb:db:36:f7:f3: 70:07:6e:51:dd:0a:ac:e9:fa:a9:68:fb:3f:ad:0a:c0:67:5c: f3:ac:5e:6e:c4:76:43:16:46:4b:87:3b:1c:40:c5:d5:9c:68: 8b:71:b8:38:88:88:53:53:64:52:33:1b:ad:7a:62:1f:95:79: 0d:23:65:cc:59:17:57:78:16:82:50:18:8b:a6:95:d1:89:5f: 10:66:7d:aa:5b:e6:3d:80:90:26:7f:90:12:e2:f5:75:da:4d: be:de:e2:00:8c:13:e9:35:aa:bf:60:4e:9a:07:84:3c:09:c7: 3e:c6:fc:42:0a:00:80:f4:35:2e:e2:3b:e2:57:d1:c8:24:e8: 12:b2:a3:16:74:02:f8:bc:ee:ae:4c:7f:1f:84:33:b9:53:ad: 12:4a:bf:93:dd:72:dd:e8:f7:1a:85:62:33:e0:2d:67:d9:ef: 29:39:33:ac:bd:b4:5b:1f:3c:f4:24:a8:33:be:ed:b3:e8:12: 6a:54:32:78:8a:3e:8d:46:90:7a:b5:af:8a:57:6d:49:78:93: 5b:0c:9b:fe -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCLIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw MjIyMzhaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDQ0MTQwQzVGNjgyNzNG MDY2QkIzRTc1OUY2MTA0RTA3Q0U3QzhBREMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDdF2KzS4sgLAc8xCNzRbW/KpZauPufN2hXb+c25X+DCAIWc7WH V19vKJXMcjQiDkxQr9lXxWHgHnOoqp71t+v9qamxi2tzq52dLvxBmQK3irZ2aXC6 UwsM1gVU59nO5FRAGB5LLmI6ofmGo1PRfKw/B3j0p+UDgiExAhF8fIU88+NH4lOw aAvwFEJOOr+wiJw8E8JB6xHx3q+sbXnJCmiVHLzuyvSleHFatnS34mb4qxRlf/3N xCz/zEGgE3L8nQk9Sueax/Ha896qf5yJW7umI0UGbH5U8uwTDh8H1Keb0KGkw5nU EbidlBJw+/puh7XpW/3KSz9aqL6neAkEaSqNAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQURBQMX2gnPwZrs+dZ9hBOB858itwwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1JCUU1YMmduUHdacnMtZFo5aEJPQjg1OGl0dy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEBThAwDQYJKoZIhvcNAQELBQADggEBAMA58Oh0e/nXLyC1ll3RQLZHMada /NN0n9FgjgkiejUUrVLADqTgvMpBScpbVY3RxLzr2zb383AHblHdCqzp+qlo+z+t CsBnXPOsXm7EdkMWRkuHOxxAxdWcaItxuDiIiFNTZFIzG616Yh+VeQ0jZcxZF1d4 FoJQGIumldGJXxBmfapb5j2AkCZ/kBLi9XXaTb7e4gCME+k1qr9gTpoHhDwJxz7G /EIKAID0NS7iO+JX0cgk6BKyoxZ0Avi87q5Mfx+EM7lTrRJKv5Pdct3o9xqFYjPg LWfZ7yk5M6y9tFsfPPQkqDO+7bPoEmpUMniKPo1GkHq1r4pXbUl4k1sMm/4= -----END CERTIFICATE-----Generated at Mon Nov 25 23:54:41 2024 by rpki-client on console-ams.rpki-client.org