$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/T9HVCWn3oRDx0J-YTo2xeGKMAzM.roa File: T9HVCWn3oRDx0J-YTo2xeGKMAzM.roa (raw, json) Hash identifier: doejgvcqSFw3g1bduspj3R7Au5NhP/OEungzZbexI6Q= Subject key identifier: 4F:D1:D5:09:69:F7:A1:10:F1:D0:9F:98:4E:8D:B1:78:62:8C:03:33 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0810 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/T9HVCWn3oRDx0J-YTo2xeGKMAzM.roa Signing time: Tue 30 Apr 2024 02:12:27 +0000 ROA not before: Tue 30 Apr 2024 02:12:27 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 1.79.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2064 (0x810) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 30 02:12:27 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=4FD1D50969F7A110F1D09F984E8DB178628C0333 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:2c:c8:c4:b0:99:c1:a8:de:7d:60:af:3c:51: 61:b4:35:02:e6:4a:9c:ea:b2:a4:5f:50:8e:c5:de: be:77:c9:b6:82:5f:4f:58:25:7b:95:7e:88:2c:1f: fe:73:6c:e8:7f:e9:70:c1:20:30:bb:01:d8:c8:c7: d1:3b:54:54:c7:47:f3:7e:df:12:06:d1:b5:e1:bf: 14:23:72:b8:12:9b:56:3b:03:bb:8f:26:2f:d9:52: c6:a4:5f:b3:7f:cc:1e:40:d5:37:50:bc:99:6f:39: 51:4d:ef:5a:7f:43:a3:d5:4e:f7:46:6f:9c:b9:80: e2:a2:63:4c:34:8a:84:d3:ae:05:64:47:7f:15:53: e8:5f:8c:2d:72:04:11:78:15:b7:68:57:40:32:a1: 4c:04:e4:7c:58:05:96:8d:66:3c:b0:a4:8c:a8:60: 99:66:80:32:97:51:69:6f:9b:7d:58:7d:d6:51:a9: be:e2:33:e8:0c:4f:cf:83:53:5f:ab:1d:f8:7f:99: 4e:b5:6b:e0:66:3a:76:dc:fa:91:35:72:88:cb:c6: 33:59:e0:91:9a:d7:17:19:a8:c4:c3:1e:3d:ea:49: 51:3e:39:7a:9f:9c:ac:e3:b4:4f:1d:2e:53:e7:4e: 8d:74:89:3c:fb:b8:ce:9f:b5:53:61:0d:b3:f2:a4: d0:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:D1:D5:09:69:F7:A1:10:F1:D0:9F:98:4E:8D:B1:78:62:8C:03:33 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/T9HVCWn3oRDx0J-YTo2xeGKMAzM.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.79.88.0/24 Signature Algorithm: sha256WithRSAEncryption 14:e2:73:d6:dd:a8:e2:e5:40:02:15:26:cf:d7:94:a7:44:bb: bc:69:60:2a:39:75:5e:e0:38:9a:e8:a0:60:ad:95:c9:08:e9: 04:6a:4e:fb:d6:47:e4:ba:a6:d6:7f:70:f2:dd:24:d7:46:9e: c2:9e:0e:4f:08:7f:05:b4:13:a8:90:3e:48:2d:ce:c1:c2:c9: 7c:ba:b2:c0:ae:74:87:f3:ee:d4:71:a3:2e:d1:ad:b9:e2:e4: 96:ca:ea:52:07:05:a6:c2:88:05:73:2d:c6:7d:d3:83:c4:d9: cb:77:7f:f2:37:d0:9c:bc:b2:6b:c6:56:c0:03:4b:9e:50:bf: 63:fd:28:47:f1:6d:3b:0e:03:8f:fa:27:4e:ad:85:ab:6f:7a: b9:0b:29:1d:b4:6c:05:06:bc:ea:c1:d4:ac:85:cb:17:ae:e1: 04:b9:26:a3:da:75:15:aa:af:a9:d6:ed:9d:00:a5:53:56:6e: 07:12:f2:ac:be:c0:02:3b:80:cb:1d:92:5c:c3:be:c5:9c:ac: 57:b0:d9:99:ea:e2:21:32:4f:67:a0:68:cc:c3:f3:6b:7f:33: 54:48:6c:45:5b:94:58:35:fb:ac:af:f2:29:71:1e:e3:04:4b: 5b:09:03:ff:07:0f:a2:14:3f:32:26:cc:76:c8:95:e4:5a:c6: 5e:2c:f8:06 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCBAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw MjEyMjdaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDRGRDFENTA5NjlGN0Ex MTBGMUQwOUY5ODRFOERCMTc4NjI4QzAzMzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCpLMjEsJnBqN59YK88UWG0NQLmSpzqsqRfUI7F3r53ybaCX09Y JXuVfogsH/5zbOh/6XDBIDC7AdjIx9E7VFTHR/N+3xIG0bXhvxQjcrgSm1Y7A7uP Ji/ZUsakX7N/zB5A1TdQvJlvOVFN71p/Q6PVTvdGb5y5gOKiY0w0ioTTrgVkR38V U+hfjC1yBBF4FbdoV0AyoUwE5HxYBZaNZjywpIyoYJlmgDKXUWlvm31YfdZRqb7i M+gMT8+DU1+rHfh/mU61a+BmOnbc+pE1cojLxjNZ4JGa1xcZqMTDHj3qSVE+OXqf nKzjtE8dLlPnTo10iTz7uM6ftVNhDbPypNAjAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUT9HVCWn3oRDx0J+YTo2xeGKMAzMwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1Q5SFZDV24zb1JEeDBKLVlUbzJ4ZUdLTUF6TS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAABT1gwDQYJKoZIhvcNAQELBQADggEBABTic9bdqOLlQAIVJs/XlKdEu7xp YCo5dV7gOJrooGCtlckI6QRqTvvWR+S6ptZ/cPLdJNdGnsKeDk8IfwW0E6iQPkgt zsHCyXy6ssCudIfz7tRxoy7Rrbni5JbK6lIHBabCiAVzLcZ904PE2ct3f/I30Jy8 smvGVsADS55Qv2P9KEfxbTsOA4/6J06thatverkLKR20bAUGvOrB1KyFyxeu4QS5 JqPadRWqr6nW7Z0ApVNWbgcS8qy+wAI7gMsdklzDvsWcrFew2Znq4iEyT2egaMzD 82t/M1RIbEVblFg1+6yv8ilxHuMES1sJA/8HD6IUPzImzHbIleRaxl4s+AY= -----END CERTIFICATE-----Generated at Sat Jun 1 13:38:47 2024 by rpki-client on console-fra.rpki-client.org