$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/VqjFqGc2GwvQ2dDFzkIK_0IXqgE.roa File: VqjFqGc2GwvQ2dDFzkIK_0IXqgE.roa (raw, json) Hash identifier: 0GFY36aFMrI5MOVrpCxBCrlgcA+y1X1uqv9VjZqa/XU= Subject key identifier: 56:A8:C5:A8:67:36:1B:0B:D0:D9:D0:C5:CE:42:0A:FF:42:17:AA:01 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0AB0 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/VqjFqGc2GwvQ2dDFzkIK_0IXqgE.roa Signing time: Sun 30 Jun 2024 01:54:30 +0000 ROA not before: Sun 30 Jun 2024 01:54:30 +0000 ROA not after: Tue 24 Jun 2025 10:46:45 +0000 asID: 9605 IP address blocks: 183.73.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 22:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2736 (0xab0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 30 01:54:30 2024 GMT Not After : Jun 24 10:46:45 2025 GMT Subject: CN=56A8C5A867361B0BD0D9D0C5CE420AFF4217AA01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:11:74:e0:6b:52:af:f0:29:98:53:ce:5f:83: 92:d5:09:00:95:34:51:dd:30:9e:d3:3f:f7:72:15: 2e:30:c3:32:cf:72:f8:ce:d5:1b:cf:ab:e7:0c:b1: 52:02:f3:f7:dc:12:d3:b6:a8:0a:37:a5:80:f9:d9: 4a:a5:c2:37:d8:26:26:26:eb:66:d0:69:d1:9c:22: bc:0c:93:f1:9d:90:d4:1f:63:ee:4e:e5:e9:27:c4: ab:25:56:e8:d0:70:d5:ac:83:6d:16:77:9b:75:c4: 28:34:8c:76:ab:a9:d5:59:45:ad:9e:e6:75:fc:8e: 80:c7:34:6b:61:d7:7f:12:23:19:89:e5:f6:ed:85: d4:7b:41:85:89:e3:06:df:a9:b8:49:9a:53:9d:c0: c6:fb:68:5d:ef:59:fb:92:e6:f3:d2:53:e2:de:1a: f8:1f:74:66:a3:23:2a:6c:b0:51:5d:6e:77:95:77: 74:cf:1a:a0:e9:e0:28:52:fa:ab:c0:53:78:b3:33: 90:75:9c:a4:28:38:1b:1e:b6:78:13:02:12:d1:19: 27:06:89:c5:41:3b:21:78:0b:e6:05:88:c0:a1:fc: 13:87:a9:a0:2c:39:af:0c:86:0e:3a:2a:4b:02:ea: d8:50:74:11:c5:19:d6:c1:02:49:51:bf:1a:69:97: bf:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:A8:C5:A8:67:36:1B:0B:D0:D9:D0:C5:CE:42:0A:FF:42:17:AA:01 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/VqjFqGc2GwvQ2dDFzkIK_0IXqgE.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 183.73.20.0/22 Signature Algorithm: sha256WithRSAEncryption 48:f0:d7:3b:7f:d4:cb:0a:c2:33:45:51:d7:30:2b:fa:e3:0d: 6a:35:4b:06:86:cf:2b:f3:80:79:ef:68:5e:3d:6e:cc:27:1e: 36:d1:58:c7:81:74:93:7d:85:2b:d5:75:f4:9d:e2:bf:3d:c8: 46:94:37:bd:0a:dc:ab:4e:b9:44:7b:9a:cd:bf:be:3e:0b:f9: a1:21:37:55:63:10:a2:f5:86:41:c9:08:58:6d:a0:34:0d:8e: c3:e0:42:d6:e6:1d:24:18:07:4d:a5:32:0c:f9:a7:a6:e3:6c: ea:c8:11:8c:ef:7d:8e:b3:49:24:14:12:a3:61:e5:f6:3c:8d: 07:fb:ba:6d:39:04:6d:7b:35:69:62:b0:b8:90:b5:15:df:0a: 7d:8d:34:f5:45:4d:07:4c:df:9e:82:63:14:1a:f8:bc:b5:ff: 95:88:16:10:08:fc:0c:3c:fc:07:36:68:ce:dc:ce:59:88:2e: a7:a3:db:16:03:f8:6e:fc:75:2e:ac:28:ce:f3:3d:b8:e3:f8: a4:c8:58:39:c2:09:a1:fe:51:3a:de:c7:89:8a:78:1f:91:48: a7:ab:91:ca:47:74:40:7c:a3:03:f0:fe:61:0c:dd:55:05:43: 86:8d:d0:e2:8c:10:8d:d7:7c:b7:1d:7d:4d:01:69:14:92:95: be:d0:7a:49 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCrAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA2MzAw MTU0MzBaFw0yNTA2MjQxMDQ2NDVaMDMxMTAvBgNVBAMTKDU2QThDNUE4NjczNjFC MEJEMEQ5RDBDNUNFNDIwQUZGNDIxN0FBMDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDTEXTga1Kv8CmYU85fg5LVCQCVNFHdMJ7TP/dyFS4wwzLPcvjO 1RvPq+cMsVIC8/fcEtO2qAo3pYD52UqlwjfYJiYm62bQadGcIrwMk/GdkNQfY+5O 5eknxKslVujQcNWsg20Wd5t1xCg0jHarqdVZRa2e5nX8joDHNGth138SIxmJ5fbt hdR7QYWJ4wbfqbhJmlOdwMb7aF3vWfuS5vPSU+LeGvgfdGajIypssFFdbneVd3TP GqDp4ChS+qvAU3izM5B1nKQoOBsetngTAhLRGScGicVBOyF4C+YFiMCh/BOHqaAs Oa8Mhg46KksC6thQdBHFGdbBAklRvxppl7+vAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUVqjFqGc2GwvQ2dDFzkIK/0IXqgEwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1ZxakZxR2MyR3d2UTJkREZ6a0lLXzBJWHFnRS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAK3SRQwDQYJKoZIhvcNAQELBQADggEBAEjw1zt/1MsKwjNFUdcwK/rjDWo1 SwaGzyvzgHnvaF49bswnHjbRWMeBdJN9hSvVdfSd4r89yEaUN70K3KtOuUR7ms2/ vj4L+aEhN1VjEKL1hkHJCFhtoDQNjsPgQtbmHSQYB02lMgz5p6bjbOrIEYzvfY6z SSQUEqNh5fY8jQf7um05BG17NWlisLiQtRXfCn2NNPVFTQdM356CYxQa+Ly1/5WI FhAI/Aw8/Ac2aM7czlmILqej2xYD+G78dS6sKM7zPbjj+KTIWDnCCaH+UTrex4mK eB+RSKerkcpHdEB8owPw/mEM3VUFQ4aN0OKMEI3XfLcdfU0BaRSSlb7Qekk= -----END CERTIFICATE-----Generated at Mon Nov 25 23:59:11 2024 by rpki-client on console-fra.rpki-client.org