$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/X434oBWTmwC32jkaBJIyxCOJ4XQ.roa File: X434oBWTmwC32jkaBJIyxCOJ4XQ.roa (raw, json) Hash identifier: 0e+Ic0B15ldf0vyR1P+wR3bIBiigGr2DrjTao46Oix0= Subject key identifier: 5F:8D:F8:A0:15:93:9B:00:B7:DA:39:1A:04:92:32:C4:23:89:E1:74 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 09D8 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/X434oBWTmwC32jkaBJIyxCOJ4XQ.roa Signing time: Sun 30 Jun 2024 01:40:32 +0000 ROA not before: Sun 30 Jun 2024 01:40:32 +0000 ROA not after: Tue 24 Jun 2025 10:46:45 +0000 asID: 9605 IP address blocks: 220.210.66.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 22:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2520 (0x9d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 30 01:40:32 2024 GMT Not After : Jun 24 10:46:45 2025 GMT Subject: CN=5F8DF8A015939B00B7DA391A049232C42389E174 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:1d:22:59:0f:e0:b3:d5:f2:b3:ab:95:35:59: a4:06:c2:23:aa:45:bb:9c:cb:fe:33:7f:53:cb:8c: c2:04:1b:3b:ae:a3:17:e1:83:5f:c8:f6:e9:76:84: 06:d6:c0:4e:71:57:11:73:66:93:40:53:c7:73:73: 1e:95:b6:f3:44:9c:e9:bb:31:e8:35:e6:72:c8:8d: c5:bd:d4:56:5b:fe:a4:c0:45:60:0e:a3:14:89:88: c3:e1:8a:4c:e8:36:0d:8c:e8:b5:fc:4b:1a:3e:56: 19:e6:d5:25:b2:67:79:2f:1f:bf:dc:d9:62:ab:d9: 3c:16:df:15:84:af:46:d7:ca:6e:81:88:f7:61:21: ae:65:14:0e:92:b1:ab:ce:35:8d:c8:43:90:9d:49: 8a:42:97:03:0e:a7:60:8f:07:0e:6e:48:4c:20:7c: 9e:dc:82:fb:23:a2:fa:85:34:f6:d9:f4:9a:c9:3f: 07:40:79:7a:07:5d:de:f2:e1:ee:5d:e8:7b:c6:e1: 27:69:ea:20:45:9a:7e:86:b5:82:98:ec:a8:bb:50: 03:9a:5c:30:34:ba:6c:be:88:68:d2:a9:af:97:64: 4e:59:39:f4:97:e4:b9:f2:bf:5b:0d:5a:89:5b:32: 90:70:64:3d:b5:f2:2c:8b:18:2d:bf:3c:f7:fd:c4: fa:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:8D:F8:A0:15:93:9B:00:B7:DA:39:1A:04:92:32:C4:23:89:E1:74 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/X434oBWTmwC32jkaBJIyxCOJ4XQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 220.210.66.0/23 Signature Algorithm: sha256WithRSAEncryption 0a:4e:e2:37:4d:69:18:f0:43:c2:3f:e4:60:85:1d:93:b7:5e: 70:96:cb:78:e5:c1:4e:da:93:46:78:04:3b:2b:18:2f:da:18: c8:9d:bf:dd:e7:85:be:7f:1e:f6:6e:8e:17:3d:a5:47:02:23: d8:e4:63:3d:ab:92:1b:04:b1:7b:77:75:e1:c0:f3:be:24:df: 98:01:af:df:0c:36:a8:05:2d:01:20:84:43:3a:2a:2d:ae:40: 89:63:02:65:7e:fa:b8:c1:a3:47:34:82:cf:7e:9d:9d:f9:f1: 3e:d9:c3:fe:c9:3f:ac:14:0a:d2:7a:72:0a:32:e1:fa:63:e3: 12:98:7c:8f:8a:72:cf:4c:02:64:ce:9d:83:05:ec:dc:c3:34: 0b:9a:4c:d7:95:c6:c0:06:f6:c5:6d:5d:7b:89:e1:41:99:84: 34:36:cb:14:65:8b:a3:bc:6d:4b:fe:e1:6c:8b:0a:81:10:63: db:1b:fc:1b:13:8d:98:d9:bc:e1:20:14:0f:1b:0d:85:2b:62: 7c:a0:95:b4:ae:7d:d6:aa:17:11:53:46:67:d7:1f:80:e3:31: fa:24:ca:df:dc:63:90:a1:7e:a7:63:2a:38:9b:b1:b2:90:4c: 6f:7e:f9:b0:3c:db:6c:d9:70:02:05:d3:18:84:35:41:68:f7: b7:26:83:1e -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCdgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA2MzAw MTQwMzJaFw0yNTA2MjQxMDQ2NDVaMDMxMTAvBgNVBAMTKDVGOERGOEEwMTU5MzlC MDBCN0RBMzkxQTA0OTIzMkM0MjM4OUUxNzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDDHSJZD+Cz1fKzq5U1WaQGwiOqRbucy/4zf1PLjMIEGzuuoxfh g1/I9ul2hAbWwE5xVxFzZpNAU8dzcx6VtvNEnOm7Meg15nLIjcW91FZb/qTARWAO oxSJiMPhikzoNg2M6LX8Sxo+Vhnm1SWyZ3kvH7/c2WKr2TwW3xWEr0bXym6BiPdh Ia5lFA6SsavONY3IQ5CdSYpClwMOp2CPBw5uSEwgfJ7cgvsjovqFNPbZ9JrJPwdA eXoHXd7y4e5d6HvG4Sdp6iBFmn6GtYKY7Ki7UAOaXDA0umy+iGjSqa+XZE5ZOfSX 5Lnyv1sNWolbMpBwZD218iyLGC2/PPf9xPptAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUX434oBWTmwC32jkaBJIyxCOJ4XQwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1g0MzRvQldUbXdDMzJqa2FCSkl5eENPSjRYUS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAHc0kIwDQYJKoZIhvcNAQELBQADggEBAApO4jdNaRjwQ8I/5GCFHZO3XnCW y3jlwU7ak0Z4BDsrGC/aGMidv93nhb5/HvZujhc9pUcCI9jkYz2rkhsEsXt3deHA 874k35gBr98MNqgFLQEghEM6Ki2uQIljAmV++rjBo0c0gs9+nZ358T7Zw/7JP6wU CtJ6cgoy4fpj4xKYfI+Kcs9MAmTOnYMF7NzDNAuaTNeVxsAG9sVtXXuJ4UGZhDQ2 yxRli6O8bUv+4WyLCoEQY9sb/BsTjZjZvOEgFA8bDYUrYnyglbSufdaqFxFTRmfX H4DjMfokyt/cY5ChfqdjKjibsbKQTG9++bA822zZcAIF0xiENUFo97cmgx4= -----END CERTIFICATE-----Generated at Mon Nov 25 23:59:11 2024 by rpki-client on console-fra.rpki-client.org