$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/XRfZcONWhsOe2gXgoifHW0IkHEk.roa File: XRfZcONWhsOe2gXgoifHW0IkHEk.roa (raw, json) Hash identifier: +ysXr6Te2fK3f4LbTtVraHkh1hLtyoMoJKfl39oNrhA= Subject key identifier: 5D:17:D9:70:E3:56:86:C3:9E:DA:05:E0:A2:27:C7:5B:42:24:1C:49 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0A4D Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/XRfZcONWhsOe2gXgoifHW0IkHEk.roa Signing time: Sun 30 Jun 2024 01:48:30 +0000 ROA not before: Sun 30 Jun 2024 01:48:30 +0000 ROA not after: Tue 24 Jun 2025 10:46:45 +0000 asID: 9605 IP address blocks: 219.114.160.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:41:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2637 (0xa4d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 30 01:48:30 2024 GMT Not After : Jun 24 10:46:45 2025 GMT Subject: CN=5D17D970E35686C39EDA05E0A227C75B42241C49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ed:d1:77:7a:76:f9:97:54:dc:1d:0b:41:9e: c1:a6:7b:64:cc:a5:32:fe:cd:d7:ec:c7:a8:d3:0f: 1f:7d:84:55:27:47:dd:70:d2:a2:82:85:2d:df:e9: 51:42:01:bd:85:a8:6e:3f:5e:d9:0e:62:e2:50:66: 9f:ff:d7:8e:0d:60:a4:a3:1e:d2:ef:ba:b9:d8:4d: a8:72:51:e0:29:4f:32:23:90:74:fc:25:97:8e:33: 48:87:18:b3:79:ab:da:0d:01:d7:e2:a2:33:ba:c9: 39:5f:f8:ff:41:b9:8e:a4:cb:6a:b6:67:8f:35:58: 6c:31:d4:7d:c8:f6:2d:e7:af:45:5f:19:19:bc:d3: f7:99:8d:df:03:53:d1:f1:a4:7c:ac:b6:24:71:6e: 13:fc:cf:cc:c7:06:c0:5c:32:90:6c:b4:2d:54:8a: ae:d4:23:47:dd:c4:38:8e:85:b0:86:b4:bc:45:07: 61:9d:4e:e5:6b:09:bd:68:a8:1e:c5:40:bc:f7:2b: f3:ea:c1:83:b9:7b:f9:b6:a2:c1:df:7f:cd:03:b1: 8a:cb:2c:e1:36:ee:4f:d8:73:79:0f:89:bb:6b:c2: b7:a8:40:95:f1:5c:75:87:8c:ac:8d:aa:c0:36:e8: 83:c5:2d:6b:40:b9:5b:f6:78:3b:a6:7c:ca:f1:0c: e4:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:17:D9:70:E3:56:86:C3:9E:DA:05:E0:A2:27:C7:5B:42:24:1C:49 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/XRfZcONWhsOe2gXgoifHW0IkHEk.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 219.114.160.0/22 Signature Algorithm: sha256WithRSAEncryption 97:5e:ca:28:12:94:6a:5d:14:55:b3:13:73:93:f8:34:11:1f: 64:46:9b:b6:dd:6d:f9:98:6f:93:7b:0c:24:4d:83:4b:8e:39: 04:e3:bd:b1:09:44:f0:2c:e4:26:51:9b:86:62:95:b1:d7:0c: 5c:24:b7:d1:f4:ba:30:43:d3:dc:10:7e:3e:f7:db:16:af:dc: 21:fe:c4:91:f6:b0:03:8f:0a:c9:5e:67:18:7c:05:20:49:c9: 09:a0:b9:6f:ec:03:d6:ec:2f:c2:9c:bb:8f:6c:4c:4e:11:c8: 04:91:d1:cf:03:f3:ad:56:06:54:9f:24:74:9b:3f:29:66:3d: 7c:d1:45:bf:a7:63:02:cb:89:a5:3e:39:e6:ec:5c:42:ab:19: 97:1a:70:bf:23:14:e9:23:dc:de:f7:b3:a3:c2:ca:ea:46:c4: 61:2e:44:89:59:47:ba:b7:01:b6:6f:50:d8:14:0e:3d:00:e7: 55:72:11:ba:26:04:3c:13:1a:3b:11:55:61:5e:f0:64:71:29: f3:8c:f9:ba:62:3e:85:77:d9:55:be:42:3e:e2:2c:ac:77:d8: 7f:c2:32:ef:f7:0b:65:dc:79:9e:f7:b5:55:01:e7:35:77:ea: 56:0f:cc:0e:31:57:76:76:0c:fb:d9:a9:12:d0:67:ba:d9:c7: 29:89:0b:1a -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCk0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA2MzAw MTQ4MzBaFw0yNTA2MjQxMDQ2NDVaMDMxMTAvBgNVBAMTKDVEMTdEOTcwRTM1Njg2 QzM5RURBMDVFMEEyMjdDNzVCNDIyNDFDNDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDL7dF3enb5l1TcHQtBnsGme2TMpTL+zdfsx6jTDx99hFUnR91w 0qKChS3f6VFCAb2FqG4/XtkOYuJQZp//144NYKSjHtLvurnYTahyUeApTzIjkHT8 JZeOM0iHGLN5q9oNAdfiojO6yTlf+P9BuY6ky2q2Z481WGwx1H3I9i3nr0VfGRm8 0/eZjd8DU9HxpHystiRxbhP8z8zHBsBcMpBstC1Uiq7UI0fdxDiOhbCGtLxFB2Gd TuVrCb1oqB7FQLz3K/PqwYO5e/m2osHff80DsYrLLOE27k/Yc3kPibtrwreoQJXx XHWHjKyNqsA26IPFLWtAuVv2eDumfMrxDOTXAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUXRfZcONWhsOe2gXgoifHW0IkHEkwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1hSZlpjT05XaHNPZTJnWGdvaWZIVzBJa0hFay5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBALbcqAwDQYJKoZIhvcNAQELBQADggEBAJdeyigSlGpdFFWzE3OT+DQRH2RG m7bdbfmYb5N7DCRNg0uOOQTjvbEJRPAs5CZRm4ZilbHXDFwkt9H0ujBD09wQfj73 2xav3CH+xJH2sAOPCsleZxh8BSBJyQmguW/sA9bsL8Kcu49sTE4RyASR0c8D861W BlSfJHSbPylmPXzRRb+nYwLLiaU+OebsXEKrGZcacL8jFOkj3N73s6PCyupGxGEu RIlZR7q3AbZvUNgUDj0A51VyEbomBDwTGjsRVWFe8GRxKfOM+bpiPoV32VW+Qj7i LKx32H/CMu/3C2XceZ73tVUB5zV36lYPzA4xV3Z2DPvZqRLQZ7rZxymJCxo= -----END CERTIFICATE-----Generated at Fri Nov 22 15:24:01 2024 by rpki-client on console-fra.rpki-client.org