$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Xp2WQPR-0yHMFhgcjmppIdMDWRs.roa File: Xp2WQPR-0yHMFhgcjmppIdMDWRs.roa (raw, json) Hash identifier: m7+G5zbkxlWRwVbKPNY7aBUQMpeBcFBK6utpctVKkS8= Subject key identifier: 5E:9D:96:40:F4:7E:D3:21:CC:16:18:1C:8E:6A:69:21:D3:03:59:1B Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0617 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Xp2WQPR-0yHMFhgcjmppIdMDWRs.roa Signing time: Thu 29 Feb 2024 01:38:32 +0000 ROA not before: Thu 29 Feb 2024 01:38:32 +0000 ROA not after: Fri 14 Feb 2025 01:30:03 +0000 asID: 9605 IP address blocks: 1.75.4.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1559 (0x617) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Feb 29 01:38:32 2024 GMT Not After : Feb 14 01:30:03 2025 GMT Subject: CN=5E9D9640F47ED321CC16181C8E6A6921D303591B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:db:57:1c:19:99:c1:bc:fb:74:3d:98:c0:93: 99:aa:d8:a3:88:f0:6b:56:ce:35:f0:1e:a5:53:01: 6c:66:1f:61:ac:ee:b1:58:fc:45:a4:bf:20:19:09: 3d:f9:ef:86:a5:6c:df:6e:71:88:8f:99:e8:4b:3c: 59:71:a4:8d:b9:3e:eb:46:e7:5b:d1:85:cd:76:41: 45:84:30:1d:e9:84:83:f8:94:33:3d:82:78:6b:34: d2:19:e6:6c:09:e0:77:82:4a:99:ea:28:d7:7e:46: 27:54:7e:a0:c5:d3:4c:39:54:d1:16:22:28:67:87: f9:f0:c6:62:93:22:14:24:53:20:02:23:b3:f6:66: d0:e1:a8:bc:3f:24:4e:96:ee:19:3c:b7:12:db:e7: a8:30:96:92:73:99:ad:4e:48:2b:dc:84:40:35:3d: b5:95:cd:ee:bd:5d:33:ce:a3:1a:7b:29:9a:24:b8: 03:64:b5:bf:1b:ce:f8:21:39:5b:7b:26:83:26:60: b4:ff:39:56:14:c2:fc:bf:42:84:3e:3f:c1:8d:ca: 2f:e2:46:99:f4:c4:81:e5:e8:a9:36:22:86:4e:44: e6:6f:9c:d4:35:b4:8f:66:7c:4e:a1:a9:29:fb:7b: 62:ab:be:84:fb:5a:a4:c7:c1:90:f9:6b:34:d9:54: 3a:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:9D:96:40:F4:7E:D3:21:CC:16:18:1C:8E:6A:69:21:D3:03:59:1B X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Xp2WQPR-0yHMFhgcjmppIdMDWRs.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.75.4.0/22 Signature Algorithm: sha256WithRSAEncryption 52:8a:39:8d:f3:aa:c3:fc:8e:65:97:3f:b9:9d:ae:15:90:9c: db:dd:f0:34:e2:ce:d2:39:39:0a:39:cd:76:11:c3:bf:1a:95: c5:68:de:94:c7:0d:fd:d2:dc:3c:ae:fb:51:34:39:99:fb:db: 89:68:7c:5a:37:f9:01:ee:2b:92:c6:bf:7b:85:b3:a4:67:3a: 76:23:5d:ec:25:27:3f:d5:82:f3:20:4b:66:2f:42:9d:da:08: cb:f5:49:f0:78:0b:88:0c:8f:aa:a2:b0:b3:9c:c1:9e:4e:c0: 4c:f3:5b:97:5a:07:66:db:c1:f3:82:76:47:fb:86:98:b2:13: 18:0c:70:32:01:45:d6:81:78:a4:ce:de:7c:00:bd:05:1d:72: 88:2b:43:11:fc:f0:69:b7:e2:37:18:99:c1:33:05:10:eb:fd: 70:6a:66:89:61:a8:1a:77:8f:f8:3f:b8:1c:01:ac:67:40:e5: 76:7f:b6:2a:f3:92:08:e1:dd:6a:75:63:75:b0:0b:53:8b:b6: 01:1b:69:a9:97:7b:33:89:dc:0c:de:8f:92:e6:13:f1:3c:62: 78:b0:d4:4e:c5:59:d3:93:37:21:f1:61:3c:74:94:c9:bf:8e: 98:a7:24:b5:d6:9b:94:ba:3c:cb:dd:3f:ba:7e:9d:1f:94:73: d4:8d:7b:b3 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBhcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDAyMjkw MTM4MzJaFw0yNTAyMTQwMTMwMDNaMDMxMTAvBgNVBAMTKDVFOUQ5NjQwRjQ3RUQz MjFDQzE2MTgxQzhFNkE2OTIxRDMwMzU5MUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDV21ccGZnBvPt0PZjAk5mq2KOI8GtWzjXwHqVTAWxmH2Gs7rFY /EWkvyAZCT3574albN9ucYiPmehLPFlxpI25PutG51vRhc12QUWEMB3phIP4lDM9 gnhrNNIZ5mwJ4HeCSpnqKNd+RidUfqDF00w5VNEWIihnh/nwxmKTIhQkUyACI7P2 ZtDhqLw/JE6W7hk8txLb56gwlpJzma1OSCvchEA1PbWVze69XTPOoxp7KZokuANk tb8bzvghOVt7JoMmYLT/OVYUwvy/QoQ+P8GNyi/iRpn0xIHl6Kk2IoZOROZvnNQ1 tI9mfE6hqSn7e2KrvoT7WqTHwZD5azTZVDrfAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUXp2WQPR+0yHMFhgcjmppIdMDWRswHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1hwMldRUFItMHlITUZoZ2NqbXBwSWRNRFdScy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIBSwQwDQYJKoZIhvcNAQELBQADggEBAFKKOY3zqsP8jmWXP7mdrhWQnNvd 8DTiztI5OQo5zXYRw78alcVo3pTHDf3S3Dyu+1E0OZn724lofFo3+QHuK5LGv3uF s6RnOnYjXewlJz/VgvMgS2YvQp3aCMv1SfB4C4gMj6qisLOcwZ5OwEzzW5daB2bb wfOCdkf7hpiyExgMcDIBRdaBeKTO3nwAvQUdcogrQxH88Gm34jcYmcEzBRDr/XBq ZolhqBp3j/g/uBwBrGdA5XZ/tirzkgjh3Wp1Y3WwC1OLtgEbaamXezOJ3Azej5Lm E/E8Yniw1E7FWdOTNyHxYTx0lMm/jpinJLXWm5S6PMvdP7p+nR+Uc9SNe7M= -----END CERTIFICATE-----Generated at Sat Jun 1 13:38:47 2024 by rpki-client on console-fra.rpki-client.org