$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Yz-BztoA62sbHrdc6VYtumpnd0k.roa File: Yz-BztoA62sbHrdc6VYtumpnd0k.roa (raw, json) Hash identifier: WGvDCRcXRCByzwAnsETihDfLwTDh5Mgn/i+NjcNkA+I= Subject key identifier: 63:3F:81:CE:DA:00:EB:6B:1B:1E:B7:5C:E9:56:2D:BA:6A:67:77:49 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0A0E Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Yz-BztoA62sbHrdc6VYtumpnd0k.roa Signing time: Sun 30 Jun 2024 01:44:18 +0000 ROA not before: Sun 30 Jun 2024 01:44:18 +0000 ROA not after: Tue 24 Jun 2025 10:46:45 +0000 asID: 9605 IP address blocks: 1.76.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:41:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2574 (0xa0e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 30 01:44:18 2024 GMT Not After : Jun 24 10:46:45 2025 GMT Subject: CN=633F81CEDA00EB6B1B1EB75CE9562DBA6A677749 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:59:aa:cb:74:a2:bd:a8:47:cc:0c:c7:8f:0f: 73:c9:ac:df:d5:28:64:60:83:08:6e:71:b1:97:d6: 96:2e:b0:02:c1:df:f2:a0:43:2f:b1:5b:7c:69:65: 9f:c3:66:4f:8d:68:6a:54:bc:a3:5d:89:bf:56:cd: 79:c4:5d:56:82:2b:05:44:5d:22:8b:f4:8e:87:a8: 74:cc:74:cd:f5:b7:6a:93:52:1f:fa:dc:da:2a:e3: 84:cc:42:c5:fc:07:34:57:d2:75:8c:23:cd:bb:e4: 47:f1:a7:34:b8:75:7c:24:cf:e9:66:1a:a9:7f:78: 07:aa:2b:bc:e5:2b:58:d0:6b:b8:66:fa:ab:31:23: f2:db:e8:fc:10:7b:83:56:55:df:99:ac:0f:53:24: c8:e7:04:6a:1a:af:f8:b2:0b:e0:08:84:f4:ed:96: 50:67:18:ae:f0:38:db:14:d2:39:63:fd:f1:55:a2: bd:2f:50:f9:3d:cf:6a:92:b6:92:05:ad:27:81:fd: e6:20:4b:2d:84:b0:a8:11:e2:64:a3:8a:78:a0:94: 36:ce:b0:7b:20:ab:e8:52:6f:11:3d:2c:a2:d1:ab: 37:32:1d:8c:4c:ec:36:4c:91:f6:1e:bf:9d:68:5a: 66:1c:21:e0:ef:ba:68:40:6c:bb:7a:a1:0e:78:ff: 0a:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:3F:81:CE:DA:00:EB:6B:1B:1E:B7:5C:E9:56:2D:BA:6A:67:77:49 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Yz-BztoA62sbHrdc6VYtumpnd0k.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.76.8.0/22 Signature Algorithm: sha256WithRSAEncryption 48:ea:a0:14:a9:16:b3:c6:9f:0d:52:bb:b2:af:ee:1d:f1:3c: 8c:ae:67:62:6c:44:27:e2:70:d8:43:ca:79:b5:b9:33:90:27: f4:d7:45:e7:b3:d1:f3:8d:72:d9:82:4b:c5:26:42:e3:90:b9: 95:20:a3:0b:a9:52:d0:8b:be:b3:ec:b5:cd:29:f7:41:09:4a: 4b:11:47:82:ae:ac:b6:44:ad:d7:a3:c7:91:eb:07:b4:52:72: d9:c8:e6:c5:85:31:33:5a:58:ca:03:a4:a6:de:fc:91:e0:54: 86:dd:55:a9:ea:71:75:4d:7f:83:9a:ff:cc:a4:5c:11:a2:48: 66:a0:a7:bd:74:50:05:d8:e1:dd:59:42:7e:7e:1b:d1:39:46: 71:d3:11:ca:7a:66:af:89:c2:bf:24:8c:d4:0d:ef:14:9a:33: 83:3c:50:85:88:4b:b7:f5:80:22:0c:6d:92:c6:9c:f7:73:33: 9f:f1:3e:d5:90:ef:d3:f5:7b:84:85:73:fe:37:6f:32:e8:20: c6:6f:9d:7a:5d:a6:e5:7a:81:57:8b:89:1f:51:f3:1f:06:97: 5b:f0:91:7b:2e:8e:91:cd:31:5f:9c:2d:da:19:33:b6:ea:d2: ed:d4:f4:7c:ae:e1:a8:d1:15:e3:68:31:88:4a:16:57:60:a8: e7:c8:67:b2 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCg4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA2MzAw MTQ0MThaFw0yNTA2MjQxMDQ2NDVaMDMxMTAvBgNVBAMTKDYzM0Y4MUNFREEwMEVC NkIxQjFFQjc1Q0U5NTYyREJBNkE2Nzc3NDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQClWarLdKK9qEfMDMePD3PJrN/VKGRggwhucbGX1pYusALB3/Kg Qy+xW3xpZZ/DZk+NaGpUvKNdib9WzXnEXVaCKwVEXSKL9I6HqHTMdM31t2qTUh/6 3Noq44TMQsX8BzRX0nWMI8275EfxpzS4dXwkz+lmGql/eAeqK7zlK1jQa7hm+qsx I/Lb6PwQe4NWVd+ZrA9TJMjnBGoar/iyC+AIhPTtllBnGK7wONsU0jlj/fFVor0v UPk9z2qStpIFrSeB/eYgSy2EsKgR4mSjiniglDbOsHsgq+hSbxE9LKLRqzcyHYxM 7DZMkfYev51oWmYcIeDvumhAbLt6oQ54/wqzAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUYz+BztoA62sbHrdc6VYtumpnd0kwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1l6LUJ6dG9BNjJzYkhyZGM2Vll0dW1wbmQway5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIBTAgwDQYJKoZIhvcNAQELBQADggEBAEjqoBSpFrPGnw1Su7Kv7h3xPIyu Z2JsRCficNhDynm1uTOQJ/TXReez0fONctmCS8UmQuOQuZUgowupUtCLvrPstc0p 90EJSksRR4KurLZErdejx5HrB7RSctnI5sWFMTNaWMoDpKbe/JHgVIbdVanqcXVN f4Oa/8ykXBGiSGagp710UAXY4d1ZQn5+G9E5RnHTEcp6Zq+Jwr8kjNQN7xSaM4M8 UIWIS7f1gCIMbZLGnPdzM5/xPtWQ79P1e4SFc/43bzLoIMZvnXpdpuV6gVeLiR9R 8x8Gl1vwkXsujpHNMV+cLdoZM7bq0u3U9Hyu4ajRFeNoMYhKFldgqOfIZ7I= -----END CERTIFICATE-----Generated at Fri Nov 22 15:24:01 2024 by rpki-client on console-fra.rpki-client.org