$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZYdpQkOh2csXWTEEU8Iux2_bxYA.roa File: ZYdpQkOh2csXWTEEU8Iux2_bxYA.roa (raw, json) Hash identifier: P430QCGVsyh5pZrI3KHvOcOhJNutAWdjElTcpOOHrLM= Subject key identifier: 65:87:69:42:43:A1:D9:CB:17:59:31:04:53:C2:2E:C7:6F:DB:C5:80 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 068D Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZYdpQkOh2csXWTEEU8Iux2_bxYA.roa Signing time: Tue 30 Apr 2024 01:38:08 +0000 ROA not before: Tue 30 Apr 2024 01:38:08 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 183.75.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Dec 2024 00:11:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1677 (0x68d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 30 01:38:08 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=6587694243A1D9CB1759310453C22EC76FDBC580 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:4d:3a:89:5f:29:74:8d:7f:df:17:06:8e:53: 83:29:45:7f:b2:fe:34:44:ff:5b:11:66:08:51:f4: ee:65:e5:31:c2:6a:45:29:8a:2d:76:15:f6:59:52: 07:f3:20:a6:12:8b:74:08:f9:df:67:c8:78:d8:76: b3:66:9e:b5:8e:d3:39:fe:55:3b:ee:68:f8:90:78: 48:4a:0f:17:51:24:18:fe:7d:58:e8:f4:26:dd:e8: 89:4d:5c:27:2b:1e:63:98:93:29:ba:a2:60:f3:4f: 98:d0:fb:d4:01:1c:d8:b8:d9:75:6c:29:c5:4f:9c: 9d:d9:70:a9:10:2e:14:a7:47:1b:91:3c:19:5d:69: 27:59:4b:39:f1:41:c8:e5:4a:3f:9c:f6:a5:11:91: 50:d8:a0:67:28:20:2e:62:13:d5:85:33:2f:60:c7: 43:7d:82:fb:c9:27:ce:f3:72:73:1d:f5:55:8b:9c: ff:4d:55:98:ac:82:0e:f0:fa:e0:d4:39:6e:5f:08: eb:5c:a5:93:5d:15:33:05:42:fc:c5:57:7d:b5:ea: 56:fb:ac:3f:b2:a0:ba:80:0c:74:b9:b9:f2:53:80: c8:13:02:81:e8:0d:a6:8d:dd:9e:e3:98:d2:a9:54: 0f:63:84:fc:1e:fd:ce:22:d8:f9:bb:28:e1:d3:38: d7:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:87:69:42:43:A1:D9:CB:17:59:31:04:53:C2:2E:C7:6F:DB:C5:80 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZYdpQkOh2csXWTEEU8Iux2_bxYA.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 183.75.0.0/17 Signature Algorithm: sha256WithRSAEncryption 14:e1:f9:7b:27:e2:cc:80:60:3a:cc:1c:bf:e8:35:b9:d2:7b: 0a:69:80:7f:5b:2d:3d:a0:da:cc:ed:87:25:c9:db:cb:65:e7: a4:56:97:b0:cc:4c:65:4c:e3:26:40:b6:88:15:37:85:d8:0a: 7a:ac:51:6d:56:76:ae:86:71:65:c7:23:3c:2a:18:3b:c6:e7: b6:d6:25:fb:55:d8:d8:84:b6:57:09:d1:d1:36:69:30:bc:4d: a4:17:97:1c:57:31:74:57:38:5c:c6:08:a6:8f:46:55:e2:fb: ed:f6:b5:19:05:4b:b0:a2:40:3b:52:cf:7a:08:66:12:7c:bb: 3b:9f:e6:e9:8e:cf:49:e1:84:f6:a2:4d:38:2b:14:57:ed:60: af:b6:c6:c8:ec:7c:5c:cb:7f:5e:09:7c:3b:ac:d4:b4:b1:23: 7c:ae:3a:f3:fb:4b:0f:dc:4c:cb:cf:b9:28:3c:68:cd:8c:07: 27:08:bb:56:08:73:11:1c:71:36:64:ef:c2:96:e8:8c:53:84: ce:56:35:f8:cc:99:3d:10:6b:0e:90:60:7d:c7:fc:ed:3a:84: dd:ec:6e:ac:a9:5c:fd:b5:51:62:43:c1:25:dd:07:dd:f0:4a: ba:cf:7a:82:c1:ca:f8:c4:c9:93:ba:8a:af:48:f4:f4:ad:d8: 91:c1:6a:87 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBo0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw MTM4MDhaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDY1ODc2OTQyNDNBMUQ5 Q0IxNzU5MzEwNDUzQzIyRUM3NkZEQkM1ODAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC6TTqJXyl0jX/fFwaOU4MpRX+y/jRE/1sRZghR9O5l5THCakUp ii12FfZZUgfzIKYSi3QI+d9nyHjYdrNmnrWO0zn+VTvuaPiQeEhKDxdRJBj+fVjo 9Cbd6IlNXCcrHmOYkym6omDzT5jQ+9QBHNi42XVsKcVPnJ3ZcKkQLhSnRxuRPBld aSdZSznxQcjlSj+c9qURkVDYoGcoIC5iE9WFMy9gx0N9gvvJJ87zcnMd9VWLnP9N VZisgg7w+uDUOW5fCOtcpZNdFTMFQvzFV3216lb7rD+yoLqADHS5ufJTgMgTAoHo DaaN3Z7jmNKpVA9jhPwe/c4i2Pm7KOHTONezAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUZYdpQkOh2csXWTEEU8Iux2/bxYAwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1pZZHBRa09oMmNzWFdURUVVOEl1eDJfYnhZQS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAe3SwAwDQYJKoZIhvcNAQELBQADggEBABTh+Xsn4syAYDrMHL/oNbnSewpp gH9bLT2g2szthyXJ28tl56RWl7DMTGVM4yZAtogVN4XYCnqsUW1Wdq6GcWXHIzwq GDvG57bWJftV2NiEtlcJ0dE2aTC8TaQXlxxXMXRXOFzGCKaPRlXi++32tRkFS7Ci QDtSz3oIZhJ8uzuf5umOz0nhhPaiTTgrFFftYK+2xsjsfFzLf14JfDus1LSxI3yu OvP7Sw/cTMvPuSg8aM2MBycIu1YIcxEccTZk78KW6IxThM5WNfjMmT0Qaw6QYH3H /O06hN3sbqypXP21UWJDwSXdB93wSrrPeoLByvjEyZO6iq9I9PSt2JHBaoc= -----END CERTIFICATE-----Generated at Tue Nov 26 02:17:11 2024 by rpki-client on console-fra.rpki-client.org