$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/_2kvfUgX97nwisCsUQBThyanknc.roa File: _2kvfUgX97nwisCsUQBThyanknc.roa (raw, json) Hash identifier: SX/L+EPUUEGq81x18UdPfeVWT+ZyX0iIA4YzqIjpXOc= Subject key identifier: FF:69:2F:7D:48:17:F7:B9:F0:8A:C0:AC:51:00:53:87:26:A7:92:77 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 098C Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/_2kvfUgX97nwisCsUQBThyanknc.roa Signing time: Sun 30 Jun 2024 01:36:25 +0000 ROA not before: Sun 30 Jun 2024 01:36:25 +0000 ROA not after: Tue 24 Jun 2025 10:46:45 +0000 asID: 9605 IP address blocks: 27.231.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:41:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2444 (0x98c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 30 01:36:25 2024 GMT Not After : Jun 24 10:46:45 2025 GMT Subject: CN=FF692F7D4817F7B9F08AC0AC5100538726A79277 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b1:a5:70:2f:03:f3:8a:02:6e:24:52:bd:bd: c5:eb:0e:0b:51:87:2f:31:ca:d9:a0:e8:6d:d1:77: 67:e8:0e:e1:9c:9c:4e:ad:2e:e8:1c:09:12:b8:ac: 2b:00:ae:47:d6:79:d9:e8:2b:9e:8a:72:97:10:c5: 4b:90:86:bb:d3:fa:d1:be:9d:4c:9e:a3:51:de:d6: 27:15:2e:fc:92:e9:fd:2d:ae:cf:12:db:12:e6:14: 31:5d:ea:a1:f0:8b:d7:55:7b:3e:1e:06:9f:77:cb: 22:0c:75:30:2f:a1:ab:20:e1:be:d3:bb:e4:9b:10: 6a:45:9b:e9:8c:fb:54:bd:d2:1f:28:5b:6d:d8:dc: d7:41:3e:9d:de:19:c1:8b:09:39:5e:81:31:ae:a8: 51:9f:9f:78:00:44:38:00:0f:5d:69:41:29:c0:53: a8:7e:21:a5:99:89:8d:87:1f:5a:7d:a7:4c:fe:97: c7:7f:6e:e5:9a:a3:24:df:c5:86:ac:51:bc:dc:42: bb:b1:b7:42:65:05:04:05:b3:a7:42:36:42:ee:db: ba:ea:ff:b2:45:66:cf:7a:e9:9b:be:d1:cb:ad:ac: 41:c7:14:fd:c2:55:ca:f3:3f:fe:6f:37:80:10:eb: 59:da:ad:21:c7:1f:23:1c:d9:8e:ba:b3:01:25:c7: c1:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:69:2F:7D:48:17:F7:B9:F0:8A:C0:AC:51:00:53:87:26:A7:92:77 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/_2kvfUgX97nwisCsUQBThyanknc.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.231.0.0/17 Signature Algorithm: sha256WithRSAEncryption 10:ba:27:a3:2b:51:ef:e0:ed:e4:8f:46:a0:28:56:4a:c1:44: e7:69:11:9f:a2:ad:48:66:b9:1c:c1:5a:34:26:f3:85:51:67: 47:4f:2d:53:49:65:cd:34:91:c6:c0:e8:78:c1:24:63:c4:09: 81:d2:a3:7c:36:13:26:4b:53:86:b0:07:f7:bc:97:0e:e9:28: ac:03:f4:93:8b:68:63:6c:31:29:16:32:a4:ca:b0:59:e4:f2: 24:0c:5c:82:d6:9f:9d:b6:9d:3e:3d:7e:ca:45:9c:bd:62:c2: 33:13:a9:ba:79:02:de:c5:84:16:97:70:b6:c3:af:28:ce:47: cd:35:49:68:7c:ef:20:d4:d2:f0:e4:56:b8:5b:3b:63:0b:b8: dd:6c:b4:db:ff:de:f4:76:33:cc:e5:d5:58:40:42:d0:85:c3: b2:a9:30:a3:55:59:71:62:e1:cf:80:7e:b4:55:e3:ea:cb:c9: ad:2d:e9:26:0e:7e:9f:3f:05:a1:1b:e3:29:8b:75:27:28:2b: 62:38:a2:ab:11:f7:b4:3c:5a:63:19:d9:f3:b1:c7:87:6c:97: 40:fa:62:ef:ab:0b:72:99:24:fd:2b:99:45:d3:8b:3b:eb:7f: 8e:7b:2a:9d:38:5d:6d:dd:5a:85:94:f0:36:a7:dd:f7:75:fd: 55:fe:14:3a -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCYwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA2MzAw MTM2MjVaFw0yNTA2MjQxMDQ2NDVaMDMxMTAvBgNVBAMTKEZGNjkyRjdENDgxN0Y3 QjlGMDhBQzBBQzUxMDA1Mzg3MjZBNzkyNzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCysaVwLwPzigJuJFK9vcXrDgtRhy8xytmg6G3Rd2foDuGcnE6t LugcCRK4rCsArkfWednoK56KcpcQxUuQhrvT+tG+nUyeo1He1icVLvyS6f0trs8S 2xLmFDFd6qHwi9dVez4eBp93yyIMdTAvoasg4b7Tu+SbEGpFm+mM+1S90h8oW23Y 3NdBPp3eGcGLCTlegTGuqFGfn3gARDgAD11pQSnAU6h+IaWZiY2HH1p9p0z+l8d/ buWaoyTfxYasUbzcQruxt0JlBQQFs6dCNkLu27rq/7JFZs966Zu+0cutrEHHFP3C VcrzP/5vN4AQ61narSHHHyMc2Y66swElx8EXAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU/2kvfUgX97nwisCsUQBThyankncwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L18ya3ZmVWdYOTdud2lzQ3NVUUJUaHlhbmtuYy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAcb5wAwDQYJKoZIhvcNAQELBQADggEBABC6J6MrUe/g7eSPRqAoVkrBROdp EZ+irUhmuRzBWjQm84VRZ0dPLVNJZc00kcbA6HjBJGPECYHSo3w2EyZLU4awB/e8 lw7pKKwD9JOLaGNsMSkWMqTKsFnk8iQMXILWn522nT49fspFnL1iwjMTqbp5At7F hBaXcLbDryjOR801SWh87yDU0vDkVrhbO2MLuN1stNv/3vR2M8zl1VhAQtCFw7Kp MKNVWXFi4c+AfrRV4+rLya0t6SYOfp8/BaEb4ymLdScoK2I4oqsR97Q8WmMZ2fOx x4dsl0D6Yu+rC3KZJP0rmUXTizvrf457Kp04XW3dWoWU8Dan3fd1/VX+FDo= -----END CERTIFICATE-----Generated at Fri Nov 22 15:24:01 2024 by rpki-client on console-fra.rpki-client.org