$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/_kXR8Z_bGU3weJSbsFYcFnMr2Fg.roa File: _kXR8Z_bGU3weJSbsFYcFnMr2Fg.roa (raw, json) Hash identifier: 6hz6A35ixERdlzuyCnLopIFeEkHGO7ryQpZ/yhJno8o= Subject key identifier: FE:45:D1:F1:9F:DB:19:4D:F0:78:94:9B:B0:56:1C:16:73:2B:D8:58 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0A2A Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/_kXR8Z_bGU3weJSbsFYcFnMr2Fg.roa Signing time: Sun 30 Jun 2024 01:46:30 +0000 ROA not before: Sun 30 Jun 2024 01:46:30 +0000 ROA not after: Tue 24 Jun 2025 10:46:45 +0000 asID: 9605 IP address blocks: 220.210.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 22:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2602 (0xa2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 30 01:46:30 2024 GMT Not After : Jun 24 10:46:45 2025 GMT Subject: CN=FE45D1F19FDB194DF078949BB0561C16732BD858 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:90:9d:47:cb:27:0d:ad:74:00:9d:1a:1e:9b: 13:31:aa:5c:71:7b:7b:52:3c:78:14:76:df:7e:d1: 3f:99:53:bc:97:46:ad:95:b1:f0:1e:6d:65:02:fb: bd:39:79:10:e7:d8:e1:bd:5e:e3:77:62:cd:0e:ce: 98:4a:96:ec:04:18:1a:9d:64:b2:9e:7f:0c:0d:b7: 06:19:e4:0d:91:00:a6:04:be:60:02:fb:51:86:a5: a9:07:da:a5:da:f5:11:9f:53:5c:8f:ff:8c:4f:55: ca:5a:fd:21:f6:9e:8f:11:27:95:e8:23:2a:9b:23: 3b:ea:36:c3:6f:56:42:4a:b5:2b:96:ea:1a:af:6a: 93:73:02:79:9e:e5:73:ed:da:c2:c2:16:3b:8a:fb: 10:47:08:bc:0d:0b:52:9f:90:7c:bd:b8:d8:a1:85: 82:01:df:ad:af:74:25:59:0d:98:54:bb:eb:8f:36: 24:07:7f:f7:9f:58:80:4f:42:93:71:9f:90:1c:03: f3:17:ca:65:60:04:77:24:d2:99:bf:a1:95:1c:7a: 17:da:59:5c:e0:16:53:c9:1f:b5:ab:93:67:73:ea: f8:63:c3:f4:2c:33:f2:10:4c:0e:06:f8:98:31:4b: bb:75:db:4c:53:6f:2c:82:fc:04:c4:ff:58:18:d3: ca:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:45:D1:F1:9F:DB:19:4D:F0:78:94:9B:B0:56:1C:16:73:2B:D8:58 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/_kXR8Z_bGU3weJSbsFYcFnMr2Fg.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 220.210.31.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:35:ca:82:0f:7c:23:1f:c0:e6:a4:82:42:5d:a1:9c:40:5a: ec:75:25:bd:51:8a:02:d8:8a:66:f6:5c:d6:ec:ce:40:56:ab: ea:dc:72:c5:a9:58:92:96:c8:2f:57:fb:8a:e5:d4:5c:54:73: 1d:68:b9:b9:49:08:fa:06:66:1c:75:c9:81:75:5e:0c:b5:1e: 9c:7d:5f:58:3d:54:cc:3c:5a:74:5c:22:f7:76:04:05:f5:42: 96:65:c0:a2:e8:39:5d:99:c0:01:04:cf:a8:72:83:6d:3b:40: 17:bc:ae:01:64:1f:b0:1e:69:00:bb:58:7d:a8:b1:51:e3:67: 5a:62:52:46:1c:18:e0:06:02:fa:ca:ab:c3:dc:74:0c:dd:ed: 59:fa:66:da:78:21:f4:25:c6:1a:b8:3c:95:9d:77:33:28:fc: f5:93:f6:43:88:78:d7:f2:aa:90:ee:79:93:9d:45:54:93:e7: fb:4a:65:f5:6b:44:fe:d4:9c:53:95:c0:73:af:bd:c6:3b:4a: 3c:38:bb:b6:80:22:81:6a:f4:28:9c:52:a5:71:5c:50:00:c6: 6f:8e:93:48:14:22:fe:c4:05:e8:95:9f:4c:a9:9b:26:be:a4: cf:9d:f1:eb:b2:56:de:18:41:64:92:0a:da:2e:17:93:95:1e: 34:b2:15:21 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCiowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA2MzAw MTQ2MzBaFw0yNTA2MjQxMDQ2NDVaMDMxMTAvBgNVBAMTKEZFNDVEMUYxOUZEQjE5 NERGMDc4OTQ5QkIwNTYxQzE2NzMyQkQ4NTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDmkJ1HyycNrXQAnRoemxMxqlxxe3tSPHgUdt9+0T+ZU7yXRq2V sfAebWUC+705eRDn2OG9XuN3Ys0OzphKluwEGBqdZLKefwwNtwYZ5A2RAKYEvmAC +1GGpakH2qXa9RGfU1yP/4xPVcpa/SH2no8RJ5XoIyqbIzvqNsNvVkJKtSuW6hqv apNzAnme5XPt2sLCFjuK+xBHCLwNC1KfkHy9uNihhYIB362vdCVZDZhUu+uPNiQH f/efWIBPQpNxn5AcA/MXymVgBHck0pm/oZUcehfaWVzgFlPJH7Wrk2dz6vhjw/Qs M/IQTA4G+JgxS7t120xTbyyC/ATE/1gY08rnAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU/kXR8Z/bGU3weJSbsFYcFnMr2FgwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L19rWFI4Wl9iR1Uzd2VKU2JzRlljRm5NcjJGZy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADc0h8wDQYJKoZIhvcNAQELBQADggEBAJs1yoIPfCMfwOakgkJdoZxAWux1 Jb1RigLYimb2XNbszkBWq+rccsWpWJKWyC9X+4rl1FxUcx1oublJCPoGZhx1yYF1 Xgy1Hpx9X1g9VMw8WnRcIvd2BAX1QpZlwKLoOV2ZwAEEz6hyg207QBe8rgFkH7Ae aQC7WH2osVHjZ1piUkYcGOAGAvrKq8PcdAzd7Vn6Ztp4IfQlxhq4PJWddzMo/PWT 9kOIeNfyqpDueZOdRVST5/tKZfVrRP7UnFOVwHOvvcY7Sjw4u7aAIoFq9CicUqVx XFAAxm+Ok0gUIv7EBeiVn0ypmya+pM+d8euyVt4YQWSSCtouF5OVHjSyFSE= -----END CERTIFICATE-----Generated at Mon Nov 25 23:59:11 2024 by rpki-client on console-fra.rpki-client.org