$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/_xtPgF7x02v87mdlekAtgcpeKZI.roa File: _xtPgF7x02v87mdlekAtgcpeKZI.roa (raw, json) Hash identifier: Ce7G+qb6PRFOPU9MkICIXIUhYcwLFJaZcUG/7XAFvzI= Subject key identifier: FF:1B:4F:80:5E:F1:D3:6B:FC:EE:67:65:7A:40:2D:81:CA:5E:29:92 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0673 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/_xtPgF7x02v87mdlekAtgcpeKZI.roa Signing time: Tue 30 Apr 2024 01:37:56 +0000 ROA not before: Tue 30 Apr 2024 01:37:56 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 110.161.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1651 (0x673) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 30 01:37:56 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=FF1B4F805EF1D36BFCEE67657A402D81CA5E2992 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:dd:38:56:ab:04:ed:73:9a:a8:fa:8b:98:51: d1:c8:7e:a1:72:a9:6e:6a:bf:1e:90:ee:5e:53:41: 03:9c:8e:63:95:f9:ce:50:a3:e8:d2:7b:3d:7a:2c: dc:be:1f:d1:d8:8f:b5:5c:60:cb:5f:11:c4:4b:2d: 0d:a3:31:50:26:e1:7c:03:f6:2c:29:6a:6b:ec:49: 2d:f4:e8:9d:5b:29:24:ac:f7:f5:0b:1a:b5:ad:d1: 6a:8c:6c:a5:dd:db:2a:a3:c2:1a:a6:3c:ac:51:8b: 72:42:49:7f:ed:1b:ea:66:a0:d1:04:39:0a:f0:6a: 81:c2:a6:11:75:2b:6c:bc:3c:b0:86:7f:4c:23:cf: 20:cd:fb:18:62:ee:e2:5e:f6:46:fa:60:b1:d3:b8: 97:a8:c4:c9:9a:d1:8b:4d:d4:a1:98:cd:f3:cc:ba: 92:b4:bb:a8:62:7b:43:75:71:4f:8a:a3:2b:da:e8: 5e:05:39:b5:0c:7d:bb:3f:24:80:4e:6a:3e:06:de: a5:5d:9f:55:2e:aa:43:62:bf:5b:de:f8:01:0f:62: 01:33:9d:1a:09:f1:f5:54:5a:01:3a:d5:fc:27:60: 0a:24:e6:29:f6:fe:76:9c:13:36:02:eb:45:5a:dc: c3:a0:c3:9f:82:29:f1:f0:c9:e2:91:89:c6:31:22: 1e:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:1B:4F:80:5E:F1:D3:6B:FC:EE:67:65:7A:40:2D:81:CA:5E:29:92 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/_xtPgF7x02v87mdlekAtgcpeKZI.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 110.161.224.0/19 Signature Algorithm: sha256WithRSAEncryption 20:92:21:2a:4c:03:58:42:50:71:d6:b5:66:87:3c:7e:08:7c: 51:be:e1:60:bd:d2:9b:c0:12:96:08:fc:ef:ff:41:81:04:b1: a0:a3:2c:5f:01:f6:d9:c3:50:17:da:eb:9f:f6:e6:98:1d:6f: 5d:ed:f6:ce:17:31:68:6a:4c:47:fa:6d:24:bb:bc:b0:62:a0: 17:35:9c:4b:14:de:8b:73:b0:a8:9a:be:95:91:31:51:de:20: 5f:35:2b:54:ba:05:18:e3:09:6b:e4:dd:00:09:1b:56:52:3b: 78:33:23:8e:cd:fb:56:f0:ea:7e:76:2a:96:5b:72:a5:68:89: 92:1c:e9:42:61:7f:a1:49:c1:42:f5:bf:c0:96:1d:3b:0a:db: 3f:33:61:05:9e:31:9e:d0:96:1a:b1:81:3e:20:16:a7:42:30: b1:5d:5a:1a:3c:94:ed:8e:31:7b:a4:6c:db:98:27:9e:7e:fd: ba:ed:42:d8:91:39:ef:fd:f7:4a:21:bc:40:59:55:9c:c0:f6: 87:e3:15:26:9b:b6:fa:cc:fd:01:f7:ab:e2:42:82:17:ca:c5: d6:68:40:b0:38:46:ca:d0:5d:40:5b:23:85:6a:8a:94:e1:2c: e1:65:de:48:dd:ba:c4:e6:f4:b8:62:51:f6:d6:71:d3:78:e9: f8:25:e7:d1 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBnMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw MTM3NTZaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEZGMUI0RjgwNUVGMUQz NkJGQ0VFNjc2NTdBNDAyRDgxQ0E1RTI5OTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDa3ThWqwTtc5qo+ouYUdHIfqFyqW5qvx6Q7l5TQQOcjmOV+c5Q o+jSez16LNy+H9HYj7VcYMtfEcRLLQ2jMVAm4XwD9iwpamvsSS306J1bKSSs9/UL GrWt0WqMbKXd2yqjwhqmPKxRi3JCSX/tG+pmoNEEOQrwaoHCphF1K2y8PLCGf0wj zyDN+xhi7uJe9kb6YLHTuJeoxMma0YtN1KGYzfPMupK0u6hie0N1cU+Koyva6F4F ObUMfbs/JIBOaj4G3qVdn1UuqkNiv1ve+AEPYgEznRoJ8fVUWgE61fwnYAok5in2 /nacEzYC60Va3MOgw5+CKfHwyeKRicYxIh45AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU/xtPgF7x02v87mdlekAtgcpeKZIwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L194dFBnRjd4MDJ2ODdtZGxla0F0Z2NwZUtaSS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAVuoeAwDQYJKoZIhvcNAQELBQADggEBACCSISpMA1hCUHHWtWaHPH4IfFG+ 4WC90pvAEpYI/O//QYEEsaCjLF8B9tnDUBfa65/25pgdb13t9s4XMWhqTEf6bSS7 vLBioBc1nEsU3otzsKiavpWRMVHeIF81K1S6BRjjCWvk3QAJG1ZSO3gzI47N+1bw 6n52KpZbcqVoiZIc6UJhf6FJwUL1v8CWHTsK2z8zYQWeMZ7QlhqxgT4gFqdCMLFd Who8lO2OMXukbNuYJ55+/brtQtiROe/990ohvEBZVZzA9ofjFSabtvrM/QH3q+JC ghfKxdZoQLA4RsrQXUBbI4VqipThLOFl3kjdusTm9LhiUfbWcdN46fgl59E= -----END CERTIFICATE-----Generated at Sat Jun 1 13:38:47 2024 by rpki-client on console-fra.rpki-client.org