$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/a4BTpSmVYSHn6dwnekkwP3Hl0sY.roa File: a4BTpSmVYSHn6dwnekkwP3Hl0sY.roa (raw, json) Hash identifier: KcatJb7Js5kX9W49Dezq3E5BYCxvNFjPIJK9MGJ3sh4= Subject key identifier: 6B:80:53:A5:29:95:61:21:E7:E9:DC:27:7A:49:30:3F:71:E5:D2:C6 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 09C7 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/a4BTpSmVYSHn6dwnekkwP3Hl0sY.roa Signing time: Sun 30 Jun 2024 01:40:26 +0000 ROA not before: Sun 30 Jun 2024 01:40:26 +0000 ROA not after: Tue 24 Jun 2025 10:46:45 +0000 asID: 9605 IP address blocks: 220.159.160.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 22:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2503 (0x9c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 30 01:40:26 2024 GMT Not After : Jun 24 10:46:45 2025 GMT Subject: CN=6B8053A529956121E7E9DC277A49303F71E5D2C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f2:69:7e:93:29:fd:88:ed:12:a0:b0:fa:29: 9e:4a:3c:dc:bf:e3:79:02:d6:77:c5:51:64:35:8f: ed:d2:ef:8f:c2:e1:6c:e0:c9:48:bc:72:a5:81:8d: 1a:61:17:eb:49:d3:de:be:6a:ed:43:a7:3a:f9:1a: ea:63:d8:d2:72:f5:18:a4:58:b1:a9:f9:df:61:4c: e2:36:6d:c9:c5:cf:bf:b7:22:ca:7d:e6:46:e9:ea: 67:f1:34:22:60:e2:51:36:78:01:4d:be:19:e1:69: 9a:20:ea:df:d9:99:0b:f6:f1:73:2c:a3:ae:b3:9d: 92:d6:ed:35:06:f7:9f:e5:70:f6:21:b1:f5:b8:fb: e8:c2:b1:0f:9b:ac:11:d6:a4:82:58:56:28:3b:87: 2b:1d:4e:1c:f9:49:59:2a:ba:02:68:d0:77:58:a8: d2:7c:a4:bc:91:fc:47:29:92:42:59:98:91:87:b8: ab:62:d4:e7:77:ab:e3:1a:62:d5:0d:36:af:e0:38: b6:87:dc:6f:b1:47:d4:7a:05:43:a2:4e:b7:7d:ff: 5b:15:ad:1b:e9:b2:eb:bf:61:eb:78:66:f9:94:56: 5f:5a:e5:92:79:00:04:42:03:79:b6:f5:3d:ec:e2: 8e:de:e1:98:d5:11:4f:ac:d7:4c:99:df:d5:cd:bb: cc:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:80:53:A5:29:95:61:21:E7:E9:DC:27:7A:49:30:3F:71:E5:D2:C6 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/a4BTpSmVYSHn6dwnekkwP3Hl0sY.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 220.159.160.0/19 Signature Algorithm: sha256WithRSAEncryption 62:f6:8f:e0:03:dd:5b:4a:48:7a:fa:97:27:b1:4e:ba:61:80: f2:7e:46:30:7b:dd:58:f8:e2:12:7b:d1:56:9c:ee:36:06:af: 6e:2d:00:fe:eb:29:18:e5:c5:97:40:a5:2b:b0:5e:7b:9d:0a: f1:a0:b0:c2:ff:c8:72:e1:34:06:31:14:6b:9c:d3:81:9e:cf: 26:2e:89:9e:94:ee:12:76:59:b4:2a:aa:f4:e9:9e:5f:75:e7: 38:46:cc:3c:33:ed:35:cf:5c:a8:b1:12:25:59:73:d8:69:be: ee:c0:19:04:a4:b7:de:be:cc:54:32:0a:ba:b8:a8:6f:5e:9f: 0f:76:06:ec:e1:46:62:d7:a3:6e:c1:a8:1b:83:b9:d7:c5:e9: 8e:95:a2:66:03:1b:d9:5a:4c:42:15:fa:34:ae:e9:35:42:00: 91:c2:c1:64:3e:db:a3:08:80:eb:14:42:64:6d:86:23:bb:ba: d9:c3:17:f1:48:9f:4f:00:36:fa:99:b7:31:a5:27:17:ea:56: e5:ef:5f:ce:8d:19:3c:13:2e:71:d8:7b:4d:02:14:65:db:06: 41:78:23:50:ab:49:70:9e:fa:87:87:f2:f2:f5:91:4d:02:a3: 27:61:2d:cf:b2:31:58:16:b3:86:4f:03:d4:3b:12:57:85:4e: d9:5c:4b:c6 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCccwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA2MzAw MTQwMjZaFw0yNTA2MjQxMDQ2NDVaMDMxMTAvBgNVBAMTKDZCODA1M0E1Mjk5NTYx MjFFN0U5REMyNzdBNDkzMDNGNzFFNUQyQzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDI8ml+kyn9iO0SoLD6KZ5KPNy/43kC1nfFUWQ1j+3S74/C4Wzg yUi8cqWBjRphF+tJ096+au1Dpzr5Gupj2NJy9RikWLGp+d9hTOI2bcnFz7+3Isp9 5kbp6mfxNCJg4lE2eAFNvhnhaZog6t/ZmQv28XMso66znZLW7TUG95/lcPYhsfW4 ++jCsQ+brBHWpIJYVig7hysdThz5SVkqugJo0HdYqNJ8pLyR/EcpkkJZmJGHuKti 1Od3q+MaYtUNNq/gOLaH3G+xR9R6BUOiTrd9/1sVrRvpsuu/Yet4ZvmUVl9a5ZJ5 AARCA3m29T3s4o7e4ZjVEU+s10yZ39XNu8wDAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUa4BTpSmVYSHn6dwnekkwP3Hl0sYwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2E0QlRwU21WWVNIbjZkd25la2t3UDNIbDBzWS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAXcn6AwDQYJKoZIhvcNAQELBQADggEBAGL2j+AD3VtKSHr6lyexTrphgPJ+ RjB73Vj44hJ70Vac7jYGr24tAP7rKRjlxZdApSuwXnudCvGgsML/yHLhNAYxFGuc 04GezyYuiZ6U7hJ2WbQqqvTpnl915zhGzDwz7TXPXKixEiVZc9hpvu7AGQSkt96+ zFQyCrq4qG9enw92BuzhRmLXo27BqBuDudfF6Y6VomYDG9laTEIV+jSu6TVCAJHC wWQ+26MIgOsUQmRthiO7utnDF/FIn08ANvqZtzGlJxfqVuXvX86NGTwTLnHYe00C FGXbBkF4I1CrSXCe+oeH8vL1kU0CoydhLc+yMVgWs4ZPA9Q7EleFTtlcS8Y= -----END CERTIFICATE-----Generated at Mon Nov 25 23:59:11 2024 by rpki-client on console-fra.rpki-client.org