$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/bSBQgxK5pdJ5WQ3zrl_N94osdds.roa File: bSBQgxK5pdJ5WQ3zrl_N94osdds.roa (raw, json) Hash identifier: pHk5G0LZktv60datb2aL3XbTtZWKnwIILjfVzsPLZk4= Subject key identifier: 6D:20:50:83:12:B9:A5:D2:79:59:0D:F3:AE:5F:CD:F7:8A:2C:75:DB Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0826 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/bSBQgxK5pdJ5WQ3zrl_N94osdds.roa Signing time: Tue 30 Apr 2024 02:14:21 +0000 ROA not before: Tue 30 Apr 2024 02:14:21 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 1.79.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2086 (0x826) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 30 02:14:21 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=6D20508312B9A5D279590DF3AE5FCDF78A2C75DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:57:b3:a2:24:94:7c:e5:dd:c0:69:c2:e1:78: 2f:66:c0:36:03:e2:f2:b9:2e:5e:35:82:77:63:18: f2:b6:94:ee:a5:cf:7b:f8:12:74:b2:3f:8a:10:93: 61:ed:69:1e:9e:4f:d4:a9:c9:76:96:1f:6b:99:fe: 10:96:c3:ba:1f:9f:a7:9b:03:f3:cc:90:4e:df:3e: 27:8a:2b:10:2d:0e:46:b6:46:ae:bb:15:8c:85:0d: d5:e7:e4:56:08:d9:06:68:db:3e:56:b4:1a:eb:01: 89:b2:ed:79:ca:03:0a:84:19:ba:aa:08:65:73:15: 81:3e:62:a1:74:33:fb:c2:10:58:82:f0:2b:1a:5b: 15:d3:13:8c:58:76:05:03:1b:a7:32:cf:35:e0:d9: 7b:03:82:6f:7d:09:70:e4:05:e2:7d:86:6f:0f:7f: 41:26:ae:8c:cc:91:c4:ee:3b:5f:c3:6c:61:df:36: 7e:f6:c2:8d:05:37:c9:16:92:f7:3c:88:61:4a:19: 06:3a:16:a6:60:54:5c:d1:b2:c2:b9:a1:94:b5:33: 77:63:79:95:98:c1:f7:db:27:e5:a7:87:8e:b2:d7: 24:db:5e:4a:ee:4b:dd:2b:50:8a:3b:01:e2:89:99: aa:10:63:12:c2:f2:aa:e8:3c:1c:41:33:e6:6c:8e: 71:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:20:50:83:12:B9:A5:D2:79:59:0D:F3:AE:5F:CD:F7:8A:2C:75:DB X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/bSBQgxK5pdJ5WQ3zrl_N94osdds.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.79.67.0/24 Signature Algorithm: sha256WithRSAEncryption ad:a6:71:dc:a9:94:e8:bb:b8:29:f5:a9:9e:a4:a7:88:7a:c5: 83:5c:33:cb:67:09:9b:6c:09:49:d5:4c:67:af:bc:c6:49:f6: 86:1d:8b:ad:d5:7f:92:75:f6:b6:e5:dd:41:27:0e:80:e2:0b: 5e:7b:c1:04:ff:7e:9d:e2:aa:6d:b7:86:31:54:db:7a:b1:3f: 2d:e7:58:aa:b0:f9:22:3e:76:d8:18:75:d7:56:74:8a:aa:0d: 5f:12:d8:96:1f:65:37:7b:67:00:c7:f9:58:4d:d0:35:5f:8a: cf:88:9f:fb:53:ca:26:9d:f1:a3:7d:04:66:e2:48:e7:47:9f: 24:c8:c0:03:47:60:5e:6d:25:7e:e1:1b:3d:2e:7f:2b:40:fc: 63:70:ef:74:95:11:75:ea:45:f0:f1:12:d8:16:3f:ed:09:da: 40:3f:f9:66:eb:78:d7:64:d1:43:8d:f4:00:f5:98:92:a7:1b: f7:0f:0d:9a:0d:b2:f1:40:08:87:93:6a:48:b9:50:2b:88:dc: 1e:eb:c7:3c:ae:76:fb:8f:b9:65:30:cf:4b:a6:5f:98:7f:52: 4a:45:f2:2e:25:c1:f5:83:88:a9:b9:97:5c:70:1b:7e:ce:1b: 2a:51:df:da:ba:36:de:5d:f6:9c:f0:05:56:02:87:70:fc:17: f8:bc:ab:12 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCCYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw MjE0MjFaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDZEMjA1MDgzMTJCOUE1 RDI3OTU5MERGM0FFNUZDREY3OEEyQzc1REIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC6V7OiJJR85d3AacLheC9mwDYD4vK5Ll41gndjGPK2lO6lz3v4 EnSyP4oQk2HtaR6eT9SpyXaWH2uZ/hCWw7ofn6ebA/PMkE7fPieKKxAtDka2Rq67 FYyFDdXn5FYI2QZo2z5WtBrrAYmy7XnKAwqEGbqqCGVzFYE+YqF0M/vCEFiC8Csa WxXTE4xYdgUDG6cyzzXg2XsDgm99CXDkBeJ9hm8Pf0EmrozMkcTuO1/DbGHfNn72 wo0FN8kWkvc8iGFKGQY6FqZgVFzRssK5oZS1M3djeZWYwffbJ+Wnh46y1yTbXkru S90rUIo7AeKJmaoQYxLC8qroPBxBM+ZsjnFpAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUbSBQgxK5pdJ5WQ3zrl/N94osddswHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2JTQlFneEs1cGRKNVdRM3pybF9OOTRvc2Rkcy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAABT0MwDQYJKoZIhvcNAQELBQADggEBAK2mcdyplOi7uCn1qZ6kp4h6xYNc M8tnCZtsCUnVTGevvMZJ9oYdi63Vf5J19rbl3UEnDoDiC157wQT/fp3iqm23hjFU 23qxPy3nWKqw+SI+dtgYdddWdIqqDV8S2JYfZTd7ZwDH+VhN0DVfis+In/tTyiad 8aN9BGbiSOdHnyTIwANHYF5tJX7hGz0ufytA/GNw73SVEXXqRfDxEtgWP+0J2kA/ +WbreNdk0UON9AD1mJKnG/cPDZoNsvFACIeTaki5UCuI3B7rxzyudvuPuWUwz0um X5h/UkpF8i4lwfWDiKm5l1xwG37OGypR39q6Nt5d9pzwBVYCh3D8F/i8qxI= -----END CERTIFICATE-----Generated at Sat Jun 1 15:54:31 2024 by rpki-client on console-ams.rpki-client.org