$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/bpD6ddvlyKVXTD6C7khjZZsfTu8.roa File: bpD6ddvlyKVXTD6C7khjZZsfTu8.roa (raw, json) Hash identifier: 5i5A8/YNaUXhwOd26ek5O2g7xD6fRC/EUGfxjjhsr9g= Subject key identifier: 6E:90:FA:75:DB:E5:C8:A5:57:4C:3E:82:EE:48:63:65:9B:1F:4E:EF Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0890 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/bpD6ddvlyKVXTD6C7khjZZsfTu8.roa Signing time: Tue 30 Apr 2024 02:20:36 +0000 ROA not before: Tue 30 Apr 2024 02:20:36 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 1.72.10.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2192 (0x890) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 30 02:20:36 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=6E90FA75DBE5C8A5574C3E82EE4863659B1F4EEF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:d7:0c:d5:38:20:61:f1:32:3e:ac:e3:91:73: 20:4a:51:15:6d:21:11:36:b2:6e:af:4c:1f:11:83: 0f:1e:41:62:3e:c5:bf:12:ba:d5:e9:7b:8b:8a:59: 01:88:ff:3a:60:18:5c:e3:ec:ea:92:46:6f:9a:d7: e8:d1:d4:70:10:81:74:8e:f7:49:66:23:96:c3:20: d2:af:da:04:59:b3:ee:4d:8e:31:60:f3:34:73:54: 78:ec:9a:ca:ed:5b:94:2d:6f:93:4b:1a:0b:cd:b7: 0b:44:6d:43:d7:4c:a6:96:16:04:55:37:c1:4c:39: dc:2f:b3:41:d8:c2:c7:f0:a2:49:0f:d1:2b:7d:dc: 77:2d:8a:2c:6e:6c:f1:db:5f:2c:a1:8e:6b:1b:6e: 19:b2:69:58:4f:b1:eb:3b:82:c2:f2:5c:0a:f0:2d: be:9e:a1:f2:90:25:0b:bc:b5:6b:6b:cb:04:51:72: ee:b9:5e:c8:94:8b:fa:5f:4a:a7:3c:c2:71:b3:4c: 72:3a:22:4c:de:1a:de:60:46:23:b1:dd:7e:58:fe: fb:01:0e:20:93:bb:26:b4:df:f6:77:b5:00:e2:24: e2:05:98:7a:a6:7a:04:2e:39:eb:70:3b:b4:4f:2c: b3:b8:eb:21:ee:ef:c0:f1:71:69:6b:5f:90:18:7e: 42:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:90:FA:75:DB:E5:C8:A5:57:4C:3E:82:EE:48:63:65:9B:1F:4E:EF X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/bpD6ddvlyKVXTD6C7khjZZsfTu8.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.72.10.0/23 Signature Algorithm: sha256WithRSAEncryption 33:c8:5c:cc:4a:6f:3c:ae:c8:0c:33:09:f6:a8:43:33:ae:96: 3b:3f:05:c1:19:05:32:89:95:5c:6f:00:fc:27:8f:b4:95:41: e9:68:22:cf:d3:39:9b:44:41:df:c6:58:de:82:90:26:06:2b: 1f:c2:e0:2f:3e:82:7a:77:f0:b1:72:9f:0d:7f:27:67:1e:75: 58:b4:4c:fa:24:48:f6:a4:38:ea:56:98:97:81:a3:d5:f8:72: 7e:64:75:70:56:4b:62:0b:dc:9d:76:48:70:07:c7:79:fe:13: 4c:80:83:70:3f:f1:78:43:56:68:a4:7e:5c:03:e7:4c:c7:d2: e2:b3:10:57:c2:e2:20:bb:8a:cb:1d:6c:af:27:ca:5b:29:df: 40:cd:60:7a:8f:1d:5c:2e:2d:8c:24:49:50:d8:1c:be:ff:98: b5:3e:7e:94:bb:89:54:73:b5:4d:67:f0:b6:3a:7a:81:d0:c3: 02:fb:69:1e:ee:08:1e:cf:34:ad:2b:73:e8:17:76:38:59:9b: 02:71:2b:e9:c5:4e:db:62:a6:d9:4a:db:ca:01:ff:0f:d9:68: 92:50:24:15:72:63:54:1c:e5:7c:24:8f:ea:66:43:59:bf:00: 61:ce:92:63:e8:a7:b3:10:9e:62:49:56:30:00:8a:0e:72:39: 6e:1e:86:5c -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCJAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw MjIwMzZaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDZFOTBGQTc1REJFNUM4 QTU1NzRDM0U4MkVFNDg2MzY1OUIxRjRFRUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCd1wzVOCBh8TI+rOORcyBKURVtIRE2sm6vTB8Rgw8eQWI+xb8S utXpe4uKWQGI/zpgGFzj7OqSRm+a1+jR1HAQgXSO90lmI5bDINKv2gRZs+5NjjFg 8zRzVHjsmsrtW5Qtb5NLGgvNtwtEbUPXTKaWFgRVN8FMOdwvs0HYwsfwokkP0St9 3HctiixubPHbXyyhjmsbbhmyaVhPses7gsLyXArwLb6eofKQJQu8tWtrywRRcu65 XsiUi/pfSqc8wnGzTHI6IkzeGt5gRiOx3X5Y/vsBDiCTuya03/Z3tQDiJOIFmHqm egQuOetwO7RPLLO46yHu78DxcWlrX5AYfkIxAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUbpD6ddvlyKVXTD6C7khjZZsfTu8wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2JwRDZkZHZseUtWWFRENkM3a2hqWlpzZlR1OC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEBSAowDQYJKoZIhvcNAQELBQADggEBADPIXMxKbzyuyAwzCfaoQzOuljs/ BcEZBTKJlVxvAPwnj7SVQeloIs/TOZtEQd/GWN6CkCYGKx/C4C8+gnp38LFynw1/ J2cedVi0TPokSPakOOpWmJeBo9X4cn5kdXBWS2IL3J12SHAHx3n+E0yAg3A/8XhD VmikflwD50zH0uKzEFfC4iC7issdbK8nylsp30DNYHqPHVwuLYwkSVDYHL7/mLU+ fpS7iVRztU1n8LY6eoHQwwL7aR7uCB7PNK0rc+gXdjhZmwJxK+nFTttiptlK28oB /w/ZaJJQJBVyY1Qc5Xwkj+pmQ1m/AGHOkmPop7MQnmJJVjAAig5yOW4ehlw= -----END CERTIFICATE-----Generated at Sun Feb 16 22:25:21 2025 by rpki-client