$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/d2_X8NmPfsk2abx7IGLz8SNLGvM.roa File: d2_X8NmPfsk2abx7IGLz8SNLGvM.roa (raw, json) Hash identifier: 9Js2ZgaNWtiXIDSh7P6BZITJnNdukaODUiQXS+rrPjQ= Subject key identifier: 77:6F:D7:F0:D9:8F:7E:C9:36:69:BC:7B:20:62:F3:F1:23:4B:1A:F3 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 014B Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/d2_X8NmPfsk2abx7IGLz8SNLGvM.roa Signing time: Wed 24 May 2023 16:31:15 +0000 ROA not before: Wed 24 May 2023 16:31:15 +0000 ROA not after: Tue 14 May 2024 01:30:02 +0000 asID: 9605 IP address blocks: 1.78.38.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 May 2024 13:36:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 331 (0x14b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: May 24 16:31:15 2023 GMT Not After : May 14 01:30:02 2024 GMT Subject: CN=776FD7F0D98F7EC93669BC7B2062F3F1234B1AF3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:23:d3:05:d7:8a:18:a9:cd:d8:1d:71:d5:80: c7:d4:ff:f9:4f:f3:b3:8e:9f:0f:24:db:e8:93:5d: f7:17:7d:24:ac:b5:86:a9:bd:f4:0a:7e:c4:dc:c3: a0:4d:37:45:7f:48:ad:50:c2:ed:aa:4e:d5:82:e3: c9:50:8d:f9:b2:39:6a:36:57:bc:3b:ea:e3:e2:f7: 87:f3:9f:b9:21:0e:9e:ad:c0:b7:95:17:e8:6f:77: 22:cd:fe:a3:5e:fc:c0:05:8f:30:9b:06:32:7a:53: 31:d2:ba:33:2c:1c:1a:8f:2e:2f:31:72:c1:40:5a: 77:de:73:5b:de:22:5b:81:52:a9:9e:2c:af:05:90: 64:74:cb:03:e8:6f:7f:43:42:8e:ed:be:ee:7d:fd: f4:34:97:7c:27:ae:dc:e0:f4:dc:fc:25:16:e3:61: 71:1a:76:da:c8:60:2a:51:41:0b:c8:27:b9:da:8a: 64:34:82:92:01:34:2c:14:12:42:04:e2:a6:b2:83: 82:1a:d4:c9:c5:8d:fa:13:5f:84:37:3a:36:b9:05: 49:a5:98:f3:e3:07:2b:33:cb:29:8e:0b:d9:3a:08: 00:cd:2c:c2:7f:d4:c5:1d:96:45:f3:90:76:8c:96: 3b:59:06:46:56:bf:fe:c9:45:1d:ec:47:ac:85:d6: 63:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:6F:D7:F0:D9:8F:7E:C9:36:69:BC:7B:20:62:F3:F1:23:4B:1A:F3 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/d2_X8NmPfsk2abx7IGLz8SNLGvM.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.78.38.0/23 Signature Algorithm: sha256WithRSAEncryption 76:f3:50:49:2c:b6:0d:15:69:0a:f0:01:c1:37:9b:c9:91:05: 95:b1:26:8f:f2:4c:5e:26:6c:35:5e:07:ce:7d:57:ec:b7:3e: 04:67:34:1c:f0:4f:eb:3a:d7:9b:ec:a4:76:ee:b1:1c:60:b8: b3:ba:20:ff:b9:bb:f7:d2:5d:62:66:fa:90:fe:45:0a:ce:a8: 16:7b:f4:e3:06:bc:cd:39:03:55:55:8f:03:c1:c0:20:c8:d1: d2:94:0f:4b:41:28:72:eb:22:36:78:a5:97:40:fd:cf:9b:9d: 67:b5:69:ad:41:e3:fd:e7:40:fd:1b:eb:88:56:23:a4:00:d2: 3c:35:20:85:9a:32:c3:91:54:b8:90:2a:9f:55:0f:78:7c:59: 43:12:62:f9:a4:1c:2b:1a:2e:07:34:15:f0:ef:89:0e:d7:95: 5e:67:05:63:fb:ee:45:8a:be:9f:13:ec:53:0b:e2:01:2e:2a: 31:b3:eb:95:e5:bf:8d:6d:5b:13:4a:a0:06:c5:e0:6b:51:d7: ef:d6:ac:d5:a4:6c:fe:82:d8:c7:32:4e:1c:d3:65:3e:f0:7c: 83:34:45:9f:15:c3:d8:2a:2b:c8:ab:12:56:58:98:88:f6:fe: 21:4c:6e:f8:31:cc:81:fb:72:14:2c:40:93:df:45:b1:2c:c1: 7b:ef:9b:ef -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAUswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA1MjQx NjMxMTVaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDc3NkZEN0YwRDk4RjdF QzkzNjY5QkM3QjIwNjJGM0YxMjM0QjFBRjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCmI9MF14oYqc3YHXHVgMfU//lP87OOnw8k2+iTXfcXfSSstYap vfQKfsTcw6BNN0V/SK1Qwu2qTtWC48lQjfmyOWo2V7w76uPi94fzn7khDp6twLeV F+hvdyLN/qNe/MAFjzCbBjJ6UzHSujMsHBqPLi8xcsFAWnfec1veIluBUqmeLK8F kGR0ywPob39DQo7tvu59/fQ0l3wnrtzg9Nz8JRbjYXEadtrIYCpRQQvIJ7naimQ0 gpIBNCwUEkIE4qayg4Ia1MnFjfoTX4Q3Oja5BUmlmPPjByszyymOC9k6CADNLMJ/ 1MUdlkXzkHaMljtZBkZWv/7JRR3sR6yF1mNLAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUd2/X8NmPfsk2abx7IGLz8SNLGvMwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2QyX1g4Tm1QZnNrMmFieDdJR0x6OFNOTEd2TS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEBTiYwDQYJKoZIhvcNAQELBQADggEBAHbzUEkstg0VaQrwAcE3m8mRBZWx Jo/yTF4mbDVeB859V+y3PgRnNBzwT+s615vspHbusRxguLO6IP+5u/fSXWJm+pD+ RQrOqBZ79OMGvM05A1VVjwPBwCDI0dKUD0tBKHLrIjZ4pZdA/c+bnWe1aa1B4/3n QP0b64hWI6QA0jw1IIWaMsORVLiQKp9VD3h8WUMSYvmkHCsaLgc0FfDviQ7XlV5n BWP77kWKvp8T7FML4gEuKjGz65Xlv41tWxNKoAbF4GtR1+/WrNWkbP6C2McyThzT ZT7wfIM0RZ8Vw9gqK8irElZYmIj2/iFMbvgxzIH7chQsQJPfRbEswXvvm+8= -----END CERTIFICATE-----Generated at Sat Apr 27 10:15:57 2024 by rpki-client on console-ams.rpki-client.org