$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/d9m8KeaBoY2eJanFVPewCF88ZPM.roa File: d9m8KeaBoY2eJanFVPewCF88ZPM.roa (raw, json) Hash identifier: ajerA9wXUe6rOr+0SkGunw7+Dy6bHNZ/9qVz4IqU/U4= Subject key identifier: 77:D9:BC:29:E6:81:A1:8D:9E:25:A9:C5:54:F7:B0:08:5F:3C:64:F3 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0AB1 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/d9m8KeaBoY2eJanFVPewCF88ZPM.roa Signing time: Sun 30 Jun 2024 01:54:31 +0000 ROA not before: Sun 30 Jun 2024 01:54:31 +0000 ROA not after: Tue 24 Jun 2025 10:46:45 +0000 asID: 9605 IP address blocks: 220.159.62.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 22:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2737 (0xab1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 30 01:54:31 2024 GMT Not After : Jun 24 10:46:45 2025 GMT Subject: CN=77D9BC29E681A18D9E25A9C554F7B0085F3C64F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d2:82:13:35:88:08:7c:37:d5:18:36:56:26: 99:40:cc:f0:a0:bb:bc:e5:1b:48:b7:e0:04:30:60: be:f2:ac:5a:70:e4:ab:79:a4:a8:9b:27:2a:d4:65: 24:50:d7:0d:ee:af:b2:df:15:5c:61:5e:34:bc:5c: b1:96:09:e5:b5:40:59:42:e6:8d:c2:90:8d:72:1c: c0:7a:0d:e8:94:06:41:19:0a:75:08:1a:bf:bd:a2: b4:e3:b7:20:6e:68:5a:69:f6:25:d7:a2:cd:40:1f: d3:f3:c0:62:f8:1b:34:13:f1:5c:7e:0f:d4:75:f8: 19:f8:71:4b:29:a3:4b:7a:21:40:c5:46:09:3d:95: a5:09:6a:b0:67:30:53:66:9e:00:a1:f4:9c:86:ba: fe:36:62:32:8c:48:e9:59:21:09:b6:86:4a:04:24: d7:7d:6d:ec:69:c1:91:69:96:ad:30:df:6e:e1:db: 34:4c:d3:3a:b7:cf:5a:e7:9f:4a:ba:fc:fe:1b:46: 95:ff:bb:ec:6b:ed:db:21:ba:39:d7:41:15:f6:d5: 0b:36:22:93:6d:52:83:a2:b6:55:6c:81:ee:3d:af: cf:8a:70:ba:89:2f:2b:85:32:2e:54:af:38:f1:fc: b1:cf:d0:b4:c7:4d:74:14:57:db:ce:94:03:d6:ac: a7:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:D9:BC:29:E6:81:A1:8D:9E:25:A9:C5:54:F7:B0:08:5F:3C:64:F3 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/d9m8KeaBoY2eJanFVPewCF88ZPM.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 220.159.62.0/23 Signature Algorithm: sha256WithRSAEncryption de:4d:fc:25:60:9a:1e:ab:74:e7:9a:e7:f2:50:a3:12:96:1d: df:bc:46:c4:47:d5:a4:31:9e:41:9a:08:29:24:1b:20:43:9d: 6e:5a:65:36:d0:7f:ab:cd:5d:ba:82:1c:ae:38:70:0d:96:de: 32:ed:19:f9:ef:f3:f7:92:35:f4:8e:b0:54:c7:f5:e2:d1:5d: ba:a8:f3:ae:f1:2b:d9:27:b8:d0:55:c1:3b:92:96:da:a7:c6: 89:37:96:1c:3b:25:56:c2:a7:be:b1:3f:4b:f3:af:2b:ec:74: 95:07:b5:28:cf:06:93:88:c5:f1:cd:ec:a1:99:bb:b9:b4:cb: 8d:f2:04:c2:53:93:58:b1:15:10:d1:8a:94:1a:b4:c0:b9:47: c9:19:9d:d3:ee:19:ab:b1:70:20:52:7e:8e:b8:9e:c7:98:aa: 26:8c:56:51:0c:71:0d:24:99:0a:8a:c8:69:28:8f:ac:29:cb: dd:78:f9:7a:67:70:5f:b9:3d:86:6f:45:6f:a9:ea:c6:d4:31: 45:97:6a:2f:20:09:55:cc:91:77:11:51:b3:9d:0b:0d:b5:e5: f5:e5:7f:d5:aa:7f:90:ba:d2:84:2b:1d:6c:d2:9f:b3:e5:b0: 93:5d:40:19:b9:72:ce:fc:31:1e:54:fb:5a:2b:90:bf:d5:cf: bb:73:23:ab -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCrEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA2MzAw MTU0MzFaFw0yNTA2MjQxMDQ2NDVaMDMxMTAvBgNVBAMTKDc3RDlCQzI5RTY4MUEx OEQ5RTI1QTlDNTU0RjdCMDA4NUYzQzY0RjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+0oITNYgIfDfVGDZWJplAzPCgu7zlG0i34AQwYL7yrFpw5Kt5 pKibJyrUZSRQ1w3ur7LfFVxhXjS8XLGWCeW1QFlC5o3CkI1yHMB6DeiUBkEZCnUI Gr+9orTjtyBuaFpp9iXXos1AH9PzwGL4GzQT8Vx+D9R1+Bn4cUspo0t6IUDFRgk9 laUJarBnMFNmngCh9JyGuv42YjKMSOlZIQm2hkoEJNd9bexpwZFplq0w327h2zRM 0zq3z1rnn0q6/P4bRpX/u+xr7dshujnXQRX21Qs2IpNtUoOitlVsge49r8+KcLqJ LyuFMi5Urzjx/LHP0LTHTXQUV9vOlAPWrKfdAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUd9m8KeaBoY2eJanFVPewCF88ZPMwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2Q5bThLZWFCb1kyZUphbkZWUGV3Q0Y4OFpQTS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAHcnz4wDQYJKoZIhvcNAQELBQADggEBAN5N/CVgmh6rdOea5/JQoxKWHd+8 RsRH1aQxnkGaCCkkGyBDnW5aZTbQf6vNXbqCHK44cA2W3jLtGfnv8/eSNfSOsFTH 9eLRXbqo867xK9knuNBVwTuSltqnxok3lhw7JVbCp76xP0vzryvsdJUHtSjPBpOI xfHN7KGZu7m0y43yBMJTk1ixFRDRipQatMC5R8kZndPuGauxcCBSfo64nseYqiaM VlEMcQ0kmQqKyGkoj6wpy914+XpncF+5PYZvRW+p6sbUMUWXai8gCVXMkXcRUbOd Cw215fXlf9Wqf5C60oQrHWzSn7PlsJNdQBm5cs78MR5U+1orkL/Vz7tzI6s= -----END CERTIFICATE-----Generated at Mon Nov 25 23:54:42 2024 by rpki-client on console-ams.rpki-client.org