$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/dXuc7MZzLr8Hzjj55wGp4QEJOE8.roa File: dXuc7MZzLr8Hzjj55wGp4QEJOE8.roa (raw, json) Hash identifier: jx/vKnF6QCFTIbyxtn7CLgJUTf2beshQFdYS5wUHtxg= Subject key identifier: 75:7B:9C:EC:C6:73:2E:BF:07:CE:38:F9:E7:01:A9:E1:01:09:38:4F Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0AC6 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/dXuc7MZzLr8Hzjj55wGp4QEJOE8.roa Signing time: Fri 22 Nov 2024 06:11:53 +0000 ROA not before: Fri 22 Nov 2024 06:11:53 +0000 ROA not after: Sat 15 Nov 2025 01:30:03 +0000 asID: 9605 IP address blocks: 27.230.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 22:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2758 (0xac6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Nov 22 06:11:53 2024 GMT Not After : Nov 15 01:30:03 2025 GMT Subject: CN=757B9CECC6732EBF07CE38F9E701A9E10109384F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:3c:f3:f7:f0:70:10:9c:dc:dc:17:51:8b:b7: a9:b8:6f:ae:eb:74:2c:fb:ae:e8:58:3e:e7:39:45: 3b:5d:5d:3f:d2:ef:a7:fb:32:e5:ee:8e:7a:2e:18: 31:5b:d3:6b:02:05:fd:31:b4:89:32:9f:11:15:39: e2:50:e5:c8:62:89:66:7a:e8:fd:a1:3f:d5:93:e4: dd:72:af:3a:41:58:65:ad:08:91:cc:c0:63:15:a7: 10:32:d8:f4:94:ec:76:08:57:7c:ab:e8:0f:08:e0: 3f:4a:e1:cb:02:7b:cd:8f:3f:a9:a4:25:18:d6:d1: dc:29:7f:c4:5c:68:6f:72:31:66:f3:10:60:d7:b5: e8:1c:dc:2f:f0:f6:f5:88:ef:0f:da:a8:52:14:a1: 1e:19:9d:6e:38:a7:a0:d6:d1:0a:f9:bd:97:90:eb: d4:bc:2b:03:84:88:e8:38:64:44:d2:e9:c2:b1:82: e2:b3:18:6b:a3:de:36:36:c2:6d:87:62:d9:7b:cb: b8:1b:46:95:b7:6c:5c:08:21:63:2e:d1:2c:2f:37: c5:72:46:25:d5:15:cd:fd:76:c9:10:5f:2d:0b:44: ec:73:9d:bf:43:a9:c5:bc:5d:bc:5d:6e:15:50:22: b4:67:ff:df:5d:51:9b:c7:cd:fd:ab:22:d9:2d:6e: eb:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:7B:9C:EC:C6:73:2E:BF:07:CE:38:F9:E7:01:A9:E1:01:09:38:4F X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/dXuc7MZzLr8Hzjj55wGp4QEJOE8.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.230.32.0/22 Signature Algorithm: sha256WithRSAEncryption 95:a2:14:25:f1:55:9c:0f:61:38:a2:34:5a:6f:e4:0b:17:8e: f1:1a:03:1a:7f:91:4b:09:0a:8d:bf:01:6e:71:30:fa:e2:d2: 76:d7:6d:95:35:aa:52:9c:55:d1:2d:00:17:5d:af:07:b1:49: 7a:0e:92:cc:98:8c:a6:28:52:ae:d3:c7:37:fd:7c:70:43:d4: 32:59:56:8b:62:c4:74:b3:10:73:ed:f0:76:cf:60:81:92:b0: d5:32:e0:21:91:ac:e8:26:f8:64:b5:47:ce:e2:fe:32:21:a9: ee:0c:0b:dc:0f:19:8b:6e:3f:df:ca:24:ed:64:e1:f1:fc:ea: 36:01:90:dc:bd:4b:d3:de:38:ec:50:01:9a:32:d6:52:78:fb: 59:e5:5f:fa:64:c2:55:3c:4c:d4:21:51:66:4a:04:81:f2:4e: cf:39:00:c2:a2:e9:32:82:66:61:b6:3a:e6:96:f0:dd:e6:86: 75:14:eb:04:f0:a8:48:39:d0:7d:95:c6:39:31:03:bd:89:90: 12:a8:eb:6d:21:f6:14:9a:23:11:dc:44:38:03:23:7d:c4:9c: 2e:50:97:f8:5e:49:7c:7d:dc:ae:c0:0c:50:af:14:d9:84:ad: 9f:17:63:7d:90:f2:c9:40:a2:d1:db:31:2d:b9:47:b9:c6:18: 1b:5e:f0:08 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCsYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDExMjIw NjExNTNaFw0yNTExMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDc1N0I5Q0VDQzY3MzJF QkYwN0NFMzhGOUU3MDFBOUUxMDEwOTM4NEYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDNPPP38HAQnNzcF1GLt6m4b67rdCz7ruhYPuc5RTtdXT/S76f7 MuXujnouGDFb02sCBf0xtIkynxEVOeJQ5chiiWZ66P2hP9WT5N1yrzpBWGWtCJHM wGMVpxAy2PSU7HYIV3yr6A8I4D9K4csCe82PP6mkJRjW0dwpf8RcaG9yMWbzEGDX tegc3C/w9vWI7w/aqFIUoR4ZnW44p6DW0Qr5vZeQ69S8KwOEiOg4ZETS6cKxguKz GGuj3jY2wm2HYtl7y7gbRpW3bFwIIWMu0SwvN8VyRiXVFc39dskQXy0LROxznb9D qcW8XbxdbhVQIrRn/99dUZvHzf2rItktbuvLAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUdXuc7MZzLr8Hzjj55wGp4QEJOE8wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2RYdWM3TVp6THI4SHpqajU1d0dwNFFFSk9FOC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIb5iAwDQYJKoZIhvcNAQELBQADggEBAJWiFCXxVZwPYTiiNFpv5AsXjvEa Axp/kUsJCo2/AW5xMPri0nbXbZU1qlKcVdEtABddrwexSXoOksyYjKYoUq7Txzf9 fHBD1DJZVotixHSzEHPt8HbPYIGSsNUy4CGRrOgm+GS1R87i/jIhqe4MC9wPGYtu P9/KJO1k4fH86jYBkNy9S9PeOOxQAZoy1lJ4+1nlX/pkwlU8TNQhUWZKBIHyTs85 AMKi6TKCZmG2OuaW8N3mhnUU6wTwqEg50H2VxjkxA72JkBKo620h9hSaIxHcRDgD I33EnC5Ql/heSXx93K7ADFCvFNmErZ8XY32Q8slAotHbMS25R7nGGBte8Ag= -----END CERTIFICATE-----Generated at Mon Nov 25 23:59:11 2024 by rpki-client on console-fra.rpki-client.org