$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/dmb3xxM8r3AEFVOeAbAbHeVbhPY.roa File: dmb3xxM8r3AEFVOeAbAbHeVbhPY.roa (raw, json) Hash identifier: LV4oe0IUc4mNFwXcrlYqlrYhoI9ywWEojtT1M04Uelg= Subject key identifier: 76:66:F7:C7:13:3C:AF:70:04:15:53:9E:01:B0:1B:1D:E5:5B:84:F6 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0765 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/dmb3xxM8r3AEFVOeAbAbHeVbhPY.roa Signing time: Tue 30 Apr 2024 02:01:41 +0000 ROA not before: Tue 30 Apr 2024 02:01:41 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 1.73.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1893 (0x765) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 30 02:01:41 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=7666F7C7133CAF700415539E01B01B1DE55B84F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:b5:17:bd:04:32:de:52:49:4e:c2:c6:08:e7: 46:d4:5a:95:e9:04:5d:60:f2:11:04:b7:63:33:26: 19:af:cb:f4:a7:a1:9d:3c:58:af:c8:d3:0d:cc:50: b6:27:3d:10:d0:4f:b5:ce:4f:20:be:3c:fc:00:a3: 34:d7:14:1e:7a:59:3e:a0:b9:33:bc:93:ec:d7:24: 99:af:70:72:16:91:49:cf:92:8a:76:03:74:a4:c4: 21:f7:29:6f:be:35:04:25:87:4a:cc:f5:16:59:da: 1c:d6:aa:39:55:15:cd:e6:78:c4:8f:b7:e1:05:ff: 99:7a:9e:61:18:ff:79:fa:30:3d:ce:b2:a5:35:53: 02:cd:7e:c7:78:d1:28:d7:64:94:00:c5:e5:6d:68: a9:af:10:da:22:91:9d:8e:23:27:23:85:09:e2:e1: 5d:78:ac:9a:27:fb:f1:75:34:a8:a3:9c:6e:bd:a6: d8:dd:ea:2d:b5:3b:d1:76:d7:7f:99:0d:bf:50:fd: c1:b2:7f:c3:a3:fe:21:3e:14:71:40:15:02:eb:3e: 76:1a:05:cb:e8:92:62:54:aa:ac:e0:4a:7d:26:5a: cd:3e:0c:7c:11:07:04:5c:eb:7d:63:a5:60:b7:79: 75:72:1b:32:ef:4e:9e:14:bd:e4:b8:80:7a:3c:d4: f3:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:66:F7:C7:13:3C:AF:70:04:15:53:9E:01:B0:1B:1D:E5:5B:84:F6 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/dmb3xxM8r3AEFVOeAbAbHeVbhPY.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.73.208.0/20 Signature Algorithm: sha256WithRSAEncryption 4a:87:80:50:49:b5:f5:e6:ec:9a:2e:49:ae:83:7c:db:4d:71: 58:04:ee:b0:9a:fe:e5:cb:ed:cc:70:d4:49:4c:1f:7b:9a:44: 10:f8:24:3a:cf:df:0d:c6:3e:99:92:45:4d:58:20:e2:c9:ff: 18:a4:b1:67:cf:2c:b1:f8:dc:2d:d5:2e:e5:f0:36:49:10:c2: 50:b1:26:45:5d:90:e5:fb:61:54:71:d7:f9:66:6e:f0:3f:ac: f5:8c:06:03:57:82:2a:6c:3d:e7:0c:9a:6f:af:f2:48:0f:1d: 44:44:dc:cb:46:e9:53:e8:ed:05:f9:59:82:a4:d5:12:3e:c5: f3:3c:7f:ef:ba:74:d2:7f:95:fc:5b:44:be:ff:bd:56:65:7f: 23:76:a9:89:24:3c:3d:c3:82:02:1e:b8:c8:95:bb:ff:03:23: 52:6e:40:1a:59:64:ac:07:cd:d8:55:08:54:89:7a:d7:b8:2f: f1:d9:bf:01:d9:af:41:c2:78:0f:12:d8:c7:f2:44:96:91:33: 90:4e:76:6c:2c:98:f7:d3:7d:cb:20:fd:a4:b6:39:8e:81:18: 88:49:42:25:19:c2:f1:a1:50:2b:1e:e4:48:e7:a7:5e:52:42: 84:8d:9f:0b:e1:2d:62:8f:19:33:cf:d2:2c:bc:b1:14:8f:92: de:f9:ca:4e -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICB2UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw MjAxNDFaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDc2NjZGN0M3MTMzQ0FG NzAwNDE1NTM5RTAxQjAxQjFERTU1Qjg0RjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDHtRe9BDLeUklOwsYI50bUWpXpBF1g8hEEt2MzJhmvy/SnoZ08 WK/I0w3MULYnPRDQT7XOTyC+PPwAozTXFB56WT6guTO8k+zXJJmvcHIWkUnPkop2 A3SkxCH3KW++NQQlh0rM9RZZ2hzWqjlVFc3meMSPt+EF/5l6nmEY/3n6MD3OsqU1 UwLNfsd40SjXZJQAxeVtaKmvENoikZ2OIycjhQni4V14rJon+/F1NKijnG69ptjd 6i21O9F213+ZDb9Q/cGyf8Oj/iE+FHFAFQLrPnYaBcvokmJUqqzgSn0mWs0+DHwR BwRc631jpWC3eXVyGzLvTp4UveS4gHo81PM9AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUdmb3xxM8r3AEFVOeAbAbHeVbhPYwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2RtYjN4eE04cjNBRUZWT2VBYkFiSGVWYmhQWS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQBSdAwDQYJKoZIhvcNAQELBQADggEBAEqHgFBJtfXm7JouSa6DfNtNcVgE 7rCa/uXL7cxw1ElMH3uaRBD4JDrP3w3GPpmSRU1YIOLJ/xiksWfPLLH43C3VLuXw NkkQwlCxJkVdkOX7YVRx1/lmbvA/rPWMBgNXgipsPecMmm+v8kgPHURE3MtG6VPo 7QX5WYKk1RI+xfM8f++6dNJ/lfxbRL7/vVZlfyN2qYkkPD3DggIeuMiVu/8DI1Ju QBpZZKwHzdhVCFSJete4L/HZvwHZr0HCeA8S2MfyRJaRM5BOdmwsmPfTfcsg/aS2 OY6BGIhJQiUZwvGhUCse5Ejnp15SQoSNnwvhLWKPGTPP0iy8sRSPkt75yk4= -----END CERTIFICATE-----Generated at Sat Jun 1 13:38:48 2024 by rpki-client on console-fra.rpki-client.org