$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/exrOThJ7zgVjgQqz_mL9wZYgU6o.roa File: exrOThJ7zgVjgQqz_mL9wZYgU6o.roa (raw, json) Hash identifier: Xl4Q+qbg/Y2KZE3c5PKuMniWZpREwbu5KCy4i69OrT8= Subject key identifier: 7B:1A:CE:4E:12:7B:CE:05:63:81:0A:B3:FE:62:FD:C1:96:20:53:AA Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 08DE Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/exrOThJ7zgVjgQqz_mL9wZYgU6o.roa Signing time: Tue 30 Apr 2024 02:24:46 +0000 ROA not before: Tue 30 Apr 2024 02:24:46 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 1.78.40.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 23 Jun 2024 11:53:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2270 (0x8de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 30 02:24:46 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=7B1ACE4E127BCE0563810AB3FE62FDC1962053AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:42:70:9e:65:87:67:3b:fc:c2:38:d3:d0:21: 16:6c:4e:c8:39:aa:77:c4:cf:45:38:39:0f:c1:e8: 25:14:36:53:f5:6b:20:81:6b:a7:f9:f2:99:94:08: d7:5a:c3:30:d1:c6:39:c1:28:bf:fa:a7:69:f6:90: bf:c9:00:c8:0b:2e:97:21:ad:f5:fe:6a:6d:a1:1b: 22:c1:6c:ba:f2:42:d9:c9:31:ac:28:48:d2:9c:58: 0c:80:2d:ff:6b:2d:f7:9c:49:3d:74:05:1c:4d:15: 9c:22:5e:56:0d:16:59:b7:90:fc:75:46:80:d8:9a: 97:8b:e8:e4:4a:a6:4f:2c:bd:54:8a:1b:e2:0d:73: 50:e9:af:62:77:25:2f:a5:9a:76:99:3c:af:36:a7: 2e:44:69:4e:0e:30:71:0c:1e:ae:09:c7:ae:e9:4e: c6:6d:7c:97:a9:ac:cc:4a:b5:33:37:e2:03:9a:b2: 78:d5:60:5f:15:af:42:48:a9:fd:3b:cf:23:b1:60: 69:3f:5f:16:3b:9e:3a:37:8a:ed:50:e8:82:e5:ee: 41:a9:7b:30:35:7d:26:e5:2f:dd:52:49:8c:97:50: 6b:55:d0:2c:af:72:cd:96:51:76:70:39:a8:b6:02: 7a:c2:bd:f7:15:9e:e5:e4:bc:a8:7c:7e:e4:4d:9e: 99:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:1A:CE:4E:12:7B:CE:05:63:81:0A:B3:FE:62:FD:C1:96:20:53:AA X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/exrOThJ7zgVjgQqz_mL9wZYgU6o.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.78.40.0/22 Signature Algorithm: sha256WithRSAEncryption 78:ea:12:0f:e4:af:4a:45:b1:bb:33:df:be:2c:c2:0a:4e:59: fb:da:55:f6:f5:a5:ac:ec:f8:5a:a5:b1:a3:d0:b9:fd:b5:fa: e0:41:7a:84:de:82:a4:fa:01:82:c5:60:7e:b6:8c:02:8f:8e: ac:1f:79:ea:0a:75:57:16:68:f1:cf:b8:f2:ed:c3:8a:cb:17: 61:5b:e9:49:cd:6a:33:86:3d:d3:bf:e7:59:ab:44:c6:5a:31: 30:34:f3:a7:38:48:e6:3e:9f:68:03:ea:cd:51:76:80:44:85: a6:e8:4e:11:9a:5f:67:26:93:dc:ce:2e:bc:c2:de:ef:70:c0: 87:ee:1d:f3:89:99:bc:9b:df:51:89:bf:e4:b3:3c:da:53:b4: 7a:d9:c0:f6:a2:16:92:73:29:57:b1:e8:54:fc:34:fb:af:14: f5:38:63:65:c2:ee:5b:cc:82:69:2a:ee:98:a5:09:db:b1:99: 21:f0:9d:5b:7c:67:95:03:80:c4:59:aa:05:52:f0:55:12:d4: d3:f5:4d:a1:1a:61:74:b3:e8:9e:95:99:75:b2:9e:03:71:40: 7f:25:48:ad:81:e8:e0:20:ef:21:2b:82:4f:85:c3:36:cc:ca: 31:5e:eb:08:28:77:2d:13:d3:7a:bc:8c:87:93:76:44:18:b5: fc:f3:4d:74 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCN4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw MjI0NDZaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDdCMUFDRTRFMTI3QkNF MDU2MzgxMEFCM0ZFNjJGREMxOTYyMDUzQUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCqQnCeZYdnO/zCONPQIRZsTsg5qnfEz0U4OQ/B6CUUNlP1ayCB a6f58pmUCNdawzDRxjnBKL/6p2n2kL/JAMgLLpchrfX+am2hGyLBbLryQtnJMawo SNKcWAyALf9rLfecST10BRxNFZwiXlYNFlm3kPx1RoDYmpeL6ORKpk8svVSKG+IN c1Dpr2J3JS+lmnaZPK82py5EaU4OMHEMHq4Jx67pTsZtfJeprMxKtTM34gOasnjV YF8Vr0JIqf07zyOxYGk/XxY7njo3iu1Q6ILl7kGpezA1fSblL91SSYyXUGtV0Cyv cs2WUXZwOai2AnrCvfcVnuXkvKh8fuRNnpmLAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUexrOThJ7zgVjgQqz/mL9wZYgU6owHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2V4ck9UaEo3emdWamdRcXpfbUw5d1pZZ1U2by5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIBTigwDQYJKoZIhvcNAQELBQADggEBAHjqEg/kr0pFsbsz374swgpOWfva Vfb1pazs+FqlsaPQuf21+uBBeoTegqT6AYLFYH62jAKPjqwfeeoKdVcWaPHPuPLt w4rLF2Fb6UnNajOGPdO/51mrRMZaMTA086c4SOY+n2gD6s1RdoBEhaboThGaX2cm k9zOLrzC3u9wwIfuHfOJmbyb31GJv+SzPNpTtHrZwPaiFpJzKVex6FT8NPuvFPU4 Y2XC7lvMgmkq7pilCduxmSHwnVt8Z5UDgMRZqgVS8FUS1NP1TaEaYXSz6J6VmXWy ngNxQH8lSK2B6OAg7yErgk+FwzbMyjFe6wgody0T03q8jIeTdkQYtfzzTXQ= -----END CERTIFICATE-----Generated at Sun Jun 16 12:57:22 2024 by rpki-client on console-fra.rpki-client.org