$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/fE1gYbvUlrJvrpnwS1Bt9Xq0s1Q.roa File: fE1gYbvUlrJvrpnwS1Bt9Xq0s1Q.roa (raw, json) Hash identifier: RY3+3fJJCb1Q9zrFJs4rbHqTWe6prCf1b7fIAeluTlE= Subject key identifier: 7C:4D:60:61:BB:D4:96:B2:6F:AE:99:F0:4B:50:6D:F5:7A:B4:B3:54 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 08A3 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/fE1gYbvUlrJvrpnwS1Bt9Xq0s1Q.roa Signing time: Tue 30 Apr 2024 02:22:32 +0000 ROA not before: Tue 30 Apr 2024 02:22:32 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 1.66.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2211 (0x8a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 30 02:22:32 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=7C4D6061BBD496B26FAE99F04B506DF57AB4B354 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:90:9c:0b:0f:ac:e7:5a:05:fb:79:4d:0a:66: 28:db:12:e7:f5:06:00:0c:f9:97:62:65:df:7d:ee: 74:fa:18:3e:59:c3:c8:d0:f1:fe:21:04:c8:48:3a: 24:6c:a2:9f:fc:32:59:39:2f:5d:8a:33:79:c4:2d: f3:5f:5e:44:e2:76:7a:d5:87:37:09:4c:73:a4:65: e0:9f:d6:f4:21:16:16:5e:43:86:d9:ed:1e:e8:dd: af:09:af:1d:4c:41:6b:0b:bb:b9:a4:85:ba:e4:2f: 43:b7:34:6a:4c:8f:05:ce:4c:07:38:86:1f:b9:d9: 4f:ff:0d:53:c5:28:42:90:25:7e:88:06:e2:67:c1: a3:34:62:88:6d:e8:60:4c:43:f2:47:0b:f2:5f:f1: 7d:ac:44:7f:21:19:cf:e5:e7:f3:30:2b:6d:9c:ee: 29:72:bf:6c:c2:21:33:3a:7a:8f:56:90:84:9e:da: b8:dc:c6:ef:21:b4:65:5c:07:fa:56:c9:22:a1:a7: f0:91:b5:d3:d0:1d:45:cb:74:20:26:82:5a:43:59: 30:bb:5c:1a:2f:bc:ee:fe:f4:4c:c1:85:b6:24:03: b9:bf:14:c5:e7:da:ed:4d:9d:ca:a1:52:9e:0f:c7: 99:e3:43:40:32:eb:7f:4c:c8:73:29:f0:e3:09:72: 60:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:4D:60:61:BB:D4:96:B2:6F:AE:99:F0:4B:50:6D:F5:7A:B4:B3:54 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/fE1gYbvUlrJvrpnwS1Bt9Xq0s1Q.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.66.128.0/17 Signature Algorithm: sha256WithRSAEncryption c1:67:38:81:21:f0:bd:8b:41:07:e0:7b:75:c5:1d:0b:61:5c: ed:3f:24:0a:d5:47:74:5d:bd:c0:ee:9e:70:cc:3a:d1:ff:85: e4:81:1d:69:5b:c6:98:5f:fb:a0:ee:77:9e:a0:0f:93:6c:e5: 54:ca:76:1f:78:99:d4:5a:67:8f:22:df:77:18:51:5d:db:cf: 9f:df:fa:54:da:0c:fa:25:76:27:0d:22:76:96:de:5a:12:bd: d1:d7:50:e2:86:26:8e:6a:d4:39:a0:cb:c7:61:d1:a2:9a:ec: 8e:30:f8:bb:ed:0d:fe:11:3b:fe:2e:9f:be:64:d4:bf:59:f2: ff:5b:87:13:d1:87:1c:ee:85:5e:9c:c0:40:28:82:d5:49:52: 8e:93:0d:33:bb:14:1b:ca:78:04:84:5e:f7:f7:47:1b:27:9e: d6:80:d2:47:cb:38:9a:e4:8e:8e:73:05:63:62:83:5a:6e:9d: 3e:27:35:00:52:09:bf:4b:3a:64:07:a0:fb:4d:a8:2a:32:1f: d6:94:c9:dc:a6:94:da:96:c1:5f:c5:51:0a:b2:8c:e6:c4:02: a9:f8:29:2d:57:bd:7e:7a:42:bb:b5:5f:82:2b:2c:7c:96:ee: 07:2f:27:f8:c8:9a:ac:36:e7:55:5c:fe:ab:3e:db:4c:51:81: 33:fb:c2:2e -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCKMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw MjIyMzJaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDdDNEQ2MDYxQkJENDk2 QjI2RkFFOTlGMDRCNTA2REY1N0FCNEIzNTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDMkJwLD6znWgX7eU0KZijbEuf1BgAM+ZdiZd997nT6GD5Zw8jQ 8f4hBMhIOiRsop/8Mlk5L12KM3nELfNfXkTidnrVhzcJTHOkZeCf1vQhFhZeQ4bZ 7R7o3a8Jrx1MQWsLu7mkhbrkL0O3NGpMjwXOTAc4hh+52U//DVPFKEKQJX6IBuJn waM0Yoht6GBMQ/JHC/Jf8X2sRH8hGc/l5/MwK22c7ilyv2zCITM6eo9WkISe2rjc xu8htGVcB/pWySKhp/CRtdPQHUXLdCAmglpDWTC7XBovvO7+9EzBhbYkA7m/FMXn 2u1NncqhUp4Px5njQ0Ay639MyHMp8OMJcmCDAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUfE1gYbvUlrJvrpnwS1Bt9Xq0s1QwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2ZFMWdZYnZVbHJKdnJwbndTMUJ0OVhxMHMxUS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAcBQoAwDQYJKoZIhvcNAQELBQADggEBAMFnOIEh8L2LQQfge3XFHQthXO0/ JArVR3RdvcDunnDMOtH/heSBHWlbxphf+6Dud56gD5Ns5VTKdh94mdRaZ48i33cY UV3bz5/f+lTaDPoldicNInaW3loSvdHXUOKGJo5q1Dmgy8dh0aKa7I4w+LvtDf4R O/4un75k1L9Z8v9bhxPRhxzuhV6cwEAogtVJUo6TDTO7FBvKeASEXvf3RxsnntaA 0kfLOJrkjo5zBWNig1punT4nNQBSCb9LOmQHoPtNqCoyH9aUydymlNqWwV/FUQqy jObEAqn4KS1XvX56Qru1X4IrLHyW7gcvJ/jImqw251Vc/qs+20xRgTP7wi4= -----END CERTIFICATE-----Generated at Sat Jun 1 13:38:48 2024 by rpki-client on console-fra.rpki-client.org