$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/fjSwg80KR4xFbmleSiiM6b9js9k.roa File: fjSwg80KR4xFbmleSiiM6b9js9k.roa (raw, json) Hash identifier: TzukAIKH7nl0lUDP1a1fYGdrjehrEWtHlZroGe9HIpE= Subject key identifier: 7E:34:B0:83:CD:0A:47:8C:45:6E:69:5E:4A:28:8C:E9:BF:63:B3:D9 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0AA4 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/fjSwg80KR4xFbmleSiiM6b9js9k.roa Signing time: Sun 30 Jun 2024 01:54:25 +0000 ROA not before: Sun 30 Jun 2024 01:54:25 +0000 ROA not after: Tue 24 Jun 2025 10:46:45 +0000 asID: 9605 IP address blocks: 1.67.160.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 22:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2724 (0xaa4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 30 01:54:25 2024 GMT Not After : Jun 24 10:46:45 2025 GMT Subject: CN=7E34B083CD0A478C456E695E4A288CE9BF63B3D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:af:24:39:72:76:95:5e:c6:8f:e5:da:48:f4: ba:57:6d:25:b7:de:fb:9a:a2:f6:2c:9c:b7:e9:85: 2a:d4:99:85:fc:be:07:66:96:28:1e:0e:d6:ff:32: 6e:41:63:ae:42:b6:39:19:44:07:73:32:3b:16:17: 64:d0:37:83:f8:4a:3a:0a:90:90:0c:ad:94:f9:42: ac:16:a1:51:80:5c:c2:c0:94:7d:ea:23:11:24:0e: 7b:4b:ec:26:a4:85:88:65:a7:02:7f:ff:89:da:a5: 7b:c6:a8:b6:89:d3:5e:8a:e0:48:f7:69:ee:da:e5: e8:53:8e:d4:1e:69:96:d0:0b:c5:02:cb:74:8e:a1: 6e:29:8a:43:42:08:c3:27:ff:8e:5b:cb:a2:f3:f9: c7:21:ba:16:be:47:f1:fe:28:39:03:66:93:7f:f2: 8d:17:21:ad:e2:20:be:35:d7:3e:a2:dc:ec:70:bb: bd:39:0f:b1:42:94:6f:61:ea:95:86:6f:2d:b1:da: 30:f2:fe:02:01:d2:d7:8f:ad:b5:3a:f5:f7:d2:bc: 36:f4:fd:90:55:fc:39:76:7b:1a:0b:9c:14:3b:fe: 1c:cb:7b:3f:20:fa:26:87:87:19:7d:d7:53:c4:56: fd:64:65:1c:85:25:2a:b8:82:67:9f:a7:e1:7f:b3: dd:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:34:B0:83:CD:0A:47:8C:45:6E:69:5E:4A:28:8C:E9:BF:63:B3:D9 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/fjSwg80KR4xFbmleSiiM6b9js9k.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.67.160.0/19 Signature Algorithm: sha256WithRSAEncryption 3e:8f:e9:5c:64:5c:27:e2:bd:22:2a:65:42:8c:45:b7:b2:7b: ac:db:9a:85:80:b9:2e:44:14:05:d8:13:fc:8b:f1:51:be:bd: 38:31:59:62:d2:c1:18:96:29:a7:82:95:0e:84:24:b2:35:d3: 87:91:8f:76:cc:07:9e:7b:7c:8c:e5:97:93:57:42:95:e7:52: 6a:59:2b:fe:f2:62:da:21:4a:28:f2:33:97:af:fe:90:d5:53: 78:64:3f:84:1d:0f:53:17:91:ee:12:e6:ea:3c:3f:61:d2:15: cc:a5:4e:96:0a:ae:6c:54:1b:71:f0:ee:93:64:56:6e:52:3a: b6:ea:f1:60:48:d0:36:26:cb:2c:22:60:8b:ae:32:39:ed:89: 3d:d2:34:0b:4c:88:30:9e:48:1a:a4:db:07:3e:d9:b5:b2:ec: ed:ce:e8:2f:b2:8e:77:9c:29:40:b0:3f:15:06:c3:fc:c4:03: 46:05:8e:58:71:e6:45:af:df:53:7e:20:4f:08:5f:cc:37:26: cf:23:59:ca:60:16:65:95:a0:94:4a:db:b4:af:a5:eb:57:d2: e7:33:af:2c:cb:3c:e8:17:f5:38:03:da:b9:9b:fc:73:b3:be: b7:a3:9d:1b:04:8c:7e:31:5a:2d:27:41:80:46:bf:0b:b2:90: f5:9c:33:99 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCqQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA2MzAw MTU0MjVaFw0yNTA2MjQxMDQ2NDVaMDMxMTAvBgNVBAMTKDdFMzRCMDgzQ0QwQTQ3 OEM0NTZFNjk1RTRBMjg4Q0U5QkY2M0IzRDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDRryQ5cnaVXsaP5dpI9LpXbSW33vuaovYsnLfphSrUmYX8vgdm ligeDtb/Mm5BY65CtjkZRAdzMjsWF2TQN4P4SjoKkJAMrZT5QqwWoVGAXMLAlH3q IxEkDntL7CakhYhlpwJ//4napXvGqLaJ016K4Ej3ae7a5ehTjtQeaZbQC8UCy3SO oW4pikNCCMMn/45by6Lz+cchuha+R/H+KDkDZpN/8o0XIa3iIL411z6i3Oxwu705 D7FClG9h6pWGby2x2jDy/gIB0tePrbU69ffSvDb0/ZBV/Dl2exoLnBQ7/hzLez8g +iaHhxl911PEVv1kZRyFJSq4gmefp+F/s923AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUfjSwg80KR4xFbmleSiiM6b9js9kwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2ZqU3dnODBLUjR4RmJtbGVTaWlNNmI5anM5ay5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAUBQ6AwDQYJKoZIhvcNAQELBQADggEBAD6P6VxkXCfivSIqZUKMRbeye6zb moWAuS5EFAXYE/yL8VG+vTgxWWLSwRiWKaeClQ6EJLI104eRj3bMB557fIzll5NX QpXnUmpZK/7yYtohSijyM5ev/pDVU3hkP4QdD1MXke4S5uo8P2HSFcylTpYKrmxU G3Hw7pNkVm5SOrbq8WBI0DYmyywiYIuuMjntiT3SNAtMiDCeSBqk2wc+2bWy7O3O 6C+yjnecKUCwPxUGw/zEA0YFjlhx5kWv31N+IE8IX8w3Js8jWcpgFmWVoJRK27Sv petX0uczryzLPOgX9TgD2rmb/HOzvrejnRsEjH4xWi0nQYBGvwuykPWcM5k= -----END CERTIFICATE-----Generated at Mon Nov 25 23:59:11 2024 by rpki-client on console-fra.rpki-client.org