$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/h9khvFfQgLDUn2bsalI_wDeRxgw.roa File: h9khvFfQgLDUn2bsalI_wDeRxgw.roa (raw, json) Hash identifier: u5075CHtDr6qOHN1zyngkLBgliqf9tZBqMHuEF1aS/w= Subject key identifier: 87:D9:21:BC:57:D0:80:B0:D4:9F:66:EC:6A:52:3F:C0:37:91:C6:0C Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 084D Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/h9khvFfQgLDUn2bsalI_wDeRxgw.roa Signing time: Tue 30 Apr 2024 02:16:26 +0000 ROA not before: Tue 30 Apr 2024 02:16:26 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 220.159.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:41:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2125 (0x84d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 30 02:16:26 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=87D921BC57D080B0D49F66EC6A523FC03791C60C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:75:65:ca:ec:27:34:5d:f8:9e:ff:90:42:07: ea:1c:e1:64:43:22:c9:f4:b9:78:dd:a3:13:66:a7: d7:cd:b2:9a:c3:88:0c:d9:b8:f0:f6:65:08:f5:cd: ad:0c:c2:79:33:e9:90:d2:a8:65:b9:01:46:13:dd: 1b:83:c1:98:42:49:27:18:30:6e:bc:f9:71:ac:5d: 72:18:b8:01:2f:42:7d:ce:36:7e:ba:aa:db:58:c4: 27:66:27:6d:a1:09:6c:d5:a4:a1:45:02:9e:b0:71: 5e:00:19:c8:09:6f:06:7d:bd:98:08:3a:59:bc:12: 77:bc:90:3b:13:78:85:95:c2:30:6b:0b:86:b9:d9: 29:9c:c6:36:91:25:02:02:d0:89:50:09:df:20:ff: e9:f2:11:99:d0:fd:4e:30:a8:9c:1a:0d:2b:b6:d5: 50:64:04:28:d4:c2:b2:25:a2:66:57:ee:29:86:29: b3:37:c2:3f:3c:27:d2:d0:b9:33:db:90:e9:f5:ad: 5b:8c:3d:5f:12:d1:07:a1:11:4e:f8:bf:6e:ed:db: 31:5a:a1:f6:d1:91:30:91:68:c0:f5:08:35:07:dd: 55:a4:81:0d:7d:78:9b:56:1b:6f:5e:d2:80:54:a3: 58:2f:07:01:33:56:43:8e:5b:9f:57:72:4b:f7:ad: 88:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:D9:21:BC:57:D0:80:B0:D4:9F:66:EC:6A:52:3F:C0:37:91:C6:0C X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/h9khvFfQgLDUn2bsalI_wDeRxgw.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 220.159.237.0/24 Signature Algorithm: sha256WithRSAEncryption 43:56:f6:b1:ac:32:57:2d:fe:d2:07:0d:2b:f5:74:14:3c:7c: e6:f5:26:cf:b2:4c:b8:28:17:e8:b4:60:00:53:9a:9a:87:23: 2d:e6:e1:1b:87:93:46:8b:df:8e:31:40:31:9b:73:1e:ee:82: 1e:5c:06:bf:6c:98:46:19:dc:b1:08:af:96:ca:5a:ef:ab:b2: f0:44:1b:ae:86:10:88:9f:db:2f:00:14:42:cd:0c:29:c1:e2: 23:2f:f4:3f:50:6c:01:56:8e:87:be:78:65:be:e3:37:95:90: ee:8a:9e:48:f6:40:82:b6:cd:c5:93:78:f6:e8:6a:77:2f:dd: d9:da:4f:d4:80:b9:8d:87:80:ec:4c:a3:3b:ce:17:f0:99:42: 75:0d:cd:2f:c3:5f:6c:97:7d:00:03:d5:77:b0:6c:d6:83:7b: 09:6c:4f:d9:9b:95:04:ab:d7:58:d3:be:5c:d5:a6:d9:bf:99: ca:73:28:a0:c3:a9:4c:03:42:3c:4c:b7:33:4d:99:25:b6:15: 52:b6:4b:f8:a8:34:93:7e:3e:ad:c9:38:a9:66:86:29:df:d4: 49:c2:d8:83:06:cd:ef:77:15:4c:3c:66:01:5f:2b:1f:e6:89: 61:4b:df:5b:1a:16:a7:cd:24:7b:c1:50:9d:3e:68:1d:bd:66: a5:26:1e:80 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCE0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw MjE2MjZaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDg3RDkyMUJDNTdEMDgw QjBENDlGNjZFQzZBNTIzRkMwMzc5MUM2MEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCudWXK7Cc0Xfie/5BCB+oc4WRDIsn0uXjdoxNmp9fNsprDiAzZ uPD2ZQj1za0Mwnkz6ZDSqGW5AUYT3RuDwZhCSScYMG68+XGsXXIYuAEvQn3ONn66 qttYxCdmJ22hCWzVpKFFAp6wcV4AGcgJbwZ9vZgIOlm8Ene8kDsTeIWVwjBrC4a5 2SmcxjaRJQIC0IlQCd8g/+nyEZnQ/U4wqJwaDSu21VBkBCjUwrIlomZX7imGKbM3 wj88J9LQuTPbkOn1rVuMPV8S0QehEU74v27t2zFaofbRkTCRaMD1CDUH3VWkgQ19 eJtWG29e0oBUo1gvBwEzVkOOW59Xckv3rYipAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUh9khvFfQgLDUn2bsalI/wDeRxgwwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2g5a2h2RmZRZ0xEVW4yYnNhbElfd0RlUnhndy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADcn+0wDQYJKoZIhvcNAQELBQADggEBAENW9rGsMlct/tIHDSv1dBQ8fOb1 Js+yTLgoF+i0YABTmpqHIy3m4RuHk0aL344xQDGbcx7ugh5cBr9smEYZ3LEIr5bK Wu+rsvBEG66GEIif2y8AFELNDCnB4iMv9D9QbAFWjoe+eGW+4zeVkO6Knkj2QIK2 zcWTePboancv3dnaT9SAuY2HgOxMozvOF/CZQnUNzS/DX2yXfQAD1XewbNaDewls T9mblQSr11jTvlzVptm/mcpzKKDDqUwDQjxMtzNNmSW2FVK2S/ioNJN+Pq3JOKlm hinf1EnC2IMGze93FUw8ZgFfKx/miWFL31saFqfNJHvBUJ0+aB29ZqUmHoA= -----END CERTIFICATE-----Generated at Fri Nov 22 15:24:02 2024 by rpki-client on console-fra.rpki-client.org