$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/hmhZFg8FsHtNsibqFu1looO0SeE.roa File: hmhZFg8FsHtNsibqFu1looO0SeE.roa (raw, json) Hash identifier: oMVjUmmgMRToa7FLZ3UJFfhIUdu5Jg00lxoGWlL0T2c= Subject key identifier: 86:68:59:16:0F:05:B0:7B:4D:B2:26:EA:16:ED:65:A2:83:B4:49:E1 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0914 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/hmhZFg8FsHtNsibqFu1looO0SeE.roa Signing time: Tue 30 Apr 2024 02:28:45 +0000 ROA not before: Tue 30 Apr 2024 02:28:45 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 1.66.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2324 (0x914) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 30 02:28:45 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=866859160F05B07B4DB226EA16ED65A283B449E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:3f:a0:23:22:5a:8a:35:57:d1:95:e4:cb:55: f0:2d:a1:5d:e8:d2:98:04:89:8e:a0:3c:b3:3a:d7: bb:dc:49:ab:c4:f6:cf:b8:c8:da:02:1f:04:7a:c7: 0a:df:a4:fb:e9:79:20:88:da:aa:3e:bd:3e:85:24: c8:00:ab:0c:e8:6f:b6:39:22:d8:84:68:06:b5:9a: 9b:15:e0:fb:4c:e6:2d:c9:8e:60:07:d3:2a:e7:6a: 97:42:ee:3c:b2:28:1d:04:a3:6c:eb:e2:67:1f:e0: 41:f5:68:95:ab:55:95:7c:92:78:fc:0b:ef:38:ff: 3d:67:56:69:e6:5c:4b:c5:fa:9d:ec:1f:63:72:d5: b6:6c:de:67:42:2b:a3:b1:94:17:5c:13:e3:8a:e9: c6:b8:22:1d:f4:ee:4a:25:81:cd:ff:0c:da:ea:f2: bb:5d:18:17:1c:c8:35:d1:2c:4d:d6:18:51:52:2e: 9b:d8:3c:19:ee:91:89:a5:4d:68:da:e0:73:a0:de: df:12:14:3e:01:2e:b1:b3:4b:55:1a:60:32:a4:7e: f0:a9:c5:2a:e7:b2:ca:a5:2e:c3:ed:f2:00:ba:12: 9f:4d:43:a9:50:63:b0:11:d9:40:16:f1:4d:43:2b: 39:24:ec:a2:ae:a3:cd:06:f3:f4:be:26:b2:d4:39: 72:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:68:59:16:0F:05:B0:7B:4D:B2:26:EA:16:ED:65:A2:83:B4:49:E1 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/hmhZFg8FsHtNsibqFu1looO0SeE.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.66.108.0/22 Signature Algorithm: sha256WithRSAEncryption e4:2e:49:02:0c:00:16:0d:31:86:76:10:cf:23:dc:eb:d7:b7: 73:81:d2:63:5d:3d:f5:58:82:45:40:1e:bc:72:5e:0d:62:6b: 51:21:04:99:91:8d:96:3c:da:44:cb:63:5d:8d:21:b9:e3:b9: cc:db:0b:1f:db:57:f9:17:52:02:de:00:32:22:f9:34:be:69: b1:e5:5b:f0:fa:47:83:cd:0b:df:2e:da:d1:3c:7d:4a:b8:88: df:66:f2:b9:eb:cc:bd:da:dd:b2:5d:a6:12:d9:aa:5c:57:36: 50:5c:91:14:0c:29:67:a6:45:65:59:fb:ae:ee:eb:28:33:51: be:3a:de:7f:8d:c2:21:39:21:f0:cb:19:25:76:c0:f8:37:c6: eb:03:1a:f3:07:ea:d1:7c:41:94:9d:ee:f8:d5:0f:47:30:e4: 93:93:ac:03:77:49:3c:82:b8:50:55:5b:de:58:44:76:3a:0c: f1:b3:14:11:03:1b:9a:e5:4d:97:b3:08:3d:32:39:e7:63:51: e8:aa:df:8d:7c:6a:cc:1b:f8:a9:ce:0c:71:2d:ca:05:b6:ea: d0:91:d6:09:40:d5:c7:ba:e5:fd:3b:ee:46:77:9d:de:d1:84: 77:1f:a9:06:54:c7:73:40:7b:7a:5d:3a:81:1a:ba:65:ac:dc: 93:08:ca:b1 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCRQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw MjI4NDVaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDg2Njg1OTE2MEYwNUIw N0I0REIyMjZFQTE2RUQ2NUEyODNCNDQ5RTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDiP6AjIlqKNVfRleTLVfAtoV3o0pgEiY6gPLM617vcSavE9s+4 yNoCHwR6xwrfpPvpeSCI2qo+vT6FJMgAqwzob7Y5ItiEaAa1mpsV4PtM5i3JjmAH 0yrnapdC7jyyKB0Eo2zr4mcf4EH1aJWrVZV8knj8C+84/z1nVmnmXEvF+p3sH2Ny 1bZs3mdCK6OxlBdcE+OK6ca4Ih307kolgc3/DNrq8rtdGBccyDXRLE3WGFFSLpvY PBnukYmlTWja4HOg3t8SFD4BLrGzS1UaYDKkfvCpxSrnssqlLsPt8gC6Ep9NQ6lQ Y7AR2UAW8U1DKzkk7KKuo80G8/S+JrLUOXKVAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUhmhZFg8FsHtNsibqFu1looO0SeEwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2htaFpGZzhGc0h0TnNpYnFGdTFsb29PMFNlRS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIBQmwwDQYJKoZIhvcNAQELBQADggEBAOQuSQIMABYNMYZ2EM8j3OvXt3OB 0mNdPfVYgkVAHrxyXg1ia1EhBJmRjZY82kTLY12NIbnjuczbCx/bV/kXUgLeADIi +TS+abHlW/D6R4PNC98u2tE8fUq4iN9m8rnrzL3a3bJdphLZqlxXNlBckRQMKWem RWVZ+67u6ygzUb463n+NwiE5IfDLGSV2wPg3xusDGvMH6tF8QZSd7vjVD0cw5JOT rAN3STyCuFBVW95YRHY6DPGzFBEDG5rlTZezCD0yOedjUeiq3418aswb+KnODHEt ygW26tCR1glA1ce65f077kZ3nd7RhHcfqQZUx3NAe3pdOoEaumWs3JMIyrE= -----END CERTIFICATE-----Generated at Sat Jun 1 13:38:48 2024 by rpki-client on console-fra.rpki-client.org