$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/hq-bYcx6XMSH9E6iCSTNIPLn-iU.roa File: hq-bYcx6XMSH9E6iCSTNIPLn-iU.roa (raw, json) Hash identifier: szCvNx1LxFS/1hBr/StP85ER1EqgEkxfJoV4QwnvYHk= Subject key identifier: 86:AF:9B:61:CC:7A:5C:C4:87:F4:4E:A2:09:24:CD:20:F2:E7:FA:25 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0805 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/hq-bYcx6XMSH9E6iCSTNIPLn-iU.roa Signing time: Tue 30 Apr 2024 02:12:21 +0000 ROA not before: Tue 30 Apr 2024 02:12:21 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 219.122.64.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 23 Jun 2024 14:09:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2053 (0x805) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 30 02:12:21 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=86AF9B61CC7A5CC487F44EA20924CD20F2E7FA25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:3e:66:98:32:e5:32:ce:3f:c9:44:35:2e:a2: 8a:99:29:db:48:1c:5a:f9:70:2d:8b:28:d3:44:f1: e1:d6:db:38:b5:13:70:5a:a2:a4:65:17:62:fe:aa: c9:26:2a:3d:5a:9f:c0:82:d2:17:ff:82:e9:b9:32: 0b:03:79:c4:44:78:c9:78:ce:f2:36:5f:65:51:71: 28:65:07:57:75:c8:76:22:71:a2:b6:4c:75:d5:7b: 81:5b:d9:c8:92:e4:14:59:cb:cf:d7:7c:ba:ea:c9: ed:61:4f:b4:d3:62:d0:71:66:e5:41:95:e2:5c:a7: ed:35:79:82:db:b0:d3:33:47:d3:3c:c0:39:5d:1c: e0:0d:83:d5:02:41:57:62:99:b3:d9:d2:39:f3:7d: 55:e3:26:cf:d2:55:3c:e6:8d:d7:a3:61:a9:ad:58: 83:52:3e:c2:16:00:f7:09:61:78:6d:04:5c:24:d5: 52:51:9a:5b:5e:55:ca:58:34:ae:80:0d:7b:f5:a4: 1b:61:bf:dd:8f:00:a2:1a:a8:ff:b9:45:f5:15:77: bd:b2:d3:66:3e:9f:1f:fe:aa:72:67:93:25:8d:04: 25:06:fb:6f:00:8e:2e:c0:29:26:44:c6:47:78:c4: ba:f5:c6:e0:81:b3:37:b2:47:fb:14:0e:48:96:63: aa:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:AF:9B:61:CC:7A:5C:C4:87:F4:4E:A2:09:24:CD:20:F2:E7:FA:25 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/hq-bYcx6XMSH9E6iCSTNIPLn-iU.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 219.122.64.0/21 Signature Algorithm: sha256WithRSAEncryption e4:f8:50:45:3d:1d:cd:37:a4:8d:df:a5:e8:26:00:06:59:0d: c3:90:c7:13:15:04:f2:32:2b:43:ba:4e:25:92:0d:a9:88:13: 72:8b:fe:5d:3f:96:43:88:45:25:88:18:f3:33:ce:31:66:a3: 19:f6:da:00:18:f9:89:59:05:a3:a6:51:85:2f:44:2a:69:fc: 61:f7:04:89:c1:49:82:8f:a9:dd:a3:4b:7d:47:97:5a:89:b6: 05:5d:fa:8f:ff:df:d4:9a:bd:a0:af:20:d7:af:d7:c9:97:c4: 0d:7b:0a:98:7c:08:8a:a5:4b:5e:f9:3f:ed:e9:a1:dc:7a:24: 32:a6:81:23:e6:36:d1:62:dc:4d:9e:1b:c5:93:36:be:ca:0d: 4f:98:8e:8e:e7:b6:8b:da:59:6c:4d:bb:86:22:15:72:92:83: a5:b8:39:a4:83:39:82:b7:bd:81:65:84:71:e0:0b:1f:e9:73: ba:11:cd:d9:d6:b8:fc:48:e0:71:20:ef:86:f7:6f:1b:97:91: 5b:59:81:f2:ef:88:fa:ef:0e:42:69:69:12:e1:e8:fa:41:02: 7f:00:eb:24:4a:50:8e:e2:33:cc:c3:b7:21:ee:76:be:ee:9e: 4b:fb:32:c6:21:11:3e:52:4e:aa:94:a0:63:92:cd:2d:ab:ab: 3f:24:ae:f4 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCAUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw MjEyMjFaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDg2QUY5QjYxQ0M3QTVD QzQ4N0Y0NEVBMjA5MjRDRDIwRjJFN0ZBMjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCyPmaYMuUyzj/JRDUuooqZKdtIHFr5cC2LKNNE8eHW2zi1E3Ba oqRlF2L+qskmKj1an8CC0hf/gum5MgsDecREeMl4zvI2X2VRcShlB1d1yHYicaK2 THXVe4Fb2ciS5BRZy8/XfLrqye1hT7TTYtBxZuVBleJcp+01eYLbsNMzR9M8wDld HOANg9UCQVdimbPZ0jnzfVXjJs/SVTzmjdejYamtWINSPsIWAPcJYXhtBFwk1VJR mlteVcpYNK6ADXv1pBthv92PAKIaqP+5RfUVd72y02Y+nx/+qnJnkyWNBCUG+28A ji7AKSZExkd4xLr1xuCBszeyR/sUDkiWY6pZAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUhq+bYcx6XMSH9E6iCSTNIPLn+iUwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2hxLWJZY3g2WE1TSDlFNmlDU1ROSVBMbi1pVS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAPbekAwDQYJKoZIhvcNAQELBQADggEBAOT4UEU9Hc03pI3fpegmAAZZDcOQ xxMVBPIyK0O6TiWSDamIE3KL/l0/lkOIRSWIGPMzzjFmoxn22gAY+YlZBaOmUYUv RCpp/GH3BInBSYKPqd2jS31Hl1qJtgVd+o//39SavaCvINev18mXxA17Cph8CIql S175P+3podx6JDKmgSPmNtFi3E2eG8WTNr7KDU+Yjo7ntovaWWxNu4YiFXKSg6W4 OaSDOYK3vYFlhHHgCx/pc7oRzdnWuPxI4HEg74b3bxuXkVtZgfLviPrvDkJpaRLh 6PpBAn8A6yRKUI7iM8zDtyHudr7unkv7MsYhET5STqqUoGOSzS2rqz8krvQ= -----END CERTIFICATE-----Generated at Mon Jun 17 14:52:14 2024 by rpki-client on console-ams.rpki-client.org