$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/iU5jt8K4JX1WSopKBCLbnUoipoU.roa File: iU5jt8K4JX1WSopKBCLbnUoipoU.roa (raw, json) Hash identifier: j39I6wNQ3NlfIrxHsSbjdXEQZ8S/nYU8+bcZ8vzRBpQ= Subject key identifier: 89:4E:63:B7:C2:B8:25:7D:56:4A:8A:4A:04:22:DB:9D:4A:22:A6:85 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 082E Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/iU5jt8K4JX1WSopKBCLbnUoipoU.roa Signing time: Tue 30 Apr 2024 02:14:25 +0000 ROA not before: Tue 30 Apr 2024 02:14:25 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 110.162.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Jun 2024 06:27:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2094 (0x82e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 30 02:14:25 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=894E63B7C2B8257D564A8A4A0422DB9D4A22A685 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b5:c2:72:bc:04:83:4c:06:40:92:bc:73:48: 23:28:1f:f1:5d:1b:61:8a:1a:c9:f5:98:a6:a9:f8: a8:a3:00:b9:f1:c9:f1:e1:9e:a6:b6:ee:51:26:ae: 84:eb:b9:93:ca:a3:fe:bb:f7:f3:b4:04:28:97:b4: b9:c6:89:44:34:a3:25:66:a3:55:c2:a9:b5:5e:39: 68:a9:f7:09:29:a6:ce:08:46:8c:f6:d4:e6:24:1b: bc:d4:c0:e9:39:92:89:26:17:06:31:f1:81:15:8c: 4f:a3:f2:ab:49:ee:5d:4b:73:85:ce:60:36:85:a4: 32:8f:02:48:13:cd:8e:f6:52:60:c4:8d:8f:de:74: 02:83:6b:6e:b6:c0:5c:91:2d:b3:c7:b8:9e:dd:a7: 6c:95:92:09:35:62:eb:21:d1:39:24:bf:15:77:bc: f1:18:6c:ce:4d:88:7e:86:6c:7f:01:9d:b9:bf:5b: 2b:26:4a:c8:66:92:54:e5:ec:49:60:7b:83:12:66: 8d:d1:a1:f0:b8:83:f3:64:9e:7d:2b:31:30:19:4a: ee:11:b6:a9:f6:a1:17:cc:c2:53:0c:44:2f:e5:8f: aa:68:d3:d2:e1:97:fa:60:11:3f:17:99:08:04:f8: ab:72:43:79:80:eb:50:ef:59:66:23:9a:2b:f2:66: 01:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:4E:63:B7:C2:B8:25:7D:56:4A:8A:4A:04:22:DB:9D:4A:22:A6:85 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/iU5jt8K4JX1WSopKBCLbnUoipoU.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 110.162.128.0/17 Signature Algorithm: sha256WithRSAEncryption 37:91:0a:9b:d8:e8:b9:4d:9c:85:7c:0e:0b:e2:c2:c9:0d:c9: d5:4f:8d:c1:24:7b:e0:82:0c:41:13:65:82:fc:21:53:cb:19: 18:ef:cc:d1:f0:76:77:56:5a:db:1a:7c:04:52:04:1e:74:8a: 98:f4:cb:82:c6:e2:53:33:81:04:ad:d9:ab:af:be:63:c9:ba: a5:44:c4:bc:59:61:5f:b2:cb:88:5d:ff:ae:c2:60:fa:89:74: ae:7b:db:79:1a:0c:ff:58:f8:57:6a:2b:5b:df:c2:33:0c:90: 4c:97:9e:0d:fa:c7:c2:ea:27:83:a7:35:49:a7:e3:cc:8f:ac: 0c:f6:0d:54:30:ab:b5:55:85:85:42:e4:a3:a0:69:22:1d:a9: 5d:13:07:eb:10:2d:9d:db:44:d6:ec:0d:a2:0f:8a:5f:f5:ba: 00:ad:d0:5f:4e:dd:59:1d:81:ca:4c:f7:6b:3a:66:0a:65:f5: f2:7d:ef:9c:5d:5c:52:49:50:44:07:06:32:8e:71:bb:ce:dd: 86:47:64:88:d6:a2:85:17:55:ae:ed:5e:5e:75:1e:b4:87:ae: e0:0a:d5:aa:46:c2:f1:fe:d2:26:c2:51:f5:a7:23:9d:51:cd: 34:cb:b0:dd:f6:4f:d4:7e:9e:7f:0e:ed:f8:df:b6:9f:82:62: e7:78:ab:50 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCC4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw MjE0MjVaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDg5NEU2M0I3QzJCODI1 N0Q1NjRBOEE0QTA0MjJEQjlENEEyMkE2ODUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCxtcJyvASDTAZAkrxzSCMoH/FdG2GKGsn1mKap+KijALnxyfHh nqa27lEmroTruZPKo/679/O0BCiXtLnGiUQ0oyVmo1XCqbVeOWip9wkpps4IRoz2 1OYkG7zUwOk5kokmFwYx8YEVjE+j8qtJ7l1Lc4XOYDaFpDKPAkgTzY72UmDEjY/e dAKDa262wFyRLbPHuJ7dp2yVkgk1Yush0TkkvxV3vPEYbM5NiH6GbH8Bnbm/Wysm SshmklTl7Elge4MSZo3RofC4g/Nknn0rMTAZSu4Rtqn2oRfMwlMMRC/lj6po09Lh l/pgET8XmQgE+KtyQ3mA61DvWWYjmivyZgF/AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUiU5jt8K4JX1WSopKBCLbnUoipoUwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2lVNWp0OEs0SlgxV1NvcEtCQ0xiblVvaXBvVS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAduooAwDQYJKoZIhvcNAQELBQADggEBADeRCpvY6LlNnIV8DgviwskNydVP jcEke+CCDEETZYL8IVPLGRjvzNHwdndWWtsafARSBB50ipj0y4LG4lMzgQSt2auv vmPJuqVExLxZYV+yy4hd/67CYPqJdK5723kaDP9Y+FdqK1vfwjMMkEyXng36x8Lq J4OnNUmn48yPrAz2DVQwq7VVhYVC5KOgaSIdqV0TB+sQLZ3bRNbsDaIPil/1ugCt 0F9O3VkdgcpM92s6Zgpl9fJ975xdXFJJUEQHBjKOcbvO3YZHZIjWooUXVa7tXl51 HrSHruAK1apGwvH+0ibCUfWnI51RzTTLsN32T9R+nn8O7fjftp+CYud4q1A= -----END CERTIFICATE-----Generated at Mon Jun 24 23:50:27 2024 by rpki-client on console-fra.rpki-client.org