$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/jKzo9N6cyjqFxdhpprQv5ZP39OQ.roa File: jKzo9N6cyjqFxdhpprQv5ZP39OQ.roa (raw, json) Hash identifier: NW/1wTBb8i/IZkvA49VaVz1lO63xVKsl0U1ddrk1X7c= Subject key identifier: 8C:AC:E8:F4:DE:9C:CA:3A:85:C5:D8:69:A6:B4:2F:E5:93:F7:F4:E4 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 08E0 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/jKzo9N6cyjqFxdhpprQv5ZP39OQ.roa Signing time: Tue 30 Apr 2024 02:26:25 +0000 ROA not before: Tue 30 Apr 2024 02:26:25 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 1.75.242.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:41:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2272 (0x8e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 30 02:26:25 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=8CACE8F4DE9CCA3A85C5D869A6B42FE593F7F4E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e3:93:e4:1c:a9:91:f8:2e:51:cb:e7:68:22: 65:2f:33:11:15:61:9c:b0:c0:a2:2c:1a:49:34:56: 29:18:46:8b:8a:c7:d1:4c:ad:86:c8:55:18:4b:55: ea:83:ab:23:88:a4:57:fa:a0:b0:55:69:b5:4c:13: 63:43:4d:05:07:9f:3a:4f:5e:35:d9:12:5e:e2:c4: 37:c3:0f:39:e3:5c:94:95:e5:de:4f:54:5a:4d:a1: 61:20:be:5d:ba:06:fc:b5:9b:2f:98:96:1d:c5:aa: e6:a4:f8:7f:ad:2c:db:60:0d:b9:93:45:ac:ee:dc: 8c:da:75:51:a5:f3:59:12:50:3c:76:e8:37:15:9b: 91:4c:ad:9f:2a:1c:ce:1e:25:6c:74:19:52:d9:80: 9a:de:98:da:76:84:8f:c1:f2:43:dc:5f:13:54:84: 9e:3d:12:47:fb:7c:c5:2a:7b:76:33:50:9d:49:16: 74:47:9b:f8:bb:76:1c:04:a6:1f:d3:9d:25:71:7f: 12:24:1b:eb:a6:94:02:e9:8b:f6:3c:ef:01:92:2c: 5c:eb:e0:ad:7b:d5:56:42:2a:82:6b:70:99:1d:56: ca:c0:24:e9:c5:5b:7e:ee:ab:55:d3:31:51:65:bc: 1e:5d:6c:45:a2:44:6e:1c:ff:85:34:5d:2e:fd:c1: a2:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:AC:E8:F4:DE:9C:CA:3A:85:C5:D8:69:A6:B4:2F:E5:93:F7:F4:E4 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/jKzo9N6cyjqFxdhpprQv5ZP39OQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.75.242.0/23 Signature Algorithm: sha256WithRSAEncryption 49:05:ce:da:c1:bd:27:4f:99:b1:0e:37:80:f7:5c:51:21:95: 6b:1e:9e:31:bd:e5:4e:8a:69:6e:de:96:d1:f7:4c:16:00:52: 34:64:c4:ae:0f:70:77:bc:3d:6b:b4:51:60:f2:5d:74:7d:b5: c8:2f:4b:69:61:28:6b:09:51:f4:5f:8b:7d:00:10:b5:d0:68: 7e:d4:3a:42:9d:82:c0:cf:7b:ce:6c:7a:30:44:e2:a0:17:eb: 44:6e:7a:c2:bb:2b:9f:b3:77:01:61:94:38:0f:97:1a:cf:96: a0:b0:3c:1e:10:e6:59:e4:69:2a:42:3c:97:3f:f0:d1:08:5e: ac:b5:31:c9:92:d9:c9:a2:eb:d9:9a:f4:4d:3a:d9:ff:17:ac: 39:b4:3d:76:88:0f:49:25:94:6d:ef:70:f2:0c:f6:b7:a7:52: 7a:f3:f3:d9:b8:1b:a5:79:e0:08:55:ea:8a:0f:7a:62:45:2e: 07:25:8f:c3:38:6b:20:ac:24:25:08:74:59:a4:40:ad:76:01: 06:92:6f:39:b1:aa:b1:ce:57:fa:a3:3e:77:04:40:3f:ed:60: 4b:2e:73:7e:9e:db:be:2f:44:2b:97:cc:bc:23:c7:72:b4:53: 7b:e1:24:3e:8d:72:30:56:cf:06:e5:5a:df:3c:a4:08:92:58: d1:5b:2e:95 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCOAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw MjI2MjVaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDhDQUNFOEY0REU5Q0NB M0E4NUM1RDg2OUE2QjQyRkU1OTNGN0Y0RTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCw45PkHKmR+C5Ry+doImUvMxEVYZywwKIsGkk0VikYRouKx9FM rYbIVRhLVeqDqyOIpFf6oLBVabVME2NDTQUHnzpPXjXZEl7ixDfDDznjXJSV5d5P VFpNoWEgvl26Bvy1my+Ylh3Fquak+H+tLNtgDbmTRazu3IzadVGl81kSUDx26DcV m5FMrZ8qHM4eJWx0GVLZgJremNp2hI/B8kPcXxNUhJ49Ekf7fMUqe3YzUJ1JFnRH m/i7dhwEph/TnSVxfxIkG+umlALpi/Y87wGSLFzr4K171VZCKoJrcJkdVsrAJOnF W37uq1XTMVFlvB5dbEWiRG4c/4U0XS79waJ7AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUjKzo9N6cyjqFxdhpprQv5ZP39OQwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2pLem85TjZjeWpxRnhkaHBwclF2NVpQMzlPUS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEBS/IwDQYJKoZIhvcNAQELBQADggEBAEkFztrBvSdPmbEON4D3XFEhlWse njG95U6KaW7eltH3TBYAUjRkxK4PcHe8PWu0UWDyXXR9tcgvS2lhKGsJUfRfi30A ELXQaH7UOkKdgsDPe85sejBE4qAX60RuesK7K5+zdwFhlDgPlxrPlqCwPB4Q5lnk aSpCPJc/8NEIXqy1McmS2cmi69ma9E062f8XrDm0PXaID0kllG3vcPIM9renUnrz 89m4G6V54AhV6ooPemJFLgclj8M4ayCsJCUIdFmkQK12AQaSbzmxqrHOV/qjPncE QD/tYEsuc36e274vRCuXzLwjx3K0U3vhJD6NcjBWzwblWt88pAiSWNFbLpU= -----END CERTIFICATE-----Generated at Fri Nov 22 15:24:02 2024 by rpki-client on console-fra.rpki-client.org