$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/jUD6nVBdm95h260UGVigJ5Afk9I.roa File: jUD6nVBdm95h260UGVigJ5Afk9I.roa (raw, json) Hash identifier: kdR22LjWGnmzZ1STBE+LVneB+2eu2kNpJso02gCi/+4= Subject key identifier: 8D:40:FA:9D:50:5D:9B:DE:61:DB:AD:14:19:58:A0:27:90:1F:93:D2 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 072E Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/jUD6nVBdm95h260UGVigJ5Afk9I.roa Signing time: Tue 30 Apr 2024 01:55:57 +0000 ROA not before: Tue 30 Apr 2024 01:55:57 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 110.163.6.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:41:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1838 (0x72e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 30 01:55:57 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=8D40FA9D505D9BDE61DBAD141958A027901F93D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:30:3d:52:e0:e5:41:8a:7a:8f:06:26:2f:1d: 90:1e:ef:5d:5b:82:23:ef:03:d5:d6:97:56:27:cd: b1:95:2a:64:13:27:0d:c0:c5:f7:69:ee:83:b5:82: 7d:bd:50:3d:4b:88:7e:8b:31:63:15:7d:d3:f2:a9: 2c:fc:c5:24:2d:8f:36:2e:05:3b:1c:cf:f0:53:b8: 9e:e9:1d:ba:16:a5:98:b4:4f:38:b6:2a:5d:c8:ae: bb:4e:4a:1d:c0:69:84:a9:1e:03:80:79:9d:d6:2d: 62:d3:d4:2a:ce:c7:ab:a5:8b:fa:d1:f0:36:00:59: bf:99:c1:23:17:2b:27:f7:2a:0b:17:14:ff:10:9a: 37:ab:7a:21:d7:b5:9f:94:29:ee:ed:85:57:1c:9b: fc:52:6e:8e:b7:e4:df:1a:03:b9:dc:1d:af:d6:79: cc:fb:0e:1e:5d:73:1b:ef:83:f4:b4:8e:9e:87:84: 4b:02:56:68:11:8d:4d:ba:a7:9b:79:81:a0:8f:fa: 40:8d:3a:53:a4:49:6f:85:e9:11:1e:a5:cc:ad:f6: d1:b3:e5:8b:69:c4:72:11:fb:cd:74:c5:fb:3a:7b: aa:07:66:dd:80:72:be:51:52:27:a2:de:3d:89:74: 2c:f2:84:ef:35:19:24:0e:7b:a7:b0:86:0d:4b:5b: 38:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:40:FA:9D:50:5D:9B:DE:61:DB:AD:14:19:58:A0:27:90:1F:93:D2 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/jUD6nVBdm95h260UGVigJ5Afk9I.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 110.163.6.0/23 Signature Algorithm: sha256WithRSAEncryption 64:f4:66:bc:47:d9:c8:b1:cb:ae:b8:56:37:41:61:5c:14:6c: aa:05:9a:43:7b:be:e2:43:97:47:22:a7:dd:66:7a:4a:01:e4: 2d:b1:9d:b8:44:76:a9:60:a0:93:25:fd:ee:a0:75:3b:f3:51: 3d:aa:9d:ef:00:a8:52:ba:b3:41:9b:ea:c9:d7:08:8f:b4:5c: 99:a4:a0:5f:b4:17:95:ea:05:08:4a:48:ea:c4:a4:1b:d9:06: c3:d7:3f:a6:24:61:97:96:f2:ab:46:1e:8b:68:eb:8d:a5:c3: ce:b8:f4:c4:1e:e2:b5:5f:fb:9d:7a:2c:4a:68:9f:2b:1b:20: 29:f1:0f:2f:f0:f4:2c:f1:7f:12:ce:47:0f:db:a2:57:ac:c9: 85:10:91:60:43:ac:10:4c:59:01:62:8d:64:63:60:04:4a:c2: 36:83:ca:e5:1b:5b:99:f3:86:ec:24:f7:2e:c4:4e:b1:ec:9c: 03:d5:f6:e0:4e:05:ea:d3:35:fc:e4:65:8a:d2:d6:ad:d9:31: 3e:6f:41:fd:b1:5d:67:41:c8:11:13:4c:6c:ce:c1:91:80:c3: bc:da:6b:cd:81:37:8d:31:12:da:82:ff:f4:bd:2e:a3:8e:7f: 9b:4c:d4:03:3f:14:5a:f7:04:00:42:ea:f8:b9:56:7e:cc:5d: 42:b8:6d:55 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBy4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw MTU1NTdaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDhENDBGQTlENTA1RDlC REU2MURCQUQxNDE5NThBMDI3OTAxRjkzRDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCjMD1S4OVBinqPBiYvHZAe711bgiPvA9XWl1YnzbGVKmQTJw3A xfdp7oO1gn29UD1LiH6LMWMVfdPyqSz8xSQtjzYuBTscz/BTuJ7pHboWpZi0Tzi2 Kl3IrrtOSh3AaYSpHgOAeZ3WLWLT1CrOx6uli/rR8DYAWb+ZwSMXKyf3KgsXFP8Q mjereiHXtZ+UKe7thVccm/xSbo635N8aA7ncHa/Wecz7Dh5dcxvvg/S0jp6HhEsC VmgRjU26p5t5gaCP+kCNOlOkSW+F6REepcyt9tGz5YtpxHIR+810xfs6e6oHZt2A cr5RUiei3j2JdCzyhO81GSQOe6ewhg1LWzjFAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUjUD6nVBdm95h260UGVigJ5Afk9IwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2pVRDZuVkJkbTk1aDI2MFVHVmlnSjVBZms5SS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFuowYwDQYJKoZIhvcNAQELBQADggEBAGT0ZrxH2cixy664VjdBYVwUbKoF mkN7vuJDl0cip91mekoB5C2xnbhEdqlgoJMl/e6gdTvzUT2qne8AqFK6s0Gb6snX CI+0XJmkoF+0F5XqBQhKSOrEpBvZBsPXP6YkYZeW8qtGHoto642lw8649MQe4rVf +516LEponysbICnxDy/w9CzxfxLORw/bolesyYUQkWBDrBBMWQFijWRjYARKwjaD yuUbW5nzhuwk9y7ETrHsnAPV9uBOBerTNfzkZYrS1q3ZMT5vQf2xXWdByBETTGzO wZGAw7zaa82BN40xEtqC//S9LqOOf5tM1AM/FFr3BABC6vi5Vn7MXUK4bVU= -----END CERTIFICATE-----Generated at Fri Nov 22 15:24:02 2024 by rpki-client on console-fra.rpki-client.org