$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/jtKz6ubqXmgGYkrGBWljI0LjfbQ.roa File: jtKz6ubqXmgGYkrGBWljI0LjfbQ.roa (raw, json) Hash identifier: LzWd7Uaf9t7fyooIxKlqfCjYL0Avkuxvqz4sJi8O36Y= Subject key identifier: 8E:D2:B3:EA:E6:EA:5E:68:06:62:4A:C6:05:69:63:23:42:E3:7D:B4 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 05EB Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/jtKz6ubqXmgGYkrGBWljI0LjfbQ.roa Signing time: Thu 29 Feb 2024 01:35:37 +0000 ROA not before: Thu 29 Feb 2024 01:35:37 +0000 ROA not after: Fri 14 Feb 2025 01:30:03 +0000 asID: 9605 IP address blocks: 1.75.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1515 (0x5eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Feb 29 01:35:37 2024 GMT Not After : Feb 14 01:30:03 2025 GMT Subject: CN=8ED2B3EAE6EA5E6806624AC60569632342E37DB4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:3e:f2:ac:1c:3f:c8:45:c5:e4:e1:99:66:0f: 17:41:a3:81:03:f5:33:58:52:6c:27:90:6a:79:69: 3c:1d:2f:4a:4e:5b:b2:d5:ae:a5:1b:ea:d2:7c:c5: cd:47:00:62:b8:8f:0e:ac:a5:6d:91:1c:aa:bd:30: 49:cc:60:6b:83:92:81:69:8d:05:97:63:2d:d5:5e: d6:fd:36:da:0c:54:a6:44:87:56:e8:4c:ae:23:ee: f8:c2:28:a4:46:1d:30:c4:38:4d:47:f9:be:25:07: 98:4b:7f:83:c1:7c:e1:25:23:25:4e:fc:d0:3f:14: 46:4f:ac:8a:32:08:ae:e2:09:0a:81:ca:76:6c:e4: 81:15:87:eb:bb:c4:98:6f:08:49:f5:0f:e8:78:4f: 2f:01:11:c0:f3:13:bc:0a:cc:7c:73:b1:c6:97:ad: 13:d9:39:30:e1:2b:b8:47:82:0d:fc:05:54:9b:70: 06:5e:80:74:be:1e:55:7d:ee:1f:f4:b0:72:41:75: a3:f2:48:b8:11:1f:b5:7b:64:49:73:ee:85:68:d6: a9:b9:26:e1:e2:1f:10:8e:a7:da:d6:aa:9e:42:9f: d2:6a:c5:8e:bc:66:46:5b:da:21:81:83:d7:df:60: b8:f8:68:37:59:ed:20:c0:57:04:66:7f:86:ba:b7: ae:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:D2:B3:EA:E6:EA:5E:68:06:62:4A:C6:05:69:63:23:42:E3:7D:B4 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/jtKz6ubqXmgGYkrGBWljI0LjfbQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.75.16.0/21 Signature Algorithm: sha256WithRSAEncryption 88:79:c6:1d:5c:a4:cb:dd:d8:4e:72:cf:66:0e:8c:9b:23:fd: cc:c8:56:11:80:7f:62:c1:74:ed:ec:ee:ab:18:fd:af:ec:5b: 14:72:eb:f3:76:71:6b:17:89:5e:83:05:90:ce:ac:b9:6c:f6: 87:00:4f:56:ea:f4:c1:d8:1e:ca:2b:35:11:f5:ed:ab:20:03: 52:e4:54:3a:50:ac:5e:81:0e:3f:b2:a7:a2:a0:6a:35:34:27: f9:3a:82:69:78:20:5a:14:b6:ec:a3:60:8c:a4:18:dd:72:42: 39:94:9f:4f:65:8d:af:ae:ec:ad:ff:bd:99:6a:7c:6b:58:b8: b3:00:5c:05:c5:38:cb:28:90:78:5d:0f:46:43:8b:16:95:02: bf:d1:d9:75:c7:a0:65:b4:88:9b:1d:5a:42:7f:a1:80:51:23: ba:fe:9f:36:13:cb:a0:53:6b:5e:c7:0b:c2:3a:f6:c0:b2:35: e3:77:6f:26:a5:b0:54:5b:ae:2c:fc:13:a9:63:d1:a1:2e:11: 68:47:52:bf:3d:07:03:2a:06:fe:20:97:89:9b:e2:4f:47:75: 48:d7:0c:dd:20:ee:ad:9d:a1:de:ec:23:a3:27:be:a7:d9:cc: 97:93:a9:fe:e8:a1:95:37:f8:32:40:6e:9b:95:9d:1b:e8:e8: a6:3f:69:32 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBeswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDAyMjkw MTM1MzdaFw0yNTAyMTQwMTMwMDNaMDMxMTAvBgNVBAMTKDhFRDJCM0VBRTZFQTVF NjgwNjYyNEFDNjA1Njk2MzIzNDJFMzdEQjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD0PvKsHD/IRcXk4ZlmDxdBo4ED9TNYUmwnkGp5aTwdL0pOW7LV rqUb6tJ8xc1HAGK4jw6spW2RHKq9MEnMYGuDkoFpjQWXYy3VXtb9NtoMVKZEh1bo TK4j7vjCKKRGHTDEOE1H+b4lB5hLf4PBfOElIyVO/NA/FEZPrIoyCK7iCQqBynZs 5IEVh+u7xJhvCEn1D+h4Ty8BEcDzE7wKzHxzscaXrRPZOTDhK7hHgg38BVSbcAZe gHS+HlV97h/0sHJBdaPySLgRH7V7ZElz7oVo1qm5JuHiHxCOp9rWqp5Cn9JqxY68 ZkZb2iGBg9ffYLj4aDdZ7SDAVwRmf4a6t67xAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUjtKz6ubqXmgGYkrGBWljI0LjfbQwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2p0S3o2dWJxWG1nR1lrckdCV2xqSTBMamZiUS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMBSxAwDQYJKoZIhvcNAQELBQADggEBAIh5xh1cpMvd2E5yz2YOjJsj/czI VhGAf2LBdO3s7qsY/a/sWxRy6/N2cWsXiV6DBZDOrLls9ocAT1bq9MHYHsorNRH1 7asgA1LkVDpQrF6BDj+yp6KgajU0J/k6gml4IFoUtuyjYIykGN1yQjmUn09lja+u 7K3/vZlqfGtYuLMAXAXFOMsokHhdD0ZDixaVAr/R2XXHoGW0iJsdWkJ/oYBRI7r+ nzYTy6BTa17HC8I69sCyNeN3byalsFRbriz8E6lj0aEuEWhHUr89BwMqBv4gl4mb 4k9HdUjXDN0g7q2dod7sI6MnvqfZzJeTqf7ooZU3+DJAbpuVnRvo6KY/aTI= -----END CERTIFICATE-----Generated at Sat Jun 1 13:38:48 2024 by rpki-client on console-fra.rpki-client.org