$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/n8sjMUpNFT7JOi2EegkBKdd3GDQ.roa File: n8sjMUpNFT7JOi2EegkBKdd3GDQ.roa (raw, json) Hash identifier: YBvsqv8DkFhwuZ/kSPojS3h75Qkvt1kA1Mr3OxAcRU8= Subject key identifier: 9F:CB:23:31:4A:4D:15:3E:C9:3A:2D:84:7A:09:01:29:D7:77:18:34 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 062C Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/n8sjMUpNFT7JOi2EegkBKdd3GDQ.roa Signing time: Thu 29 Feb 2024 01:41:04 +0000 ROA not before: Thu 29 Feb 2024 01:41:04 +0000 ROA not after: Fri 14 Feb 2025 01:30:03 +0000 asID: 9605 IP address blocks: 1.66.104.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1580 (0x62c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Feb 29 01:41:04 2024 GMT Not After : Feb 14 01:30:03 2025 GMT Subject: CN=9FCB23314A4D153EC93A2D847A090129D7771834 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:38:dc:62:fc:00:13:98:cd:fb:31:cc:19:68: 85:66:6d:e3:34:90:04:03:c9:ab:f5:86:21:91:4f: ec:60:a6:08:d6:80:01:8d:41:5c:8f:c7:0f:96:ca: a8:23:32:74:bb:88:95:ac:23:25:90:a6:d2:b9:be: 39:1a:ad:5d:1a:35:ed:35:b8:12:57:63:71:54:50: ef:12:82:56:63:e2:7e:40:b4:e3:b9:73:fb:45:cd: 9e:99:6f:62:81:56:15:e3:23:33:67:8c:68:82:63: 1b:c4:cf:6a:55:ac:a2:0c:ae:18:73:0c:c2:c6:5d: a1:72:7a:8c:9e:f4:73:d5:11:b5:f8:92:96:e5:fc: 2f:20:5f:2c:ae:36:86:e0:02:bd:da:d8:7e:74:8b: 13:57:ae:1b:78:73:4d:32:5f:b2:1b:48:e4:95:d0: b3:0d:ff:88:4c:d1:b5:8c:39:6b:13:46:9f:15:5a: eb:14:e0:15:06:e8:15:de:84:81:d0:6f:7e:79:07: 81:d4:d9:47:94:03:1a:04:2f:15:a5:57:df:84:7f: 67:66:c9:a9:16:94:d1:98:05:15:7b:e8:c8:b6:75: 1e:59:22:a2:eb:80:ba:8c:79:a6:f9:3a:5e:4b:93: 7e:54:5f:91:24:1d:50:6f:01:c3:ff:e0:ec:65:4e: 51:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:CB:23:31:4A:4D:15:3E:C9:3A:2D:84:7A:09:01:29:D7:77:18:34 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/n8sjMUpNFT7JOi2EegkBKdd3GDQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.66.104.0/23 Signature Algorithm: sha256WithRSAEncryption 14:af:48:37:85:78:20:fd:30:5a:2a:76:1e:92:35:2c:50:4b: 89:55:9b:73:9a:7a:6f:06:f9:3b:51:16:c5:d4:f2:33:5b:f8: af:39:e5:71:9d:18:1d:e7:8e:fa:dc:a1:16:ff:bf:ed:fa:93: 38:65:0c:08:b9:d1:9f:6a:bd:04:19:f4:52:4f:47:de:d7:ec: 0a:66:92:6a:00:6c:5c:e0:d6:4e:66:29:05:7b:ad:31:f7:89: 43:28:bb:34:83:7d:ba:65:af:e3:09:9f:d2:49:87:9f:32:de: 88:ed:9a:0b:09:0b:83:4a:ed:e1:ed:27:08:b3:02:43:b6:d6: 30:57:4c:b8:ff:20:b6:45:11:19:9e:a2:59:1a:1b:dd:a7:ab: 28:d3:74:c8:6c:8f:b5:06:2e:6a:01:df:f8:99:15:4b:81:7d: ef:4f:0a:52:dd:14:c1:62:60:ee:0a:f1:63:f6:9b:b3:ac:a2: e8:9a:03:e5:1c:d3:d3:97:f0:56:34:c5:52:fa:10:2d:64:31: d0:f8:9b:68:d3:15:52:2f:6f:2d:4d:19:c9:d7:15:a9:8f:a1: 6b:b2:6b:05:0b:48:be:aa:cf:10:bb:bf:f3:80:7b:cd:c1:9c: b7:b2:9d:c6:16:f7:e5:8e:19:61:75:4b:c5:07:3e:07:b2:50: 72:14:5b:ea -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBiwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDAyMjkw MTQxMDRaFw0yNTAyMTQwMTMwMDNaMDMxMTAvBgNVBAMTKDlGQ0IyMzMxNEE0RDE1 M0VDOTNBMkQ4NDdBMDkwMTI5RDc3NzE4MzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCnONxi/AATmM37McwZaIVmbeM0kAQDyav1hiGRT+xgpgjWgAGN QVyPxw+WyqgjMnS7iJWsIyWQptK5vjkarV0aNe01uBJXY3FUUO8SglZj4n5AtOO5 c/tFzZ6Zb2KBVhXjIzNnjGiCYxvEz2pVrKIMrhhzDMLGXaFyeoye9HPVEbX4kpbl /C8gXyyuNobgAr3a2H50ixNXrht4c00yX7IbSOSV0LMN/4hM0bWMOWsTRp8VWusU 4BUG6BXehIHQb355B4HU2UeUAxoELxWlV9+Ef2dmyakWlNGYBRV76Mi2dR5ZIqLr gLqMeab5Ol5Lk35UX5EkHVBvAcP/4OxlTlHxAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUn8sjMUpNFT7JOi2EegkBKdd3GDQwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L244c2pNVXBORlQ3Sk9pMkVlZ2tCS2RkM0dEUS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEBQmgwDQYJKoZIhvcNAQELBQADggEBABSvSDeFeCD9MFoqdh6SNSxQS4lV m3Oaem8G+TtRFsXU8jNb+K855XGdGB3njvrcoRb/v+36kzhlDAi50Z9qvQQZ9FJP R97X7ApmkmoAbFzg1k5mKQV7rTH3iUMouzSDfbplr+MJn9JJh58y3ojtmgsJC4NK 7eHtJwizAkO21jBXTLj/ILZFERmeolkaG92nqyjTdMhsj7UGLmoB3/iZFUuBfe9P ClLdFMFiYO4K8WP2m7OsouiaA+Uc09OX8FY0xVL6EC1kMdD4m2jTFVIvby1NGcnX FamPoWuyawULSL6qzxC7v/OAe83BnLeyncYW9+WOGWF1S8UHPgeyUHIUW+o= -----END CERTIFICATE-----Generated at Sat Jun 1 13:38:48 2024 by rpki-client on console-fra.rpki-client.org