$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/n9n-Hr2533U-u-rlefVizOQYK3M.roa File: n9n-Hr2533U-u-rlefVizOQYK3M.roa (raw, json) Hash identifier: dFJlt1a6k7s+Kfm9HCWpCN0yPcNj33Zg6pmzbMI2KXc= Subject key identifier: 9F:D9:FE:1E:BD:B9:DF:75:3E:BB:EA:E5:79:F5:62:CC:E4:18:2B:73 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 067B Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/n9n-Hr2533U-u-rlefVizOQYK3M.roa Signing time: Tue 30 Apr 2024 01:38:00 +0000 ROA not before: Tue 30 Apr 2024 01:38:00 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 1.67.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:41:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1659 (0x67b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 30 01:38:00 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=9FD9FE1EBDB9DF753EBBEAE579F562CCE4182B73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:73:da:84:42:aa:84:e3:5c:10:7a:e9:b2:76: 12:d7:8c:e9:ab:b3:a5:b4:0c:85:18:6e:5c:8d:f7: 55:91:58:d9:59:64:02:18:79:a4:1a:9d:31:60:03: 37:d7:fa:01:83:37:30:c0:6f:a5:c8:f2:80:ed:ab: db:fb:2b:1c:be:ab:44:4e:47:bf:68:e2:fa:00:45: 5d:44:c9:43:de:26:cd:8f:13:ae:e4:ed:13:f8:26: 2b:8d:a9:69:36:f2:78:9a:25:03:88:1b:8e:3b:1f: f3:ba:5e:4e:13:5a:96:47:5e:8a:25:45:03:98:36: bc:36:ed:08:68:f9:95:cd:8b:8d:74:91:10:31:91: 2f:b3:1a:da:12:84:8c:d1:bb:9f:e1:d2:cc:f6:88: da:e8:0e:68:69:de:52:58:c4:17:69:98:56:27:af: ca:89:a6:0d:05:25:47:e7:bf:b2:f6:50:b0:bf:cc: aa:41:9e:04:8e:90:89:d1:ac:03:b2:65:de:9b:05: 52:fd:9e:dc:95:a0:78:3c:63:0a:96:ea:c4:32:db: 55:8e:f7:b3:f1:db:be:7c:29:21:8e:14:e9:09:f4: 1a:ac:50:d2:f0:5e:63:af:77:ae:b9:6c:54:80:e0: 50:b1:88:f6:5b:46:4b:28:1f:77:9e:fe:7d:53:5f: d4:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:D9:FE:1E:BD:B9:DF:75:3E:BB:EA:E5:79:F5:62:CC:E4:18:2B:73 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/n9n-Hr2533U-u-rlefVizOQYK3M.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.67.224.0/21 Signature Algorithm: sha256WithRSAEncryption a4:cb:bd:e2:f4:7b:29:74:1f:d4:07:83:11:2f:84:dc:e1:eb: 47:ab:a6:82:af:f0:fa:c1:87:58:f7:be:28:ed:8e:e4:23:cc: a6:b3:b4:ad:1f:4e:77:94:f8:17:b9:cb:8e:0d:4b:de:bf:32: c4:59:75:41:5f:93:8d:8b:c2:4c:0e:79:8f:ed:ef:96:d0:01: 7f:20:7c:96:c9:e4:c5:c0:9d:63:3b:1d:98:70:01:7c:d0:d5: b1:82:82:a0:ee:f4:44:24:5d:d3:0f:41:fb:97:c5:7f:2d:15: 12:04:d6:93:54:56:75:bd:b4:0a:0f:4f:96:60:bf:93:6f:66: 8c:28:06:84:ef:ad:3b:df:26:22:90:36:30:15:11:14:05:ba: cc:63:cf:83:71:24:80:68:05:79:e7:7a:94:85:1e:d6:73:03: dd:33:13:6e:6b:f6:65:39:61:b8:90:9b:ff:db:21:79:11:9f: 05:ce:a7:0c:fa:ae:83:91:7c:39:ee:c6:b1:ce:6b:b9:73:37: 26:d9:47:e2:14:0c:e5:a7:7b:9c:27:e4:cf:a5:f2:5b:72:1c: 17:ff:b3:8b:1e:74:5c:81:67:be:ff:98:74:e2:38:9f:e2:07: a2:7b:58:f2:ed:06:96:be:00:c7:7d:64:26:1c:1a:d8:1f:89: d2:67:94:90 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBnswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw MTM4MDBaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDlGRDlGRTFFQkRCOURG NzUzRUJCRUFFNTc5RjU2MkNDRTQxODJCNzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDIc9qEQqqE41wQeumydhLXjOmrs6W0DIUYblyN91WRWNlZZAIY eaQanTFgAzfX+gGDNzDAb6XI8oDtq9v7Kxy+q0ROR79o4voARV1EyUPeJs2PE67k 7RP4JiuNqWk28niaJQOIG447H/O6Xk4TWpZHXoolRQOYNrw27Qho+ZXNi410kRAx kS+zGtoShIzRu5/h0sz2iNroDmhp3lJYxBdpmFYnr8qJpg0FJUfnv7L2ULC/zKpB ngSOkInRrAOyZd6bBVL9ntyVoHg8YwqW6sQy21WO97Px2758KSGOFOkJ9BqsUNLw XmOvd665bFSA4FCxiPZbRksoH3ee/n1TX9RxAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUn9n+Hr2533U+u+rlefVizOQYK3MwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L245bi1IcjI1MzNVLXUtcmxlZlZpek9RWUszTS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMBQ+AwDQYJKoZIhvcNAQELBQADggEBAKTLveL0eyl0H9QHgxEvhNzh60er poKv8PrBh1j3vijtjuQjzKaztK0fTneU+Be5y44NS96/MsRZdUFfk42LwkwOeY/t 75bQAX8gfJbJ5MXAnWM7HZhwAXzQ1bGCgqDu9EQkXdMPQfuXxX8tFRIE1pNUVnW9 tAoPT5Zgv5NvZowoBoTvrTvfJiKQNjAVERQFusxjz4NxJIBoBXnnepSFHtZzA90z E25r9mU5YbiQm//bIXkRnwXOpwz6roORfDnuxrHOa7lzNybZR+IUDOWne5wn5M+l 8ltyHBf/s4sedFyBZ77/mHTiOJ/iB6J7WPLtBpa+AMd9ZCYcGtgfidJnlJA= -----END CERTIFICATE-----Generated at Fri Nov 22 15:24:02 2024 by rpki-client on console-fra.rpki-client.org