$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/nOs1X-XTlEvVYPl11GVs7OjDUuY.roa File: nOs1X-XTlEvVYPl11GVs7OjDUuY.roa (raw, json) Hash identifier: frMP9l5h+NBpPOonhwiXD3tvkmMR4JjG07j2mBzKhEo= Subject key identifier: 9C:EB:35:5F:E5:D3:94:4B:D5:60:F9:75:D4:65:6C:EC:E8:C3:52:E6 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0943 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/nOs1X-XTlEvVYPl11GVs7OjDUuY.roa Signing time: Sun 30 Jun 2024 01:29:31 +0000 ROA not before: Sun 30 Jun 2024 01:29:31 +0000 ROA not after: Tue 24 Jun 2025 10:46:45 +0000 asID: 9605 IP address blocks: 220.210.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:41:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2371 (0x943) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 30 01:29:31 2024 GMT Not After : Jun 24 10:46:45 2025 GMT Subject: CN=9CEB355FE5D3944BD560F975D4656CECE8C352E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:05:b4:0d:a5:10:fc:1c:65:75:d9:02:69:de: 62:2c:2b:df:37:35:11:36:e1:de:b8:25:30:2b:8c: 6a:8f:78:4f:6a:2a:b7:b5:3c:83:aa:bf:ea:bc:8c: ce:d3:9e:1e:0c:0c:cd:74:2e:4d:71:45:62:fa:45: b1:4b:a3:fd:06:71:a2:c9:c2:36:69:d5:1a:a8:bd: 43:46:6f:0e:ae:c4:b7:34:af:72:9e:11:b9:fa:15: 70:6c:29:9f:b3:73:d8:4e:3f:0b:46:ca:38:ad:53: a7:87:9e:23:0c:cf:9d:97:3f:8a:af:88:d9:0e:0d: 39:76:3e:e4:0a:12:be:4e:fa:3c:18:3d:cc:81:64: 88:e9:a0:a4:36:65:dc:4e:29:d5:43:93:5b:a0:0e: f7:b9:39:c8:4b:5b:46:32:01:f1:10:19:bd:a5:41: ee:61:d5:bd:2d:fd:da:54:df:cf:43:cc:c5:68:e2: f5:42:27:64:26:49:29:1f:af:ff:dd:06:e2:e2:a2: ca:2d:12:67:98:0f:02:19:cd:af:ac:b9:86:e3:15: 8d:e7:99:db:bc:59:ec:4e:88:87:2f:45:1e:c9:55: ce:1b:6f:08:35:ad:e0:0a:a6:7e:55:c8:37:a0:95: 4d:1e:87:b6:f9:c5:a2:e1:6b:23:62:f2:98:d9:f5: b0:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:EB:35:5F:E5:D3:94:4B:D5:60:F9:75:D4:65:6C:EC:E8:C3:52:E6 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/nOs1X-XTlEvVYPl11GVs7OjDUuY.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 220.210.8.0/21 Signature Algorithm: sha256WithRSAEncryption 0b:20:19:ce:88:b9:a1:b1:92:30:6d:f4:70:b3:03:0a:52:64: 04:63:87:82:b8:7d:63:93:13:2d:7e:3d:e6:44:29:f2:6e:a8: be:55:0d:50:4f:0e:29:dd:94:5a:ab:ed:75:01:00:c4:78:6b: ce:39:e6:fb:94:97:03:f7:35:76:c2:ce:d7:9c:37:97:44:e0: ce:d5:b5:13:31:bd:b9:55:d4:1c:ba:5f:1a:91:ae:c8:a6:ea: 0a:c8:0e:7c:74:33:6f:e2:fa:38:45:ab:69:7a:02:5c:68:cf: 47:7a:6f:1f:c5:7f:75:48:ff:57:24:a4:52:4b:07:04:f1:da: 8b:09:b5:e7:d3:08:d0:79:ac:f4:5c:35:7a:83:e2:d3:08:b0: 47:5e:9d:c4:b9:66:c9:d1:0d:96:f7:0b:5c:4e:9a:b9:da:a5: 33:67:15:9c:ce:e9:dd:7c:99:3f:17:2b:ff:ae:84:16:1c:c0: 25:be:dc:4e:05:1b:8c:a5:8b:9e:64:a1:cb:b3:76:b6:9d:53: ff:e8:e7:a5:7f:77:c3:44:95:da:c9:af:9d:b7:85:53:5f:78: b7:99:dd:9a:e4:38:e1:71:23:37:37:8e:26:37:b6:b3:9f:fb: 57:1f:a4:4f:73:a4:c5:3c:13:14:44:85:8f:d7:35:36:71:e8: 6a:87:46:8c -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCUMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA2MzAw MTI5MzFaFw0yNTA2MjQxMDQ2NDVaMDMxMTAvBgNVBAMTKDlDRUIzNTVGRTVEMzk0 NEJENTYwRjk3NUQ0NjU2Q0VDRThDMzUyRTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDJBbQNpRD8HGV12QJp3mIsK983NRE24d64JTArjGqPeE9qKre1 PIOqv+q8jM7Tnh4MDM10Lk1xRWL6RbFLo/0GcaLJwjZp1RqovUNGbw6uxLc0r3Ke Ebn6FXBsKZ+zc9hOPwtGyjitU6eHniMMz52XP4qviNkODTl2PuQKEr5O+jwYPcyB ZIjpoKQ2ZdxOKdVDk1ugDve5OchLW0YyAfEQGb2lQe5h1b0t/dpU389DzMVo4vVC J2QmSSkfr//dBuLiosotEmeYDwIZza+suYbjFY3nmdu8WexOiIcvRR7JVc4bbwg1 reAKpn5VyDeglU0eh7b5xaLhayNi8pjZ9bBLAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUnOs1X+XTlEvVYPl11GVs7OjDUuYwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L25PczFYLVhUbEV2VllQbDExR1ZzN09qRFV1WS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAPc0ggwDQYJKoZIhvcNAQELBQADggEBAAsgGc6IuaGxkjBt9HCzAwpSZARj h4K4fWOTEy1+PeZEKfJuqL5VDVBPDindlFqr7XUBAMR4a8455vuUlwP3NXbCztec N5dE4M7VtRMxvblV1By6XxqRrsim6grIDnx0M2/i+jhFq2l6Alxoz0d6bx/Ff3VI /1ckpFJLBwTx2osJtefTCNB5rPRcNXqD4tMIsEdencS5ZsnRDZb3C1xOmrnapTNn FZzO6d18mT8XK/+uhBYcwCW+3E4FG4yli55kocuzdradU//o56V/d8NEldrJr523 hVNfeLeZ3ZrkOOFxIzc3jiY3trOf+1cfpE9zpMU8ExREhY/XNTZx6GqHRow= -----END CERTIFICATE-----Generated at Fri Nov 22 15:24:02 2024 by rpki-client on console-fra.rpki-client.org