$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/p9e14dirUZhuwPMKbLsntOi1CBg.roa File: p9e14dirUZhuwPMKbLsntOi1CBg.roa (raw, json) Hash identifier: xnWON/Omug7Z9osoUrz1IV5PdenEn1h8qS9YH0nj/wk= Subject key identifier: A7:D7:B5:E1:D8:AB:51:98:6E:C0:F3:0A:6C:BB:27:B4:E8:B5:08:18 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0A32 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/p9e14dirUZhuwPMKbLsntOi1CBg.roa Signing time: Sun 30 Jun 2024 01:46:33 +0000 ROA not before: Sun 30 Jun 2024 01:46:33 +0000 ROA not after: Tue 24 Jun 2025 10:46:45 +0000 asID: 9605 IP address blocks: 219.114.190.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 22:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2610 (0xa32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 30 01:46:33 2024 GMT Not After : Jun 24 10:46:45 2025 GMT Subject: CN=A7D7B5E1D8AB51986EC0F30A6CBB27B4E8B50818 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:60:90:d9:c9:73:79:6c:bb:bc:ba:96:8f:ad: 5b:3f:6f:21:9b:a2:92:5e:2d:d3:a2:bf:83:6f:c0: 8a:2b:f8:1a:09:12:20:42:11:1c:bd:5f:89:06:67: db:fb:67:25:a7:e4:48:e0:b2:d7:89:15:d8:d9:cd: d3:41:14:72:b2:40:a3:8d:3d:e9:00:77:08:46:92: c5:84:89:ae:6b:12:56:70:69:9b:86:fe:42:f2:16: e2:2e:ae:7a:ce:9f:f9:d4:00:d2:5a:f4:f4:84:71: db:55:a1:41:10:c5:85:d7:03:d8:65:56:91:eb:b5: 47:5a:a4:bf:de:27:d7:7b:d3:a5:c9:8e:26:ee:a7: 3a:38:d6:48:c2:4f:1d:85:ac:d3:d3:d7:af:b6:30: 4c:01:51:da:6b:0f:2e:57:cd:20:a6:df:ec:16:1e: 80:0d:cf:b5:5c:60:c9:92:37:e6:b2:44:f4:c5:3d: 9f:8e:86:4c:e5:fd:fd:5b:b4:df:7e:04:51:58:4b: dd:51:34:5f:03:79:15:7d:8e:1f:b7:01:ab:9e:a2: a4:7e:2b:1c:17:cb:ca:21:4f:32:ef:7f:81:49:8d: 35:47:ab:0a:b4:33:04:9f:21:8f:3d:1b:90:4a:82: ef:42:f2:9b:82:cb:2b:d4:8e:53:df:6c:e4:bb:2f: 7e:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:D7:B5:E1:D8:AB:51:98:6E:C0:F3:0A:6C:BB:27:B4:E8:B5:08:18 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/p9e14dirUZhuwPMKbLsntOi1CBg.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 219.114.190.0/23 Signature Algorithm: sha256WithRSAEncryption d3:90:5e:48:7c:cc:12:d9:95:b6:49:a6:68:c5:ab:d9:41:76: 2c:c9:38:70:98:d0:14:b2:cc:8c:ed:20:d9:85:06:7f:c3:56: 6a:6f:5d:f0:17:52:75:f5:7f:fa:2b:a7:98:eb:72:98:e6:4e: d5:c2:90:95:27:24:31:00:1c:6d:a6:18:de:96:a3:ca:6b:47: 05:50:95:10:e6:25:1f:bc:c9:32:cb:77:fe:7d:15:1d:e3:34: a6:17:aa:eb:1f:ad:23:20:09:23:7a:36:5d:3c:9d:fc:1e:2d: d8:c2:db:02:a4:f2:14:9f:d7:2e:0a:b9:1c:59:5f:f0:bf:af: f9:00:e5:df:1a:f7:ec:fc:e1:71:4c:45:df:71:a9:88:f8:31: c5:53:4d:3b:35:f3:88:26:5e:d8:ee:ad:f8:a1:be:e9:6d:f6: 86:0b:37:3b:93:9d:4e:84:36:b8:70:61:ae:74:dd:f8:52:43: de:a5:11:7f:1d:e9:67:48:8d:a8:6d:2a:02:13:ab:0e:e5:14: 1b:f8:c4:18:28:b9:cc:b6:ef:89:8d:87:9e:09:2c:bf:95:27: 5f:08:3f:29:1e:eb:ff:45:dd:f5:1a:cf:31:a4:61:2e:5c:aa: 44:4f:3a:36:17:f1:ec:e4:7b:47:82:d4:32:3a:f7:08:a0:c6: 27:a3:57:e6 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCjIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA2MzAw MTQ2MzNaFw0yNTA2MjQxMDQ2NDVaMDMxMTAvBgNVBAMTKEE3RDdCNUUxRDhBQjUx OTg2RUMwRjMwQTZDQkIyN0I0RThCNTA4MTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCsYJDZyXN5bLu8upaPrVs/byGbopJeLdOiv4NvwIor+BoJEiBC ERy9X4kGZ9v7ZyWn5EjgsteJFdjZzdNBFHKyQKONPekAdwhGksWEia5rElZwaZuG /kLyFuIurnrOn/nUANJa9PSEcdtVoUEQxYXXA9hlVpHrtUdapL/eJ9d706XJjibu pzo41kjCTx2FrNPT16+2MEwBUdprDy5XzSCm3+wWHoANz7VcYMmSN+ayRPTFPZ+O hkzl/f1btN9+BFFYS91RNF8DeRV9jh+3AaueoqR+KxwXy8ohTzLvf4FJjTVHqwq0 MwSfIY89G5BKgu9C8puCyyvUjlPfbOS7L34xAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUp9e14dirUZhuwPMKbLsntOi1CBgwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3A5ZTE0ZGlyVVpodXdQTUtiTHNudE9pMUNCZy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAHbcr4wDQYJKoZIhvcNAQELBQADggEBANOQXkh8zBLZlbZJpmjFq9lBdizJ OHCY0BSyzIztINmFBn/DVmpvXfAXUnX1f/orp5jrcpjmTtXCkJUnJDEAHG2mGN6W o8prRwVQlRDmJR+8yTLLd/59FR3jNKYXqusfrSMgCSN6Nl08nfweLdjC2wKk8hSf 1y4KuRxZX/C/r/kA5d8a9+z84XFMRd9xqYj4McVTTTs184gmXtjurfihvult9oYL NzuTnU6ENrhwYa503fhSQ96lEX8d6WdIjahtKgITqw7lFBv4xBgoucy274mNh54J LL+VJ18IPyke6/9F3fUazzGkYS5cqkRPOjYX8ezke0eC1DI69wigxiejV+Y= -----END CERTIFICATE-----Generated at Mon Nov 25 23:59:12 2024 by rpki-client on console-fra.rpki-client.org