$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/qW4oLqcUPvFNEcG1HKUFT0ucNQs.roa File: qW4oLqcUPvFNEcG1HKUFT0ucNQs.roa (raw, json) Hash identifier: G2/6UKXJCcUbAeFjRLYpoEGP0xRaevHHsKM/Df6p1so= Subject key identifier: A9:6E:28:2E:A7:14:3E:F1:4D:11:C1:B5:1C:A5:05:4F:4B:9C:35:0B Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 078D Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/qW4oLqcUPvFNEcG1HKUFT0ucNQs.roa Signing time: Tue 30 Apr 2024 02:04:45 +0000 ROA not before: Tue 30 Apr 2024 02:04:45 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 1.79.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1933 (0x78d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 30 02:04:45 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=A96E282EA7143EF14D11C1B51CA5054F4B9C350B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:af:e3:06:4b:bc:c8:a2:58:d2:df:cd:c5:75: 80:5f:3d:57:71:97:f1:2e:9b:2a:e2:dd:83:e1:50: bd:41:21:7b:60:3d:b8:7d:e3:5c:aa:27:9f:48:2d: 49:d8:1d:08:f3:79:98:27:75:5f:ad:cd:f3:62:8b: 34:25:c5:91:f5:ce:1f:6d:e8:ff:9b:f3:f4:82:fd: 99:c5:65:20:95:29:0e:c0:c5:37:88:14:4b:1d:30: 19:de:53:ca:54:a7:9b:ed:33:36:54:c5:07:20:a7: 24:6a:ac:b0:0b:d8:cf:86:2e:78:0d:44:74:3b:c9: cb:db:6c:ae:0c:75:18:d4:cf:b5:96:be:b8:5a:34: 8a:17:ec:77:7f:bf:a4:4d:9d:40:97:f5:8d:ba:0e: 57:98:f1:20:4e:ad:33:a4:3b:9c:cc:20:0b:f9:88: 3c:2f:ac:a7:6c:d1:b8:a4:6c:c9:8f:c6:91:73:8f: 02:41:a7:3d:eb:a0:b4:ee:22:ad:c3:31:1d:39:e4: ad:51:5b:61:ea:9f:b3:63:02:f4:e5:f1:40:33:d5: f8:19:03:de:62:f1:a8:b1:c8:86:90:0e:03:27:bf: 0b:84:fd:37:02:8f:09:af:34:31:d3:48:46:e0:89: b5:e0:cd:94:18:bb:42:a2:68:ce:1a:f4:f5:b9:3c: 8c:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:6E:28:2E:A7:14:3E:F1:4D:11:C1:B5:1C:A5:05:4F:4B:9C:35:0B X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/qW4oLqcUPvFNEcG1HKUFT0ucNQs.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.79.10.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:be:63:7a:66:b7:ff:05:07:b9:ac:94:b7:74:a3:1e:54:4a: b8:90:d5:7b:29:6b:0c:48:1d:c9:df:b8:f4:29:76:3a:1d:a2: 20:7d:d3:34:3f:49:e5:1b:98:0f:05:96:df:a6:5e:73:0d:4f: 8a:4f:aa:98:b4:27:30:e8:e4:7a:36:6b:0e:75:50:9d:5a:b9: ee:d8:70:5d:c3:ec:5f:b4:f7:e0:61:db:aa:8a:ad:cf:67:eb: b1:01:84:3a:1a:66:57:4e:c2:f4:6d:4f:fa:a8:ab:0d:ea:1e: cd:bc:d6:c2:2a:23:c8:4f:e2:0c:df:5f:e6:30:c3:1b:0e:db: 45:9d:8f:7f:27:8e:dc:d1:95:0b:ee:86:bd:92:c5:90:4e:7d: e8:fc:f3:41:5b:a7:59:b2:c0:9b:19:ad:3a:e0:7b:1a:0f:47: 63:09:6f:a1:32:14:e4:b6:2c:eb:d1:b6:76:57:dc:f0:63:38: d5:e7:4b:bc:37:a7:e7:9e:c2:c1:8b:fd:c9:f0:b7:73:3f:4b: 9e:33:65:b5:08:44:89:b5:ae:d3:d3:96:10:9e:7d:eb:ff:eb: c9:11:2a:29:67:eb:2c:94:6e:3c:03:d4:da:22:56:57:db:41: 80:02:96:90:e6:e0:64:84:0e:df:e1:af:59:fe:f1:1d:29:a0: 39:d0:a2:1e -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICB40wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw MjA0NDVaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEE5NkUyODJFQTcxNDNF RjE0RDExQzFCNTFDQTUwNTRGNEI5QzM1MEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDFr+MGS7zIoljS383FdYBfPVdxl/Eumyri3YPhUL1BIXtgPbh9 41yqJ59ILUnYHQjzeZgndV+tzfNiizQlxZH1zh9t6P+b8/SC/ZnFZSCVKQ7AxTeI FEsdMBneU8pUp5vtMzZUxQcgpyRqrLAL2M+GLngNRHQ7ycvbbK4MdRjUz7WWvrha NIoX7Hd/v6RNnUCX9Y26DleY8SBOrTOkO5zMIAv5iDwvrKds0bikbMmPxpFzjwJB pz3roLTuIq3DMR055K1RW2Hqn7NjAvTl8UAz1fgZA95i8aixyIaQDgMnvwuE/TcC jwmvNDHTSEbgibXgzZQYu0KiaM4a9PW5PIyvAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUqW4oLqcUPvFNEcG1HKUFT0ucNQswHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3FXNG9McWNVUHZGTkVjRzFIS1VGVDB1Y05Rcy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAABTwowDQYJKoZIhvcNAQELBQADggEBAA++Y3pmt/8FB7mslLd0ox5USriQ 1XspawxIHcnfuPQpdjodoiB90zQ/SeUbmA8Flt+mXnMNT4pPqpi0JzDo5Ho2aw51 UJ1aue7YcF3D7F+09+Bh26qKrc9n67EBhDoaZldOwvRtT/qoqw3qHs281sIqI8hP 4gzfX+YwwxsO20Wdj38njtzRlQvuhr2SxZBOfej880Fbp1mywJsZrTrgexoPR2MJ b6EyFOS2LOvRtnZX3PBjONXnS7w3p+eewsGL/cnwt3M/S54zZbUIRIm1rtPTlhCe fev/68kRKiln6yyUbjwD1NoiVlfbQYAClpDm4GSEDt/hr1n+8R0poDnQoh4= -----END CERTIFICATE-----Generated at Sat Jun 1 13:38:48 2024 by rpki-client on console-fra.rpki-client.org