$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ryTHB3GdCDde6HjTkuavYFL78kM.roa File: ryTHB3GdCDde6HjTkuavYFL78kM.roa (raw, json) Hash identifier: ThefPI1Qc3+vnBAqR+AyzdZVgEj8n3PIwW8v+ORLIn8= Subject key identifier: AF:24:C7:07:71:9D:08:37:5E:E8:78:D3:92:E6:AF:60:52:FB:F2:43 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 017E Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ryTHB3GdCDde6HjTkuavYFL78kM.roa Signing time: Wed 24 May 2023 16:33:24 +0000 ROA not before: Wed 24 May 2023 16:33:24 +0000 ROA not after: Tue 14 May 2024 01:30:02 +0000 asID: 9605 IP address blocks: 1.79.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 May 2024 13:36:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 382 (0x17e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: May 24 16:33:24 2023 GMT Not After : May 14 01:30:02 2024 GMT Subject: CN=AF24C707719D08375EE878D392E6AF6052FBF243 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:8c:3e:b6:de:b3:49:91:fe:45:18:f7:06:da: 65:e0:41:29:22:4b:21:03:79:bc:41:56:f7:d5:b4: 7c:24:ce:1a:bf:de:99:21:65:ce:6c:0b:27:4e:2d: f2:b1:9b:57:16:2c:08:0c:56:fd:d0:56:bd:8e:6c: 3f:ca:83:87:0d:b6:42:93:29:cd:b2:f2:4c:0d:39: d2:12:1f:5c:9f:9f:b1:d2:5f:b7:41:4d:cd:6b:dc: 18:5e:2c:2a:69:a0:b8:5a:b3:39:e1:00:a9:ac:75: 86:eb:1c:86:ad:60:18:4d:33:4e:d6:f7:81:4d:8b: b4:97:f7:35:6b:ca:32:39:5b:dc:f9:4e:01:36:3c: 66:c1:ca:38:88:ab:fe:50:d3:31:3b:2a:9c:1a:0b: 6d:46:87:1d:d7:6c:4e:76:8a:33:a2:0a:57:fb:0b: fe:db:e6:4b:61:05:97:29:d3:26:e9:3c:e5:ec:5f: 5d:e2:7a:c2:f0:92:a9:db:bd:db:b9:43:3e:d8:0b: e2:ae:8d:50:8d:f2:8e:3f:ab:79:79:2c:20:64:7b: 51:91:d3:8c:f8:39:6f:93:d5:23:97:17:e0:9f:ef: 83:1d:f5:49:41:b5:59:fc:c0:30:b6:66:83:05:d6: 2c:18:db:34:ee:b2:34:65:5b:5a:72:ed:c1:a2:8c: 1c:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:24:C7:07:71:9D:08:37:5E:E8:78:D3:92:E6:AF:60:52:FB:F2:43 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ryTHB3GdCDde6HjTkuavYFL78kM.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.79.67.0/24 Signature Algorithm: sha256WithRSAEncryption de:73:7e:09:2e:af:3b:9d:87:13:fe:84:9a:71:24:ec:72:7c: de:dc:ec:97:81:e5:ee:a0:36:5b:78:bc:4d:67:65:f5:31:5d: d1:09:4c:6f:1f:cc:33:ef:a9:48:e1:a5:99:a9:4d:8b:49:c2: a8:6f:ce:5a:15:9f:cc:f4:8f:41:1d:a0:71:a8:af:87:58:cc: 43:5d:c0:e6:63:90:79:8e:9a:7b:7c:4b:ed:f6:5b:6e:4d:65: cd:a4:d2:5b:d8:f0:77:da:7e:f7:da:9a:b1:cf:63:c2:d3:7b: 05:06:0a:4e:ee:36:1c:21:f4:04:be:a3:dc:f8:14:be:91:62: 14:a5:bd:88:57:85:91:2f:49:df:55:31:97:8a:22:06:61:a4: 8d:11:73:f7:d6:27:83:b6:62:6b:c7:80:45:67:f5:6e:ca:e2: 13:c9:a5:02:fd:1a:e2:07:34:54:2c:4a:94:d5:d2:57:ab:1b: ad:ab:da:95:e9:5d:58:2c:7d:e2:94:39:aa:13:19:cc:24:74: b1:da:24:a7:6b:07:8f:c7:59:3f:bc:75:da:18:d3:51:92:3a: 51:5b:48:d6:b8:41:9e:e5:71:95:f2:10:33:a2:41:11:49:32: 0b:35:ba:55:0e:ba:86:05:90:20:c6:e5:ce:a1:d9:05:d1:18: 05:8e:9b:92 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAX4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA1MjQx NjMzMjRaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKEFGMjRDNzA3NzE5RDA4 Mzc1RUU4NzhEMzkyRTZBRjYwNTJGQkYyNDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDmjD623rNJkf5FGPcG2mXgQSkiSyEDebxBVvfVtHwkzhq/3pkh Zc5sCydOLfKxm1cWLAgMVv3QVr2ObD/Kg4cNtkKTKc2y8kwNOdISH1yfn7HSX7dB Tc1r3BheLCppoLhasznhAKmsdYbrHIatYBhNM07W94FNi7SX9zVryjI5W9z5TgE2 PGbByjiIq/5Q0zE7KpwaC21Ghx3XbE52ijOiClf7C/7b5kthBZcp0ybpPOXsX13i esLwkqnbvdu5Qz7YC+KujVCN8o4/q3l5LCBke1GR04z4OW+T1SOXF+Cf74Md9UlB tVn8wDC2ZoMF1iwY2zTusjRlW1py7cGijBznAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUryTHB3GdCDde6HjTkuavYFL78kMwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3J5VEhCM0dkQ0RkZTZIalRrdWF2WUZMNzhrTS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAABT0MwDQYJKoZIhvcNAQELBQADggEBAN5zfgkurzudhxP+hJpxJOxyfN7c 7JeB5e6gNlt4vE1nZfUxXdEJTG8fzDPvqUjhpZmpTYtJwqhvzloVn8z0j0EdoHGo r4dYzENdwOZjkHmOmnt8S+32W25NZc2k0lvY8HfafvfamrHPY8LTewUGCk7uNhwh 9AS+o9z4FL6RYhSlvYhXhZEvSd9VMZeKIgZhpI0Rc/fWJ4O2YmvHgEVn9W7K4hPJ pQL9GuIHNFQsSpTV0lerG62r2pXpXVgsfeKUOaoTGcwkdLHaJKdrB4/HWT+8ddoY 01GSOlFbSNa4QZ7lcZXyEDOiQRFJMgs1ulUOuoYFkCDG5c6h2QXRGAWOm5I= -----END CERTIFICATE-----Generated at Sat Apr 27 10:15:58 2024 by rpki-client on console-ams.rpki-client.org