$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/sWaIVdNO2eyFxjI3ogYzqCo_0LU.roa File: sWaIVdNO2eyFxjI3ogYzqCo_0LU.roa (raw, json) Hash identifier: SrgtzFqRTEEct74fAlNmPVxO7FL3zy2+UVCr/IIN+cA= Subject key identifier: B1:66:88:55:D3:4E:D9:EC:85:C6:32:37:A2:06:33:A8:2A:3F:D0:B5 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 08B3 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/sWaIVdNO2eyFxjI3ogYzqCo_0LU.roa Signing time: Tue 30 Apr 2024 02:22:40 +0000 ROA not before: Tue 30 Apr 2024 02:22:40 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 1.79.88.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2227 (0x8b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 30 02:22:40 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=B1668855D34ED9EC85C63237A20633A82A3FD0B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:bf:e3:cd:27:54:e4:ee:8f:20:f9:73:9b:6a: 21:d5:4f:f7:19:04:13:df:27:05:47:7a:ee:df:68: 4d:03:47:ee:3c:01:01:d6:24:df:19:5a:5c:08:e5: 3b:16:f1:14:40:14:f7:96:8a:c8:72:23:18:95:e7: 0b:df:45:63:36:93:80:b8:4b:a2:2c:c4:45:c0:0d: 04:11:a6:a7:da:98:b3:60:70:41:d0:2a:1b:07:2a: ff:63:68:77:95:ef:cd:76:42:a7:35:e4:57:a4:8b: 75:53:41:0e:a1:6c:3b:11:fa:5b:e7:ba:d5:fa:04: 48:64:ee:4c:e8:af:5c:96:fb:fd:19:a7:f7:11:b1: 1a:37:e3:ee:b5:f5:81:18:61:1e:22:db:ef:37:40: bc:23:f8:c8:3f:a7:b7:06:cb:96:dd:28:e1:fe:00: fe:d6:8b:9d:eb:72:0a:0a:f6:42:4f:b4:5b:27:c6: 8c:be:02:c2:1b:60:e5:40:91:e1:d6:56:c2:45:44: 1c:a5:aa:6e:b4:c1:e0:93:ca:48:c3:1c:2b:42:d5: 78:99:4d:2f:67:49:0f:23:a2:88:bd:26:84:1a:04: 89:90:c1:3a:e9:f7:fa:ad:cd:1f:d0:f5:86:75:51: 35:bc:bf:be:36:ba:bb:60:b2:5c:2c:23:32:14:48: fb:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:66:88:55:D3:4E:D9:EC:85:C6:32:37:A2:06:33:A8:2A:3F:D0:B5 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/sWaIVdNO2eyFxjI3ogYzqCo_0LU.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.79.88.0/23 Signature Algorithm: sha256WithRSAEncryption 0e:44:04:bf:e7:15:73:af:c6:c3:b4:e2:0a:e5:c2:78:e8:2a: 44:a5:63:e9:c0:4e:76:a2:e1:40:a1:bd:ca:ce:bb:6a:ea:53: f0:85:fd:7d:ba:c8:94:99:4b:c8:94:95:7c:7f:b5:96:8f:92: 38:62:48:5e:ba:51:74:dc:cb:4d:d2:51:9d:31:a2:db:8b:1c: 3b:95:db:8c:eb:92:9f:04:03:ba:cd:a1:4f:ec:17:93:74:7f: d0:9d:58:49:6f:c9:bd:8a:78:d6:a9:df:08:90:9e:c7:dc:ca: 64:5a:e9:10:b4:06:4c:e9:f0:67:cd:0b:a2:23:9a:d4:67:e1: a9:b8:11:2e:89:f2:40:d2:e0:d2:27:92:2d:ea:1b:d5:e0:66: 6b:41:65:5b:aa:f9:67:a1:9f:97:3d:2b:a9:07:78:b0:18:35: ff:c7:96:be:a5:c5:fa:a8:a3:05:6c:66:10:4b:37:b9:8c:aa: dd:ed:a8:4d:ce:de:c2:8f:ff:e6:1c:37:20:54:60:90:d0:bd: af:77:56:a8:4a:4e:48:32:34:3e:49:14:53:11:c8:01:9e:da: b5:e7:f0:a3:8b:17:fc:5d:73:4b:e7:9a:a2:af:47:dc:3d:93: 85:b5:80:40:fa:88:bf:fa:dc:1f:d2:33:72:8b:a9:22:70:61: 3e:26:0e:1f -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCLMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw MjIyNDBaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEIxNjY4ODU1RDM0RUQ5 RUM4NUM2MzIzN0EyMDYzM0E4MkEzRkQwQjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC0v+PNJ1Tk7o8g+XObaiHVT/cZBBPfJwVHeu7faE0DR+48AQHW JN8ZWlwI5TsW8RRAFPeWishyIxiV5wvfRWM2k4C4S6IsxEXADQQRpqfamLNgcEHQ KhsHKv9jaHeV7812Qqc15Feki3VTQQ6hbDsR+lvnutX6BEhk7kzor1yW+/0Zp/cR sRo34+619YEYYR4i2+83QLwj+Mg/p7cGy5bdKOH+AP7Wi53rcgoK9kJPtFsnxoy+ AsIbYOVAkeHWVsJFRBylqm60weCTykjDHCtC1XiZTS9nSQ8jooi9JoQaBImQwTrp 9/qtzR/Q9YZ1UTW8v742urtgslwsIzIUSPufAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUsWaIVdNO2eyFxjI3ogYzqCo/0LUwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3NXYUlWZE5PMmV5RnhqSTNvZ1l6cUNvXzBMVS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEBT1gwDQYJKoZIhvcNAQELBQADggEBAA5EBL/nFXOvxsO04grlwnjoKkSl Y+nATnai4UChvcrOu2rqU/CF/X26yJSZS8iUlXx/tZaPkjhiSF66UXTcy03SUZ0x otuLHDuV24zrkp8EA7rNoU/sF5N0f9CdWElvyb2KeNap3wiQnsfcymRa6RC0Bkzp 8GfNC6IjmtRn4am4ES6J8kDS4NInki3qG9XgZmtBZVuq+Wehn5c9K6kHeLAYNf/H lr6lxfqoowVsZhBLN7mMqt3tqE3O3sKP/+YcNyBUYJDQva93VqhKTkgyND5JFFMR yAGe2rXn8KOLF/xdc0vnmqKvR9w9k4W1gED6iL/63B/SM3KLqSJwYT4mDh8= -----END CERTIFICATE-----Generated at Sat Jun 1 13:38:48 2024 by rpki-client on console-fra.rpki-client.org