$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/sfcOEI4c27wUXqHAhwf3KYhcxPE.roa File: sfcOEI4c27wUXqHAhwf3KYhcxPE.roa (raw, json) Hash identifier: WsTYs6hHI1TScD7k3xb9fDGcQyDyQiFN7lsNUwdGs/M= Subject key identifier: B1:F7:0E:10:8E:1C:DB:BC:14:5E:A1:C0:87:07:F7:29:88:5C:C4:F1 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0120 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/sfcOEI4c27wUXqHAhwf3KYhcxPE.roa Signing time: Wed 24 May 2023 16:30:17 +0000 ROA not before: Wed 24 May 2023 16:30:17 +0000 ROA not after: Tue 14 May 2024 01:30:02 +0000 asID: 9605 IP address blocks: 1.78.24.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 May 2024 13:36:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 288 (0x120) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: May 24 16:30:17 2023 GMT Not After : May 14 01:30:02 2024 GMT Subject: CN=B1F70E108E1CDBBC145EA1C08707F729885CC4F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c3:50:29:49:07:97:92:3f:82:14:f9:18:e3: 5c:ec:6b:9b:56:4a:c7:d4:00:b0:22:91:59:ad:f4: ed:99:49:df:24:9c:73:01:cf:e4:9e:24:d1:0e:6e: 57:42:29:6f:90:62:c8:ba:9e:bc:29:5a:0e:f1:21: 09:4e:2e:c0:bc:1f:ed:f8:2d:2f:4c:aa:88:db:4a: b1:2b:c2:34:c4:4c:32:38:3a:6d:06:7d:90:59:46: a8:73:32:28:4d:0e:f6:34:07:b7:96:23:b8:89:ac: bb:c2:07:73:36:30:1f:52:4b:b5:e0:43:e3:14:d6: 0a:0a:29:53:39:b2:ab:30:ef:c5:d6:2b:7f:a1:6b: 9e:ec:74:77:61:01:06:73:14:38:7a:5d:4c:d3:2f: 69:6d:69:8b:40:7e:36:e9:34:af:e5:4f:fb:f3:b7: dc:28:6d:94:c7:9f:86:ea:05:95:b7:16:8d:fa:e7: e3:ec:e4:46:36:ed:df:fe:39:a0:5d:2c:35:78:72: 89:28:af:e4:1c:48:cb:51:f0:73:a8:6e:c9:9b:c1: 11:a7:ad:08:74:6e:fe:f1:ce:ae:91:c8:f5:4a:72: fb:e0:e7:97:39:a6:a9:84:e0:5d:dc:f4:38:ed:4f: 31:0f:9f:aa:67:5e:33:4f:20:8d:9d:63:16:78:36: ee:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:F7:0E:10:8E:1C:DB:BC:14:5E:A1:C0:87:07:F7:29:88:5C:C4:F1 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/sfcOEI4c27wUXqHAhwf3KYhcxPE.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.78.24.0/23 Signature Algorithm: sha256WithRSAEncryption 7f:88:e5:54:fb:5f:af:63:04:73:54:7b:7f:4f:39:5c:a4:94: a7:28:51:ca:ad:8f:91:52:ce:f1:82:4f:eb:fe:1c:c5:bb:06: 3d:71:9b:71:bf:81:42:c9:ff:7d:6c:3c:77:3b:db:48:e8:3a: e4:35:b9:87:43:2d:b1:ab:cb:af:6e:8e:a9:a5:1a:4a:29:f8: 05:57:eb:ec:1b:0c:f8:0c:bb:80:a1:43:3d:20:1f:ec:a0:be: 21:34:a1:be:b4:0f:f7:17:9b:f2:0e:6a:66:a5:e1:99:e4:37: f7:a5:32:aa:53:3a:a7:41:1a:0c:54:a5:6e:3e:62:bf:ee:73: ae:cf:6b:da:34:de:1a:2f:84:4b:52:4c:44:ae:eb:b6:50:5b: 89:ce:1a:46:cd:94:97:2b:39:19:b7:c0:24:9d:d5:bb:aa:fd: 55:41:f0:67:dc:12:a8:93:2b:6d:9c:8e:7d:9f:65:1f:83:96: da:dd:d5:15:5a:b6:1b:58:d8:57:47:0d:50:4f:37:9b:1f:43: b7:5b:9d:9e:46:73:5b:f4:ce:08:47:a3:f0:43:1b:39:6a:0d: b0:42:0a:14:5f:27:76:62:6c:c1:94:aa:17:84:8c:33:9a:3c: 44:9b:8b:20:6e:50:72:51:f3:ac:5c:11:7c:f1:36:9d:fd:2d: 33:42:5c:05 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICASAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA1MjQx NjMwMTdaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKEIxRjcwRTEwOEUxQ0RC QkMxNDVFQTFDMDg3MDdGNzI5ODg1Q0M0RjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDHw1ApSQeXkj+CFPkY41zsa5tWSsfUALAikVmt9O2ZSd8knHMB z+SeJNEObldCKW+QYsi6nrwpWg7xIQlOLsC8H+34LS9MqojbSrErwjTETDI4Om0G fZBZRqhzMihNDvY0B7eWI7iJrLvCB3M2MB9SS7XgQ+MU1goKKVM5sqsw78XWK3+h a57sdHdhAQZzFDh6XUzTL2ltaYtAfjbpNK/lT/vzt9wobZTHn4bqBZW3Fo365+Ps 5EY27d/+OaBdLDV4cokor+QcSMtR8HOobsmbwRGnrQh0bv7xzq6RyPVKcvvg55c5 pqmE4F3c9DjtTzEPn6pnXjNPII2dYxZ4Nu49AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUsfcOEI4c27wUXqHAhwf3KYhcxPEwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3NmY09FSTRjMjd3VVhxSEFod2YzS1loY3hQRS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEBThgwDQYJKoZIhvcNAQELBQADggEBAH+I5VT7X69jBHNUe39POVyklKco Ucqtj5FSzvGCT+v+HMW7Bj1xm3G/gULJ/31sPHc720joOuQ1uYdDLbGry69ujqml Gkop+AVX6+wbDPgMu4ChQz0gH+ygviE0ob60D/cXm/IOamal4ZnkN/elMqpTOqdB GgxUpW4+Yr/uc67Pa9o03hovhEtSTESu67ZQW4nOGkbNlJcrORm3wCSd1buq/VVB 8GfcEqiTK22cjn2fZR+Dltrd1RVathtY2FdHDVBPN5sfQ7dbnZ5Gc1v0zghHo/BD GzlqDbBCChRfJ3ZibMGUqheEjDOaPESbiyBuUHJR86xcEXzxNp39LTNCXAU= -----END CERTIFICATE-----Generated at Sat Apr 27 10:15:58 2024 by rpki-client on console-ams.rpki-client.org