$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/t11sF42_R1Hu0wYSfMT8tpQ64pQ.roa File: t11sF42_R1Hu0wYSfMT8tpQ64pQ.roa (raw, json) Hash identifier: nRHINCjB2z39wINwYXB3I0Jyd/MfLirc/eSHQ8pz8l8= Subject key identifier: B7:5D:6C:17:8D:BF:47:51:EE:D3:06:12:7C:C4:FC:B6:94:3A:E2:94 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0912 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/t11sF42_R1Hu0wYSfMT8tpQ64pQ.roa Signing time: Tue 30 Apr 2024 02:28:45 +0000 ROA not before: Tue 30 Apr 2024 02:28:45 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 1.79.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2322 (0x912) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 30 02:28:45 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=B75D6C178DBF4751EED306127CC4FCB6943AE294 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:6e:15:6e:74:d2:b6:53:61:72:6e:66:93:0b: 76:ae:fb:44:30:85:36:1c:3a:e2:03:8b:66:af:53: 58:79:50:b2:fa:ef:1a:94:e4:f4:93:82:6c:cd:67: 75:cf:73:89:6c:a5:53:37:a7:94:9c:ac:b8:17:50: 8d:c5:d9:eb:b8:e0:e1:97:74:c3:09:46:b6:2f:71: 9a:b2:9c:d4:9e:af:01:80:04:26:5c:d8:4b:b5:b9: d7:98:5f:57:09:a5:79:7a:d0:12:46:83:f6:42:65: a3:1b:cb:af:07:93:d1:d0:f6:7b:c1:97:ae:a6:aa: 77:ec:a3:69:79:45:00:fd:4d:04:01:7b:02:e9:c9: 8e:dc:4d:d8:61:71:3a:ff:05:86:b0:68:a6:2a:f4: e4:45:25:ec:78:ec:a0:a7:47:f6:ff:b7:8d:17:b3: e3:46:8b:ec:32:ca:ad:96:0f:08:e1:ef:9e:77:a1: ff:0e:1b:e4:74:a3:e0:38:85:91:44:19:d3:3e:15: 98:92:23:ca:a6:aa:6c:2b:5c:ea:bb:c8:0b:4f:8e: fe:4a:4f:66:1f:18:97:6d:87:9b:c4:39:1d:45:5d: 0c:9d:b4:62:43:a9:a0:b5:ac:47:84:de:5f:bc:dc: fd:06:c1:82:81:aa:d9:2c:ac:aa:6c:a3:e6:ba:cb: f1:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:5D:6C:17:8D:BF:47:51:EE:D3:06:12:7C:C4:FC:B6:94:3A:E2:94 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/t11sF42_R1Hu0wYSfMT8tpQ64pQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.79.6.0/24 Signature Algorithm: sha256WithRSAEncryption 68:e2:3d:9d:6e:78:68:5d:d4:b4:bd:44:bb:c1:bf:c5:e6:d9: 77:f0:a8:66:fe:25:f6:da:89:aa:a4:9d:55:5d:39:82:fd:55: 3a:b3:c1:a4:fc:f1:ea:a9:81:ac:42:78:15:70:d3:3b:0b:d5: 35:03:f3:27:ce:b4:25:ad:d9:c9:79:60:75:5b:d7:5c:d8:fa: b1:56:72:d8:fa:65:38:d6:80:74:31:73:7b:fb:66:6e:0b:03: 9c:09:73:cd:9f:d1:77:cc:0b:af:ec:b6:0b:27:96:d1:4c:c0: 8c:23:e3:c0:1c:35:2f:c6:6a:01:b9:74:04:d2:78:96:38:21: af:04:58:37:09:bf:71:9e:32:dc:07:18:dd:6d:b0:a3:c6:b7: ff:31:c1:a3:a2:c2:81:12:0d:83:30:95:9c:99:b1:2f:91:49: 9b:60:0b:b0:86:b7:59:2c:bc:da:f8:c7:d0:43:23:f3:b7:42: fc:4b:b5:de:31:7b:4e:4d:0b:f1:82:c7:71:4e:a9:27:40:49: 17:28:b1:72:12:4d:51:5b:73:a1:f2:bf:2e:20:4e:96:b2:ad: 91:1d:91:82:1f:81:55:6a:82:94:33:8b:42:e8:42:6f:c3:62: b0:78:d1:f8:fc:e7:23:f4:1e:6d:c3:94:ec:76:cf:29:27:0d: 5b:eb:5b:81 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCRIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw MjI4NDVaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEI3NUQ2QzE3OERCRjQ3 NTFFRUQzMDYxMjdDQzRGQ0I2OTQzQUUyOTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQChbhVudNK2U2FybmaTC3au+0QwhTYcOuIDi2avU1h5ULL67xqU 5PSTgmzNZ3XPc4lspVM3p5ScrLgXUI3F2eu44OGXdMMJRrYvcZqynNSerwGABCZc 2Eu1udeYX1cJpXl60BJGg/ZCZaMby68Hk9HQ9nvBl66mqnfso2l5RQD9TQQBewLp yY7cTdhhcTr/BYawaKYq9ORFJex47KCnR/b/t40Xs+NGi+wyyq2WDwjh7553of8O G+R0o+A4hZFEGdM+FZiSI8qmqmwrXOq7yAtPjv5KT2YfGJdth5vEOR1FXQydtGJD qaC1rEeE3l+83P0GwYKBqtksrKpso+a6y/FtAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUt11sF42/R1Hu0wYSfMT8tpQ64pQwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3QxMXNGNDJfUjFIdTB3WVNmTVQ4dHBRNjRwUS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAABTwYwDQYJKoZIhvcNAQELBQADggEBAGjiPZ1ueGhd1LS9RLvBv8Xm2Xfw qGb+JfbaiaqknVVdOYL9VTqzwaT88eqpgaxCeBVw0zsL1TUD8yfOtCWt2cl5YHVb 11zY+rFWctj6ZTjWgHQxc3v7Zm4LA5wJc82f0XfMC6/stgsnltFMwIwj48AcNS/G agG5dATSeJY4Ia8EWDcJv3GeMtwHGN1tsKPGt/8xwaOiwoESDYMwlZyZsS+RSZtg C7CGt1ksvNr4x9BDI/O3QvxLtd4xe05NC/GCx3FOqSdASRcosXISTVFbc6Hyvy4g TpayrZEdkYIfgVVqgpQzi0LoQm/DYrB40fj85yP0Hm3DlOx2zyknDVvrW4E= -----END CERTIFICATE-----Generated at Sat Jun 1 13:38:48 2024 by rpki-client on console-fra.rpki-client.org