$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/thaFG05RDXH9j_VgTx7oiBdDaC0.roa File: thaFG05RDXH9j_VgTx7oiBdDaC0.roa (raw, json) Hash identifier: Fjksf0Nk5vLsvVfl+23/i/W3FU76g/IA7W6qZzIOm6I= Subject key identifier: B6:16:85:1B:4E:51:0D:71:FD:8F:F5:60:4F:1E:E8:88:17:43:68:2D Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0450 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/thaFG05RDXH9j_VgTx7oiBdDaC0.roa Signing time: Thu 27 Jul 2023 16:43:14 +0000 ROA not before: Thu 27 Jul 2023 16:43:14 +0000 ROA not after: Sun 14 Jul 2024 01:30:03 +0000 asID: 9605 IP address blocks: 1.66.68.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1104 (0x450) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jul 27 16:43:14 2023 GMT Not After : Jul 14 01:30:03 2024 GMT Subject: CN=B616851B4E510D71FD8FF5604F1EE8881743682D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:70:cf:2b:52:21:2e:61:ad:7e:42:5c:73:28: 59:80:1b:4b:c0:33:e0:81:1b:53:77:39:1a:08:fb: 90:c0:0c:81:23:96:18:23:b9:ad:ad:c6:c3:e0:4a: c6:da:c5:5f:26:3d:01:b6:bc:0f:9d:67:60:6d:87: bd:ee:11:3b:f4:0b:09:16:de:d4:0c:6c:c1:7c:30: ad:13:33:78:23:3e:18:4f:be:81:78:f0:43:94:50: be:f4:2e:8a:48:15:4d:7b:ad:a9:ad:5d:51:8a:48: 19:fb:a6:c1:52:56:7a:51:87:11:dd:28:b0:79:1a: 84:5e:91:8c:43:39:e3:ec:6d:42:42:bf:15:1e:07: 43:99:98:9d:ad:6b:bd:d1:60:43:93:66:a6:78:47: 64:ef:03:f4:67:b4:3b:8e:c5:be:79:e3:19:8c:2f: dd:13:3a:f2:9d:2a:e2:34:01:08:db:b4:c2:27:98: c2:26:02:d8:22:33:41:25:38:95:42:f9:4a:14:9d: 79:0d:53:fc:b7:7e:92:d1:c2:f5:63:8b:6c:9e:41: ed:83:17:58:11:f9:20:50:ae:bd:52:8b:f2:30:3d: 8e:ea:b3:ca:a3:0c:af:dd:ca:35:20:1f:1b:b3:fd: 02:65:9b:ea:a9:4b:dd:fe:75:86:2b:3b:1d:80:e6: d5:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:16:85:1B:4E:51:0D:71:FD:8F:F5:60:4F:1E:E8:88:17:43:68:2D X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/thaFG05RDXH9j_VgTx7oiBdDaC0.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.66.68.0/23 Signature Algorithm: sha256WithRSAEncryption 46:f8:58:2b:87:a8:fd:7a:1c:6f:8b:e5:a0:79:e0:c7:28:c3: 00:77:87:37:ca:6f:23:e2:46:7b:49:3d:b7:5e:ad:8a:84:22: 8a:13:a6:b5:79:0c:3f:cb:5a:a0:f1:fe:54:cc:f5:a0:a6:d3: 63:4b:a9:fe:a1:6a:31:db:ca:26:2e:d6:7b:0a:17:d3:27:90: a0:1e:d4:7a:ee:00:eb:22:84:49:22:c4:87:71:e5:76:97:88: 8b:ee:8b:33:33:b4:1d:a6:80:75:df:8d:71:bf:1c:34:67:cf: d2:a0:97:f5:c5:b6:e8:f1:b6:53:02:14:d0:f8:44:ea:cd:3e: 31:c9:45:c6:eb:cd:7d:f7:49:98:45:bf:7b:85:9c:4e:00:73: 9d:d0:c7:a0:4b:69:67:de:1d:b0:8e:5a:be:90:79:a1:97:1b: c7:8f:6f:00:0b:b8:68:61:cb:39:da:e4:a3:89:be:60:14:f5: cc:94:d5:6a:25:02:ba:e7:e4:12:44:7d:e7:36:3c:32:a2:d6: 4d:12:2c:63:96:0f:fe:fa:0a:1f:ad:09:7a:07:89:d2:ec:ae: 12:72:9a:e8:16:1f:30:61:6f:bf:27:15:bf:6f:11:24:28:fd: 77:1f:f2:e1:17:cf:39:c1:57:f9:aa:8f:f8:24:aa:13:69:a2: 01:b3:b5:b6 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBFAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA3Mjcx NjQzMTRaFw0yNDA3MTQwMTMwMDNaMDMxMTAvBgNVBAMTKEI2MTY4NTFCNEU1MTBE NzFGRDhGRjU2MDRGMUVFODg4MTc0MzY4MkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC6cM8rUiEuYa1+QlxzKFmAG0vAM+CBG1N3ORoI+5DADIEjlhgj ua2txsPgSsbaxV8mPQG2vA+dZ2Bth73uETv0CwkW3tQMbMF8MK0TM3gjPhhPvoF4 8EOUUL70LopIFU17ramtXVGKSBn7psFSVnpRhxHdKLB5GoRekYxDOePsbUJCvxUe B0OZmJ2ta73RYEOTZqZ4R2TvA/RntDuOxb554xmML90TOvKdKuI0AQjbtMInmMIm AtgiM0ElOJVC+UoUnXkNU/y3fpLRwvVji2yeQe2DF1gR+SBQrr1Si/IwPY7qs8qj DK/dyjUgHxuz/QJlm+qpS93+dYYrOx2A5tWXAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUthaFG05RDXH9j/VgTx7oiBdDaC0wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3RoYUZHMDVSRFhIOWpfVmdUeDdvaUJkRGFDMC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEBQkQwDQYJKoZIhvcNAQELBQADggEBAEb4WCuHqP16HG+L5aB54McowwB3 hzfKbyPiRntJPbderYqEIooTprV5DD/LWqDx/lTM9aCm02NLqf6hajHbyiYu1nsK F9MnkKAe1HruAOsihEkixIdx5XaXiIvuizMztB2mgHXfjXG/HDRnz9Kgl/XFtujx tlMCFND4ROrNPjHJRcbrzX33SZhFv3uFnE4Ac53Qx6BLaWfeHbCOWr6QeaGXG8eP bwALuGhhyzna5KOJvmAU9cyU1WolArrn5BJEfec2PDKi1k0SLGOWD/76Ch+tCXoH idLsrhJymugWHzBhb78nFb9vESQo/Xcf8uEXzznBV/mqj/gkqhNpogGztbY= -----END CERTIFICATE-----Generated at Sat Jun 1 13:38:48 2024 by rpki-client on console-fra.rpki-client.org