$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/tlok-k3ibhuexsthsX3MKkrNrB8.roa File: tlok-k3ibhuexsthsX3MKkrNrB8.roa (raw, json) Hash identifier: N7L9K+k7vFp8tZuvZKQcF+kgIvriPvxnl8ZPSkhivTE= Subject key identifier: B6:5A:24:FA:4D:E2:6E:1B:9E:C6:CB:61:B1:7D:CC:2A:4A:CD:AC:1F Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 058B Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/tlok-k3ibhuexsthsX3MKkrNrB8.roa Signing time: Thu 27 Jul 2023 16:58:15 +0000 ROA not before: Thu 27 Jul 2023 16:58:15 +0000 ROA not after: Sun 14 Jul 2024 01:30:03 +0000 asID: 9605 IP address blocks: 1.79.44.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1419 (0x58b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jul 27 16:58:15 2023 GMT Not After : Jul 14 01:30:03 2024 GMT Subject: CN=B65A24FA4DE26E1B9EC6CB61B17DCC2A4ACDAC1F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:7c:57:a0:5e:3f:44:a1:f9:42:73:41:4d:55: 6e:1d:e0:81:04:08:a8:7f:31:34:2e:c3:c1:34:d2: 0e:11:c5:74:b6:21:1b:7c:10:bc:c0:23:04:46:e5: 97:27:cf:9e:70:51:9a:c1:f6:8a:cc:59:e8:3e:03: e0:09:6f:28:0a:59:f8:cb:36:c9:ee:8d:46:b6:d7: b1:0f:88:6f:cd:49:d7:f0:e0:f5:43:44:87:02:79: 61:48:6a:50:94:75:60:95:cc:a3:78:87:45:33:db: f0:33:08:46:32:27:d6:52:70:b1:6e:44:ef:eb:1e: 91:4e:52:89:3d:6e:f0:a4:52:af:02:84:7b:2b:12: a8:1c:83:b0:74:14:8c:7b:1f:e4:1c:1f:75:3f:6b: b5:f7:8a:4c:89:96:84:bf:c6:68:15:c0:35:b5:d3: 3e:9d:4d:27:86:f1:3c:99:81:b8:bb:1c:34:0c:4c: 44:55:e1:79:84:88:24:1c:d5:96:14:2a:62:9b:1e: 97:be:21:2f:49:e2:8c:37:c7:95:69:bf:0d:fc:9f: 22:01:d8:07:9a:ef:92:f2:ac:5a:b7:2b:e0:b7:6a: fe:d4:7b:94:87:32:8a:3e:ff:8b:e1:67:38:f9:b7: 55:52:4d:e7:8a:d1:38:95:64:86:3a:5c:a7:c4:20: 4a:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:5A:24:FA:4D:E2:6E:1B:9E:C6:CB:61:B1:7D:CC:2A:4A:CD:AC:1F X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/tlok-k3ibhuexsthsX3MKkrNrB8.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.79.44.0/22 Signature Algorithm: sha256WithRSAEncryption 79:d6:38:96:de:71:36:4c:9f:2f:f4:a7:ad:7c:db:0d:a8:7d: c4:62:68:ae:14:d6:e8:56:1f:08:93:ed:41:54:72:dd:a7:86: 04:e3:ca:f6:4f:fa:03:b8:3a:fc:f6:dd:d5:de:b0:ef:12:18: 12:f0:5b:6f:08:27:21:87:89:51:f9:60:0c:ae:cb:cf:11:08: 4e:00:36:46:5a:17:c3:a5:70:4c:2e:f8:ed:23:c1:3b:70:78: 6a:d5:a9:bc:1e:9c:f3:c3:9a:3d:2d:c3:d2:d7:51:12:35:17: c1:eb:47:57:fc:25:eb:6e:50:52:8e:ef:40:8c:f7:09:b2:c1: cc:47:10:99:45:e1:b4:fc:ee:66:7b:3f:cd:b8:fe:1d:e7:ef: ca:81:36:e5:31:c1:1b:50:84:0f:9c:54:e9:d3:5d:d0:48:4d: 19:19:5f:b3:d1:bb:76:24:67:5d:c4:e1:4a:2f:ca:99:37:cf: 45:b8:5c:c5:7e:7b:91:e9:b7:78:b5:31:91:60:c8:f5:9f:e3: b9:98:e6:a1:b3:13:3e:f0:e2:fd:20:f9:d3:a8:a6:01:6d:66: 6a:ce:8d:96:f7:ab:ee:e5:7c:cd:70:50:a0:21:83:e5:83:38: 4e:93:3f:5a:aa:9c:96:e4:97:43:36:6c:22:2b:cd:1c:a2:51: 89:dc:73:05 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBYswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA3Mjcx NjU4MTVaFw0yNDA3MTQwMTMwMDNaMDMxMTAvBgNVBAMTKEI2NUEyNEZBNERFMjZF MUI5RUM2Q0I2MUIxN0RDQzJBNEFDREFDMUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDFfFegXj9EoflCc0FNVW4d4IEECKh/MTQuw8E00g4RxXS2IRt8 ELzAIwRG5Zcnz55wUZrB9orMWeg+A+AJbygKWfjLNsnujUa217EPiG/NSdfw4PVD RIcCeWFIalCUdWCVzKN4h0Uz2/AzCEYyJ9ZScLFuRO/rHpFOUok9bvCkUq8ChHsr Eqgcg7B0FIx7H+QcH3U/a7X3ikyJloS/xmgVwDW10z6dTSeG8TyZgbi7HDQMTERV 4XmEiCQc1ZYUKmKbHpe+IS9J4ow3x5Vpvw38nyIB2Aea75LyrFq3K+C3av7Ue5SH Moo+/4vhZzj5t1VSTeeK0TiVZIY6XKfEIEp9AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUtlok+k3ibhuexsthsX3MKkrNrB8wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3Rsb2stazNpYmh1ZXhzdGhzWDNNS2tyTnJCOC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIBTywwDQYJKoZIhvcNAQELBQADggEBAHnWOJbecTZMny/0p6182w2ofcRi aK4U1uhWHwiT7UFUct2nhgTjyvZP+gO4Ovz23dXesO8SGBLwW28IJyGHiVH5YAyu y88RCE4ANkZaF8OlcEwu+O0jwTtweGrVqbwenPPDmj0tw9LXURI1F8HrR1f8Jetu UFKO70CM9wmywcxHEJlF4bT87mZ7P824/h3n78qBNuUxwRtQhA+cVOnTXdBITRkZ X7PRu3YkZ13E4Uovypk3z0W4XMV+e5Hpt3i1MZFgyPWf47mY5qGzEz7w4v0g+dOo pgFtZmrOjZb3q+7lfM1wUKAhg+WDOE6TP1qqnJbkl0M2bCIrzRyiUYnccwU= -----END CERTIFICATE-----Generated at Sat Jun 1 13:38:48 2024 by rpki-client on console-fra.rpki-client.org