$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/tuVL2wVFHT9ws18BaDR32-bG90I.roa File: tuVL2wVFHT9ws18BaDR32-bG90I.roa (raw, json) Hash identifier: DOB6Q1E8jKmIzn5dOs7ZTivwes+CWny/g/H7F2e8WFU= Subject key identifier: B6:E5:4B:DB:05:45:1D:3F:70:B3:5F:01:68:34:77:DB:E6:C6:F7:42 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 07AD Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/tuVL2wVFHT9ws18BaDR32-bG90I.roa Signing time: Tue 30 Apr 2024 02:06:35 +0000 ROA not before: Tue 30 Apr 2024 02:06:35 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 1.79.70.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:22:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1965 (0x7ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 30 02:06:35 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=B6E54BDB05451D3F70B35F01683477DBE6C6F742 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:cc:ee:5c:13:c9:4f:d1:10:9f:d5:8a:61:fc: fe:5a:b0:91:26:5e:07:fa:57:be:46:b3:1c:fc:cc: 96:69:2d:66:a2:e6:4e:f6:89:e9:c1:67:48:f7:70: aa:57:19:fd:31:3c:c3:1a:6c:c5:dc:db:32:3c:d4: b1:c3:95:34:78:d9:75:da:ce:95:b4:7c:de:05:bb: 92:a7:20:30:d8:42:7b:53:ac:60:f7:f2:15:fe:d9: 7d:e6:d8:d0:d9:8f:45:54:2e:ee:42:e5:b9:f5:0a: 97:09:0e:3d:85:bb:64:e1:2a:e4:bb:a8:8e:c7:2c: 81:87:aa:4f:e2:d0:4b:03:45:2e:4c:a6:f0:74:8f: 41:f1:9d:3e:44:4f:cd:49:15:90:fd:07:29:68:b3: 45:29:c4:54:f1:f2:ef:0a:a1:1e:9b:27:59:0a:f3: 18:01:ca:ec:2f:c0:35:23:ad:88:49:94:a4:c1:11: 51:3a:87:f8:04:83:08:50:fd:0f:2c:30:e5:2d:dc: af:a2:eb:e4:cf:4c:97:11:13:f0:ad:3e:79:9a:d5: dc:b8:57:c1:18:68:1f:f4:d1:73:6c:fa:cf:b1:e4: 53:cc:c3:69:39:5b:ca:6b:e1:9c:d1:da:79:27:6a: de:c9:31:b5:e2:45:4f:be:c0:94:df:3a:7b:b7:77: c9:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:E5:4B:DB:05:45:1D:3F:70:B3:5F:01:68:34:77:DB:E6:C6:F7:42 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/tuVL2wVFHT9ws18BaDR32-bG90I.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.79.70.0/23 Signature Algorithm: sha256WithRSAEncryption 8a:27:80:2b:90:7c:66:d3:7e:17:04:dc:ed:0f:61:42:da:e4: 38:96:f0:25:c0:aa:19:7d:5f:1a:59:f5:20:9a:7f:91:f3:8e: 7b:b8:47:d8:52:7d:c2:80:17:0f:0d:02:70:9e:16:14:b5:cd: 85:74:c9:7e:18:63:ae:a0:a4:81:4b:12:01:66:6c:ba:f5:0d: ce:76:d8:93:42:b2:e0:93:03:25:e7:7f:f8:ee:55:50:1c:14: e4:ea:35:2c:b2:c3:73:c7:ee:37:ba:8c:77:73:5c:58:ad:9d: fb:a4:53:c6:e7:d5:be:27:90:48:1a:72:fe:ad:df:25:6e:aa: 3d:9c:52:7a:08:8a:bc:49:ac:88:51:32:e5:3b:80:f6:af:3e: 1a:29:64:93:f7:63:32:4f:a7:c5:2a:3c:eb:d9:a1:7b:84:d5: d1:ca:dd:af:98:13:63:16:d1:a9:34:f7:ae:5d:07:5d:7d:f5: 2c:08:b2:ec:89:52:f5:13:39:a7:e5:3d:16:6a:a3:2e:8a:f7: ec:bf:32:c6:2f:31:86:ab:12:c7:c9:ee:db:26:a0:6c:56:79: de:b6:21:0e:63:d5:fe:33:88:54:c1:c6:76:ee:6f:06:df:b9: 39:dc:9a:a8:11:96:77:3e:43:24:a5:d1:2f:f3:06:b5:5b:7d: 0a:7e:59:5d -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICB60wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw MjA2MzVaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEI2RTU0QkRCMDU0NTFE M0Y3MEIzNUYwMTY4MzQ3N0RCRTZDNkY3NDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDAzO5cE8lP0RCf1Yph/P5asJEmXgf6V75Gsxz8zJZpLWai5k72 ienBZ0j3cKpXGf0xPMMabMXc2zI81LHDlTR42XXazpW0fN4Fu5KnIDDYQntTrGD3 8hX+2X3m2NDZj0VULu5C5bn1CpcJDj2Fu2ThKuS7qI7HLIGHqk/i0EsDRS5MpvB0 j0HxnT5ET81JFZD9Bylos0UpxFTx8u8KoR6bJ1kK8xgByuwvwDUjrYhJlKTBEVE6 h/gEgwhQ/Q8sMOUt3K+i6+TPTJcRE/CtPnma1dy4V8EYaB/00XNs+s+x5FPMw2k5 W8pr4ZzR2nknat7JMbXiRU++wJTfOnu3d8mhAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUtuVL2wVFHT9ws18BaDR32+bG90IwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3R1Vkwyd1ZGSFQ5d3MxOEJhRFIzMi1iRzkwSS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEBT0YwDQYJKoZIhvcNAQELBQADggEBAIongCuQfGbTfhcE3O0PYULa5DiW 8CXAqhl9XxpZ9SCaf5Hzjnu4R9hSfcKAFw8NAnCeFhS1zYV0yX4YY66gpIFLEgFm bLr1Dc522JNCsuCTAyXnf/juVVAcFOTqNSyyw3PH7je6jHdzXFitnfukU8bn1b4n kEgacv6t3yVuqj2cUnoIirxJrIhRMuU7gPavPhopZJP3YzJPp8UqPOvZoXuE1dHK 3a+YE2MW0ak0965dB1199SwIsuyJUvUTOaflPRZqoy6K9+y/MsYvMYarEsfJ7tsm oGxWed62IQ5j1f4ziFTBxnbubwbfuTncmqgRlnc+QySl0S/zBrVbfQp+WV0= -----END CERTIFICATE-----Generated at Fri Nov 22 16:45:41 2024 by rpki-client on console-ams.rpki-client.org