$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/u8lb5h9VoknIY8aotl4nPCwpO8Q.roa File: u8lb5h9VoknIY8aotl4nPCwpO8Q.roa (raw, json) Hash identifier: ESsRul/aWeRZ8yPScpP5bH7Yr+sqxiqdNVsxNdBnvSs= Subject key identifier: BB:C9:5B:E6:1F:55:A2:49:C8:63:C6:A8:B6:5E:27:3C:2C:29:3B:C4 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 07F6 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/u8lb5h9VoknIY8aotl4nPCwpO8Q.roa Signing time: Tue 30 Apr 2024 02:10:39 +0000 ROA not before: Tue 30 Apr 2024 02:10:39 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 1.76.4.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2038 (0x7f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 30 02:10:39 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=BBC95BE61F55A249C863C6A8B65E273C2C293BC4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:3b:b1:d7:ef:d0:f3:f1:05:5d:a9:b2:6b:62: 04:28:0e:f3:8d:11:62:b9:18:87:d6:6f:b3:a3:a0: f4:29:04:ee:a3:b5:38:74:19:35:20:82:13:6b:d0: c1:22:0e:28:fc:42:29:d0:99:be:2e:54:e4:73:6a: 6e:58:73:38:27:70:8f:7d:67:28:e3:6e:7b:3f:57: 16:f5:18:81:f0:0e:40:c2:ae:83:59:ef:2b:82:8c: 11:76:18:32:1a:7a:b9:39:21:26:20:41:84:9c:14: 78:24:16:0e:ce:74:40:a3:28:ef:d7:ec:ad:1e:d8: 25:08:63:fa:a8:ba:29:48:fa:2e:44:aa:26:22:9e: fd:56:25:e4:ce:5e:f6:3a:86:3a:f8:ed:5b:4e:2e: 9c:b5:58:dc:f9:30:ea:9f:f6:46:cf:97:80:52:ca: c2:5f:2a:2e:2e:5c:10:ca:40:3e:db:48:9e:cc:cf: b2:0c:db:2a:6a:b9:b0:5e:7b:c2:8c:43:c1:8c:a5: 85:ab:ef:3a:fe:8a:3e:d3:08:77:bc:73:2f:17:23: c3:24:a7:68:2c:c2:37:a8:2a:0f:55:fa:7f:ac:0f: 73:e6:e5:56:81:0d:b0:18:39:89:92:aa:bd:19:a4: 56:1a:8a:f1:76:59:81:90:ca:a5:02:01:68:37:aa: 44:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:C9:5B:E6:1F:55:A2:49:C8:63:C6:A8:B6:5E:27:3C:2C:29:3B:C4 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/u8lb5h9VoknIY8aotl4nPCwpO8Q.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.76.4.0/22 Signature Algorithm: sha256WithRSAEncryption 14:24:80:6f:02:9c:65:d2:f1:6f:85:24:d4:16:9b:0f:02:41: 96:07:54:b2:bd:a5:d4:35:6b:f0:33:0a:18:ef:c4:66:7f:eb: d9:cf:0e:c8:f8:9f:de:04:dc:87:0e:35:32:d2:88:df:7e:48: 01:54:28:cd:d0:dc:0a:ff:29:a5:d7:70:af:c1:a1:14:cf:66: 60:cf:25:50:9e:a5:fd:56:c6:f1:b5:ae:dc:c3:51:88:7e:b9: 03:1f:01:ad:33:a2:a7:cb:70:35:f4:ec:75:22:bd:f3:66:2b: b2:16:42:94:22:ba:92:f0:df:31:2e:26:38:f8:ae:60:1c:b1: df:7a:b5:28:d9:4b:0c:12:db:94:b1:5b:a0:c2:1e:f5:80:a1: 12:0e:d1:d4:e7:b8:d0:91:a7:c8:b4:a8:c0:62:a8:7e:62:5d: f4:01:01:dc:28:6d:fc:3a:4b:e7:b9:40:24:3c:c9:c1:84:76: 09:87:ef:0e:41:f9:a0:a9:c7:ba:02:49:3f:73:bc:d5:0f:e4: fa:a8:78:03:9c:7e:49:70:f4:59:fb:eb:62:09:cc:ab:86:57: 9a:11:b0:7b:9b:b5:d9:db:ee:14:d8:86:f7:f8:24:f5:e6:24: eb:4e:d8:5b:c4:ff:48:ae:4a:bd:11:e8:5b:1f:71:aa:8e:39: 20:27:4d:7a -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICB/YwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw MjEwMzlaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEJCQzk1QkU2MUY1NUEy NDlDODYzQzZBOEI2NUUyNzNDMkMyOTNCQzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCyO7HX79Dz8QVdqbJrYgQoDvONEWK5GIfWb7OjoPQpBO6jtTh0 GTUgghNr0MEiDij8QinQmb4uVORzam5YczgncI99Zyjjbns/Vxb1GIHwDkDCroNZ 7yuCjBF2GDIaerk5ISYgQYScFHgkFg7OdECjKO/X7K0e2CUIY/qouilI+i5EqiYi nv1WJeTOXvY6hjr47VtOLpy1WNz5MOqf9kbPl4BSysJfKi4uXBDKQD7bSJ7Mz7IM 2ypqubBee8KMQ8GMpYWr7zr+ij7TCHe8cy8XI8Mkp2gswjeoKg9V+n+sD3Pm5VaB DbAYOYmSqr0ZpFYaivF2WYGQyqUCAWg3qkQzAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUu8lb5h9VoknIY8aotl4nPCwpO8QwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3U4bGI1aDlWb2tuSVk4YW90bDRuUEN3cE84US5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIBTAQwDQYJKoZIhvcNAQELBQADggEBABQkgG8CnGXS8W+FJNQWmw8CQZYH VLK9pdQ1a/AzChjvxGZ/69nPDsj4n94E3IcONTLSiN9+SAFUKM3Q3Ar/KaXXcK/B oRTPZmDPJVCepf1WxvG1rtzDUYh+uQMfAa0zoqfLcDX07HUivfNmK7IWQpQiupLw 3zEuJjj4rmAcsd96tSjZSwwS25SxW6DCHvWAoRIO0dTnuNCRp8i0qMBiqH5iXfQB Adwobfw6S+e5QCQ8ycGEdgmH7w5B+aCpx7oCST9zvNUP5PqoeAOcfklw9Fn762IJ zKuGV5oRsHubtdnb7hTYhvf4JPXmJOtO2FvE/0iuSr0R6FsfcaqOOSAnTXo= -----END CERTIFICATE-----Generated at Sat Jun 1 13:38:48 2024 by rpki-client on console-fra.rpki-client.org