$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/wB16sAD-CGjIqfaK6-KlH1k8-kk.roa File: wB16sAD-CGjIqfaK6-KlH1k8-kk.roa (raw, json) Hash identifier: 8GM4ZYdNrivXZwijIIhfi0/WwyJO42z2/gZrb8kkTok= Subject key identifier: C0:1D:7A:B0:00:FE:08:68:C8:A9:F6:8A:EB:E2:A5:1F:59:3C:FA:49 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0690 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/wB16sAD-CGjIqfaK6-KlH1k8-kk.roa Signing time: Tue 30 Apr 2024 01:38:09 +0000 ROA not before: Tue 30 Apr 2024 01:38:09 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 1.79.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1680 (0x690) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 30 01:38:09 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=C01D7AB000FE0868C8A9F68AEBE2A51F593CFA49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:16:c5:5d:50:46:13:33:46:23:8e:e1:34:70: 79:b6:3f:a5:a5:70:ef:08:75:fe:f3:ac:2c:9d:82: ec:db:f8:46:71:02:31:c9:fd:ca:8d:f5:78:07:66: 82:4d:8b:a0:16:d0:09:a3:26:72:3b:50:fe:55:75: e2:69:ab:10:ff:a9:9b:16:ae:85:73:00:f1:0d:86: 73:55:fe:3c:72:9f:27:da:f6:12:5a:78:d9:d5:51: 1a:c9:7c:e0:58:72:2a:42:06:de:84:30:06:3e:d7: 4c:0a:40:5f:7c:38:97:0c:85:92:d6:8e:4d:8f:ee: f8:91:0d:f8:8d:a5:b7:b3:58:70:96:a1:76:17:00: a2:72:8d:06:46:6f:20:76:27:17:2d:16:39:2b:81: 10:e7:5c:0d:d5:01:80:75:17:a3:6c:b8:3d:ab:59: 84:6d:9a:b4:70:3f:83:24:7c:29:9a:2d:1e:b7:4a: 35:45:45:8c:1e:ea:f1:91:34:3f:98:dd:da:1c:53: ab:bf:7b:bf:45:d3:36:33:17:18:62:1f:d3:ba:0e: 36:6d:f8:90:bd:ac:20:c7:54:15:50:31:95:09:20: 00:e9:81:48:05:c4:1b:29:03:f2:3a:56:62:44:89: 70:52:da:b0:3e:64:3b:a9:85:84:8b:58:c8:d8:cd: b7:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:1D:7A:B0:00:FE:08:68:C8:A9:F6:8A:EB:E2:A5:1F:59:3C:FA:49 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/wB16sAD-CGjIqfaK6-KlH1k8-kk.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.79.112.0/20 Signature Algorithm: sha256WithRSAEncryption 43:cb:9d:ad:55:fb:dc:00:9b:a2:35:2a:c6:5e:80:1f:52:49: 07:69:e9:1d:70:6e:a6:c4:4d:6e:d3:78:23:ac:a0:26:15:eb: 3a:0b:4b:35:5a:0b:68:24:7b:18:d0:72:1a:36:d0:b7:0b:89: 5b:c1:d5:97:c7:6f:14:2f:df:3e:7d:07:bf:5b:a1:f0:40:9d: 85:64:fe:26:8b:b8:b9:1c:7e:f3:b6:d5:72:3c:0f:dd:73:a0: f4:0c:66:c2:04:f0:4f:1c:06:eb:d6:c1:ef:61:ff:3d:22:6a: 17:86:1f:11:96:20:1e:7b:03:17:e8:0f:80:37:86:00:0c:5e: bf:e5:1a:6b:06:a6:bf:e3:dc:53:58:38:58:2f:15:d7:18:99: 85:0e:03:4c:41:d3:50:e1:78:09:34:de:2f:25:97:86:9b:7c: d7:9b:8d:d9:46:ee:23:f8:28:4f:a0:22:5b:47:54:6a:42:28: 3b:ac:7b:c0:6a:de:cb:62:91:7b:0a:d4:24:5b:07:45:a0:92: 88:5f:a3:d8:7d:cb:60:ce:fe:86:ba:57:c4:f4:57:4f:50:67: fc:08:51:b3:80:0e:c8:79:c0:1b:c3:da:d3:4b:02:71:df:21: fd:06:75:46:68:95:db:25:5d:b7:3e:86:4c:b9:08:02:b1:b4: 8b:e3:0c:d5 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBpAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw MTM4MDlaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEMwMUQ3QUIwMDBGRTA4 NjhDOEE5RjY4QUVCRTJBNTFGNTkzQ0ZBNDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDJFsVdUEYTM0YjjuE0cHm2P6WlcO8Idf7zrCydguzb+EZxAjHJ /cqN9XgHZoJNi6AW0AmjJnI7UP5VdeJpqxD/qZsWroVzAPENhnNV/jxynyfa9hJa eNnVURrJfOBYcipCBt6EMAY+10wKQF98OJcMhZLWjk2P7viRDfiNpbezWHCWoXYX AKJyjQZGbyB2JxctFjkrgRDnXA3VAYB1F6NsuD2rWYRtmrRwP4MkfCmaLR63SjVF RYwe6vGRND+Y3docU6u/e79F0zYzFxhiH9O6DjZt+JC9rCDHVBVQMZUJIADpgUgF xBspA/I6VmJEiXBS2rA+ZDuphYSLWMjYzbe3AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUwB16sAD+CGjIqfaK6+KlH1k8+kkwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3dCMTZzQUQtQ0dqSXFmYUs2LUtsSDFrOC1ray5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQBT3AwDQYJKoZIhvcNAQELBQADggEBAEPLna1V+9wAm6I1KsZegB9SSQdp 6R1wbqbETW7TeCOsoCYV6zoLSzVaC2gkexjQcho20LcLiVvB1ZfHbxQv3z59B79b ofBAnYVk/iaLuLkcfvO21XI8D91zoPQMZsIE8E8cBuvWwe9h/z0iaheGHxGWIB57 AxfoD4A3hgAMXr/lGmsGpr/j3FNYOFgvFdcYmYUOA0xB01DheAk03i8ll4abfNeb jdlG7iP4KE+gIltHVGpCKDuse8Bq3stikXsK1CRbB0Wgkohfo9h9y2DO/oa6V8T0 V09QZ/wIUbOADsh5wBvD2tNLAnHfIf0GdUZoldslXbc+hky5CAKxtIvjDNU= -----END CERTIFICATE-----Generated at Sat Jun 1 15:54:38 2024 by rpki-client on console-ams.rpki-client.org