$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/wtrS_zwDS8nWFeg56wz-l8RO3pI.roa File: wtrS_zwDS8nWFeg56wz-l8RO3pI.roa (raw, json) Hash identifier: +BfwswDpWOEigyq22ZMS0pY120aZ6i2M3Bmpj3McXv0= Subject key identifier: C2:DA:D2:FF:3C:03:4B:C9:D6:15:E8:39:EB:0C:FE:97:C4:4E:DE:92 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0775 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/wtrS_zwDS8nWFeg56wz-l8RO3pI.roa Signing time: Tue 30 Apr 2024 02:04:35 +0000 ROA not before: Tue 30 Apr 2024 02:04:35 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 220.159.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 22:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1909 (0x775) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 30 02:04:35 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=C2DAD2FF3C034BC9D615E839EB0CFE97C44EDE92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:9f:7f:f0:40:08:dc:a1:3a:67:a9:f0:56:db: 0b:b7:90:df:98:26:42:60:35:69:31:66:0c:58:a1: a9:50:79:23:7d:52:db:00:a2:96:5f:e4:6c:43:28: e9:65:8a:26:d3:ef:e5:36:6c:e3:4b:f8:7f:20:e3: a1:45:66:b4:74:fb:45:f9:c3:ed:22:f9:0c:2d:b9: a7:79:a0:62:a3:4e:ea:43:1f:eb:5a:9a:bd:e1:de: 64:46:e0:09:8f:79:64:88:c7:66:77:38:1c:7c:ca: fb:5b:26:90:9f:29:0f:2d:61:fe:81:46:8d:6b:03: a9:1d:2f:f0:ed:0f:e5:0c:5b:1e:a8:fc:b0:6c:fe: 1e:a2:66:bb:95:34:84:ae:cf:0f:96:5a:02:2b:81: bf:e0:cd:81:68:46:36:73:68:69:28:08:5a:a4:45: 75:85:2f:7d:6e:29:6f:05:39:5a:03:b7:13:d9:e1: 7a:be:13:71:31:b6:3b:29:09:8d:65:db:23:c0:75: f2:e0:06:50:17:02:91:1c:70:44:93:88:9b:66:ec: 7e:60:b4:ac:88:02:ef:7a:15:09:db:18:97:74:93: d4:d2:96:06:46:2d:4e:7d:22:5c:f0:1a:b4:f4:c0: 82:5b:15:8b:08:5c:99:1b:8a:5b:53:45:6c:33:69: a8:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:DA:D2:FF:3C:03:4B:C9:D6:15:E8:39:EB:0C:FE:97:C4:4E:DE:92 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/wtrS_zwDS8nWFeg56wz-l8RO3pI.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 220.159.208.0/21 Signature Algorithm: sha256WithRSAEncryption c9:ef:12:ab:dd:c7:2a:b2:de:dd:7b:f6:7f:06:a6:63:00:95: 88:49:1d:ca:fa:fd:9e:af:13:7d:3d:40:fc:89:02:47:5d:f9: a1:93:06:7c:97:5d:6a:44:be:44:a2:e5:0f:57:46:5d:68:f2: 5d:03:ec:58:7e:e4:50:da:f3:6f:c4:98:f4:31:34:8b:2c:d3: 3d:27:0d:db:c7:29:cd:e2:3b:0d:4f:e7:9e:8f:3b:49:b2:7c: 82:1b:5f:8c:92:46:48:e9:b8:07:24:04:60:0a:67:81:1d:7c: e5:12:7b:3f:2b:c4:56:1d:66:ef:e1:52:3f:71:94:f9:3b:c3: bc:57:6b:10:86:b3:18:fc:6e:65:20:de:fd:73:e2:fc:00:7a: c2:12:9e:08:4b:86:b2:c7:99:db:05:d2:e8:40:ab:31:d7:f4: 30:3b:48:80:f9:c0:4d:69:6b:76:92:72:f6:e6:e0:5e:16:e3: 44:8d:7f:8f:ea:18:95:6a:b0:a8:bb:4d:7e:f3:06:51:6b:79: 4d:26:c5:ac:08:bd:1f:ce:1c:70:db:8c:f7:eb:7f:46:9b:91: bc:ab:8c:a1:eb:8d:73:ab:af:2c:6a:11:37:36:12:fd:43:a0: b8:76:e6:9f:84:50:20:a6:44:a5:cd:a2:8e:36:00:12:0d:2c: 89:47:10:96 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICB3UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw MjA0MzVaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEMyREFEMkZGM0MwMzRC QzlENjE1RTgzOUVCMENGRTk3QzQ0RURFOTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC6n3/wQAjcoTpnqfBW2wu3kN+YJkJgNWkxZgxYoalQeSN9UtsA opZf5GxDKOlliibT7+U2bONL+H8g46FFZrR0+0X5w+0i+Qwtuad5oGKjTupDH+ta mr3h3mRG4AmPeWSIx2Z3OBx8yvtbJpCfKQ8tYf6BRo1rA6kdL/DtD+UMWx6o/LBs /h6iZruVNISuzw+WWgIrgb/gzYFoRjZzaGkoCFqkRXWFL31uKW8FOVoDtxPZ4Xq+ E3ExtjspCY1l2yPAdfLgBlAXApEccESTiJtm7H5gtKyIAu96FQnbGJd0k9TSlgZG LU59IlzwGrT0wIJbFYsIXJkbiltTRWwzaajhAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUwtrS/zwDS8nWFeg56wz+l8RO3pIwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3d0clNfendEUzhuV0ZlZzU2d3otbDhSTzNwSS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAPcn9AwDQYJKoZIhvcNAQELBQADggEBAMnvEqvdxyqy3t179n8GpmMAlYhJ Hcr6/Z6vE309QPyJAkdd+aGTBnyXXWpEvkSi5Q9XRl1o8l0D7Fh+5FDa82/EmPQx NIss0z0nDdvHKc3iOw1P556PO0myfIIbX4ySRkjpuAckBGAKZ4EdfOUSez8rxFYd Zu/hUj9xlPk7w7xXaxCGsxj8bmUg3v1z4vwAesISnghLhrLHmdsF0uhAqzHX9DA7 SID5wE1pa3aScvbm4F4W40SNf4/qGJVqsKi7TX7zBlFreU0mxawIvR/OHHDbjPfr f0abkbyrjKHrjXOrryxqETc2Ev1DoLh25p+EUCCmRKXNoo42ABINLIlHEJY= -----END CERTIFICATE-----Generated at Mon Nov 25 23:59:12 2024 by rpki-client on console-fra.rpki-client.org