$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ye4c-vD9bNQbHNhXyghX2x-P4l8.roa File: ye4c-vD9bNQbHNhXyghX2x-P4l8.roa (raw, json) Hash identifier: CMUlinrmFGM5yU1lM7G9AreixicqaK+EdWgOhXD4lcE= Subject key identifier: C9:EE:1C:FA:F0:FD:6C:D4:1B:1C:D8:57:CA:08:57:DB:1F:8F:E2:5F Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 08E1 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ye4c-vD9bNQbHNhXyghX2x-P4l8.roa Signing time: Tue 30 Apr 2024 02:26:25 +0000 ROA not before: Tue 30 Apr 2024 02:26:25 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 1.79.68.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2273 (0x8e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 30 02:26:25 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=C9EE1CFAF0FD6CD41B1CD857CA0857DB1F8FE25F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a5:78:72:88:1d:39:25:cb:96:b3:57:2f:51: 83:44:b0:81:35:84:05:73:6a:b3:7f:65:f8:6f:ee: de:23:98:10:2d:10:28:6b:62:63:83:86:8c:29:fd: 99:72:63:b7:2d:b2:1a:f6:f0:c9:53:8d:e7:ef:f3: 09:30:b9:41:75:4a:ee:41:29:64:73:0c:d7:90:95: ac:db:69:c2:e2:fd:39:a6:af:1d:0a:e6:96:0f:a3: 48:1b:bc:ef:ec:07:d5:2c:52:f3:59:4c:23:74:c8: 23:0c:86:10:5a:b0:15:ab:3c:25:1b:8c:3f:a2:e6: c5:e8:e3:76:e3:e2:aa:5f:63:94:0f:10:fc:c8:d2: 16:cf:b5:2c:44:7b:11:cb:25:12:13:4e:6d:41:00: 21:e2:47:0c:c7:fa:aa:93:0c:23:b6:12:d2:f3:1f: b9:e0:d4:b8:43:be:54:da:f3:08:8e:23:2f:b9:61: 02:18:2f:9a:70:57:29:ad:cb:9b:57:65:35:9d:bf: 01:2f:1d:0f:22:a2:2a:61:2b:30:91:72:2c:b7:17: af:0b:c8:ae:7e:af:41:5a:c8:29:5e:3e:8a:96:e7: ed:40:de:20:1e:cc:f2:b4:e7:d6:95:fa:58:41:d1: 32:4e:4a:5f:b5:60:23:b9:67:3a:bd:95:ef:47:80: fe:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:EE:1C:FA:F0:FD:6C:D4:1B:1C:D8:57:CA:08:57:DB:1F:8F:E2:5F X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ye4c-vD9bNQbHNhXyghX2x-P4l8.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.79.68.0/22 Signature Algorithm: sha256WithRSAEncryption c9:d5:6d:04:66:36:ab:9f:b7:40:8d:ce:0a:80:bc:e7:f0:ec: ba:d0:01:4d:43:11:df:0c:bd:2e:6c:fd:eb:c6:02:4a:80:88: 37:9b:48:e2:79:de:56:0b:7c:ac:f0:21:8d:95:c6:c1:e0:3f: 31:e0:17:05:0b:96:e7:5a:2e:e9:8b:2a:21:71:f4:d6:cd:68: e3:d8:c9:ee:44:27:6d:c8:4e:4d:44:6b:bc:01:6c:5d:51:82: ad:2f:f2:54:4e:85:3d:1e:9b:a3:fb:60:53:09:99:22:34:54: e4:6a:8f:6b:4a:97:d6:21:3e:be:d4:5a:2a:d0:9b:99:0a:27: 97:7a:2b:22:9a:57:67:bd:7e:6e:d2:4d:3d:18:a8:7a:a5:3c: 50:5d:3e:31:e6:d4:33:d3:ad:ff:a7:ff:e8:cc:90:ee:62:5c: 54:59:06:4a:e0:3d:66:ae:b4:d4:15:63:36:ef:ad:a2:40:c4: b2:60:02:d6:2f:f1:bd:73:87:01:de:dd:89:8f:7b:dc:cf:f1: c1:0e:b3:60:19:82:c5:8a:d8:42:39:b2:2f:5b:07:16:b4:f8: d0:16:04:f7:d0:d9:5a:c0:10:cf:af:fd:fb:4c:e7:b0:f4:51: 9b:bf:43:3a:a4:d8:40:0a:d1:1d:9f:0c:35:c5:03:b9:a3:7d: 98:01:e9:f5 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCOEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw MjI2MjVaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEM5RUUxQ0ZBRjBGRDZD RDQxQjFDRDg1N0NBMDg1N0RCMUY4RkUyNUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDHpXhyiB05JcuWs1cvUYNEsIE1hAVzarN/Zfhv7t4jmBAtEChr YmODhowp/ZlyY7ctshr28MlTjefv8wkwuUF1Su5BKWRzDNeQlazbacLi/Tmmrx0K 5pYPo0gbvO/sB9UsUvNZTCN0yCMMhhBasBWrPCUbjD+i5sXo43bj4qpfY5QPEPzI 0hbPtSxEexHLJRITTm1BACHiRwzH+qqTDCO2EtLzH7ng1LhDvlTa8wiOIy+5YQIY L5pwVymty5tXZTWdvwEvHQ8ioiphKzCRciy3F68LyK5+r0FayClePoqW5+1A3iAe zPK059aV+lhB0TJOSl+1YCO5Zzq9le9HgP5/AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUye4c+vD9bNQbHNhXyghX2x+P4l8wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3llNGMtdkQ5Yk5RYkhOaFh5Z2hYMngtUDRsOC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIBT0QwDQYJKoZIhvcNAQELBQADggEBAMnVbQRmNquft0CNzgqAvOfw7LrQ AU1DEd8MvS5s/evGAkqAiDebSOJ53lYLfKzwIY2VxsHgPzHgFwULludaLumLKiFx 9NbNaOPYye5EJ23ITk1Ea7wBbF1Rgq0v8lROhT0em6P7YFMJmSI0VORqj2tKl9Yh Pr7UWirQm5kKJ5d6KyKaV2e9fm7STT0YqHqlPFBdPjHm1DPTrf+n/+jMkO5iXFRZ BkrgPWautNQVYzbvraJAxLJgAtYv8b1zhwHe3YmPe9zP8cEOs2AZgsWK2EI5si9b Bxa0+NAWBPfQ2VrAEM+v/ftM57D0UZu/Qzqk2EAK0R2fDDXFA7mjfZgB6fU= -----END CERTIFICATE-----Generated at Sat Jun 1 13:38:49 2024 by rpki-client on console-fra.rpki-client.org