$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/883/drRnXTxd2YaT1xE3M4kFCfAAvwE.roa File: drRnXTxd2YaT1xE3M4kFCfAAvwE.roa (raw, json) Hash identifier: iV0UBSsw8WzVbYMal7gW+4OHRP2pYGpoVS5iWXI4AGc= Subject key identifier: 76:B4:67:5D:3C:5D:D9:86:93:D7:11:37:33:89:05:09:F0:00:BF:01 Certificate issuer: /CN=87EE394CC8B1651B758F388F73A88E68BD27222F Certificate serial: 3C Authority key identifier: 87:EE:39:4C:C8:B1:65:1B:75:8F:38:8F:73:A8:8E:68:BD:27:22:2F Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h-45TMixZRt1jziPc6iOaL0nIi8.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/drRnXTxd2YaT1xE3M4kFCfAAvwE.roa Signing time: Thu 28 Mar 2024 08:35:41 +0000 ROA not before: Thu 28 Mar 2024 08:35:41 +0000 ROA not after: Sat 15 Mar 2025 01:30:02 +0000 asID: 23818 IP address blocks: 203.79.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/h-45TMixZRt1jziPc6iOaL0nIi8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/h-45TMixZRt1jziPc6iOaL0nIi8.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h-45TMixZRt1jziPc6iOaL0nIi8.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 16 Jun 2024 13:37:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60 (0x3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87EE394CC8B1651B758F388F73A88E68BD27222F Validity Not Before: Mar 28 08:35:41 2024 GMT Not After : Mar 15 01:30:02 2025 GMT Subject: CN=76B4675D3C5DD98693D7113733890509F000BF01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:ed:43:79:7e:07:68:c8:7d:f7:c1:fb:18:71: a2:39:3e:0c:eb:4c:be:4e:c5:f7:b6:1f:25:76:0a: 5b:f9:21:b8:7f:cc:58:05:25:88:35:d0:f1:5e:49: 8f:06:7d:25:8f:ab:ff:f8:f1:68:e1:88:5c:dc:4c: ac:25:eb:e8:10:d4:01:d2:80:f2:d6:63:59:8d:fb: 50:bb:f9:a3:ff:a7:56:f3:a1:53:eb:96:cb:24:6e: ed:bb:21:f6:40:b7:34:a7:90:92:59:28:36:fb:58: eb:85:b6:a8:7e:22:f8:df:90:68:a1:fb:68:80:23: c1:e7:cd:e2:53:93:2b:2e:02:b0:b1:5b:53:1b:37: b7:d3:16:db:64:c8:10:d6:94:76:38:22:62:e6:44: a1:d4:cb:f9:04:9e:c8:6f:ff:f3:62:4e:95:43:43: bd:11:f1:c5:78:32:61:47:26:6f:f4:de:4e:48:fb: fd:6f:b6:87:20:10:d6:06:8e:08:50:fd:9a:66:c2: 29:ac:aa:d2:0f:b4:c9:71:83:2a:ef:0d:a2:e7:72: 82:54:f1:b0:85:f0:88:94:11:32:0d:ac:fa:85:df: d3:e5:e1:25:e6:43:2e:65:ee:d9:84:e4:3a:ff:e8: 2e:9b:cd:6f:25:a3:34:e9:73:9c:c6:49:2d:17:db: 4c:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:B4:67:5D:3C:5D:D9:86:93:D7:11:37:33:89:05:09:F0:00:BF:01 X509v3 Authority Key Identifier: keyid:87:EE:39:4C:C8:B1:65:1B:75:8F:38:8F:73:A8:8E:68:BD:27:22:2F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/h-45TMixZRt1jziPc6iOaL0nIi8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h-45TMixZRt1jziPc6iOaL0nIi8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/drRnXTxd2YaT1xE3M4kFCfAAvwE.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.79.60.0/24 Signature Algorithm: sha256WithRSAEncryption 49:9c:60:10:51:02:4d:19:c6:ed:15:cc:34:48:2a:a4:1b:37: f2:67:91:eb:38:d7:00:db:53:92:45:ce:75:8b:33:5a:27:2f: 29:7a:12:63:31:3c:61:de:b1:00:65:87:1e:50:a8:12:dd:c5: 09:e9:ac:4e:d7:62:b9:da:02:dd:87:e7:72:18:d7:c7:e1:46: 7a:57:e8:c2:93:5c:c0:0e:80:de:fa:cc:0f:5d:99:7c:3c:c3: 95:3d:42:ef:07:86:72:ba:a0:9c:e7:35:f7:16:38:a3:4e:49: 2b:0b:6e:d0:c5:25:b0:17:48:eb:2d:1e:45:9a:b4:0a:17:d5: 90:01:fa:bc:1a:3c:1e:a5:a8:2b:c8:36:12:44:ef:04:86:b9: fe:13:5d:c7:ad:be:aa:9a:e5:c2:ef:33:8a:fe:dc:59:ea:53: ec:3f:7d:c1:f7:d0:27:14:84:36:77:fb:5d:6e:67:f5:df:f9: 02:ed:b6:61:bf:18:d5:2a:8a:04:f9:09:aa:f4:ca:e6:98:2d: 34:90:6d:2f:04:60:6f:cc:d4:4f:37:a0:3c:ab:e0:b3:b2:4b: dc:8c:e8:52:bb:98:00:a9:8c:9a:ef:cc:f6:44:c2:9c:9b:90: 1c:9e:19:2b:25:ee:6c:c4:84:e4:1d:64:aa:f5:df:56:ce:bb: 50:49:89:d2 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBPDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4N0VF Mzk0Q0M4QjE2NTFCNzU4RjM4OEY3M0E4OEU2OEJEMjcyMjJGMB4XDTI0MDMyODA4 MzU0MVoXDTI1MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoNzZCNDY3NUQzQzVERDk4 NjkzRDcxMTM3MzM4OTA1MDlGMDAwQkYwMTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANftQ3l+B2jIfffB+xhxojk+DOtMvk7F97YfJXYKW/khuH/MWAUl iDXQ8V5JjwZ9JY+r//jxaOGIXNxMrCXr6BDUAdKA8tZjWY37ULv5o/+nVvOhU+uW yyRu7bsh9kC3NKeQklkoNvtY64W2qH4i+N+QaKH7aIAjwefN4lOTKy4CsLFbUxs3 t9MW22TIENaUdjgiYuZEodTL+QSeyG//82JOlUNDvRHxxXgyYUcmb/TeTkj7/W+2 hyAQ1gaOCFD9mmbCKayq0g+0yXGDKu8NoudyglTxsIXwiJQRMg2s+oXf0+XhJeZD LmXu2YTkOv/oLpvNbyWjNOlznMZJLRfbTHsCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBR2tGddPF3ZhpPXETcziQUJ8AC/ATAfBgNVHSMEGDAWgBSH7jlMyLFlG3WPOI9z qI5ovSciLzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvODgzL2gtNDVUTWl4WlJ0MWp6aVBjNmlPYUwwbklpOC5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2gtNDVUTWl4WlJ0MWp6aVBjNmlPYUww bklpOC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC84ODMvZHJSblhUeGQyWWFUMXhFM000a0ZDZkFBdndFLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAMtPPDANBgkqhkiG9w0BAQsFAAOCAQEASZxgEFECTRnG7RXMNEgqpBs38meR 6zjXANtTkkXOdYszWicvKXoSYzE8Yd6xAGWHHlCoEt3FCemsTtdiudoC3YfnchjX x+FGelfowpNcwA6A3vrMD12ZfDzDlT1C7weGcrqgnOc19xY4o05JKwtu0MUlsBdI 6y0eRZq0ChfVkAH6vBo8HqWoK8g2EkTvBIa5/hNdx62+qprlwu8ziv7cWepT7D99 wffQJxSENnf7XW5n9d/5Au22Yb8Y1SqKBPkJqvTK5pgtNJBtLwRgb8zUTzegPKvg s7JL3IzoUruYAKmMmu/M9kTCnJuQHJ4ZKyXubMSE5B1kqvXfVs67UEmJ0g== -----END CERTIFICATE-----Generated at Thu Jun 13 14:59:06 2024 by rpki-client on console-fra.rpki-client.org