$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/7B92BQs5ob3LCFjICfZxZGO321s.roa File: 7B92BQs5ob3LCFjICfZxZGO321s.roa (raw, json) Hash identifier: UDV80RBAUnpSZ3m9gOcVEl0f3cWW/vi0ywvbhHm1VsM= Subject key identifier: EC:1F:76:05:0B:39:A1:BD:CB:08:58:C8:09:F6:71:64:63:B7:DB:5B Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0573 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/7B92BQs5ob3LCFjICfZxZGO321s.roa Signing time: Thu 27 Jul 2023 16:58:05 +0000 ROA not before: Thu 27 Jul 2023 16:58:05 +0000 ROA not after: Sun 14 Jul 2024 01:30:03 +0000 asID: 9605 IP address blocks: 219.114.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Jun 2024 06:27:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1395 (0x573) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jul 27 16:58:05 2023 GMT Not After : Jul 14 01:30:03 2024 GMT Subject: CN=EC1F76050B39A1BDCB0858C809F6716463B7DB5B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:14:b3:18:af:2b:c2:ac:1b:22:6d:82:cb:13: 25:57:18:e9:8c:f2:87:a1:66:41:ef:35:0b:a0:b4: a1:26:60:55:c4:cc:4c:94:ba:9b:a7:6e:dc:d4:8d: 64:61:23:af:f9:a1:14:34:99:96:7c:ea:d3:89:00: 8b:1c:d1:b3:e1:f0:d2:e6:c1:84:63:60:f6:19:31: dd:ac:96:14:0f:87:6e:5b:33:ea:ed:88:36:6c:bc: 3b:ac:02:1f:05:0d:43:33:95:36:e7:51:f1:14:a2: 52:f9:3c:b7:3f:fb:ed:e7:87:9f:84:65:5b:b0:0a: 0a:47:46:73:0d:d4:41:1c:6b:1c:3f:12:ff:c9:67: e9:21:82:86:71:ca:e7:12:e1:28:f3:b6:e5:04:4f: 96:ae:00:79:6a:5c:3e:15:92:0d:cc:dd:21:40:33: 3d:c6:00:5b:03:28:05:21:2d:52:84:e9:48:e6:c1: fb:cd:1a:64:53:df:c7:ac:f5:7c:f8:f6:08:1d:b8: da:44:c6:ab:fc:b4:40:72:59:d1:2a:53:5a:9a:87: 08:4a:ed:3d:46:26:58:92:3a:5a:54:b6:6a:a4:79: cf:ed:f7:09:81:aa:38:8c:54:bb:75:74:eb:0c:55: 26:17:1b:ad:31:8b:0e:a2:d0:d1:69:2d:b8:e4:d5: 14:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:1F:76:05:0B:39:A1:BD:CB:08:58:C8:09:F6:71:64:63:B7:DB:5B X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/7B92BQs5ob3LCFjICfZxZGO321s.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 219.114.128.0/20 Signature Algorithm: sha256WithRSAEncryption b4:64:ea:bf:62:70:28:85:bd:c5:a9:97:3a:c1:53:5b:6e:63: 0a:5c:15:cd:d5:41:d1:e8:ef:a1:67:e3:cf:bf:95:0c:92:91: ae:31:e1:7c:92:dd:f5:25:e1:4a:8b:80:58:5d:aa:cf:f6:3b: 02:41:61:8c:19:81:5d:f6:8f:0f:96:2d:cf:11:55:aa:77:0c: eb:06:06:5f:34:88:d0:f4:58:95:27:1d:c5:be:b5:0f:9c:0f: 69:18:a0:8b:d8:7e:a7:da:e9:5f:16:dd:61:c1:4e:03:2a:15: 32:ec:e4:aa:68:53:f6:02:d1:c9:ba:b0:82:5f:80:12:cb:6f: 5c:6d:20:63:7a:17:5c:17:13:45:4d:5b:ad:ba:9d:ee:d2:34: d8:e8:7c:b3:39:36:3f:bf:ce:f0:0a:e4:42:3c:c7:f5:4e:c3: 55:7e:d8:c9:ea:b2:ea:f1:6f:f0:ff:2c:4d:69:42:29:54:66: 32:a2:1b:05:ef:93:de:36:2c:8e:50:5d:52:aa:d7:5f:7c:19: 66:dd:91:c5:f5:98:a8:75:25:b7:c7:a2:8d:58:68:99:d1:75: e7:49:51:c9:ad:c3:38:40:ff:ab:57:3e:32:53:95:03:f2:55: f3:82:54:a2:7e:f7:44:5f:3a:4a:93:81:01:00:77:37:b1:e5: bf:5d:91:c6 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBXMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA3Mjcx NjU4MDVaFw0yNDA3MTQwMTMwMDNaMDMxMTAvBgNVBAMTKEVDMUY3NjA1MEIzOUEx QkRDQjA4NThDODA5RjY3MTY0NjNCN0RCNUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDmFLMYryvCrBsibYLLEyVXGOmM8oehZkHvNQugtKEmYFXEzEyU upunbtzUjWRhI6/5oRQ0mZZ86tOJAIsc0bPh8NLmwYRjYPYZMd2slhQPh25bM+rt iDZsvDusAh8FDUMzlTbnUfEUolL5PLc/++3nh5+EZVuwCgpHRnMN1EEcaxw/Ev/J Z+khgoZxyucS4SjztuUET5auAHlqXD4Vkg3M3SFAMz3GAFsDKAUhLVKE6UjmwfvN GmRT38es9Xz49ggduNpExqv8tEByWdEqU1qahwhK7T1GJliSOlpUtmqkec/t9wmB qjiMVLt1dOsMVSYXG60xiw6i0NFpLbjk1RQlAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU7B92BQs5ob3LCFjICfZxZGO321swHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5LzdCOTJCUXM1b2IzTENGaklDZlp4WkdPMzIxcy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBATbcoAwDQYJKoZIhvcNAQELBQADggEBALRk6r9icCiFvcWplzrBU1tuYwpc Fc3VQdHo76Fn48+/lQySka4x4XyS3fUl4UqLgFhdqs/2OwJBYYwZgV32jw+WLc8R Vap3DOsGBl80iND0WJUnHcW+tQ+cD2kYoIvYfqfa6V8W3WHBTgMqFTLs5KpoU/YC 0cm6sIJfgBLLb1xtIGN6F1wXE0VNW626ne7SNNjofLM5Nj+/zvAK5EI8x/VOw1V+ 2Mnqsurxb/D/LE1pQilUZjKiGwXvk942LI5QXVKq1198GWbdkcX1mKh1JbfHoo1Y aJnRdedJUcmtwzhA/6tXPjJTlQPyVfOCVKJ+90RfOkqTgQEAdzex5b9dkcY= -----END CERTIFICATE-----Generated at Tue Jun 25 02:54:24 2024 by rpki-client on console.sobornost.net