$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/FAiJZ3OiWCXhiSLgAR9taThJgag.roa File: FAiJZ3OiWCXhiSLgAR9taThJgag.roa (raw, json) Hash identifier: DkcGmTYFW7ZjJ/2mesRlwnlpwzUG5wPiTw+m9L5ujt4= Subject key identifier: 14:08:89:67:73:A2:58:25:E1:89:22:E0:01:1F:6D:69:38:49:81:A8 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 053D Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/FAiJZ3OiWCXhiSLgAR9taThJgag.roa Signing time: Thu 27 Jul 2023 16:54:17 +0000 ROA not before: Thu 27 Jul 2023 16:54:17 +0000 ROA not after: Sun 14 Jul 2024 01:30:03 +0000 asID: 9605 IP address blocks: 219.122.72.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Jun 2024 06:27:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1341 (0x53d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jul 27 16:54:17 2023 GMT Not After : Jul 14 01:30:03 2024 GMT Subject: CN=1408896773A25825E18922E0011F6D69384981A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:61:e9:85:d9:e9:64:5d:0c:60:68:45:8b:4d: 98:ba:b6:52:d6:cc:ca:39:b9:7c:11:ea:01:f9:b8: b7:7e:c3:f4:d2:46:65:28:9a:cd:12:72:f9:a0:16: ce:cd:0d:32:dd:36:af:11:7b:97:96:c0:91:0c:ea: fa:f6:31:1a:62:69:37:24:b3:47:4d:9f:30:66:62: 1d:a3:95:f8:86:53:9d:4e:bc:b7:63:66:94:ed:26: 36:bc:c7:23:5a:75:7f:27:7e:46:f9:5f:aa:d5:d8: e2:92:23:c6:5e:d4:93:68:7e:96:2a:c9:a1:c0:74: f0:78:e2:49:95:6c:87:9b:43:92:ae:9a:f5:2a:f4: 33:6d:c9:08:78:34:b4:8d:d3:99:e4:0a:7c:0b:9c: 6d:0a:91:c6:d9:79:e8:cb:87:71:5a:89:3e:c7:3d: e7:1e:68:e5:20:1d:8e:4a:d5:dd:e2:e4:5c:8d:4f: c1:ff:65:c9:bb:0e:11:24:ea:ce:07:ad:53:38:e5: 81:be:c8:5e:fb:2c:72:31:fa:51:d4:cc:e0:d2:57: 04:e3:a5:ec:89:ea:cb:38:a8:f0:bb:ed:3e:1a:01: 2a:ed:41:a3:0c:a2:37:f9:15:71:68:35:86:79:cc: e8:10:0b:99:56:c0:25:6e:e4:5e:2f:78:56:dd:66: 78:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:08:89:67:73:A2:58:25:E1:89:22:E0:01:1F:6D:69:38:49:81:A8 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/FAiJZ3OiWCXhiSLgAR9taThJgag.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 219.122.72.0/22 Signature Algorithm: sha256WithRSAEncryption 86:f0:3e:fe:47:24:a3:01:1d:94:ef:f5:b4:44:44:66:87:47: 2b:7d:ad:26:66:4a:21:1b:fb:da:2c:0d:a9:e8:b2:41:5c:c7: bb:4f:f7:8d:02:83:c2:6c:08:4a:4c:22:95:fc:cd:9e:b4:d5: 9b:9a:ca:d1:c3:94:2e:29:a1:8f:8a:bc:ab:b1:6d:16:08:05: e6:58:5a:f1:68:19:92:1f:2e:2b:f0:73:5d:39:c6:a3:09:3e: 79:2e:08:b6:e4:a7:a8:54:e5:89:09:7e:c0:4e:13:23:19:2d: 3d:ac:4a:ac:c2:70:5c:a9:e3:e2:ab:69:99:4b:e5:90:f2:1c: 64:1c:94:99:1b:dc:74:d7:e4:52:d0:83:db:d2:1f:a0:46:b4: d0:b1:9c:a0:b4:7b:6e:0a:7b:ed:d3:32:5e:5f:2f:99:be:ea: 5f:04:b1:e7:6a:92:66:07:e2:8a:24:f8:ed:87:a0:24:b2:e9: ef:7a:06:3e:3d:12:7c:70:d7:04:35:87:00:7a:85:78:03:53: 5b:81:ca:b2:16:c1:cb:af:62:b1:66:d5:96:d1:65:7c:91:ec: da:16:66:59:96:ae:6e:5e:9f:fd:6f:dc:bb:2e:66:4d:60:7c: 62:2a:21:70:d7:e1:09:1a:5f:b7:60:1b:2b:30:a5:83:40:2e: 92:69:7e:0f -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBT0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA3Mjcx NjU0MTdaFw0yNDA3MTQwMTMwMDNaMDMxMTAvBgNVBAMTKDE0MDg4OTY3NzNBMjU4 MjVFMTg5MjJFMDAxMUY2RDY5Mzg0OTgxQTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDGYemF2elkXQxgaEWLTZi6tlLWzMo5uXwR6gH5uLd+w/TSRmUo ms0ScvmgFs7NDTLdNq8Re5eWwJEM6vr2MRpiaTcks0dNnzBmYh2jlfiGU51OvLdj ZpTtJja8xyNadX8nfkb5X6rV2OKSI8Ze1JNofpYqyaHAdPB44kmVbIebQ5KumvUq 9DNtyQh4NLSN05nkCnwLnG0KkcbZeejLh3FaiT7HPeceaOUgHY5K1d3i5FyNT8H/ Zcm7DhEk6s4HrVM45YG+yF77LHIx+lHUzODSVwTjpeyJ6ss4qPC77T4aASrtQaMM ojf5FXFoNYZ5zOgQC5lWwCVu5F4veFbdZnhLAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUFAiJZ3OiWCXhiSLgAR9taThJgagwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0ZBaUpaM09pV0NYaGlTTGdBUjl0YVRoSmdhZy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBALbekgwDQYJKoZIhvcNAQELBQADggEBAIbwPv5HJKMBHZTv9bRERGaHRyt9 rSZmSiEb+9osDanoskFcx7tP940Cg8JsCEpMIpX8zZ601ZuaytHDlC4poY+KvKux bRYIBeZYWvFoGZIfLivwc105xqMJPnkuCLbkp6hU5YkJfsBOEyMZLT2sSqzCcFyp 4+KraZlL5ZDyHGQclJkb3HTX5FLQg9vSH6BGtNCxnKC0e24Ke+3TMl5fL5m+6l8E sedqkmYH4ook+O2HoCSy6e96Bj49Enxw1wQ1hwB6hXgDU1uByrIWwcuvYrFm1ZbR ZXyR7NoWZlmWrm5en/1v3LsuZk1gfGIqIXDX4QkaX7dgGyswpYNALpJpfg8= -----END CERTIFICATE-----Generated at Tue Jun 25 02:54:24 2024 by rpki-client on console.sobornost.net