$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/I4XczI7oGWI-1v5XWTn9JdhduLQ.roa File: I4XczI7oGWI-1v5XWTn9JdhduLQ.roa (raw, json) Hash identifier: jSWqGdsQD3DxKaib5dTrTZ7KzzgrkL9q+i3rezZ3nok= Subject key identifier: 23:85:DC:CC:8E:E8:19:62:3E:D6:FE:57:59:39:FD:25:D8:5D:B8:B4 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 04E3 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/I4XczI7oGWI-1v5XWTn9JdhduLQ.roa Signing time: Thu 27 Jul 2023 16:50:13 +0000 ROA not before: Thu 27 Jul 2023 16:50:13 +0000 ROA not after: Sun 14 Jul 2024 01:30:03 +0000 asID: 9605 IP address blocks: 1.76.226.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Jun 2024 06:27:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1251 (0x4e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jul 27 16:50:13 2023 GMT Not After : Jul 14 01:30:03 2024 GMT Subject: CN=2385DCCC8EE819623ED6FE575939FD25D85DB8B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:8f:89:39:01:64:9c:49:db:3d:33:2a:b4:3c: 43:a7:e2:f8:16:6d:d1:34:33:b8:57:72:cf:4c:32: 18:b5:0c:ef:c6:40:d4:f4:f5:96:ee:42:74:b7:67: bb:a8:8d:21:19:87:ff:9e:bb:c4:df:69:21:34:81: 82:c9:c9:20:78:9c:16:89:c8:a5:e2:2d:c4:82:7e: 8f:34:5a:b6:25:b4:b0:90:7b:07:d1:78:d3:76:7c: 6a:60:d1:0d:a4:55:97:6c:51:b5:6f:dc:fa:8d:9f: d7:4f:43:d4:27:23:96:8c:04:8c:1d:b8:e0:da:e2: f2:c2:f2:8d:94:68:d5:a9:15:5b:17:db:ec:a6:8b: 64:ce:87:d0:02:2b:33:29:b9:71:db:5e:f4:6a:3f: dd:c7:2c:a3:22:c0:5b:61:04:86:bc:96:a1:cf:c5: 27:6b:ce:99:b4:ad:9a:64:e3:e9:52:c1:a5:f6:e8: 57:21:0e:cf:1b:2b:b8:0f:1f:44:60:da:84:38:4c: b4:c6:1d:82:1d:6d:66:3f:f8:b2:3d:46:aa:f4:53: 14:91:cc:45:68:45:90:de:04:68:fa:11:09:06:2f: 85:d2:6e:56:ff:75:73:ac:16:b3:4f:e1:bd:72:8b: 4e:88:13:9a:12:5e:4d:57:42:85:83:09:f3:cb:1e: 5f:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:85:DC:CC:8E:E8:19:62:3E:D6:FE:57:59:39:FD:25:D8:5D:B8:B4 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/I4XczI7oGWI-1v5XWTn9JdhduLQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.76.226.0/23 Signature Algorithm: sha256WithRSAEncryption 16:3a:06:16:d4:cc:54:b7:cf:9c:ae:fc:f7:d8:d6:4f:ba:24: 39:7a:aa:d8:9e:75:8b:06:9c:37:43:08:47:46:bb:21:01:2f: 58:cf:95:34:76:3b:61:16:21:e3:0e:93:3b:87:b3:8d:d4:f1: 2e:f0:0c:25:e1:d0:fb:4d:8e:0b:02:53:b6:bd:49:a1:37:0a: 19:ac:9b:25:ed:f2:4f:5d:07:22:5d:a2:5d:ce:76:c8:5f:39: 39:76:6f:df:27:d8:db:e5:18:f5:65:a1:fd:55:1c:43:0b:e1: 0b:63:39:c6:f8:70:56:8e:47:15:80:43:4f:8c:11:b6:3e:b0: 90:58:3b:67:b1:97:55:86:4a:1e:3d:dc:ff:85:b7:45:1e:48: 25:c2:8e:fe:79:9b:2f:79:bd:9b:ca:5c:10:6d:b2:1c:81:55: ee:c1:7b:39:5d:18:d0:12:da:b8:92:85:a9:bf:2c:31:00:bb: 0a:9e:c8:57:4a:4f:14:00:c5:eb:fc:7b:a8:3b:f9:77:5e:08: 19:11:96:64:cb:06:67:c4:ee:42:c1:91:ec:5f:84:37:3a:2a: 5e:ee:13:ad:37:15:bd:3d:78:55:c2:76:e8:0f:96:dc:2c:ca: a0:11:f5:8f:c1:73:9a:1a:74:c6:18:5c:39:42:af:bb:35:d3: e0:df:49:0f -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBOMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA3Mjcx NjUwMTNaFw0yNDA3MTQwMTMwMDNaMDMxMTAvBgNVBAMTKDIzODVEQ0NDOEVFODE5 NjIzRUQ2RkU1NzU5MzlGRDI1RDg1REI4QjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC0j4k5AWScSds9Myq0PEOn4vgWbdE0M7hXcs9MMhi1DO/GQNT0 9ZbuQnS3Z7uojSEZh/+eu8TfaSE0gYLJySB4nBaJyKXiLcSCfo80WrYltLCQewfR eNN2fGpg0Q2kVZdsUbVv3PqNn9dPQ9QnI5aMBIwduODa4vLC8o2UaNWpFVsX2+ym i2TOh9ACKzMpuXHbXvRqP93HLKMiwFthBIa8lqHPxSdrzpm0rZpk4+lSwaX26Fch Ds8bK7gPH0Rg2oQ4TLTGHYIdbWY/+LI9Rqr0UxSRzEVoRZDeBGj6EQkGL4XSblb/ dXOsFrNP4b1yi06IE5oSXk1XQoWDCfPLHl87AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUI4XczI7oGWI+1v5XWTn9JdhduLQwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0k0WGN6STdvR1dJLTF2NVhXVG45SmRoZHVMUS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEBTOIwDQYJKoZIhvcNAQELBQADggEBABY6BhbUzFS3z5yu/PfY1k+6JDl6 qtiedYsGnDdDCEdGuyEBL1jPlTR2O2EWIeMOkzuHs43U8S7wDCXh0PtNjgsCU7a9 SaE3ChmsmyXt8k9dByJdol3OdshfOTl2b98n2NvlGPVlof1VHEML4QtjOcb4cFaO RxWAQ0+MEbY+sJBYO2exl1WGSh493P+Ft0UeSCXCjv55my95vZvKXBBtshyBVe7B ezldGNAS2riSham/LDEAuwqeyFdKTxQAxev8e6g7+XdeCBkRlmTLBmfE7kLBkexf hDc6Kl7uE603Fb09eFXCdugPltwsyqAR9Y/Bc5oadMYYXDlCr7s10+DfSQ8= -----END CERTIFICATE-----Generated at Tue Jun 25 02:54:24 2024 by rpki-client on console.sobornost.net