$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Q3CEEszr5GIYnKy-wNMs3IL0qbg.roa File: Q3CEEszr5GIYnKy-wNMs3IL0qbg.roa (raw, json) Hash identifier: EtTO0AxavJVRTxfMoUL+U98eLUehheyiJ0KUlurawEY= Subject key identifier: 43:70:84:12:CC:EB:E4:62:18:9C:AC:BE:C0:D3:2C:DC:82:F4:A9:B8 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0488 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Q3CEEszr5GIYnKy-wNMs3IL0qbg.roa Signing time: Thu 27 Jul 2023 16:44:13 +0000 ROA not before: Thu 27 Jul 2023 16:44:13 +0000 ROA not after: Sun 14 Jul 2024 01:30:03 +0000 asID: 9605 IP address blocks: 1.66.108.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Jun 2024 06:27:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1160 (0x488) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jul 27 16:44:13 2023 GMT Not After : Jul 14 01:30:03 2024 GMT Subject: CN=43708412CCEBE462189CACBEC0D32CDC82F4A9B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:87:7d:46:d1:8a:f3:83:04:08:f1:9a:4e:1a: e3:a1:1e:c1:45:e3:96:d8:9b:c5:84:91:a2:13:d6: 6a:e5:9d:f8:0d:ab:54:8c:b4:21:b6:30:f6:c8:59: 2c:de:af:79:b5:8c:6b:ba:e0:90:51:09:e5:51:90: 84:dd:99:1c:f2:1e:df:55:eb:73:81:95:92:0e:3a: 13:64:29:1a:f4:b6:0b:8c:6f:e2:96:46:17:af:80: 6a:56:98:4e:bc:9d:df:73:d2:5a:db:ab:b1:8a:25: 39:75:34:00:65:91:52:61:4d:77:18:16:0e:cd:ff: 38:85:0d:9a:f5:de:0f:7c:70:d2:dc:5f:ac:7d:35: b3:bb:c1:2f:bb:b5:be:03:a3:f1:22:1d:36:9c:7e: d4:9e:9a:30:ad:3f:a9:a8:84:72:e9:a1:05:6d:6c: d0:d7:a1:f0:80:5d:85:6e:a7:30:b3:76:48:14:3c: 68:43:d0:56:83:8d:69:8f:4f:9b:83:eb:1f:87:78: ca:ae:ec:9b:c4:c7:b7:65:3d:3b:14:b9:d4:65:2a: 13:b2:d5:74:8a:8b:e9:3c:a9:5d:43:a2:d1:db:f0: b9:1d:6c:c4:2d:f1:86:68:0e:f4:7f:2a:2f:95:f9: 4c:70:2d:6d:9d:b0:77:b6:5a:22:4a:35:3c:ef:27: a4:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:70:84:12:CC:EB:E4:62:18:9C:AC:BE:C0:D3:2C:DC:82:F4:A9:B8 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Q3CEEszr5GIYnKy-wNMs3IL0qbg.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.66.108.0/23 Signature Algorithm: sha256WithRSAEncryption 1a:f9:17:78:5c:b1:3d:5e:20:3e:7c:bb:34:52:d2:15:2d:f5: 46:93:a4:38:ed:e1:32:fc:41:30:f4:15:1b:f4:3c:04:d6:d1: ad:97:06:a8:71:5e:1d:c2:6a:8c:14:de:f6:ba:5b:96:ef:28: 0a:28:f5:91:09:b9:da:ec:51:d6:da:97:d7:a2:eb:5b:f2:2a: d3:e7:88:71:10:a8:be:a2:e3:10:9f:d5:17:7e:d0:d0:05:9c: 79:ba:88:92:31:0b:f1:0f:b7:c0:bc:f2:35:f0:dd:f1:0b:0e: 31:ef:f1:aa:88:92:54:4d:6d:6a:de:82:f1:5e:d3:17:1c:7c: cc:c1:48:9d:12:f3:9d:8d:57:ed:fb:00:3b:35:37:76:f7:1f: df:2e:6d:79:fb:38:24:ad:ed:5c:c4:79:a4:75:fe:9f:56:81: 13:2c:57:0d:31:04:14:ef:3f:91:55:21:09:3e:45:2a:2c:a9: 7b:8e:3c:44:e6:9c:28:af:c0:27:7b:d4:22:b5:39:7f:1b:b0: 70:e2:d2:09:e2:93:8d:2d:65:25:b0:fb:02:93:06:44:2c:e7: 9b:30:8d:6b:40:e6:d1:35:2a:af:a3:73:f5:cb:d3:dd:ec:85: 0b:fb:19:09:51:81:fc:eb:86:09:c4:3a:aa:b9:45:69:4f:30: 20:4f:53:f2 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBIgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA3Mjcx NjQ0MTNaFw0yNDA3MTQwMTMwMDNaMDMxMTAvBgNVBAMTKDQzNzA4NDEyQ0NFQkU0 NjIxODlDQUNCRUMwRDMyQ0RDODJGNEE5QjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCdh31G0YrzgwQI8ZpOGuOhHsFF45bYm8WEkaIT1mrlnfgNq1SM tCG2MPbIWSzer3m1jGu64JBRCeVRkITdmRzyHt9V63OBlZIOOhNkKRr0tguMb+KW RhevgGpWmE68nd9z0lrbq7GKJTl1NABlkVJhTXcYFg7N/ziFDZr13g98cNLcX6x9 NbO7wS+7tb4Do/EiHTacftSemjCtP6mohHLpoQVtbNDXofCAXYVupzCzdkgUPGhD 0FaDjWmPT5uD6x+HeMqu7JvEx7dlPTsUudRlKhOy1XSKi+k8qV1DotHb8LkdbMQt 8YZoDvR/Ki+V+UxwLW2dsHe2WiJKNTzvJ6QZAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUQ3CEEszr5GIYnKy+wNMs3IL0qbgwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1EzQ0VFc3pyNUdJWW5LeS13Tk1zM0lMMHFiZy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEBQmwwDQYJKoZIhvcNAQELBQADggEBABr5F3hcsT1eID58uzRS0hUt9UaT pDjt4TL8QTD0FRv0PATW0a2XBqhxXh3CaowU3va6W5bvKAoo9ZEJudrsUdbal9ei 61vyKtPniHEQqL6i4xCf1Rd+0NAFnHm6iJIxC/EPt8C88jXw3fELDjHv8aqIklRN bWregvFe0xccfMzBSJ0S852NV+37ADs1N3b3H98ubXn7OCSt7VzEeaR1/p9WgRMs Vw0xBBTvP5FVIQk+RSosqXuOPETmnCivwCd71CK1OX8bsHDi0gnik40tZSWw+wKT BkQs55swjWtA5tE1Kq+jc/XL093shQv7GQlRgfzrhgnEOqq5RWlPMCBPU/I= -----END CERTIFICATE-----Generated at Tue Jun 25 02:54:24 2024 by rpki-client on console.sobornost.net