$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/S3q7QNrEzsEhwHFaosuSUrR0lQo.roa File: S3q7QNrEzsEhwHFaosuSUrR0lQo.roa (raw, json) Hash identifier: QvdsSHwFFoMbxYjh8u5oVB0QF07Oqjjin5qtTUP0tU4= Subject key identifier: 4B:7A:BB:40:DA:C4:CE:C1:21:C0:71:5A:A2:CB:92:52:B4:74:95:0A Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 04A7 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/S3q7QNrEzsEhwHFaosuSUrR0lQo.roa Signing time: Thu 27 Jul 2023 16:46:14 +0000 ROA not before: Thu 27 Jul 2023 16:46:14 +0000 ROA not after: Sun 14 Jul 2024 01:30:03 +0000 asID: 9605 IP address blocks: 1.66.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Jun 2024 06:27:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1191 (0x4a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jul 27 16:46:14 2023 GMT Not After : Jul 14 01:30:03 2024 GMT Subject: CN=4B7ABB40DAC4CEC121C0715AA2CB9252B474950A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:6b:b0:cf:e9:4b:5a:c8:2b:be:64:b2:b2:e2: ab:33:29:72:43:c3:b6:79:55:31:71:a0:77:5f:84: 92:a0:e3:5b:03:68:b3:27:11:d2:85:9c:54:f9:e8: aa:d2:4f:44:ee:ea:e0:f9:7e:20:39:52:21:1f:a9: 21:64:99:4a:1e:27:d6:84:d4:62:ec:a1:b2:41:05: d3:e1:f2:2d:42:dd:84:04:39:97:ca:5e:f9:46:9f: da:3a:65:8c:99:a1:73:c2:be:2e:df:b5:15:27:66: 0e:b5:cd:86:a3:b9:f2:c2:b2:89:73:c7:a6:0b:8e: a6:2d:73:b1:64:2e:6e:4c:77:31:50:45:48:a6:b8: a1:83:6f:e5:a6:d2:aa:f1:32:ac:d2:67:b8:0f:40: 77:8f:d1:1c:b9:22:57:f1:c4:27:7d:4b:bb:87:d4: 5a:73:67:4e:6b:92:55:54:42:6d:48:59:16:6c:38: fa:97:b7:3d:6f:12:41:d7:cb:3a:c5:ab:2b:bb:74: 41:77:de:04:cf:c0:90:0c:b8:93:f2:73:d3:fd:ba: c6:b7:94:2b:4a:05:09:8c:70:fa:1c:01:7b:dc:94: 47:ad:9b:05:f5:ee:2f:07:a4:ff:ff:a6:29:6e:40: 6b:2e:43:d9:de:76:8f:0e:ca:30:24:c5:f1:74:52: 65:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:7A:BB:40:DA:C4:CE:C1:21:C0:71:5A:A2:CB:92:52:B4:74:95:0A X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/S3q7QNrEzsEhwHFaosuSUrR0lQo.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.66.192.0/18 Signature Algorithm: sha256WithRSAEncryption a5:0e:cf:20:86:6b:ea:1f:9f:a9:3b:f4:5c:de:d0:07:96:d8: 98:c2:82:f7:05:bb:3b:fa:11:a5:b2:09:49:09:95:8c:5e:6a: d2:19:3d:96:a7:b9:6d:d1:c2:9e:03:18:8a:dd:73:44:0a:15: d3:bc:78:70:a8:cb:e1:fd:52:4c:5b:b0:62:45:6a:14:5b:0c: 32:75:7d:cd:95:bf:c4:f7:22:c5:ff:36:d9:c7:bd:1c:be:a4: 71:7a:f9:b8:90:0c:17:d7:0b:a1:39:9e:b8:1d:06:5c:af:2d: 17:09:5d:39:84:8c:6c:0e:57:20:c8:09:e3:ac:70:10:e2:22: 97:ea:da:f6:8e:f3:ae:54:0a:ad:30:f0:9b:5d:a4:2e:4b:a0: b3:dc:1c:c7:e4:ab:46:d0:05:fc:57:68:3f:91:e5:9b:e4:3c: e2:d0:fe:68:a1:86:59:91:47:58:12:ba:35:f4:fe:78:67:ef: 47:8a:7d:df:e7:8a:4d:b8:a9:74:e2:9b:9e:e8:74:73:43:0a: 69:6c:8c:0c:41:4b:6b:6f:bd:3a:a0:86:c2:4f:16:42:0f:4f: 3f:17:85:58:a8:19:43:4e:ce:25:88:dc:84:26:58:0d:3f:80: 4c:fa:52:af:6a:c8:33:48:7b:8b:95:31:bc:22:81:c0:3f:a3: 23:51:9a:82 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBKcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA3Mjcx NjQ2MTRaFw0yNDA3MTQwMTMwMDNaMDMxMTAvBgNVBAMTKDRCN0FCQjQwREFDNENF QzEyMUMwNzE1QUEyQ0I5MjUyQjQ3NDk1MEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDca7DP6UtayCu+ZLKy4qszKXJDw7Z5VTFxoHdfhJKg41sDaLMn EdKFnFT56KrST0Tu6uD5fiA5UiEfqSFkmUoeJ9aE1GLsobJBBdPh8i1C3YQEOZfK XvlGn9o6ZYyZoXPCvi7ftRUnZg61zYajufLCsolzx6YLjqYtc7FkLm5MdzFQRUim uKGDb+Wm0qrxMqzSZ7gPQHeP0Ry5IlfxxCd9S7uH1FpzZ05rklVUQm1IWRZsOPqX tz1vEkHXyzrFqyu7dEF33gTPwJAMuJPyc9P9usa3lCtKBQmMcPocAXvclEetmwX1 7i8HpP//piluQGsuQ9nedo8OyjAkxfF0UmWJAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUS3q7QNrEzsEhwHFaosuSUrR0lQowHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1MzcTdRTnJFenNFaHdIRmFvc3VTVXJSMGxRby5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAYBQsAwDQYJKoZIhvcNAQELBQADggEBAKUOzyCGa+ofn6k79Fze0AeW2JjC gvcFuzv6EaWyCUkJlYxeatIZPZanuW3Rwp4DGIrdc0QKFdO8eHCoy+H9UkxbsGJF ahRbDDJ1fc2Vv8T3IsX/NtnHvRy+pHF6+biQDBfXC6E5nrgdBlyvLRcJXTmEjGwO VyDICeOscBDiIpfq2vaO865UCq0w8JtdpC5LoLPcHMfkq0bQBfxXaD+R5ZvkPOLQ /mihhlmRR1gSujX0/nhn70eKfd/nik24qXTim57odHNDCmlsjAxBS2tvvTqghsJP FkIPTz8XhVioGUNOziWI3IQmWA0/gEz6Uq9qyDNIe4uVMbwigcA/oyNRmoI= -----END CERTIFICATE-----Generated at Tue Jun 25 02:54:25 2024 by rpki-client on console.sobornost.net