$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/n2YUpO_phBYJvaihvyUaPqj4NPs.roa File: n2YUpO_phBYJvaihvyUaPqj4NPs.roa (raw, json) Hash identifier: 9am2Fw0CpsEdyyOa++QWkME8dhwR2kyzB2oDSFHLNgQ= Subject key identifier: 9F:66:14:A4:EF:E9:84:16:09:BD:A8:A1:BF:25:1A:3E:A8:F8:34:FB Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 05AC Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/n2YUpO_phBYJvaihvyUaPqj4NPs.roa Signing time: Thu 27 Jul 2023 17:00:21 +0000 ROA not before: Thu 27 Jul 2023 17:00:21 +0000 ROA not after: Sun 14 Jul 2024 01:30:03 +0000 asID: 9605 IP address blocks: 220.159.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Jul 2024 00:06:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1452 (0x5ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jul 27 17:00:21 2023 GMT Not After : Jul 14 01:30:03 2024 GMT Subject: CN=9F6614A4EFE9841609BDA8A1BF251A3EA8F834FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a8:69:80:e7:29:35:48:e7:f1:99:d2:5c:ee: a7:41:06:4c:43:2d:5e:34:76:0d:1d:e6:66:97:04: b9:76:cc:90:0b:76:d9:28:45:3d:d6:f9:f0:d1:59: 00:b6:da:8a:06:b9:55:ce:76:a2:8b:72:7b:e6:3d: e8:52:b3:ba:e6:6d:78:be:2f:72:49:c5:55:33:5f: f8:5b:76:72:48:46:b0:eb:3c:af:a2:e4:d0:b9:2f: 83:ca:03:59:ef:7b:8a:05:ba:de:73:62:2b:25:79: ca:3d:c3:89:37:00:79:ba:24:47:11:93:88:11:bb: f8:67:13:15:3b:f8:c1:67:05:3c:fc:cd:01:9b:5e: 98:db:79:99:64:24:29:68:e5:4c:fd:18:d0:98:aa: b6:81:3b:71:f3:7b:b3:57:b2:9a:b7:06:1e:c7:b8: 0b:a4:e9:e8:64:39:06:8f:7c:28:0a:fd:de:52:41: 75:1e:95:8d:3f:40:95:5c:e4:f5:3b:d0:24:b4:a7: 33:d6:81:02:69:58:a8:14:1c:31:a1:24:6c:94:94: b6:8d:dc:f0:f3:d6:1b:39:a1:5a:26:e2:b6:27:af: 8c:4d:bc:99:7c:1e:95:f4:8c:fa:77:ce:42:2b:c3: e1:8d:c3:35:92:d2:9e:03:0e:93:95:54:74:80:a9: 3d:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:66:14:A4:EF:E9:84:16:09:BD:A8:A1:BF:25:1A:3E:A8:F8:34:FB X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/n2YUpO_phBYJvaihvyUaPqj4NPs.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 220.159.208.0/22 Signature Algorithm: sha256WithRSAEncryption 3a:5f:60:4d:b7:8e:84:43:79:57:63:36:7d:f2:ec:e4:10:a6: d9:42:83:c1:60:3f:cd:9e:9e:28:cd:de:83:b3:37:8e:40:09: 97:d8:41:bd:52:88:29:14:df:6d:cf:f3:67:b4:69:8f:b1:30: ec:b0:a4:5b:5c:e0:5c:ee:e8:d8:ad:78:9f:b7:9c:4c:d5:e5: 72:fa:33:5e:51:d0:f5:14:fb:11:32:c9:7b:3f:3e:5b:48:3c: 1a:d0:ea:bb:58:42:d2:6a:c9:26:75:3d:28:20:dc:ad:a8:dc: 8d:98:b4:17:00:0b:7e:3d:1a:3d:cf:04:80:41:65:34:50:4f: 7e:f0:11:b7:a6:3f:6f:14:d4:5a:9d:c3:10:5f:c6:9b:ad:1c: af:63:11:9a:79:7f:a7:56:96:2c:d9:c2:d9:dc:65:e4:7e:a5: 2e:f8:11:b8:86:2f:2e:07:7e:f3:97:e5:53:be:aa:9b:90:9a: ef:2f:be:00:8b:4c:e3:20:c5:be:a0:0e:52:a9:ac:93:a0:3b: c0:84:1c:49:7e:f8:16:ef:4a:b3:d6:a7:91:c7:75:9a:c8:16: e2:73:24:67:c3:f7:0e:d5:ef:e1:2c:51:71:d9:f7:bc:6d:f6: 06:ff:75:c8:05:6c:fc:40:65:f7:44:cf:a8:9a:2f:3c:6f:69: 60:2f:19:a2 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBawwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA3Mjcx NzAwMjFaFw0yNDA3MTQwMTMwMDNaMDMxMTAvBgNVBAMTKDlGNjYxNEE0RUZFOTg0 MTYwOUJEQThBMUJGMjUxQTNFQThGODM0RkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC0qGmA5yk1SOfxmdJc7qdBBkxDLV40dg0d5maXBLl2zJALdtko RT3W+fDRWQC22ooGuVXOdqKLcnvmPehSs7rmbXi+L3JJxVUzX/hbdnJIRrDrPK+i 5NC5L4PKA1nve4oFut5zYisleco9w4k3AHm6JEcRk4gRu/hnExU7+MFnBTz8zQGb XpjbeZlkJClo5Uz9GNCYqraBO3Hze7NXspq3Bh7HuAuk6ehkOQaPfCgK/d5SQXUe lY0/QJVc5PU70CS0pzPWgQJpWKgUHDGhJGyUlLaN3PDz1hs5oVom4rYnr4xNvJl8 HpX0jPp3zkIrw+GNwzWS0p4DDpOVVHSAqT0tAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUn2YUpO/phBYJvaihvyUaPqj4NPswHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L24yWVVwT19waEJZSnZhaWh2eVVhUHFqNE5Qcy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBALcn9AwDQYJKoZIhvcNAQELBQADggEBADpfYE23joRDeVdjNn3y7OQQptlC g8FgP82enijN3oOzN45ACZfYQb1SiCkU323P82e0aY+xMOywpFtc4Fzu6NiteJ+3 nEzV5XL6M15R0PUU+xEyyXs/PltIPBrQ6rtYQtJqySZ1PSgg3K2o3I2YtBcAC349 Gj3PBIBBZTRQT37wEbemP28U1FqdwxBfxputHK9jEZp5f6dWlizZwtncZeR+pS74 EbiGLy4HfvOX5VO+qpuQmu8vvgCLTOMgxb6gDlKprJOgO8CEHEl++BbvSrPWp5HH dZrIFuJzJGfD9w7V7+EsUXHZ97xt9gb/dcgFbPxAZfdEz6iaLzxvaWAvGaI= -----END CERTIFICATE-----Generated at Sun Jun 30 02:54:19 2024 by rpki-client on console.sobornost.net