$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/783/twKTogx5Fr3ws8AGnHxih_kn9iQ.roa File: twKTogx5Fr3ws8AGnHxih_kn9iQ.roa (raw, json) Hash identifier: J9lmOmm3mmZXGUjuhvJlNn12N5jtDvBcstOfPc/2sI8= Subject key identifier: B7:02:93:A2:0C:79:16:BD:F0:B3:C0:06:9C:7C:62:87:F9:27:F6:24 Certificate issuer: /CN=CB8300B20659BB951060F60B1F4BC6091AF27639 Certificate serial: 36 Authority key identifier: CB:83:00:B2:06:59:BB:95:10:60:F6:0B:1F:4B:C6:09:1A:F2:76:39 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/twKTogx5Fr3ws8AGnHxih_kn9iQ.roa Signing time: Fri 15 Sep 2023 06:48:45 +0000 ROA not before: Fri 15 Sep 2023 06:48:45 +0000 ROA not after: Sat 14 Sep 2024 01:30:03 +0000 asID: 18144 IP address blocks: 203.168.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Jun 2024 06:27:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54 (0x36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB8300B20659BB951060F60B1F4BC6091AF27639 Validity Not Before: Sep 15 06:48:45 2023 GMT Not After : Sep 14 01:30:03 2024 GMT Subject: CN=B70293A20C7916BDF0B3C0069C7C6287F927F624 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:77:c6:be:a0:42:85:ed:7b:38:ad:90:56:e0: b3:fa:10:b8:08:fe:50:11:c0:93:60:a7:74:28:92: 77:16:17:78:28:45:14:32:7e:f5:26:2d:08:21:10: 53:3f:1e:47:d3:28:8b:d8:3a:ea:9f:64:f4:4c:38: 6c:06:ff:9b:ef:79:75:f3:eb:04:27:fe:a1:dd:10: e1:41:92:77:92:81:48:c3:f4:d0:67:62:e6:39:5d: 97:e5:6c:fa:7d:54:a0:21:b3:22:b6:18:71:19:f1: 7a:85:18:88:49:f4:62:ab:3d:f6:b0:e8:77:99:5e: 05:5b:14:83:d2:79:bc:4c:ff:92:cd:82:cc:13:bc: f7:1b:26:02:a0:76:fc:6e:83:02:6b:e0:37:91:f6: 55:dc:b0:f5:e9:8e:15:8f:c6:53:29:f3:5b:9a:52: fd:0d:ea:e1:a0:ae:13:a6:0e:4d:4e:dd:6b:cc:85: b0:3f:9a:ca:c1:3c:9f:0c:64:2f:6a:31:76:f5:79: c9:17:e9:0c:8e:4a:7e:bd:0f:20:18:b7:ab:78:9d: a3:60:fc:d0:e8:b0:64:90:26:36:ee:1e:a6:50:78: 82:21:9c:f6:0b:1f:e6:ec:45:45:83:3e:c4:1b:75: 0e:05:d9:40:d4:4f:73:f8:97:77:a0:84:f4:22:2a: 5f:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:02:93:A2:0C:79:16:BD:F0:B3:C0:06:9C:7C:62:87:F9:27:F6:24 X509v3 Authority Key Identifier: keyid:CB:83:00:B2:06:59:BB:95:10:60:F6:0B:1F:4B:C6:09:1A:F2:76:39 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/twKTogx5Fr3ws8AGnHxih_kn9iQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.168.64.0/18 Signature Algorithm: sha256WithRSAEncryption 57:a3:a8:ab:51:ad:87:1b:78:7d:84:75:b9:b9:5d:76:40:80: 6c:c6:39:ec:ee:27:2f:ed:90:3d:b0:22:43:9d:58:5e:18:2c: e9:2f:99:45:2e:42:26:cb:80:01:8f:16:ac:72:d1:87:bf:c8: 4a:90:8d:cf:bb:c3:b0:a4:a5:66:7d:61:2a:9c:33:05:fa:64: 31:8e:97:fc:ac:e6:c9:14:9a:45:f1:6c:75:9c:cc:e7:17:c8: 9e:aa:6e:81:2b:7f:17:33:30:24:b4:63:5f:30:ae:74:11:7c: 59:0d:51:78:0a:40:d7:93:b2:da:ee:d2:09:4f:0b:af:8b:17: 67:0c:9a:17:fe:79:1a:c9:8c:bc:36:47:24:10:c5:7d:42:ad: 3b:5b:5d:02:5d:59:02:95:f5:f5:27:d1:30:f6:d3:79:d9:ea: 59:05:e3:07:19:89:7f:65:1b:f8:31:ff:bc:b3:9d:b4:a9:dc: 92:e6:98:a3:a8:f0:54:93:7f:24:d2:63:9c:c2:cf:f8:a7:f0: 8a:f7:7e:26:f8:b3:4f:6d:19:86:c9:cf:a4:16:5b:9e:04:2c: 94:38:a4:06:9d:0c:91:cb:f4:14:fb:9d:17:6e:44:80:1f:27: dc:e2:0d:be:c4:fb:9b:8a:c3:29:99:fe:a4:d8:2c:bc:f2:09: f3:6d:d3:64 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBNjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDQjgz MDBCMjA2NTlCQjk1MTA2MEY2MEIxRjRCQzYwOTFBRjI3NjM5MB4XDTIzMDkxNTA2 NDg0NVoXDTI0MDkxNDAxMzAwM1owMzExMC8GA1UEAxMoQjcwMjkzQTIwQzc5MTZC REYwQjNDMDA2OUM3QzYyODdGOTI3RjYyNDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALZ3xr6gQoXtezitkFbgs/oQuAj+UBHAk2CndCiSdxYXeChFFDJ+ 9SYtCCEQUz8eR9Moi9g66p9k9Ew4bAb/m+95dfPrBCf+od0Q4UGSd5KBSMP00Gdi 5jldl+Vs+n1UoCGzIrYYcRnxeoUYiEn0Yqs99rDod5leBVsUg9J5vEz/ks2CzBO8 9xsmAqB2/G6DAmvgN5H2Vdyw9emOFY/GUynzW5pS/Q3q4aCuE6YOTU7da8yFsD+a ysE8nwxkL2oxdvV5yRfpDI5Kfr0PIBi3q3ido2D80OiwZJAmNu4eplB4giGc9gsf 5uxFRYM+xBt1DgXZQNRPc/iXd6CE9CIqXyECAwEAAaOCAiQwggIgMB0GA1UdDgQW BBS3ApOiDHkWvfCzwAacfGKH+Sf2JDAfBgNVHSMEGDAWgBTLgwCyBlm7lRBg9gsf S8YJGvJ2OTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNzgzL3k0TUFzZ1padTVVUVlQWUxIMHZHQ1JyeWRqay5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3k0TUFzZ1padTVVUVlQWUxIMHZHQ1Jy eWRqay5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC83ODMvdHdLVG9neDVGcjN3czhBR25IeGloX2tuOWlRLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBsuoQDANBgkqhkiG9w0BAQsFAAOCAQEAV6Ooq1Gthxt4fYR1ublddkCAbMY5 7O4nL+2QPbAiQ51YXhgs6S+ZRS5CJsuAAY8WrHLRh7/ISpCNz7vDsKSlZn1hKpwz BfpkMY6X/KzmyRSaRfFsdZzM5xfInqpugSt/FzMwJLRjXzCudBF8WQ1ReApA15Oy 2u7SCU8Lr4sXZwyaF/55GsmMvDZHJBDFfUKtO1tdAl1ZApX19SfRMPbTednqWQXj BxmJf2Ub+DH/vLOdtKnckuaYo6jwVJN/JNJjnMLP+Kfwivd+JvizT20ZhsnPpBZb ngQslDikBp0Mkcv0FPudF25EgB8n3OINvsT7m4rDKZn+pNgsvPIJ823TZA== -----END CERTIFICATE-----Generated at Mon Jun 24 23:50:32 2024 by rpki-client on console-fra.rpki-client.org