$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/307/1wk3lL3m2KgsTXizZn7GUechu80.roa File: 1wk3lL3m2KgsTXizZn7GUechu80.roa (raw, json) Hash identifier: 9gd7BAq0PDnavs+qYhFjeo5QV+byWbPIQbp4edbRsmo= Subject key identifier: D7:09:37:94:BD:E6:D8:A8:2C:4D:78:B3:66:7E:C6:51:E7:21:BB:CD Certificate issuer: /CN=6D1ED16D8C6D3BA40BF42CB3A29652ADAB76D061 Certificate serial: 07 Authority key identifier: 6D:1E:D1:6D:8C:6D:3B:A4:0B:F4:2C:B3:A2:96:52:AD:AB:76:D0:61 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bR7RbYxtO6QL9CyzopZSrat20GE.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/1wk3lL3m2KgsTXizZn7GUechu80.roa Signing time: Mon 06 Nov 2023 07:22:58 +0000 ROA not before: Mon 06 Nov 2023 07:22:58 +0000 ROA not after: Fri 01 Nov 2024 08:11:41 +0000 asID: 23783 IP address blocks: 61.11.192.0/20 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/bR7RbYxtO6QL9CyzopZSrat20GE.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/bR7RbYxtO6QL9CyzopZSrat20GE.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bR7RbYxtO6QL9CyzopZSrat20GE.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7 (0x7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D1ED16D8C6D3BA40BF42CB3A29652ADAB76D061 Validity Not Before: Nov 6 07:22:58 2023 GMT Not After : Nov 1 08:11:41 2024 GMT Subject: CN=D7093794BDE6D8A82C4D78B3667EC651E721BBCD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:94:03:33:ac:63:cb:05:b3:8c:e0:d0:00:01: d4:06:ec:54:c0:cd:00:24:42:33:76:0c:aa:84:52: 8c:99:ea:39:99:10:19:54:34:ec:32:97:c2:f6:06: de:bd:4f:20:67:96:83:d4:ff:b7:3d:cc:02:54:27: 01:06:db:29:01:92:ed:69:d1:20:07:bf:3c:7e:fd: fe:c2:23:33:f3:ca:ba:0d:3f:6f:18:1b:0c:18:07: 77:2d:46:1f:e7:47:88:02:56:b6:2f:aa:1c:82:ee: 74:8a:94:08:ff:eb:67:b8:5f:64:3c:dd:20:00:83: 05:aa:ba:55:9e:ad:cc:39:ed:89:61:67:00:f7:07: 01:b0:01:4c:0c:64:cf:a0:d6:6f:7d:26:dc:4d:df: 40:d8:7e:ec:06:02:f5:bb:01:5e:a5:fd:54:b8:26: bd:0b:24:be:1a:94:e9:dd:1e:97:b4:eb:d5:7a:98: 0d:15:a7:53:21:54:b9:b4:85:44:90:d9:3b:4e:73: b6:7d:b2:37:91:16:67:43:9e:98:fd:04:a1:c9:3f: 42:2e:6b:c9:63:ce:bd:59:48:b7:da:fd:35:82:a0: 42:1d:91:97:86:4b:1e:77:7d:6a:ac:f5:d3:93:50: 91:07:3e:90:81:4c:91:94:f8:ff:5c:af:64:96:46: f8:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:09:37:94:BD:E6:D8:A8:2C:4D:78:B3:66:7E:C6:51:E7:21:BB:CD X509v3 Authority Key Identifier: keyid:6D:1E:D1:6D:8C:6D:3B:A4:0B:F4:2C:B3:A2:96:52:AD:AB:76:D0:61 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/bR7RbYxtO6QL9CyzopZSrat20GE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bR7RbYxtO6QL9CyzopZSrat20GE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/1wk3lL3m2KgsTXizZn7GUechu80.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 61.11.192.0/20 Signature Algorithm: sha256WithRSAEncryption 45:7e:f0:db:00:2c:99:12:a8:96:dd:6f:da:52:61:75:c8:1b: cd:a2:89:51:d4:d6:1f:7f:60:17:f7:14:cb:c8:6f:09:48:34: ea:97:e9:73:7d:9a:7c:59:0a:e7:ab:a1:f5:a2:ac:8d:66:3d: 5e:99:fd:d0:ce:0f:58:6e:cb:2c:3c:15:b6:59:c5:91:db:23: 69:5e:c9:7b:36:5b:8f:29:91:ca:17:f2:1c:1d:b9:7e:70:96: c9:4d:05:62:80:4a:fe:23:fd:0c:f7:4a:e3:58:eb:61:91:b4: 68:76:87:7d:98:26:61:f9:17:bf:86:b6:0e:a7:be:97:30:5c: 08:f7:6f:6a:23:42:27:7c:bc:94:44:cb:ec:b2:e9:3c:e8:27: c8:76:a0:2b:d1:80:7d:f6:13:97:d2:63:ed:f0:56:06:a4:75: d1:2b:e2:70:90:92:7d:cc:72:ed:5b:60:41:08:df:cd:2a:26: a5:33:ed:78:29:ee:2c:d1:25:c0:7d:ed:fb:37:cc:f3:6a:2c: b1:6f:c2:75:c6:56:74:bc:52:3d:91:83:f5:aa:a8:90:a2:65: a1:da:4a:89:96:9b:2a:3f:65:a2:fe:35:69:0b:93:4e:d3:07: e5:36:d8:3f:82:b2:6b:be:55:39:29:9f:e5:de:64:c4:c2:d3: 79:60:de:0f -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBBzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2RDFF RDE2RDhDNkQzQkE0MEJGNDJDQjNBMjk2NTJBREFCNzZEMDYxMB4XDTIzMTEwNjA3 MjI1OFoXDTI0MTEwMTA4MTE0MVowMzExMC8GA1UEAxMoRDcwOTM3OTRCREU2RDhB ODJDNEQ3OEIzNjY3RUM2NTFFNzIxQkJDRDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANiUAzOsY8sFs4zg0AAB1AbsVMDNACRCM3YMqoRSjJnqOZkQGVQ0 7DKXwvYG3r1PIGeWg9T/tz3MAlQnAQbbKQGS7WnRIAe/PH79/sIjM/PKug0/bxgb DBgHdy1GH+dHiAJWti+qHILudIqUCP/rZ7hfZDzdIACDBaq6VZ6tzDntiWFnAPcH AbABTAxkz6DWb30m3E3fQNh+7AYC9bsBXqX9VLgmvQskvhqU6d0el7Tr1XqYDRWn UyFUubSFRJDZO05ztn2yN5EWZ0OemP0Eock/Qi5ryWPOvVlIt9r9NYKgQh2Rl4ZL Hnd9aqz105NQkQc+kIFMkZT4/1yvZJZG+GECAwEAAaOCAiQwggIgMB0GA1UdDgQW BBTXCTeUvebYqCxNeLNmfsZR5yG7zTAfBgNVHSMEGDAWgBRtHtFtjG07pAv0LLOi llKtq3bQYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzA3L2JSN1JiWXh0TzZRTDlDeXpvcFpTcmF0MjBHRS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2JSN1JiWXh0TzZRTDlDeXpvcFpTcmF0 MjBHRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8zMDcvMXdrM2xMM20yS2dzVFhpelpuN0dVZWNodTgwLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBD0LwDANBgkqhkiG9w0BAQsFAAOCAQEARX7w2wAsmRKolt1v2lJhdcgbzaKJ UdTWH39gF/cUy8hvCUg06pfpc32afFkK56uh9aKsjWY9Xpn90M4PWG7LLDwVtlnF kdsjaV7JezZbjymRyhfyHB25fnCWyU0FYoBK/iP9DPdK41jrYZG0aHaHfZgmYfkX v4a2Dqe+lzBcCPdvaiNCJ3y8lETL7LLpPOgnyHagK9GAffYTl9Jj7fBWBqR10Svi cJCSfcxy7VtgQQjfzSompTPteCnuLNElwH3t+zfM82ossW/CdcZWdLxSPZGD9aqo kKJlodpKiZabKj9lov41aQuTTtMH5TbYP4Kya75VOSmf5d5kxMLTeWDeDw== -----END CERTIFICATE-----Generated at Sat Jun 1 15:54:28 2024 by rpki-client on console-ams.rpki-client.org