$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/307/kGGJTl7Qda_XrVIm8RGQF4BDAuk.roa File: kGGJTl7Qda_XrVIm8RGQF4BDAuk.roa (raw, json) Hash identifier: MqxXKAbCkXND6/XstrD5SBtdGcAjJwRziBp3W/m6l3w= Subject key identifier: 90:61:89:4E:5E:D0:75:AF:D7:AD:52:26:F1:11:90:17:80:43:02:E9 Certificate issuer: /CN=6D1ED16D8C6D3BA40BF42CB3A29652ADAB76D061 Certificate serial: 03 Authority key identifier: 6D:1E:D1:6D:8C:6D:3B:A4:0B:F4:2C:B3:A2:96:52:AD:AB:76:D0:61 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bR7RbYxtO6QL9CyzopZSrat20GE.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/kGGJTl7Qda_XrVIm8RGQF4BDAuk.roa Signing time: Mon 06 Nov 2023 07:22:55 +0000 ROA not before: Mon 06 Nov 2023 07:22:55 +0000 ROA not after: Fri 01 Nov 2024 08:11:41 +0000 asID: 23783 IP address blocks: 27.110.96.0/20 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/bR7RbYxtO6QL9CyzopZSrat20GE.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/bR7RbYxtO6QL9CyzopZSrat20GE.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bR7RbYxtO6QL9CyzopZSrat20GE.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 13 Jun 2024 14:03:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D1ED16D8C6D3BA40BF42CB3A29652ADAB76D061 Validity Not Before: Nov 6 07:22:55 2023 GMT Not After : Nov 1 08:11:41 2024 GMT Subject: CN=9061894E5ED075AFD7AD5226F1119017804302E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:9d:99:3d:cb:60:0d:f7:6f:a5:9b:56:79:76: 7a:25:72:3d:4e:4b:8a:5c:c0:66:6c:a7:12:5e:13: e0:fe:53:dc:60:5f:74:b7:36:d4:aa:b9:59:09:2c: 01:62:dc:92:db:71:34:06:1b:f4:b5:43:8b:0b:72: 2e:a3:3a:3b:0c:77:c5:91:62:30:10:fd:ce:78:77: ce:bd:79:73:9f:3a:fd:07:fb:6e:fa:05:94:4e:36: f7:5a:76:3d:b0:24:ac:cb:05:bd:4e:be:d1:f3:5c: 48:4c:15:c3:09:62:66:31:ad:bd:fc:5b:45:45:fd: fe:02:72:09:5d:5b:69:9f:6e:53:ad:65:ae:44:ce: 94:6b:f7:f9:89:cd:2f:3d:b6:d1:f4:ab:68:82:ae: 0c:cf:1c:54:58:eb:ec:8b:c8:3d:68:48:fa:42:78: 09:c6:cd:91:a8:d4:3b:62:25:c6:9c:67:f2:04:59: 8a:9a:9a:9a:0f:15:38:21:c4:a1:ed:b4:e9:81:09: 9e:e9:bb:47:11:93:49:b9:92:43:ec:a6:ca:fe:f3: 69:b0:b0:a0:fd:3d:87:46:bc:ac:d9:ca:d2:ec:18: 42:1a:09:df:fe:6d:c8:79:e7:42:80:68:71:51:bc: 75:87:06:41:7d:df:e5:44:5b:61:7d:1d:39:cb:a4: c9:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:61:89:4E:5E:D0:75:AF:D7:AD:52:26:F1:11:90:17:80:43:02:E9 X509v3 Authority Key Identifier: keyid:6D:1E:D1:6D:8C:6D:3B:A4:0B:F4:2C:B3:A2:96:52:AD:AB:76:D0:61 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/bR7RbYxtO6QL9CyzopZSrat20GE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bR7RbYxtO6QL9CyzopZSrat20GE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/kGGJTl7Qda_XrVIm8RGQF4BDAuk.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.110.96.0/20 Signature Algorithm: sha256WithRSAEncryption 36:6c:7b:ca:dd:09:4a:41:6f:41:79:ac:a1:db:fd:5a:e8:10: 6d:31:ea:05:3d:4f:e0:02:6b:83:2e:6b:d7:50:65:09:8d:07: e3:3f:7b:6c:ef:38:55:fb:41:f5:c4:09:29:ed:5f:07:e0:e1: 8f:5c:7e:f4:87:cd:d5:43:cd:f2:65:2b:99:83:8a:54:7a:3e: 33:e0:15:5d:64:c3:ff:ce:a0:8b:cb:90:12:ba:42:db:82:c3: aa:70:8a:4d:4a:72:99:ff:56:0f:0b:3d:ce:34:a3:29:17:84: 40:13:fa:c0:38:15:7c:b7:b1:aa:06:0c:e8:ff:71:6c:77:56: 6f:4b:d1:03:8a:c8:75:93:fc:56:39:3c:02:11:29:ad:f6:86: e7:e6:52:11:02:b5:8e:ac:0a:be:36:8f:80:1c:ab:f7:2c:f4: bf:98:7f:bb:82:42:ce:f2:7a:1f:50:7c:d0:cc:cd:f6:76:44: 79:33:3c:5c:f4:e4:9c:38:47:47:2a:39:3c:ee:ec:07:69:a6: 7e:95:38:b4:6d:c3:57:a4:4f:36:be:20:6f:ee:02:e8:60:9c: 01:40:69:65:08:a6:a2:fb:7f:6a:c3:e7:39:f1:8e:2e:31:cc: 1e:09:05:8f:b0:91:08:28:c3:96:08:f2:8d:41:67:5a:63:7a: 27:3e:fb:37 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBAzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2RDFF RDE2RDhDNkQzQkE0MEJGNDJDQjNBMjk2NTJBREFCNzZEMDYxMB4XDTIzMTEwNjA3 MjI1NVoXDTI0MTEwMTA4MTE0MVowMzExMC8GA1UEAxMoOTA2MTg5NEU1RUQwNzVB RkQ3QUQ1MjI2RjExMTkwMTc4MDQzMDJFOTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKqdmT3LYA33b6WbVnl2eiVyPU5LilzAZmynEl4T4P5T3GBfdLc2 1Kq5WQksAWLckttxNAYb9LVDiwtyLqM6Owx3xZFiMBD9znh3zr15c586/Qf7bvoF lE4291p2PbAkrMsFvU6+0fNcSEwVwwliZjGtvfxbRUX9/gJyCV1baZ9uU61lrkTO lGv3+YnNLz220fSraIKuDM8cVFjr7IvIPWhI+kJ4CcbNkajUO2Ilxpxn8gRZipqa mg8VOCHEoe206YEJnum7RxGTSbmSQ+ymyv7zabCwoP09h0a8rNnK0uwYQhoJ3/5t yHnnQoBocVG8dYcGQX3f5URbYX0dOcukyXsCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBSQYYlOXtB1r9etUibxEZAXgEMC6TAfBgNVHSMEGDAWgBRtHtFtjG07pAv0LLOi llKtq3bQYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzA3L2JSN1JiWXh0TzZRTDlDeXpvcFpTcmF0MjBHRS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2JSN1JiWXh0TzZRTDlDeXpvcFpTcmF0 MjBHRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8zMDcva0dHSlRsN1FkYV9YclZJbThSR1FGNEJEQXVrLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBBtuYDANBgkqhkiG9w0BAQsFAAOCAQEANmx7yt0JSkFvQXmsodv9WugQbTHq BT1P4AJrgy5r11BlCY0H4z97bO84VftB9cQJKe1fB+Dhj1x+9IfN1UPN8mUrmYOK VHo+M+AVXWTD/86gi8uQErpC24LDqnCKTUpymf9WDws9zjSjKReEQBP6wDgVfLex qgYM6P9xbHdWb0vRA4rIdZP8Vjk8AhEprfaG5+ZSEQK1jqwKvjaPgByr9yz0v5h/ u4JCzvJ6H1B80MzN9nZEeTM8XPTknDhHRyo5PO7sB2mmfpU4tG3DV6RPNr4gb+4C 6GCcAUBpZQimovt/asPnOfGOLjHMHgkFj7CRCCjDlgjyjUFnWmN6Jz77Nw== -----END CERTIFICATE-----Generated at Thu Jun 6 15:06:35 2024 by rpki-client on console-ams.rpki-client.org