$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/307/zyJoOzHb0897DIOdH0bpiU1ufj8.roa File: zyJoOzHb0897DIOdH0bpiU1ufj8.roa (raw, json) Hash identifier: sQyKxMhxXioRIBk6J9dQPhS+RtC9WEGaciD54gqlRdM= Subject key identifier: CF:22:68:3B:31:DB:D3:CF:7B:0C:83:9D:1F:46:E9:89:4D:6E:7E:3F Certificate issuer: /CN=6D1ED16D8C6D3BA40BF42CB3A29652ADAB76D061 Certificate serial: 0C Authority key identifier: 6D:1E:D1:6D:8C:6D:3B:A4:0B:F4:2C:B3:A2:96:52:AD:AB:76:D0:61 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bR7RbYxtO6QL9CyzopZSrat20GE.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/zyJoOzHb0897DIOdH0bpiU1ufj8.roa Signing time: Thu 16 Nov 2023 02:48:39 +0000 ROA not before: Thu 16 Nov 2023 02:48:39 +0000 ROA not after: Thu 14 Nov 2024 01:30:03 +0000 asID: 23783 IP address blocks: 203.179.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/bR7RbYxtO6QL9CyzopZSrat20GE.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/bR7RbYxtO6QL9CyzopZSrat20GE.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bR7RbYxtO6QL9CyzopZSrat20GE.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Jun 2024 01:32:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12 (0xc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D1ED16D8C6D3BA40BF42CB3A29652ADAB76D061 Validity Not Before: Nov 16 02:48:39 2023 GMT Not After : Nov 14 01:30:03 2024 GMT Subject: CN=CF22683B31DBD3CF7B0C839D1F46E9894D6E7E3F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:9e:b1:96:d4:8e:3f:d7:0e:d7:8f:38:65:3c: f5:db:cc:3b:d1:9e:48:7d:cc:bc:03:47:35:53:54: b7:8a:d8:7c:2d:6d:2a:de:d2:b3:66:5c:ab:eb:c3: 6a:49:85:e3:db:73:d8:3a:d8:d0:c7:47:c5:e2:9e: e9:e2:19:50:b6:fc:b5:35:10:5e:97:f7:41:42:19: 64:34:a4:dc:15:a5:df:e0:ef:2d:8b:0c:10:cf:11: bb:7b:00:ae:97:c7:42:d2:5e:67:cf:6e:1a:b8:8f: 4d:ab:3d:06:fb:ed:c2:28:fe:93:75:f0:93:76:47: 53:97:55:24:ad:ae:be:de:37:70:e2:6d:f7:20:36: cf:76:d5:08:6d:50:8e:d0:29:c7:17:d0:47:6a:cc: 7a:84:8f:31:88:bf:d0:ba:8d:a9:04:67:33:2a:02: 82:02:a2:12:81:74:54:bb:1f:21:86:dc:8a:26:8e: 77:a8:27:70:d4:96:70:3a:25:0f:7f:1c:22:ce:49: 48:a7:48:7f:ad:41:51:f4:38:c9:98:b5:99:31:9f: 91:2a:fd:1a:5e:b8:0e:e6:db:ac:ab:49:4d:75:f2: 18:4b:00:dd:2a:e4:ce:d6:e7:b9:ce:c4:d1:8f:89: 11:ed:96:27:2b:80:a4:b5:33:0c:04:49:73:71:64: 9c:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:22:68:3B:31:DB:D3:CF:7B:0C:83:9D:1F:46:E9:89:4D:6E:7E:3F X509v3 Authority Key Identifier: keyid:6D:1E:D1:6D:8C:6D:3B:A4:0B:F4:2C:B3:A2:96:52:AD:AB:76:D0:61 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/bR7RbYxtO6QL9CyzopZSrat20GE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bR7RbYxtO6QL9CyzopZSrat20GE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/zyJoOzHb0897DIOdH0bpiU1ufj8.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.179.252.0/22 Signature Algorithm: sha256WithRSAEncryption d0:6d:53:7c:a8:b3:42:c0:1a:ba:74:9e:82:03:11:c4:a9:d3: 4f:46:60:e5:04:72:25:31:4d:d9:6e:a7:18:9d:cc:ad:c5:26: f7:e4:83:29:0f:c3:e4:a9:dc:2d:ed:2f:0d:b6:c7:0f:5e:5e: 9b:c5:cd:38:37:83:b5:ce:73:37:de:0e:ae:d1:33:00:dc:02: a8:14:95:1e:0c:36:ef:92:90:fa:1c:42:8e:a2:ca:0f:bc:74: 93:d1:d1:2a:1f:55:f0:92:dc:d1:73:8f:a0:2e:2c:fe:4d:2f: 81:fc:11:f0:22:34:b4:73:b9:40:c3:2c:7e:7f:20:0c:72:b5: 5f:80:1e:45:77:d8:55:0a:44:51:1a:d4:8b:c7:7b:0a:35:36: 65:7a:29:29:0e:17:85:8a:9d:b6:26:6b:ea:93:76:7b:55:fa: af:35:25:c1:2c:90:49:69:32:a0:84:e0:86:0b:46:4a:5f:5c: 52:86:bd:e6:f0:7c:33:a1:cf:f6:bb:5e:7d:f7:a3:a3:cc:2f: d0:62:bd:18:14:0f:27:6e:07:c0:2d:d9:11:c0:a9:4d:7d:af: a9:61:13:57:87:dd:94:f3:b5:d3:44:ea:1e:2c:6d:9c:2f:9a: 28:dd:24:96:89:e8:29:81:61:2f:fc:5b:54:62:2e:c6:69:48: 0c:df:8d:6d -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBDDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2RDFF RDE2RDhDNkQzQkE0MEJGNDJDQjNBMjk2NTJBREFCNzZEMDYxMB4XDTIzMTExNjAy NDgzOVoXDTI0MTExNDAxMzAwM1owMzExMC8GA1UEAxMoQ0YyMjY4M0IzMURCRDND RjdCMEM4MzlEMUY0NkU5ODk0RDZFN0UzRjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMiesZbUjj/XDtePOGU89dvMO9GeSH3MvANHNVNUt4rYfC1tKt7S s2Zcq+vDakmF49tz2DrY0MdHxeKe6eIZULb8tTUQXpf3QUIZZDSk3BWl3+DvLYsM EM8Ru3sArpfHQtJeZ89uGriPTas9Bvvtwij+k3Xwk3ZHU5dVJK2uvt43cOJt9yA2 z3bVCG1QjtApxxfQR2rMeoSPMYi/0LqNqQRnMyoCggKiEoF0VLsfIYbciiaOd6gn cNSWcDolD38cIs5JSKdIf61BUfQ4yZi1mTGfkSr9Gl64DubbrKtJTXXyGEsA3Srk ztbnuc7E0Y+JEe2WJyuApLUzDARJc3FknOsCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBTPImg7MdvTz3sMg50fRumJTW5+PzAfBgNVHSMEGDAWgBRtHtFtjG07pAv0LLOi llKtq3bQYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzA3L2JSN1JiWXh0TzZRTDlDeXpvcFpTcmF0MjBHRS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2JSN1JiWXh0TzZRTDlDeXpvcFpTcmF0 MjBHRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8zMDcvenlKb096SGIwODk3RElPZEgwYnBpVTF1Zmo4LnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAsuz/DANBgkqhkiG9w0BAQsFAAOCAQEA0G1TfKizQsAaunSeggMRxKnTT0Zg 5QRyJTFN2W6nGJ3MrcUm9+SDKQ/D5KncLe0vDbbHD15em8XNODeDtc5zN94OrtEz ANwCqBSVHgw275KQ+hxCjqLKD7x0k9HRKh9V8JLc0XOPoC4s/k0vgfwR8CI0tHO5 QMMsfn8gDHK1X4AeRXfYVQpEURrUi8d7CjU2ZXopKQ4XhYqdtiZr6pN2e1X6rzUl wSyQSWkyoITghgtGSl9cUoa95vB8M6HP9rteffejo8wv0GK9GBQPJ24HwC3ZEcCp TX2vqWETV4fdlPO100TqHixtnC+aKN0klonoKYFhL/xbVGIuxmlIDN+NbQ== -----END CERTIFICATE-----Generated at Sat Jun 15 02:41:52 2024 by rpki-client on console-ams.rpki-client.org