$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/-5DZ5--Y0clSC-T8NrPJ_JxhDsU.roa File: -5DZ5--Y0clSC-T8NrPJ_JxhDsU.roa (raw, json) Hash identifier: XHcUrGIjUcV3bguyYFKKrkY+/ldT7pG/+EWeASRgmuk= Subject key identifier: FB:90:D9:E7:EF:98:D1:C9:52:0B:E4:FC:36:B3:C9:FC:9C:61:0E:C5 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 087F Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-5DZ5--Y0clSC-T8NrPJ_JxhDsU.roa Signing time: Tue 30 Apr 2024 02:20:28 +0000 ROA not before: Tue 30 Apr 2024 02:20:28 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 27.230.80.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2175 (0x87f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 30 02:20:28 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=FB90D9E7EF98D1C9520BE4FC36B3C9FC9C610EC5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:18:e0:9e:cf:fb:c3:9c:1b:e9:6c:03:97:97: 7c:44:08:10:05:5f:fb:c4:99:ba:1a:e9:75:6d:f3: 4f:6a:72:93:ad:72:52:8d:32:53:56:07:c5:31:ec: 25:69:0b:f2:da:bb:0d:81:c1:0b:ec:60:2b:96:a4: 08:6f:8d:b0:16:6a:77:2c:c6:c5:cb:63:6b:78:aa: f9:ef:05:d9:c6:c6:99:2e:dd:3a:db:0c:b8:f0:01: 58:d1:6f:42:bc:cb:a6:25:e4:b0:f6:d2:25:f9:cb: f1:16:51:db:be:7e:98:8d:86:3d:21:cb:dc:27:b2: b0:bf:3e:62:db:fd:04:c2:af:93:c3:ac:4b:46:42: b5:80:6a:95:70:f6:e4:b3:a8:81:0c:93:01:03:c5: 80:d5:82:de:90:9c:61:1d:a4:15:e2:9e:f4:d1:bb: 9c:bb:11:7c:83:08:d8:0a:5a:80:e2:6a:88:5d:5d: 45:68:78:f3:60:85:08:7e:6c:70:b0:15:cf:2a:f1: 1e:8b:fd:a1:16:d1:e1:b8:aa:5d:02:ca:5c:b4:da: 77:21:b0:cc:2c:9c:91:62:20:f2:e2:13:dd:c4:b6: 75:e6:ac:7c:5e:96:21:bc:51:a9:0d:4d:e7:5a:70: a0:17:2b:fb:56:40:5d:c8:89:05:d4:8a:ed:64:a1: af:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:90:D9:E7:EF:98:D1:C9:52:0B:E4:FC:36:B3:C9:FC:9C:61:0E:C5 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-5DZ5--Y0clSC-T8NrPJ_JxhDsU.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.230.80.0/21 Signature Algorithm: sha256WithRSAEncryption 37:32:7e:ae:63:e7:7e:46:ab:ce:01:b6:4a:59:b3:20:18:a6: 51:0d:fc:75:66:03:40:c0:31:d4:8f:57:72:47:e0:0f:e5:d3: 09:77:a0:d3:0b:8a:26:3c:b6:b5:d2:b3:45:61:38:ca:32:a8: 1d:d2:d1:33:47:2f:93:7d:62:7f:11:c7:d3:cc:bb:23:c5:b5: b2:bf:50:ce:89:de:af:77:3a:59:00:26:7d:e3:c2:6a:f7:81: 9d:0c:14:08:6f:fb:d5:0b:c0:ac:bd:8d:5e:66:fc:4f:ba:a0: 2c:f2:9c:30:84:74:9b:4f:e4:02:ee:eb:d6:1f:fc:ef:1b:55: ad:45:f1:95:8d:7b:ee:b4:33:f3:f2:d0:f9:bb:ce:1e:77:a8: bd:66:2f:c3:2f:81:82:fd:23:72:52:b8:f2:71:ce:1b:93:fb: 3d:32:25:01:b4:91:3d:91:53:55:70:10:1f:1f:29:86:37:a9: 33:d0:1b:69:17:a4:e8:55:dd:15:1f:d9:53:ab:7f:4c:9e:18: 37:a7:da:14:36:4f:60:5e:42:a0:4d:04:8f:1a:cf:4f:77:e3: 5a:38:42:e0:2c:91:cf:e9:a0:1d:85:94:1b:0b:36:3e:30:15: 77:c6:ba:b8:5e:34:1c:b5:73:5d:d0:6a:7d:93:eb:36:3f:b9: 23:8a:d6:b9 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCH8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw MjIwMjhaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEZCOTBEOUU3RUY5OEQx Qzk1MjBCRTRGQzM2QjNDOUZDOUM2MTBFQzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC2GOCez/vDnBvpbAOXl3xECBAFX/vEmboa6XVt809qcpOtclKN MlNWB8Ux7CVpC/Lauw2BwQvsYCuWpAhvjbAWancsxsXLY2t4qvnvBdnGxpku3Trb DLjwAVjRb0K8y6Yl5LD20iX5y/EWUdu+fpiNhj0hy9wnsrC/PmLb/QTCr5PDrEtG QrWAapVw9uSzqIEMkwEDxYDVgt6QnGEdpBXinvTRu5y7EXyDCNgKWoDiaohdXUVo ePNghQh+bHCwFc8q8R6L/aEW0eG4ql0Cyly02nchsMwsnJFiIPLiE93EtnXmrHxe liG8UakNTedacKAXK/tWQF3IiQXUiu1koa8jAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU+5DZ5++Y0clSC+T8NrPJ/JxhDsUwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5Ly01RFo1LS1ZMGNsU0MtVDhOclBKX0p4aERzVS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMb5lAwDQYJKoZIhvcNAQELBQADggEBADcyfq5j535Gq84BtkpZsyAYplEN /HVmA0DAMdSPV3JH4A/l0wl3oNMLiiY8trXSs0VhOMoyqB3S0TNHL5N9Yn8Rx9PM uyPFtbK/UM6J3q93OlkAJn3jwmr3gZ0MFAhv+9ULwKy9jV5m/E+6oCzynDCEdJtP 5ALu69Yf/O8bVa1F8ZWNe+60M/Py0Pm7zh53qL1mL8MvgYL9I3JSuPJxzhuT+z0y JQG0kT2RU1VwEB8fKYY3qTPQG2kXpOhV3RUf2VOrf0yeGDen2hQ2T2BeQqBNBI8a z09341o4QuAskc/poB2FlBsLNj4wFXfGurheNBy1c13Qan2T6zY/uSOK1rk= -----END CERTIFICATE-----Generated at Sat Jun 1 15:54:28 2024 by rpki-client on console-ams.rpki-client.org