$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/1yR7epwEf6mdFxSkTcSh4o4A06I.roa File: 1yR7epwEf6mdFxSkTcSh4o4A06I.roa (raw, json) Hash identifier: 3wg3X3MqSeGMwmNO1tTsuSRj0R2Bo/2ykaEOqVGoUSw= Subject key identifier: D7:24:7B:7A:9C:04:7F:A9:9D:17:14:A4:4D:C4:A1:E2:8E:00:D3:A2 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0185 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/1yR7epwEf6mdFxSkTcSh4o4A06I.roa Signing time: Wed 24 May 2023 16:33:26 +0000 ROA not before: Wed 24 May 2023 16:33:26 +0000 ROA not after: Tue 14 May 2024 01:30:02 +0000 asID: 9605 IP address blocks: 183.74.0.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 May 2024 13:36:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 389 (0x185) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: May 24 16:33:26 2023 GMT Not After : May 14 01:30:02 2024 GMT Subject: CN=D7247B7A9C047FA99D1714A44DC4A1E28E00D3A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:3f:24:bd:b4:63:3a:10:19:33:eb:bb:2c:e9: 08:6e:e3:1a:ec:a1:ae:f3:fe:0c:52:21:bb:5d:7e: bd:c5:6b:7e:e4:f1:d9:9f:93:0d:2d:92:1a:2e:f5: f8:e7:42:fa:82:55:41:e5:52:c5:0e:cb:33:6e:e5: e5:03:60:8a:b6:89:1a:0a:0e:5a:78:e1:60:66:f0: 58:bf:ea:38:bc:ab:6f:2f:a6:b6:1e:d9:96:22:20: 93:95:62:ea:74:43:a1:3a:5d:b4:71:c8:50:f0:cc: 6c:75:ad:62:34:97:13:ff:0c:94:02:a7:b7:16:ad: 3a:a6:a6:b7:8a:37:0e:9b:a5:b7:06:3b:72:93:14: 8d:cc:e9:31:fe:50:27:83:6d:28:93:0c:95:03:89: ad:5c:32:fd:bc:57:a4:5b:cd:c6:93:c7:72:55:fb: 01:7c:ba:1c:fd:bf:bf:60:4e:50:2c:ae:54:46:e4: 3c:26:65:04:28:49:5f:44:1b:24:0c:e4:91:73:86: a1:c1:a3:b7:55:0e:90:bd:5a:f8:66:26:5e:a9:47: 78:06:a7:66:4b:f2:7d:05:3b:22:3a:a2:f8:ca:c8: 3d:0d:e3:6d:dc:af:05:0d:0b:24:3d:5d:e2:66:5a: 6d:0b:76:bb:c8:01:fe:6e:92:f9:7b:14:b7:38:2d: be:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:24:7B:7A:9C:04:7F:A9:9D:17:14:A4:4D:C4:A1:E2:8E:00:D3:A2 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/1yR7epwEf6mdFxSkTcSh4o4A06I.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 183.74.0.0/23 Signature Algorithm: sha256WithRSAEncryption d2:44:6a:70:33:f3:44:e1:bb:b0:fc:d4:1b:ae:92:b6:8f:a3: 14:2a:2c:50:a5:6f:e5:6d:d6:bb:be:fe:8c:00:de:1d:bd:83: b3:81:1b:b3:d2:6c:c6:93:0b:51:c8:a3:cb:a4:f1:cd:04:21: 73:35:c0:8a:ab:c3:76:8e:0f:63:1b:ab:0b:d8:e5:3e:85:36: 19:15:05:c7:b5:d2:52:41:49:73:5e:9b:ed:a5:86:a9:2b:1b: c5:00:70:5e:fd:6e:cc:db:5a:81:96:a9:7f:df:fc:63:58:c4: 54:a3:2a:fd:30:93:23:a8:2d:66:d5:f7:93:9d:c3:35:94:36: 22:6c:ac:8d:b1:48:20:33:51:c0:76:a3:e5:7e:18:bb:9f:30: 48:5d:05:24:a1:ee:85:18:4b:b2:4b:11:3e:e5:75:7d:dc:71: 3a:f4:19:8b:ba:f4:e9:c0:9d:7b:4e:7d:5e:41:92:37:ae:00: 60:7c:b1:49:e4:3e:51:c9:98:10:20:16:ef:44:e3:82:ae:0b: bf:ea:66:0f:72:98:12:df:6f:41:1c:b7:cb:24:c9:02:0b:f0: d0:bd:d9:08:2d:62:87:c9:1d:68:f3:02:ab:df:00:53:14:e2: cb:02:6c:c0:b2:d8:6a:44:ba:ca:58:56:f9:5f:54:02:30:c8: ac:2b:c9:03 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAYUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA1MjQx NjMzMjZaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKEQ3MjQ3QjdBOUMwNDdG QTk5RDE3MTRBNDREQzRBMUUyOEUwMEQzQTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDDPyS9tGM6EBkz67ss6Qhu4xrsoa7z/gxSIbtdfr3Fa37k8dmf kw0tkhou9fjnQvqCVUHlUsUOyzNu5eUDYIq2iRoKDlp44WBm8Fi/6ji8q28vprYe 2ZYiIJOVYup0Q6E6XbRxyFDwzGx1rWI0lxP/DJQCp7cWrTqmpreKNw6bpbcGO3KT FI3M6TH+UCeDbSiTDJUDia1cMv28V6RbzcaTx3JV+wF8uhz9v79gTlAsrlRG5Dwm ZQQoSV9EGyQM5JFzhqHBo7dVDpC9WvhmJl6pR3gGp2ZL8n0FOyI6ovjKyD0N423c rwUNCyQ9XeJmWm0LdrvIAf5ukvl7FLc4Lb6hAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU1yR7epwEf6mdFxSkTcSh4o4A06IwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5LzF5UjdlcHdFZjZtZEZ4U2tUY1NoNG80QTA2SS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAG3SgAwDQYJKoZIhvcNAQELBQADggEBANJEanAz80Thu7D81BuukraPoxQq LFClb+Vt1ru+/owA3h29g7OBG7PSbMaTC1HIo8uk8c0EIXM1wIqrw3aOD2MbqwvY 5T6FNhkVBce10lJBSXNem+2lhqkrG8UAcF79bszbWoGWqX/f/GNYxFSjKv0wkyOo LWbV95OdwzWUNiJsrI2xSCAzUcB2o+V+GLufMEhdBSSh7oUYS7JLET7ldX3ccTr0 GYu69OnAnXtOfV5BkjeuAGB8sUnkPlHJmBAgFu9E44KuC7/qZg9ymBLfb0Ect8sk yQIL8NC92QgtYofJHWjzAqvfAFMU4ssCbMCy2GpEuspYVvlfVAIwyKwryQM= -----END CERTIFICATE-----Generated at Sat Apr 27 10:15:55 2024 by rpki-client on console-ams.rpki-client.org