$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/3S1Lt25GVHOg_0Mj3D24KsTO9XA.roa File: 3S1Lt25GVHOg_0Mj3D24KsTO9XA.roa (raw, json) Hash identifier: 0NEqiw62JJLaVeG9PNNvRDMfq6y3nZviXKPLT7QJMLg= Subject key identifier: DD:2D:4B:B7:6E:46:54:73:A0:FF:43:23:DC:3D:B8:2A:C4:CE:F5:70 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0656 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/3S1Lt25GVHOg_0Mj3D24KsTO9XA.roa Signing time: Tue 30 Apr 2024 01:34:44 +0000 ROA not before: Tue 30 Apr 2024 01:34:44 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 110.163.56.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1622 (0x656) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 30 01:34:44 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=DD2D4BB76E465473A0FF4323DC3DB82AC4CEF570 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:a7:57:54:fc:96:a9:21:6a:c7:c9:7f:6d:3c: 27:ac:6e:45:aa:19:b9:e5:eb:a4:46:a8:b5:a6:62: 4a:e2:49:38:40:f7:8f:3d:7e:6a:7d:b3:98:6e:dc: 42:ff:88:ee:7a:68:b8:ee:6c:48:3f:4d:55:53:e6: e3:c2:4f:ce:f8:14:60:e1:be:95:9f:cb:85:09:da: fe:fb:c0:60:56:be:0c:11:69:72:05:33:2f:af:72: fd:6b:32:01:b0:64:37:03:79:72:e5:b4:f5:b6:99: 5f:d6:f0:c3:2a:62:5d:bf:e7:82:35:90:3a:17:82: ee:35:6e:1b:3b:e9:8c:b3:cc:db:5e:5e:1b:d7:e4: ce:17:8a:34:b8:e6:cb:4d:90:77:b0:23:4e:13:7c: 8c:d5:9a:4b:09:eb:ba:16:21:77:3c:0c:0e:da:55: 4c:99:a3:c1:91:09:8f:9b:35:3c:6b:ff:57:53:9f: 1c:78:8a:22:d9:a5:a6:10:2e:ff:d1:18:f3:fc:40: 5d:1f:d6:27:b1:7e:57:37:9c:15:0f:c1:2e:bb:ef: 2c:8b:12:2d:b7:e1:89:af:dc:c6:ce:b6:6b:3c:60: 81:b3:82:fd:09:1a:04:4c:d0:61:c0:fa:5e:b6:80: 76:32:51:d7:fe:bc:bf:fa:d1:9a:79:be:5b:fe:ff: 7a:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:2D:4B:B7:6E:46:54:73:A0:FF:43:23:DC:3D:B8:2A:C4:CE:F5:70 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/3S1Lt25GVHOg_0Mj3D24KsTO9XA.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 110.163.56.0/23 Signature Algorithm: sha256WithRSAEncryption 75:e6:a5:c4:01:c0:7c:c4:d2:be:3a:ec:ad:47:51:e2:18:88: 3f:18:03:a4:62:18:05:be:48:32:9c:df:70:b1:13:b2:39:1c: 0d:f8:f5:8b:38:e0:77:63:45:63:5b:59:e1:2c:51:56:2b:10: a7:15:25:57:b0:d4:2c:ab:9d:58:59:fc:e0:53:94:0b:ed:d6: e4:6d:66:92:22:31:c0:db:cd:13:47:76:6e:56:5a:d9:64:3c: 79:a5:a5:50:4f:29:43:66:6f:90:38:84:23:51:a2:f6:13:05: 98:a8:20:db:8c:3c:ac:da:99:d3:56:a8:22:e4:6b:62:43:16: ec:36:45:5c:b0:70:fa:89:eb:1d:c9:2a:a4:88:77:4a:73:89: 54:9d:1a:02:a1:d0:f0:49:7e:6e:3f:a5:85:40:ae:c6:e8:52: 39:82:bb:91:65:66:85:50:10:5a:51:9b:83:aa:fc:ca:22:70: 18:bd:d4:d9:34:7f:4e:c3:05:f0:ef:ec:fa:0c:13:c4:b9:64: 66:6f:aa:72:26:58:58:fb:6a:ca:cd:cd:3d:fc:55:37:1f:f4: da:92:52:12:b9:a2:cb:c0:62:74:c5:cc:1d:97:83:a7:80:40: e1:e0:ee:a5:c5:68:5d:c2:fd:66:fb:16:57:41:5b:eb:4a:c4: 57:37:3c:90 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBlYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw MTM0NDRaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEREMkQ0QkI3NkU0NjU0 NzNBMEZGNDMyM0RDM0RCODJBQzRDRUY1NzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDbp1dU/JapIWrHyX9tPCesbkWqGbnl66RGqLWmYkriSThA9489 fmp9s5hu3EL/iO56aLjubEg/TVVT5uPCT874FGDhvpWfy4UJ2v77wGBWvgwRaXIF My+vcv1rMgGwZDcDeXLltPW2mV/W8MMqYl2/54I1kDoXgu41bhs76YyzzNteXhvX 5M4XijS45stNkHewI04TfIzVmksJ67oWIXc8DA7aVUyZo8GRCY+bNTxr/1dTnxx4 iiLZpaYQLv/RGPP8QF0f1iexflc3nBUPwS677yyLEi234Ymv3MbOtms8YIGzgv0J GgRM0GHA+l62gHYyUdf+vL/60Zp5vlv+/3qzAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU3S1Lt25GVHOg/0Mj3D24KsTO9XAwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5LzNTMUx0MjVHVkhPZ18wTWozRDI0S3NUTzlYQS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFuozgwDQYJKoZIhvcNAQELBQADggEBAHXmpcQBwHzE0r467K1HUeIYiD8Y A6RiGAW+SDKc33CxE7I5HA349Ys44HdjRWNbWeEsUVYrEKcVJVew1CyrnVhZ/OBT lAvt1uRtZpIiMcDbzRNHdm5WWtlkPHmlpVBPKUNmb5A4hCNRovYTBZioINuMPKza mdNWqCLka2JDFuw2RVywcPqJ6x3JKqSId0pziVSdGgKh0PBJfm4/pYVArsboUjmC u5FlZoVQEFpRm4Oq/MoicBi91Nk0f07DBfDv7PoME8S5ZGZvqnImWFj7asrNzT38 VTcf9NqSUhK5osvAYnTFzB2Xg6eAQOHg7qXFaF3C/Wb7FldBW+tKxFc3PJA= -----END CERTIFICATE-----Generated at Sat Jun 1 15:54:29 2024 by rpki-client on console-ams.rpki-client.org