$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/7GiqXfTGlAKiCpFpXE2lqYeWAZ0.roa File: 7GiqXfTGlAKiCpFpXE2lqYeWAZ0.roa (raw, json) Hash identifier: qx7XqSjStnbp4GJmlDfsbpSFaWQ4q+EDHlJGrRRlKRE= Subject key identifier: EC:68:AA:5D:F4:C6:94:02:A2:0A:91:69:5C:4D:A5:A9:87:96:01:9D Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0208 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/7GiqXfTGlAKiCpFpXE2lqYeWAZ0.roa Signing time: Tue 30 May 2023 16:29:28 +0000 ROA not before: Tue 30 May 2023 16:29:28 +0000 ROA not after: Tue 14 May 2024 01:30:02 +0000 asID: 9605 IP address blocks: 183.73.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 May 2024 13:36:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 520 (0x208) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: May 30 16:29:28 2023 GMT Not After : May 14 01:30:02 2024 GMT Subject: CN=EC68AA5DF4C69402A20A91695C4DA5A98796019D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:5c:bf:52:a9:05:dd:0c:eb:18:5d:93:ad:88: fa:4a:04:78:24:62:6d:7a:f9:df:ec:8f:aa:01:b1: 26:10:f6:2f:b0:89:9d:50:32:12:09:c3:01:74:d9: 2e:31:b9:43:88:7f:5e:86:ed:82:fd:e9:bd:29:7b: a0:40:5a:54:f2:c6:c2:95:d1:3e:a2:67:c5:86:c8: 48:45:a3:75:90:62:ca:51:b4:59:0c:11:f9:12:e2: 79:6d:db:d1:ef:64:1e:29:32:49:d5:c3:07:ef:da: 78:37:29:e8:fc:d6:91:90:1e:d9:6f:0b:ec:31:2d: a0:9e:a3:c3:d7:1c:44:b9:7a:7d:8b:b3:80:fa:97: ef:53:ef:e7:a4:84:34:51:19:60:d4:ac:64:1a:9f: 6d:32:a1:bf:db:44:88:ad:1b:31:5e:51:ed:a1:b2: 29:2d:be:95:6e:d8:b5:5f:93:bc:96:e0:c1:7d:62: f5:90:76:85:67:0e:2d:d3:b9:70:67:63:b5:19:fe: 55:3d:43:bb:ad:9f:10:7f:9b:cc:42:cc:d1:36:7c: fa:9d:7f:00:8b:b5:ff:84:50:70:0c:34:83:22:30: da:34:4f:4b:1b:20:25:30:b9:87:6f:51:16:24:14: 76:36:a1:b8:7c:90:39:a2:85:d4:3a:6e:f3:55:98: 96:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:68:AA:5D:F4:C6:94:02:A2:0A:91:69:5C:4D:A5:A9:87:96:01:9D X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/7GiqXfTGlAKiCpFpXE2lqYeWAZ0.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 183.73.0.0/20 Signature Algorithm: sha256WithRSAEncryption 96:83:ad:1e:32:ae:c5:e2:9f:f9:10:4c:78:78:37:26:82:59: a2:ee:8c:3d:b1:90:df:e2:f7:fe:38:20:26:53:42:6f:f5:c7: 09:44:9d:ee:a8:a8:90:92:05:08:a4:ab:e5:85:94:0d:12:2d: 27:fc:a3:64:10:33:84:7d:dd:6c:62:40:83:01:58:32:56:a7: fa:b0:e0:49:ba:b9:0b:2d:3b:82:95:8e:d7:76:0d:6b:7a:f9: f1:97:f7:0c:d0:32:96:02:0d:38:19:40:14:b1:6c:61:37:74: 9c:dd:c1:b0:96:9c:ab:89:4c:7d:49:46:5c:11:cf:79:f2:c6: c8:68:3d:5f:ea:33:1f:97:07:a3:e3:1a:ee:06:1e:7d:a8:25: 74:b2:6f:f8:59:d7:9e:24:9f:43:78:29:18:3f:50:bb:ec:57: d1:a4:7a:ca:0d:a1:53:9b:79:4b:14:35:ac:b0:31:be:44:c6: 42:9c:ee:38:8b:eb:75:84:72:1e:a2:2d:12:78:e4:38:05:da: 26:9b:10:92:ca:0c:ff:0a:1a:01:4a:44:89:79:1f:4b:ca:f8: a6:fd:20:3e:99:a2:f1:b7:71:05:3c:82:d5:f0:a6:15:e3:d5: 60:a0:9a:f8:60:8f:7a:eb:22:df:0f:96:1d:c8:00:64:84:30: 8a:c8:b9:3f -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAggwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA1MzAx NjI5MjhaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKEVDNjhBQTVERjRDNjk0 MDJBMjBBOTE2OTVDNERBNUE5ODc5NjAxOUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCkXL9SqQXdDOsYXZOtiPpKBHgkYm16+d/sj6oBsSYQ9i+wiZ1Q MhIJwwF02S4xuUOIf16G7YL96b0pe6BAWlTyxsKV0T6iZ8WGyEhFo3WQYspRtFkM EfkS4nlt29HvZB4pMknVwwfv2ng3Kej81pGQHtlvC+wxLaCeo8PXHES5en2Ls4D6 l+9T7+ekhDRRGWDUrGQan20yob/bRIitGzFeUe2hsiktvpVu2LVfk7yW4MF9YvWQ doVnDi3TuXBnY7UZ/lU9Q7utnxB/m8xCzNE2fPqdfwCLtf+EUHAMNIMiMNo0T0sb ICUwuYdvURYkFHY2obh8kDmihdQ6bvNVmJYJAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU7GiqXfTGlAKiCpFpXE2lqYeWAZ0wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5LzdHaXFYZlRHbEFLaUNwRnBYRTJscVllV0FaMC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAS3SQAwDQYJKoZIhvcNAQELBQADggEBAJaDrR4yrsXin/kQTHh4NyaCWaLu jD2xkN/i9/44ICZTQm/1xwlEne6oqJCSBQikq+WFlA0SLSf8o2QQM4R93WxiQIMB WDJWp/qw4Em6uQstO4KVjtd2DWt6+fGX9wzQMpYCDTgZQBSxbGE3dJzdwbCWnKuJ TH1JRlwRz3nyxshoPV/qMx+XB6PjGu4GHn2oJXSyb/hZ154kn0N4KRg/ULvsV9Gk esoNoVObeUsUNaywMb5ExkKc7jiL63WEch6iLRJ45DgF2iabEJLKDP8KGgFKRIl5 H0vK+Kb9ID6ZovG3cQU8gtXwphXj1WCgmvhgj3rrIt8Plh3IAGSEMIrIuT8= -----END CERTIFICATE-----Generated at Sat Apr 27 10:15:55 2024 by rpki-client on console-ams.rpki-client.org