$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/86vvKTYxFImQ_TZUj0S-8cbtuOI.roa File: 86vvKTYxFImQ_TZUj0S-8cbtuOI.roa (raw, json) Hash identifier: CqVJ0BSFbHs36QIJjvlQX4h5EgC6OFOlWwaoUal7NIg= Subject key identifier: F3:AB:EF:29:36:31:14:89:90:FD:36:54:8F:44:BE:F1:C6:ED:B8:E2 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0570 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/86vvKTYxFImQ_TZUj0S-8cbtuOI.roa Signing time: Thu 27 Jul 2023 16:58:03 +0000 ROA not before: Thu 27 Jul 2023 16:58:03 +0000 ROA not after: Sun 14 Jul 2024 01:30:03 +0000 asID: 9605 IP address blocks: 1.72.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1392 (0x570) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jul 27 16:58:03 2023 GMT Not After : Jul 14 01:30:03 2024 GMT Subject: CN=F3ABEF293631148990FD36548F44BEF1C6EDB8E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:70:f2:e8:df:b5:41:94:eb:be:b8:0f:db:18: dc:4c:20:a5:7a:15:77:66:d6:ec:2c:ca:9c:3c:cb: b5:d6:fe:da:fb:e6:b1:cc:e2:42:b3:2f:57:be:c5: 86:3c:3c:35:0a:5b:3d:12:af:4c:48:eb:d0:7a:20: 14:24:d9:13:6a:1d:20:81:da:bb:3c:86:2d:41:9e: 41:ad:54:c9:62:79:27:0c:46:5b:d2:22:a4:4f:7d: 07:8c:62:7f:7c:1f:18:5e:8a:d3:6e:15:b2:da:7d: 85:97:66:8e:3b:a6:81:41:a7:a4:0c:92:be:e8:e6: 41:d8:75:a0:ea:26:02:1b:0c:14:46:b1:b3:c7:73: 55:8d:66:ef:0d:d8:61:41:ec:09:9d:05:ae:f7:c8: d2:2f:65:f2:a5:87:52:2d:05:52:25:9e:e8:c8:f6: 36:35:58:c7:3b:4c:8a:85:81:52:64:1f:7b:2d:d1: 4e:cb:a6:5a:d0:bc:d2:4b:e8:3b:cf:a0:1d:cd:76: 6a:fd:21:c2:a6:95:65:3c:f4:42:1b:d3:4f:e1:8d: 11:7b:42:1e:e3:80:3e:63:e6:3d:b7:30:47:a6:c3: 96:59:56:a7:bc:d5:90:2d:fa:45:bd:78:4e:a6:4a: cd:15:50:d3:64:25:90:e4:73:ab:f8:f8:98:e0:a5: 1a:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:AB:EF:29:36:31:14:89:90:FD:36:54:8F:44:BE:F1:C6:ED:B8:E2 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/86vvKTYxFImQ_TZUj0S-8cbtuOI.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.72.224.0/19 Signature Algorithm: sha256WithRSAEncryption 82:1c:ee:ea:d9:3f:7b:27:85:c8:1d:51:e7:03:4e:ed:67:15: cb:54:a3:e0:5b:85:1e:b2:e4:f6:4c:ae:e5:20:60:28:83:0b: 6a:91:ac:d4:4b:6e:43:87:7b:9d:ab:5d:a0:78:fb:47:4f:11: 6a:32:d1:17:70:57:11:27:79:f8:51:e5:11:a8:d9:7e:a8:5a: f4:cd:54:e0:e7:90:4b:b4:41:99:a1:55:d3:f7:39:ac:90:0b: a1:3b:7e:a2:98:f5:13:a6:0b:80:4e:22:8b:dd:ee:82:20:42: 79:2d:48:27:11:4b:78:cd:13:24:eb:64:d3:4b:5f:f8:8e:26: 89:f4:15:6f:5a:1f:e3:09:61:fa:e6:d6:d0:9d:b2:c3:f4:41: 56:7f:46:f9:79:f9:ad:e0:18:d6:e6:50:67:54:ae:1d:20:5c: 5c:23:16:1b:8f:d5:ff:14:92:1d:67:b4:d9:5d:fc:fd:53:e1: dd:eb:61:aa:e0:9d:b4:0b:61:68:b8:d7:22:1d:57:ed:88:12: 83:3e:9b:b4:02:54:2e:78:03:d0:93:3b:c7:ca:d1:61:d2:a3: 51:6b:99:08:c5:4c:0a:e8:d2:82:3e:08:f8:7b:59:02:be:e5: 7a:93:c8:5b:4d:c6:56:00:c3:20:67:88:07:79:e2:79:55:ab: d5:56:30:e7 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBXAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA3Mjcx NjU4MDNaFw0yNDA3MTQwMTMwMDNaMDMxMTAvBgNVBAMTKEYzQUJFRjI5MzYzMTE0 ODk5MEZEMzY1NDhGNDRCRUYxQzZFREI4RTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDPcPLo37VBlOu+uA/bGNxMIKV6FXdm1uwsypw8y7XW/tr75rHM 4kKzL1e+xYY8PDUKWz0Sr0xI69B6IBQk2RNqHSCB2rs8hi1BnkGtVMlieScMRlvS IqRPfQeMYn98HxheitNuFbLafYWXZo47poFBp6QMkr7o5kHYdaDqJgIbDBRGsbPH c1WNZu8N2GFB7AmdBa73yNIvZfKlh1ItBVIlnujI9jY1WMc7TIqFgVJkH3st0U7L plrQvNJL6DvPoB3Ndmr9IcKmlWU89EIb00/hjRF7Qh7jgD5j5j23MEemw5ZZVqe8 1ZAt+kW9eE6mSs0VUNNkJZDkc6v4+JjgpRqNAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU86vvKTYxFImQ/TZUj0S+8cbtuOIwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5Lzg2dnZLVFl4RkltUV9UWlVqMFMtOGNidHVPSS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAUBSOAwDQYJKoZIhvcNAQELBQADggEBAIIc7urZP3snhcgdUecDTu1nFctU o+BbhR6y5PZMruUgYCiDC2qRrNRLbkOHe52rXaB4+0dPEWoy0RdwVxEnefhR5RGo 2X6oWvTNVODnkEu0QZmhVdP3OayQC6E7fqKY9ROmC4BOIovd7oIgQnktSCcRS3jN EyTrZNNLX/iOJon0FW9aH+MJYfrm1tCdssP0QVZ/Rvl5+a3gGNbmUGdUrh0gXFwj FhuP1f8Ukh1ntNld/P1T4d3rYargnbQLYWi41yIdV+2IEoM+m7QCVC54A9CTO8fK 0WHSo1FrmQjFTAro0oI+CPh7WQK+5XqTyFtNxlYAwyBniAd54nlVq9VWMOc= -----END CERTIFICATE-----Generated at Sat Jun 1 15:54:29 2024 by rpki-client on console-ams.rpki-client.org