$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/8fCzYltfdtma-7Alza1L7e-Mh9s.roa File: 8fCzYltfdtma-7Alza1L7e-Mh9s.roa (raw, json) Hash identifier: /JKcEf2tUWDzKrwaTylkHdZrW6o295FukMW1NjDsy6o= Subject key identifier: F1:F0:B3:62:5B:5F:76:D9:9A:FB:B0:25:CD:AD:4B:ED:EF:8C:87:DB Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0525 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/8fCzYltfdtma-7Alza1L7e-Mh9s.roa Signing time: Thu 27 Jul 2023 16:54:10 +0000 ROA not before: Thu 27 Jul 2023 16:54:10 +0000 ROA not after: Sun 14 Jul 2024 01:30:03 +0000 asID: 9605 IP address blocks: 211.14.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1317 (0x525) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jul 27 16:54:10 2023 GMT Not After : Jul 14 01:30:03 2024 GMT Subject: CN=F1F0B3625B5F76D99AFBB025CDAD4BEDEF8C87DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:65:87:20:ef:f3:4f:ad:c5:05:e7:d8:16:5f: ef:71:f1:e2:56:a0:9f:9b:01:44:d3:e7:25:df:c9: 93:cd:39:7d:2e:42:89:b8:26:55:9f:fe:2e:40:69: 16:d2:71:68:2a:ac:41:07:7e:e9:da:9d:f8:f8:a0: c1:97:36:54:33:27:9a:c0:49:00:12:88:49:49:b9: 55:1a:2e:af:cd:0c:40:67:61:17:7d:10:79:a5:eb: 3e:db:d1:ba:2d:8c:b4:24:c1:a8:c9:7a:81:a3:a8: 9c:04:ff:a3:12:32:9d:97:b5:ab:6e:7c:ae:d2:d5: 53:8e:33:e2:14:29:8b:48:52:5d:5d:0f:1c:73:57: 46:2a:0d:a6:23:68:d9:d3:1e:f5:9d:0f:26:af:b4: a9:46:9a:fc:d5:78:83:af:9f:0a:a5:21:20:99:36: ff:ef:db:6a:d2:8d:7e:fb:d1:de:2d:75:c6:57:b3: b0:24:7f:3b:c3:81:8d:ec:6d:da:3e:f8:92:e5:c5: 7a:43:a8:08:33:7a:a8:a7:3c:79:f4:60:f1:40:7e: 6a:e4:09:ea:36:fa:f4:0e:59:aa:6b:51:c6:c1:2e: 05:23:83:c9:7f:48:a8:48:5a:79:3c:01:60:88:96: 26:01:64:5d:4f:d2:2c:f0:fc:63:97:73:dc:66:8c: 67:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:F0:B3:62:5B:5F:76:D9:9A:FB:B0:25:CD:AD:4B:ED:EF:8C:87:DB X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/8fCzYltfdtma-7Alza1L7e-Mh9s.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 211.14.78.0/24 Signature Algorithm: sha256WithRSAEncryption e5:65:4d:c6:4f:da:dd:0a:8e:8d:3d:48:03:69:63:96:2c:f9: 0f:7d:9f:69:f8:82:23:63:6d:46:cc:18:05:b6:5a:60:c9:24: 85:be:1c:27:ef:f6:34:ca:a1:89:86:64:2e:31:94:d1:89:5a: 65:88:b2:42:fb:0c:7b:17:06:c1:85:ea:d2:b9:9c:64:e9:d6: 91:4b:12:47:ce:3a:4d:a9:57:cf:fa:92:d5:96:b7:3d:b1:a2: 7f:eb:bf:e3:f1:b7:e5:35:c4:e4:e4:e3:92:bb:53:6d:df:d1: 31:6c:ee:89:d4:b6:5a:1b:3c:fd:99:ef:79:af:19:47:bc:54: 31:05:da:da:e3:da:6f:52:1e:1c:6e:66:c7:e4:2e:cd:28:94: a5:00:02:43:f1:de:b7:fb:ff:ea:e3:cb:c4:8b:62:b1:b7:87: 53:11:04:41:6b:26:94:3f:78:33:f0:1b:07:29:ab:d2:27:eb: 1a:9a:62:36:42:22:6d:92:0e:a9:2f:1a:55:58:dd:4a:e5:00: ae:34:d9:e3:19:13:e8:9f:ca:fc:62:33:2c:92:5e:fe:0a:b7: 75:88:dd:a2:59:0f:e1:38:7a:7a:b1:6a:25:f3:fa:d4:94:1c: 60:93:a8:00:c0:22:1d:4d:c3:14:1b:40:89:a0:ee:38:e5:79: 5d:a8:78:22 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBSUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA3Mjcx NjU0MTBaFw0yNDA3MTQwMTMwMDNaMDMxMTAvBgNVBAMTKEYxRjBCMzYyNUI1Rjc2 RDk5QUZCQjAyNUNEQUQ0QkVERUY4Qzg3REIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC2ZYcg7/NPrcUF59gWX+9x8eJWoJ+bAUTT5yXfyZPNOX0uQom4 JlWf/i5AaRbScWgqrEEHfunanfj4oMGXNlQzJ5rASQASiElJuVUaLq/NDEBnYRd9 EHml6z7b0botjLQkwajJeoGjqJwE/6MSMp2XtatufK7S1VOOM+IUKYtIUl1dDxxz V0YqDaYjaNnTHvWdDyavtKlGmvzVeIOvnwqlISCZNv/v22rSjX770d4tdcZXs7Ak fzvDgY3sbdo++JLlxXpDqAgzeqinPHn0YPFAfmrkCeo2+vQOWaprUcbBLgUjg8l/ SKhIWnk8AWCIliYBZF1P0izw/GOXc9xmjGdLAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU8fCzYltfdtma+7Alza1L7e+Mh9swHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5LzhmQ3pZbHRmZHRtYS03QWx6YTFMN2UtTWg5cy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADTDk4wDQYJKoZIhvcNAQELBQADggEBAOVlTcZP2t0Kjo09SANpY5Ys+Q99 n2n4giNjbUbMGAW2WmDJJIW+HCfv9jTKoYmGZC4xlNGJWmWIskL7DHsXBsGF6tK5 nGTp1pFLEkfOOk2pV8/6ktWWtz2xon/rv+Pxt+U1xOTk45K7U23f0TFs7onUtlob PP2Z73mvGUe8VDEF2trj2m9SHhxuZsfkLs0olKUAAkPx3rf7/+rjy8SLYrG3h1MR BEFrJpQ/eDPwGwcpq9In6xqaYjZCIm2SDqkvGlVY3UrlAK402eMZE+ifyvxiMyyS Xv4Kt3WI3aJZD+E4enqxaiXz+tSUHGCTqADAIh1NwxQbQImg7jjleV2oeCI= -----END CERTIFICATE-----Generated at Sat Jun 1 15:54:29 2024 by rpki-client on console-ams.rpki-client.org