$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/AHSlESH8FtdJEjBO1ji-51b15Yg.roa File: AHSlESH8FtdJEjBO1ji-51b15Yg.roa (raw, json) Hash identifier: rhn7SC0Zjqz8RR5cjqhoTT+iHHvk/rCKMY1Z+fybIGM= Subject key identifier: 00:74:A5:11:21:FC:16:D7:49:12:30:4E:D6:38:BE:E7:56:F5:E5:88 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0879 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/AHSlESH8FtdJEjBO1ji-51b15Yg.roa Signing time: Tue 30 Apr 2024 02:18:36 +0000 ROA not before: Tue 30 Apr 2024 02:18:36 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 211.14.64.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Jun 2024 01:32:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2169 (0x879) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 30 02:18:36 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=0074A51121FC16D74912304ED638BEE756F5E588 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a8:a6:b2:e9:56:2a:99:e9:de:03:d3:83:2f: f9:9c:a2:c0:51:13:73:0d:0f:47:df:b8:6b:33:91: fc:78:4c:e1:d0:76:db:b8:24:8e:0d:b9:1c:75:74: d6:01:93:43:c1:b9:5c:d6:76:d5:38:60:0d:51:be: 03:a6:d9:5b:79:12:50:4b:d0:fa:16:aa:c6:7f:a9: c0:97:5e:ed:24:08:38:b4:25:49:b5:ad:f9:51:13: 28:88:05:ae:6e:48:53:0e:bf:24:35:e5:49:d0:c6: 44:bf:19:5c:50:f4:6c:fc:f4:df:1d:12:d1:e9:3a: cc:53:d1:55:18:13:bf:13:0b:26:a3:ee:0b:ed:58: 5e:c9:0c:a1:ed:4d:a3:fd:e7:16:cc:d8:8a:b2:c9: bc:45:8a:28:a2:c9:d4:cb:d1:47:27:df:b8:d5:87: 79:9c:33:56:33:38:7e:01:3a:10:69:09:0d:c4:c9: c9:1c:8a:d8:46:6b:55:92:8f:19:d7:ae:25:a0:ff: 18:5e:a5:e1:4c:fb:99:98:19:a4:39:8e:7c:a0:e6: cf:33:4a:3d:7f:74:f1:06:52:e0:b3:e6:0e:8c:63: 61:04:85:09:f8:50:e1:95:03:ef:64:1d:bb:29:99: 44:98:03:dd:ad:05:8c:1d:c8:7b:e7:60:db:fe:df: 74:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:74:A5:11:21:FC:16:D7:49:12:30:4E:D6:38:BE:E7:56:F5:E5:88 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/AHSlESH8FtdJEjBO1ji-51b15Yg.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 211.14.64.0/21 Signature Algorithm: sha256WithRSAEncryption 57:4d:1a:42:8d:ce:54:b8:df:54:90:b6:d8:16:a7:54:ee:40: 21:db:60:d9:0b:03:c3:21:cd:ec:a5:f6:df:bf:12:ea:7c:8f: cd:96:e6:0b:3b:fb:41:79:06:af:15:0b:81:6c:cb:09:99:b2: 38:3a:cc:a3:12:e8:e1:42:46:74:0d:4e:bc:47:a3:8d:d0:4b: c2:45:30:7c:32:1f:90:a7:2c:63:d1:09:a7:79:0a:dc:e4:80: 25:d2:9e:c1:7b:f0:7b:b8:c8:64:e9:df:06:d0:c6:70:9b:ea: ce:02:09:2f:e8:91:fc:97:e1:5e:d8:93:c0:13:5f:fa:6e:8d: de:8d:f6:91:c5:ca:ef:b6:6b:d7:9e:37:66:d7:a9:72:de:f1: 5d:63:2a:65:2e:99:66:eb:0e:06:ec:37:b0:60:46:71:38:c2: dc:38:69:0d:5a:98:e6:38:f3:dd:91:10:07:3f:d5:97:d6:e5: 27:97:5d:e8:a3:c4:70:52:19:3f:a5:6c:44:a8:19:c0:9c:03: 24:59:8d:55:5c:1b:7f:ab:e9:d8:8e:f9:ce:94:1c:c9:96:af: cf:29:0c:30:9e:12:68:85:79:8f:bb:76:d0:61:cd:b8:64:6c: 1f:94:1d:0f:c8:ae:52:32:c7:60:a6:58:de:e1:80:21:a7:19: 22:11:17:c5 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCHkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw MjE4MzZaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDAwNzRBNTExMjFGQzE2 RDc0OTEyMzA0RUQ2MzhCRUU3NTZGNUU1ODgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCqqKay6VYqmeneA9ODL/mcosBRE3MND0ffuGszkfx4TOHQdtu4 JI4NuRx1dNYBk0PBuVzWdtU4YA1RvgOm2Vt5ElBL0PoWqsZ/qcCXXu0kCDi0JUm1 rflREyiIBa5uSFMOvyQ15UnQxkS/GVxQ9Gz89N8dEtHpOsxT0VUYE78TCyaj7gvt WF7JDKHtTaP95xbM2IqyybxFiiiiydTL0Ucn37jVh3mcM1YzOH4BOhBpCQ3Eyckc ithGa1WSjxnXriWg/xhepeFM+5mYGaQ5jnyg5s8zSj1/dPEGUuCz5g6MY2EEhQn4 UOGVA+9kHbspmUSYA92tBYwdyHvnYNv+33TjAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUAHSlESH8FtdJEjBO1ji+51b15YgwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0FIU2xFU0g4RnRkSkVqQk8xamktNTFiMTVZZy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAPTDkAwDQYJKoZIhvcNAQELBQADggEBAFdNGkKNzlS431SQttgWp1TuQCHb YNkLA8Mhzeyl9t+/Eup8j82W5gs7+0F5Bq8VC4FsywmZsjg6zKMS6OFCRnQNTrxH o43QS8JFMHwyH5CnLGPRCad5CtzkgCXSnsF78Hu4yGTp3wbQxnCb6s4CCS/okfyX 4V7Yk8ATX/pujd6N9pHFyu+2a9eeN2bXqXLe8V1jKmUumWbrDgbsN7BgRnE4wtw4 aQ1amOY4892REAc/1ZfW5SeXXeijxHBSGT+lbESoGcCcAyRZjVVcG3+r6diO+c6U HMmWr88pDDCeEmiFeY+7dtBhzbhkbB+UHQ/IrlIyx2CmWN7hgCGnGSIRF8U= -----END CERTIFICATE-----Generated at Sat Jun 15 02:41:53 2024 by rpki-client on console-ams.rpki-client.org