$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/AY6D-6nmOcu4GA9wEgTQHoZQrkQ.roa File: AY6D-6nmOcu4GA9wEgTQHoZQrkQ.roa (raw, json) Hash identifier: 0U3P9TqwYSOwscYVWAMAw42PP3v2f3ek+47SMJj2lCM= Subject key identifier: 01:8E:83:FB:A9:E6:39:CB:B8:18:0F:70:12:04:D0:1E:86:50:AE:44 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 03E0 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/AY6D-6nmOcu4GA9wEgTQHoZQrkQ.roa Signing time: Tue 06 Jun 2023 16:03:41 +0000 ROA not before: Tue 06 Jun 2023 16:03:41 +0000 ROA not after: Tue 14 May 2024 01:30:02 +0000 asID: 9605 IP address blocks: 183.75.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 May 2024 13:36:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 992 (0x3e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 6 16:03:41 2023 GMT Not After : May 14 01:30:02 2024 GMT Subject: CN=018E83FBA9E639CBB8180F701204D01E8650AE44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e9:5f:5a:58:96:04:6f:7c:7c:74:19:fd:60: b0:8c:26:b2:e8:98:f7:70:47:d4:6c:e3:7e:09:3a: d0:05:33:bf:27:c5:05:49:b5:4d:e0:35:61:a5:4e: 8c:43:0d:c2:0c:5a:9d:9f:fc:54:17:a8:ef:7c:3d: 88:f6:19:85:bd:55:93:a6:b0:94:74:d5:0c:0a:03: 20:bd:a2:a5:fd:ef:49:d2:4c:41:3b:e3:89:97:5c: 4a:25:0c:ec:04:f5:b8:ca:a6:a5:c2:a5:a3:11:b5: 5e:00:ee:65:35:5b:03:fb:bf:a0:12:ae:dd:82:99: c0:98:07:56:2c:c8:e2:5a:4e:75:90:b4:58:4d:c3: 9d:ae:65:42:37:cf:ad:68:c0:63:4b:10:84:d3:1b: d2:03:c2:4c:bd:c0:a5:ab:26:8c:e0:b9:bc:b8:bd: cc:80:47:e9:ab:26:6e:9c:22:45:5d:bd:b9:73:00: a6:b3:da:fc:49:38:59:20:c9:cd:86:94:99:f2:52: 18:af:69:24:b9:ec:d5:e2:d3:ea:1d:5b:e9:9a:7f: 3f:e5:28:68:eb:f3:59:8d:8e:c2:8e:30:1d:45:c9: 36:38:78:56:ca:17:83:b3:7b:4e:c7:67:56:35:ed: 98:34:80:e8:30:17:e0:a7:90:3e:53:41:47:19:b8: c8:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:8E:83:FB:A9:E6:39:CB:B8:18:0F:70:12:04:D0:1E:86:50:AE:44 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/AY6D-6nmOcu4GA9wEgTQHoZQrkQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 183.75.231.0/24 Signature Algorithm: sha256WithRSAEncryption bd:fc:95:ac:95:e4:c7:ad:fc:fc:31:9d:3c:28:6e:de:01:5a: 43:06:8f:f7:db:b0:a5:03:a8:37:0a:7b:c9:03:15:b3:73:af: 22:46:47:4c:4b:7b:ef:85:ad:d8:e2:8e:4a:34:43:e3:27:44: 06:72:9c:dd:7c:c9:72:74:9a:0a:75:d0:bc:92:dd:51:b3:65: 46:cd:23:ff:da:99:42:b2:d0:ca:aa:12:7d:70:59:2f:1b:02: c4:7f:2e:de:ff:57:e9:7b:c2:31:2e:38:e1:7a:e0:01:5f:f8: f0:a0:b2:5f:f8:9a:55:e9:63:2c:25:d1:e6:14:5a:e3:a7:eb: 0d:b8:81:54:76:4f:26:0e:2b:8e:dd:55:4a:62:82:39:11:97: fd:b1:44:90:ac:e3:06:39:f2:17:9a:d7:d2:18:11:b3:8a:0f: b8:ae:15:ea:9d:c7:5b:c6:28:d5:9d:eb:c9:97:26:db:e3:51: 93:3d:14:6c:0c:c6:a8:e6:ab:6b:0d:f6:96:cf:df:f2:cd:c3: bc:40:d2:f4:2d:c8:ca:94:fc:db:dc:8c:d0:22:b4:40:88:93: 1d:fa:3b:b8:f1:e5:88:1d:1f:f5:79:e3:74:96:cc:9a:33:9e: c0:73:ab:4b:cd:e5:be:4d:a3:16:ec:4e:61:bb:58:cc:08:9f: 88:20:a9:b7 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICA+AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA2MDYx NjAzNDFaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDAxOEU4M0ZCQTlFNjM5 Q0JCODE4MEY3MDEyMDREMDFFODY1MEFFNDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDE6V9aWJYEb3x8dBn9YLCMJrLomPdwR9Rs434JOtAFM78nxQVJ tU3gNWGlToxDDcIMWp2f/FQXqO98PYj2GYW9VZOmsJR01QwKAyC9oqX970nSTEE7 44mXXEolDOwE9bjKpqXCpaMRtV4A7mU1WwP7v6ASrt2CmcCYB1YsyOJaTnWQtFhN w52uZUI3z61owGNLEITTG9IDwky9wKWrJozguby4vcyAR+mrJm6cIkVdvblzAKaz 2vxJOFkgyc2GlJnyUhivaSS57NXi0+odW+mafz/lKGjr81mNjsKOMB1FyTY4eFbK F4Oze07HZ1Y17Zg0gOgwF+CnkD5TQUcZuMjzAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUAY6D+6nmOcu4GA9wEgTQHoZQrkQwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0FZNkQtNm5tT2N1NEdBOXdFZ1RRSG9aUXJrUS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAC3S+cwDQYJKoZIhvcNAQELBQADggEBAL38layV5Met/PwxnTwobt4BWkMG j/fbsKUDqDcKe8kDFbNzryJGR0xLe++Frdjijko0Q+MnRAZynN18yXJ0mgp10LyS 3VGzZUbNI//amUKy0MqqEn1wWS8bAsR/Lt7/V+l7wjEuOOF64AFf+PCgsl/4mlXp Yywl0eYUWuOn6w24gVR2TyYOK47dVUpigjkRl/2xRJCs4wY58hea19IYEbOKD7iu Feqdx1vGKNWd68mXJtvjUZM9FGwMxqjmq2sN9pbP3/LNw7xA0vQtyMqU/NvcjNAi tECIkx36O7jx5YgdH/V543SWzJoznsBzq0vN5b5NoxbsTmG7WMwIn4ggqbc= -----END CERTIFICATE-----Generated at Sat Apr 27 10:15:55 2024 by rpki-client on console-ams.rpki-client.org