$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Bs4-5GRl6aopUJyPLyfAg-8mEyE.roa File: Bs4-5GRl6aopUJyPLyfAg-8mEyE.roa (raw, json) Hash identifier: 5POz7T2emAmWQJcBY5wAhlRKA6uabrcLNhNLqddtRyo= Subject key identifier: 06:CE:3E:E4:64:65:E9:AA:29:50:9C:8F:2F:27:C0:83:EF:26:13:21 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0248 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Bs4-5GRl6aopUJyPLyfAg-8mEyE.roa Signing time: Tue 30 May 2023 16:32:26 +0000 ROA not before: Tue 30 May 2023 16:32:26 +0000 ROA not after: Tue 14 May 2024 01:30:02 +0000 asID: 9605 IP address blocks: 1.74.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 May 2024 13:36:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 584 (0x248) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: May 30 16:32:26 2023 GMT Not After : May 14 01:30:02 2024 GMT Subject: CN=06CE3EE46465E9AA29509C8F2F27C083EF261321 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:af:a6:50:cf:e2:15:8b:b6:c6:b2:b3:a9:4a: 33:de:4e:f6:a1:86:00:b9:88:b2:e7:3e:b1:2b:9c: a0:44:67:57:2a:6d:f2:a6:35:54:73:2c:68:c9:a2: 2a:87:cd:5e:bb:9a:1d:33:d3:13:ea:fa:8f:87:d8: 4c:5c:30:0e:b3:63:ea:0e:80:5e:1b:1e:a0:d2:8f: 06:5d:39:d8:5a:f7:16:2d:ae:a6:5f:63:11:18:1c: 2e:e1:b2:13:35:e2:c4:c6:ae:17:f5:4f:64:63:41: 2a:2d:e1:dd:77:2e:ed:15:42:82:30:aa:1e:41:ed: 31:d7:f4:fe:90:38:87:b1:56:f4:88:2a:59:66:51: 49:19:89:a3:33:73:b2:0a:92:00:36:52:5f:65:1d: a9:dd:98:35:a9:46:d8:f9:28:17:5b:82:30:27:cb: a8:e2:e2:bd:f0:90:00:86:c9:c1:11:37:a7:33:7b: 25:a5:25:16:f5:e3:be:42:42:2c:7d:ce:7b:60:21: 71:93:be:7c:f0:45:01:42:fa:96:c4:1b:99:c7:4c: f2:21:d9:49:5f:e6:95:0e:9f:96:08:a0:e4:eb:50: 17:62:15:8e:33:bf:d1:07:a6:bf:aa:90:b5:d7:87: 38:0d:a4:6a:2c:fc:12:83:29:cc:c8:aa:cd:e8:5a: 8e:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:CE:3E:E4:64:65:E9:AA:29:50:9C:8F:2F:27:C0:83:EF:26:13:21 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Bs4-5GRl6aopUJyPLyfAg-8mEyE.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.74.240.0/20 Signature Algorithm: sha256WithRSAEncryption 9b:5c:15:bd:e6:c9:42:7c:55:fe:67:93:cc:0e:49:59:77:8e: 6c:7c:33:ad:39:f9:b4:5b:1f:1e:92:7a:93:61:19:bc:75:9a: a2:48:a4:8b:a2:ab:d3:8c:33:e9:bb:5f:a9:e7:da:3a:53:28: 7c:9b:31:dc:e3:70:11:20:ca:8d:f4:9d:1e:9b:ea:76:4a:17: 0d:dd:2a:61:7d:67:e6:44:81:c3:f5:29:c1:4c:3a:85:65:10: 98:0b:0c:59:c1:c6:8d:c1:10:ec:5d:14:41:4b:0a:71:d7:d0: 34:4a:e6:b3:12:f3:b6:d9:42:f4:2e:02:68:74:f6:81:9c:35: f4:67:a4:a8:4f:d2:c1:f6:e4:4e:0c:70:e1:d6:a9:1e:af:f3: 8b:ef:91:60:17:fc:2b:da:f8:54:e9:95:63:c6:6a:31:f1:d6: 4b:b6:6f:7c:c4:ce:85:1a:06:1a:88:96:68:e8:3d:2b:54:b8: 19:eb:04:6d:1d:30:93:19:2c:bf:3f:19:dd:4c:27:7d:b7:d1: 3e:b0:b1:5b:d8:96:09:40:65:12:4d:4a:4f:11:12:32:a2:74: 62:d9:62:00:69:f3:6a:6d:77:0a:d7:c4:f3:33:a2:4a:5b:d8: 7c:f9:d0:4b:0d:ba:c1:cc:0d:c7:f5:94:f2:7a:7d:8d:7a:53: 1f:10:2b:39 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAkgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA1MzAx NjMyMjZaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDA2Q0UzRUU0NjQ2NUU5 QUEyOTUwOUM4RjJGMjdDMDgzRUYyNjEzMjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCXr6ZQz+IVi7bGsrOpSjPeTvahhgC5iLLnPrErnKBEZ1cqbfKm NVRzLGjJoiqHzV67mh0z0xPq+o+H2ExcMA6zY+oOgF4bHqDSjwZdOdha9xYtrqZf YxEYHC7hshM14sTGrhf1T2RjQSot4d13Lu0VQoIwqh5B7THX9P6QOIexVvSIKllm UUkZiaMzc7IKkgA2Ul9lHandmDWpRtj5KBdbgjAny6ji4r3wkACGycERN6czeyWl JRb1475CQix9zntgIXGTvnzwRQFC+pbEG5nHTPIh2Ulf5pUOn5YIoOTrUBdiFY4z v9EHpr+qkLXXhzgNpGos/BKDKczIqs3oWo5RAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUBs4+5GRl6aopUJyPLyfAg+8mEyEwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0JzNC01R1JsNmFvcFVKeVBMeWZBZy04bUV5RS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQBSvAwDQYJKoZIhvcNAQELBQADggEBAJtcFb3myUJ8Vf5nk8wOSVl3jmx8 M605+bRbHx6SepNhGbx1mqJIpIuiq9OMM+m7X6nn2jpTKHybMdzjcBEgyo30nR6b 6nZKFw3dKmF9Z+ZEgcP1KcFMOoVlEJgLDFnBxo3BEOxdFEFLCnHX0DRK5rMS87bZ QvQuAmh09oGcNfRnpKhP0sH25E4McOHWqR6v84vvkWAX/Cva+FTplWPGajHx1ku2 b3zEzoUaBhqIlmjoPStUuBnrBG0dMJMZLL8/Gd1MJ3230T6wsVvYlglAZRJNSk8R EjKidGLZYgBp82ptdwrXxPMzokpb2Hz50EsNusHMDcf1lPJ6fY16Ux8QKzk= -----END CERTIFICATE-----Generated at Sat Apr 27 10:15:55 2024 by rpki-client on console-ams.rpki-client.org