$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/GDRYCpnr7Jk8YClGTCgkt-zaoq8.roa File: GDRYCpnr7Jk8YClGTCgkt-zaoq8.roa (raw, json) Hash identifier: nkP4jHEqLv5Fc710s1g42/NQZyAsPaVDAkn5Xl7ToRE= Subject key identifier: 18:34:58:0A:99:EB:EC:99:3C:60:29:46:4C:28:24:B7:EC:DA:A2:AF Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 08CB Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/GDRYCpnr7Jk8YClGTCgkt-zaoq8.roa Signing time: Tue 30 Apr 2024 02:24:38 +0000 ROA not before: Tue 30 Apr 2024 02:24:38 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 219.114.168.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2251 (0x8cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 30 02:24:38 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=1834580A99EBEC993C6029464C2824B7ECDAA2AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:cd:1c:1e:07:19:58:8c:12:fc:3a:9e:29:77: 04:9e:ff:0f:48:3d:ff:a0:a7:86:c7:36:c8:b4:d4: 2a:01:8d:91:86:78:16:80:f8:96:67:d3:a5:71:c6: 58:52:8d:10:f3:8f:8a:d5:09:7c:40:fe:75:a6:9f: 48:a7:df:74:f0:c4:fd:5e:66:e6:a7:00:65:b6:c8: 6b:ac:a0:06:25:32:94:77:cf:18:68:b7:40:6f:8c: 3f:98:dd:e4:72:f1:b0:90:c9:d4:bb:36:2f:33:00: 56:ff:ad:9d:bf:2c:a3:7e:94:55:1b:c3:a2:0c:bd: c6:ac:ec:77:fa:26:43:74:83:93:79:be:af:ac:54: bd:07:50:75:e5:12:b5:8e:72:0e:00:79:8e:ca:f5: ad:23:92:70:00:63:25:a1:0d:3c:3c:57:69:b9:f6: 03:fb:55:88:bc:75:ad:58:27:30:b8:a7:c1:e8:57: 2a:65:1d:01:41:08:9e:ac:78:4c:36:b4:54:12:65: 3f:bd:ae:f7:a7:56:71:48:70:1a:af:43:3a:be:b3: e8:1e:6a:2a:e9:d9:5c:a6:18:f2:af:51:51:45:29: 7c:ba:e1:98:04:fd:18:e2:7c:84:12:b6:39:8c:91: 64:1d:c4:98:b9:27:ad:69:26:c0:1c:53:77:89:b3: 5e:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:34:58:0A:99:EB:EC:99:3C:60:29:46:4C:28:24:B7:EC:DA:A2:AF X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/GDRYCpnr7Jk8YClGTCgkt-zaoq8.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 219.114.168.0/21 Signature Algorithm: sha256WithRSAEncryption e6:29:d7:12:c0:73:b8:61:2e:b6:78:c4:e7:23:fa:1c:e3:b6: 33:ad:9f:1a:77:4e:ab:ac:5c:9c:07:56:06:9e:d6:49:c8:5a: 8e:7a:e8:58:a4:b9:d1:bc:ec:73:ad:0e:17:17:02:8d:bb:2d: b9:cd:2f:b3:06:6a:41:c7:8b:d4:f8:53:d3:d4:b8:d5:31:a5: 72:c2:26:93:43:55:b9:0e:ce:0c:56:ad:87:03:58:84:0f:c5: df:5e:fc:d3:20:08:60:13:00:85:3b:0b:db:92:94:77:9a:d7: 2d:87:ab:a1:d8:ae:2b:fc:bb:41:50:0e:ce:76:8c:0b:5b:75: 4d:34:08:ee:3f:0d:f5:05:c0:6e:6f:46:1a:23:c1:f0:aa:c1: 33:7a:0e:c9:29:13:9f:c4:b7:7e:ea:ef:ea:9c:68:80:9f:da: e7:f2:f0:6d:0a:d8:84:41:2a:32:8b:f1:0d:98:41:91:2c:5b: c0:5a:29:fb:a7:da:45:86:68:65:6f:31:8e:7e:6a:d0:62:08: 39:c2:46:63:29:99:34:2d:de:32:c5:71:41:c5:13:2c:61:dc: f3:ba:43:c9:5b:8f:2a:e1:72:7a:49:fb:4a:54:3e:bf:92:88: 26:51:07:ec:f8:49:4a:86:32:65:cc:01:52:44:a6:15:e2:6f: 07:a2:a6:55 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCMswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw MjI0MzhaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDE4MzQ1ODBBOTlFQkVD OTkzQzYwMjk0NjRDMjgyNEI3RUNEQUEyQUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDYzRweBxlYjBL8Op4pdwSe/w9IPf+gp4bHNsi01CoBjZGGeBaA +JZn06VxxlhSjRDzj4rVCXxA/nWmn0in33TwxP1eZuanAGW2yGusoAYlMpR3zxho t0BvjD+Y3eRy8bCQydS7Ni8zAFb/rZ2/LKN+lFUbw6IMvcas7Hf6JkN0g5N5vq+s VL0HUHXlErWOcg4AeY7K9a0jknAAYyWhDTw8V2m59gP7VYi8da1YJzC4p8HoVypl HQFBCJ6seEw2tFQSZT+9rvenVnFIcBqvQzq+s+geairp2VymGPKvUVFFKXy64ZgE /RjifIQStjmMkWQdxJi5J61pJsAcU3eJs14HAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUGDRYCpnr7Jk8YClGTCgkt+zaoq8wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0dEUllDcG5yN0prOFlDbEdUQ2drdC16YW9xOC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAPbcqgwDQYJKoZIhvcNAQELBQADggEBAOYp1xLAc7hhLrZ4xOcj+hzjtjOt nxp3TqusXJwHVgae1knIWo566FikudG87HOtDhcXAo27LbnNL7MGakHHi9T4U9PU uNUxpXLCJpNDVbkOzgxWrYcDWIQPxd9e/NMgCGATAIU7C9uSlHea1y2Hq6HYriv8 u0FQDs52jAtbdU00CO4/DfUFwG5vRhojwfCqwTN6DskpE5/Et37q7+qcaICf2ufy 8G0K2IRBKjKL8Q2YQZEsW8BaKfun2kWGaGVvMY5+atBiCDnCRmMpmTQt3jLFcUHF Eyxh3PO6Q8lbjyrhcnpJ+0pUPr+SiCZRB+z4SUqGMmXMAVJEphXibweiplU= -----END CERTIFICATE-----Generated at Sat Jun 1 15:54:30 2024 by rpki-client on console-ams.rpki-client.org