$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ISnLY13YS3TMxM9B24y0-GNrKOo.roa File: ISnLY13YS3TMxM9B24y0-GNrKOo.roa (raw, json) Hash identifier: 7EaIP7t3eVNZ0kjiy2mBjiU5JNwIvhF9cpf2WIMQUUM= Subject key identifier: 21:29:CB:63:5D:D8:4B:74:CC:C4:CF:41:DB:8C:B4:F8:63:6B:28:EA Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 01BF Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ISnLY13YS3TMxM9B24y0-GNrKOo.roa Signing time: Wed 24 May 2023 16:40:27 +0000 ROA not before: Wed 24 May 2023 16:40:27 +0000 ROA not after: Tue 14 May 2024 01:30:02 +0000 asID: 9605 IP address blocks: 1.75.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 May 2024 13:36:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 447 (0x1bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: May 24 16:40:27 2023 GMT Not After : May 14 01:30:02 2024 GMT Subject: CN=2129CB635DD84B74CCC4CF41DB8CB4F8636B28EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:a2:b0:ae:d1:0e:54:f2:6d:b6:93:be:22:e8: 9e:69:fc:dc:dc:b5:2d:53:5a:28:40:a4:39:df:af: aa:70:63:14:96:3a:27:46:e6:a2:1e:3b:6f:0b:0a: 19:23:a0:0c:9a:a7:40:70:ac:fb:4a:5d:77:b0:6e: c5:9b:2f:74:44:f8:65:6f:23:41:07:74:d5:6d:6b: 9a:35:01:88:1d:f1:78:ac:ca:10:57:a3:0a:52:0a: dc:9b:32:ba:02:44:4d:4e:8c:20:04:88:6d:d4:51: 85:b4:cd:5c:89:af:34:37:6e:98:da:55:0d:51:61: 05:90:47:75:7d:b7:72:a9:2d:6a:21:d0:33:f6:62: 57:39:a2:e4:3a:74:9e:fd:ac:d7:40:9a:3e:a2:d6: 9f:b4:1a:37:24:18:ff:f2:e0:c7:d6:de:ff:c1:e5: 73:3e:62:89:65:2f:39:40:12:40:b1:c8:1a:e7:80: ca:0a:25:8f:ac:26:97:33:b9:0b:16:32:17:c8:cc: 17:e7:f4:6a:ea:c8:e8:2e:3d:05:5f:30:30:bd:0c: e4:50:12:48:fb:72:36:bb:db:d2:fd:ac:34:15:f2: aa:0b:db:ba:10:0d:4d:2a:31:17:14:36:d8:09:87: 0b:c7:48:ba:0a:a9:97:ef:14:af:0d:97:44:9b:c8: cf:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:29:CB:63:5D:D8:4B:74:CC:C4:CF:41:DB:8C:B4:F8:63:6B:28:EA X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ISnLY13YS3TMxM9B24y0-GNrKOo.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.75.240.0/22 Signature Algorithm: sha256WithRSAEncryption bc:f2:38:5d:5b:cd:19:e7:9b:e4:2c:2b:bc:cf:f1:38:fb:f8: 0b:d1:60:84:1a:89:17:17:e6:f9:3b:2a:6c:e7:b0:1b:27:86: 58:59:34:10:81:6c:14:3b:e5:be:4e:01:93:7c:06:9b:2f:7b: 9c:03:fe:aa:68:f9:a7:3b:26:19:b8:e0:1e:a3:b5:e7:69:cb: d7:49:54:f7:cc:dd:9f:6e:e1:92:c9:9d:97:22:d5:bd:cc:9c: 35:64:40:6c:2e:f8:d1:44:4c:02:bf:0a:a6:23:79:75:a0:77: d8:1d:e3:0f:77:5f:35:ac:d5:17:09:7d:6a:c5:3e:1b:d3:02: b3:a6:3d:d4:4f:d6:2a:e6:56:84:4b:e6:87:cb:74:d7:df:af: 05:f1:fc:f5:6f:30:a0:26:db:e7:74:9c:36:f2:52:6d:e0:df: 61:a7:00:02:0c:77:c7:40:ee:d4:38:f5:e9:d2:27:d6:b6:0c: 16:38:3a:a1:4d:77:7d:b4:5f:82:96:e8:bc:09:fa:81:f8:36: f3:2e:1e:33:f5:46:d4:ff:3b:1c:82:88:32:69:ac:2c:ba:e5: a5:0f:0e:4b:42:f9:9b:35:eb:ce:9f:18:3e:9f:58:3c:03:c2: f5:e2:ae:55:87:2b:27:f3:a6:c4:44:ef:cb:85:da:07:64:a1: 06:e7:7c:79 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAb8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA1MjQx NjQwMjdaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDIxMjlDQjYzNUREODRC NzRDQ0M0Q0Y0MURCOENCNEY4NjM2QjI4RUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDSorCu0Q5U8m22k74i6J5p/NzctS1TWihApDnfr6pwYxSWOidG 5qIeO28LChkjoAyap0BwrPtKXXewbsWbL3RE+GVvI0EHdNVta5o1AYgd8XisyhBX owpSCtybMroCRE1OjCAEiG3UUYW0zVyJrzQ3bpjaVQ1RYQWQR3V9t3KpLWoh0DP2 Ylc5ouQ6dJ79rNdAmj6i1p+0GjckGP/y4MfW3v/B5XM+YollLzlAEkCxyBrngMoK JY+sJpczuQsWMhfIzBfn9GrqyOguPQVfMDC9DORQEkj7cja729L9rDQV8qoL27oQ DU0qMRcUNtgJhwvHSLoKqZfvFK8Nl0SbyM9RAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUISnLY13YS3TMxM9B24y0+GNrKOowHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0lTbkxZMTNZUzNUTXhNOUIyNHkwLUdOcktPby5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIBS/AwDQYJKoZIhvcNAQELBQADggEBALzyOF1bzRnnm+QsK7zP8Tj7+AvR YIQaiRcX5vk7KmznsBsnhlhZNBCBbBQ75b5OAZN8Bpsve5wD/qpo+ac7Jhm44B6j tedpy9dJVPfM3Z9u4ZLJnZci1b3MnDVkQGwu+NFETAK/CqYjeXWgd9gd4w93XzWs 1RcJfWrFPhvTArOmPdRP1irmVoRL5ofLdNffrwXx/PVvMKAm2+d0nDbyUm3g32Gn AAIMd8dA7tQ49enSJ9a2DBY4OqFNd320X4KW6LwJ+oH4NvMuHjP1RtT/OxyCiDJp rCy65aUPDktC+Zs1686fGD6fWDwDwvXirlWHKyfzpsRE78uF2gdkoQbnfHk= -----END CERTIFICATE-----Generated at Sat Apr 27 10:15:56 2024 by rpki-client on console-ams.rpki-client.org