$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Ix1ee-bs1bqKlMIv3W5AbYZxCvw.roa File: Ix1ee-bs1bqKlMIv3W5AbYZxCvw.roa (raw, json) Hash identifier: ikPSGBA+RnsEoIkChJcJT3ZXpuXeZ8oz45MUQiqm/YE= Subject key identifier: 23:1D:5E:7B:E6:EC:D5:BA:8A:94:C2:2F:DD:6E:40:6D:86:71:0A:FC Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 052C Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Ix1ee-bs1bqKlMIv3W5AbYZxCvw.roa Signing time: Thu 27 Jul 2023 16:54:12 +0000 ROA not before: Thu 27 Jul 2023 16:54:12 +0000 ROA not after: Sun 14 Jul 2024 01:30:03 +0000 asID: 9605 IP address blocks: 27.229.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 23 Jun 2024 11:53:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1324 (0x52c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jul 27 16:54:12 2023 GMT Not After : Jul 14 01:30:03 2024 GMT Subject: CN=231D5E7BE6ECD5BA8A94C22FDD6E406D86710AFC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:49:b2:b8:86:19:b7:e3:2c:a8:9e:77:da:83: 3e:de:4e:11:50:18:fd:1d:a5:b6:4f:17:cb:12:ac: 03:13:bd:11:50:97:ef:f5:e9:72:d3:00:0e:f3:36: aa:05:5d:60:bc:3a:85:40:c8:b6:fc:06:d7:a6:3f: 42:15:72:a9:de:06:07:37:60:e8:a9:cf:82:38:ab: 65:a5:f2:7b:0f:b8:e4:bb:e0:07:b1:8e:2f:9d:7f: d7:7a:9a:d5:65:68:e4:0a:6d:3b:78:cd:8c:3d:8b: 1c:ec:f2:a9:3c:8e:79:e1:aa:7f:e2:d8:3a:d7:84: 0e:92:2d:1f:d2:40:21:22:6c:e8:3f:91:0d:c4:d9: d0:6e:8c:e9:37:e5:7e:c6:a5:de:40:2a:fd:0f:fc: a2:f8:6a:22:f0:9c:0a:8e:25:c2:a3:4f:0a:5e:2f: 93:8c:bc:37:b4:0b:26:c6:4d:bc:68:63:39:f3:7b: af:58:cf:8c:22:e7:de:af:0e:ee:b6:b9:2a:af:01: 39:47:c6:6e:fc:28:c0:c0:c8:c4:b8:35:61:0a:67: 33:00:d3:1f:8a:81:dc:d2:ec:de:36:f6:b4:09:96: c1:c4:8a:52:7f:da:23:8a:42:63:66:93:04:9b:77: be:c0:87:d0:36:b7:bb:09:52:f1:44:91:08:ab:f8: b6:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:1D:5E:7B:E6:EC:D5:BA:8A:94:C2:2F:DD:6E:40:6D:86:71:0A:FC X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Ix1ee-bs1bqKlMIv3W5AbYZxCvw.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.229.0.0/16 Signature Algorithm: sha256WithRSAEncryption 6c:c3:06:33:e3:a9:64:f7:5b:bb:ae:74:bf:c0:cf:d4:8f:f1: 13:45:ca:53:65:b3:c9:17:a5:de:a5:c3:6f:2b:cb:cf:87:70: 16:58:7e:5b:3c:89:47:c6:98:33:8d:04:b0:a1:82:4c:21:93: 98:26:01:37:25:be:8e:1e:e9:62:a1:ac:3d:85:1a:df:c9:7c: 12:16:77:11:48:e1:82:3b:7f:8f:1c:c4:af:e9:25:be:20:42: 9a:68:c7:21:5b:c0:35:11:f4:be:28:01:48:2d:38:ae:b0:db: 44:01:70:9b:6a:df:fb:59:02:6e:ec:60:20:75:9e:93:f2:a5: 6f:c4:00:91:95:47:b9:0d:64:4a:0d:68:f6:1c:13:ef:9d:fe: 40:c9:80:28:d4:26:51:de:b0:14:59:ba:07:3f:ee:c2:86:dc: 77:9c:a6:3d:33:d5:73:f9:05:ee:67:d9:d0:c9:3e:ae:db:c0: 12:79:ad:4c:be:be:2a:05:c6:20:a4:95:89:2a:17:11:81:da: 8c:6f:f8:59:50:2e:48:d1:e7:15:2e:bf:d6:1e:f2:cc:cc:f8: 89:1e:e2:a0:8c:d7:79:36:1d:0c:d5:29:5b:95:72:0f:df:3d: 18:91:bc:51:db:61:ef:eb:13:ae:bd:29:ff:59:bf:fb:c5:3f: c7:34:b2:e9 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgICBSwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA3Mjcx NjU0MTJaFw0yNDA3MTQwMTMwMDNaMDMxMTAvBgNVBAMTKDIzMUQ1RTdCRTZFQ0Q1 QkE4QTk0QzIyRkRENkU0MDZEODY3MTBBRkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC/SbK4hhm34yyonnfagz7eThFQGP0dpbZPF8sSrAMTvRFQl+/1 6XLTAA7zNqoFXWC8OoVAyLb8BtemP0IVcqneBgc3YOipz4I4q2Wl8nsPuOS74Aex ji+df9d6mtVlaOQKbTt4zYw9ixzs8qk8jnnhqn/i2DrXhA6SLR/SQCEibOg/kQ3E 2dBujOk35X7Gpd5AKv0P/KL4aiLwnAqOJcKjTwpeL5OMvDe0CybGTbxoYznze69Y z4wi596vDu62uSqvATlHxm78KMDAyMS4NWEKZzMA0x+KgdzS7N429rQJlsHEilJ/ 2iOKQmNmkwSbd77Ah9A2t7sJUvFEkQir+LYxAgMBAAGjggIjMIICHzAdBgNVHQ4E FgQUIx1ee+bs1bqKlMIv3W5AbYZxCvwwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0l4MWVlLWJzMWJxS2xNSXYzVzVBYllaeEN2dy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAb5TANBgkqhkiG9w0BAQsFAAOCAQEAbMMGM+OpZPdbu650v8DP1I/xE0XK U2WzyRel3qXDbyvLz4dwFlh+WzyJR8aYM40EsKGCTCGTmCYBNyW+jh7pYqGsPYUa 38l8EhZ3EUjhgjt/jxzEr+klviBCmmjHIVvANRH0vigBSC04rrDbRAFwm2rf+1kC buxgIHWek/Klb8QAkZVHuQ1kSg1o9hwT753+QMmAKNQmUd6wFFm6Bz/uwobcd5ym PTPVc/kF7mfZ0Mk+rtvAEnmtTL6+KgXGIKSViSoXEYHajG/4WVAuSNHnFS6/1h7y zMz4iR7ioIzXeTYdDNUpW5VyD989GJG8Udth7+sTrr0p/1m/+8U/xzSy6Q== -----END CERTIFICATE-----Generated at Sun Jun 16 14:31:52 2024 by rpki-client on console-ams.rpki-client.org