$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ORf8E2QoyOpOvS7sdv_Lumt7yEY.roa File: ORf8E2QoyOpOvS7sdv_Lumt7yEY.roa (raw, json) Hash identifier: aOIEr192ojj8oX/4xSCf9arfRMs/gsSPM5r7clHH+mc= Subject key identifier: 39:17:FC:13:64:28:C8:EA:4E:BD:2E:EC:76:FF:CB:BA:6B:7B:C8:46 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 05B4 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ORf8E2QoyOpOvS7sdv_Lumt7yEY.roa Signing time: Thu 27 Jul 2023 17:00:24 +0000 ROA not before: Thu 27 Jul 2023 17:00:24 +0000 ROA not after: Sun 14 Jul 2024 01:30:03 +0000 asID: 9605 IP address blocks: 220.210.18.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 23 Jun 2024 14:09:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1460 (0x5b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jul 27 17:00:24 2023 GMT Not After : Jul 14 01:30:03 2024 GMT Subject: CN=3917FC136428C8EA4EBD2EEC76FFCBBA6B7BC846 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:9d:d4:ff:10:de:44:26:89:61:13:2c:15:07: d2:32:78:ab:41:da:5d:97:f1:a2:73:73:41:fd:1e: cf:7b:08:53:13:c5:0f:bc:d2:a6:09:4c:35:b8:d9: fa:89:00:ff:18:06:2c:65:b8:8b:f9:4e:9d:16:dd: 90:81:95:42:b5:a7:39:86:33:2c:fc:55:71:3d:79: 39:0f:de:83:59:cd:e1:b3:5b:0e:01:58:bc:b3:94: 65:35:ee:c0:04:a6:a1:63:32:1a:df:cc:7d:f3:3b: 83:b0:75:4c:9d:6d:7f:bd:d2:98:53:fb:e6:fe:7b: ce:d8:e7:0e:e9:d5:0b:81:f1:93:ca:07:63:71:58: b4:08:60:e5:ba:b3:4c:20:db:b2:f8:24:f3:60:5c: b5:46:96:18:55:eb:fa:01:55:5d:1a:90:71:2c:9d: 5c:74:13:b4:6c:98:32:ae:02:d2:f1:3f:08:be:96: be:9b:63:cb:fd:a0:d1:9a:1e:76:bd:73:0f:c1:9b: cc:d5:9c:e9:b3:2f:d0:99:58:14:8b:c6:05:3b:7c: b6:97:28:2c:2d:26:00:11:f2:88:3a:4d:ce:a4:8a: 61:52:35:7c:24:3f:db:f0:6e:af:7d:f9:90:33:23: 9c:c6:fe:9c:58:36:d3:a1:0d:bb:fa:a7:b5:6d:d7: b0:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:17:FC:13:64:28:C8:EA:4E:BD:2E:EC:76:FF:CB:BA:6B:7B:C8:46 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ORf8E2QoyOpOvS7sdv_Lumt7yEY.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 220.210.18.0/23 Signature Algorithm: sha256WithRSAEncryption 7a:3f:6d:91:ff:1b:24:a6:91:a6:26:3c:87:fe:3a:c7:b6:94: ac:17:32:80:be:0e:aa:0f:ff:32:fd:b3:86:ae:43:d9:e2:11: 11:98:98:4b:9b:77:f9:4c:fe:8b:de:94:82:75:16:09:50:fe: 79:45:0f:96:88:28:dd:6f:c1:b1:b7:83:59:bb:b6:6f:3a:9f: 4a:0d:d3:5b:ac:dc:a9:47:a7:e8:57:f6:9a:d9:1b:9c:ff:42: 9a:2f:e2:ee:5d:29:47:70:a5:5f:0d:33:e6:20:7a:63:bb:69: 63:5a:6f:83:8f:38:9e:02:5d:69:05:55:cc:29:d2:92:56:47: 66:cb:3e:ba:84:63:e7:63:48:53:e7:7c:a6:b9:8b:d5:66:c2: 5e:af:cc:71:b7:fb:91:f1:11:57:33:a6:31:82:71:d1:2b:9c: 43:60:32:ad:15:39:2d:4b:75:01:83:92:2b:f3:45:1e:29:f6: 41:03:b2:80:8d:a7:cc:37:93:8f:23:ce:87:e7:24:35:00:c9: 27:15:39:7f:91:04:51:4e:e8:f8:2d:92:8e:e5:44:86:7e:5e: 8c:0e:fc:2a:68:b8:60:00:7c:88:08:c9:30:c2:1b:98:ed:2d: 57:a8:27:e3:af:79:c3:1b:e5:02:6c:0b:a2:3e:14:23:98:a9: dd:e3:e2:cc -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBbQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA3Mjcx NzAwMjRaFw0yNDA3MTQwMTMwMDNaMDMxMTAvBgNVBAMTKDM5MTdGQzEzNjQyOEM4 RUE0RUJEMkVFQzc2RkZDQkJBNkI3QkM4NDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDhndT/EN5EJolhEywVB9IyeKtB2l2X8aJzc0H9Hs97CFMTxQ+8 0qYJTDW42fqJAP8YBixluIv5Tp0W3ZCBlUK1pzmGMyz8VXE9eTkP3oNZzeGzWw4B WLyzlGU17sAEpqFjMhrfzH3zO4OwdUydbX+90phT++b+e87Y5w7p1QuB8ZPKB2Nx WLQIYOW6s0wg27L4JPNgXLVGlhhV6/oBVV0akHEsnVx0E7RsmDKuAtLxPwi+lr6b Y8v9oNGaHna9cw/Bm8zVnOmzL9CZWBSLxgU7fLaXKCwtJgAR8og6Tc6kimFSNXwk P9vwbq99+ZAzI5zG/pxYNtOhDbv6p7Vt17CNAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUORf8E2QoyOpOvS7sdv/Lumt7yEYwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L09SZjhFMlFveU9wT3ZTN3Nkdl9MdW10N3lFWS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAHc0hIwDQYJKoZIhvcNAQELBQADggEBAHo/bZH/GySmkaYmPIf+Ose2lKwX MoC+DqoP/zL9s4auQ9niERGYmEubd/lM/ovelIJ1FglQ/nlFD5aIKN1vwbG3g1m7 tm86n0oN01us3KlHp+hX9prZG5z/Qpov4u5dKUdwpV8NM+YgemO7aWNab4OPOJ4C XWkFVcwp0pJWR2bLPrqEY+djSFPnfKa5i9Vmwl6vzHG3+5HxEVczpjGCcdErnENg Mq0VOS1LdQGDkivzRR4p9kEDsoCNp8w3k48jzofnJDUAyScVOX+RBFFO6Pgtko7l RIZ+XowO/CpouGAAfIgIyTDCG5jtLVeoJ+OvecMb5QJsC6I+FCOYqd3j4sw= -----END CERTIFICATE-----Generated at Mon Jun 17 11:39:12 2024 by rpki-client on console-fra.rpki-client.org