$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/OW7mra1zNnXi7MtOoiaa7VLNTP0.roa File: OW7mra1zNnXi7MtOoiaa7VLNTP0.roa (raw, json) Hash identifier: Ts5mMQEEPBkHxT88MdN3d/x3Ecbfy8Zh6R+afSKRl04= Subject key identifier: 39:6E:E6:AD:AD:73:36:75:E2:EC:CB:4E:A2:26:9A:ED:52:CD:4C:FD Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 050C Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/OW7mra1zNnXi7MtOoiaa7VLNTP0.roa Signing time: Thu 27 Jul 2023 16:52:11 +0000 ROA not before: Thu 27 Jul 2023 16:52:11 +0000 ROA not after: Sun 14 Jul 2024 01:30:03 +0000 asID: 9605 IP address blocks: 1.67.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1292 (0x50c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jul 27 16:52:11 2023 GMT Not After : Jul 14 01:30:03 2024 GMT Subject: CN=396EE6ADAD733675E2ECCB4EA2269AED52CD4CFD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:8a:4b:7b:bf:8e:e6:7c:2d:14:2f:83:f3:90: fe:23:2c:a6:93:46:fc:c6:08:c8:6c:e8:d9:ce:24: ef:9d:c1:56:a0:b4:a8:42:c2:1e:fa:4d:03:2e:af: d7:34:12:06:f2:02:ae:2c:36:55:f2:d6:20:56:64: 79:6f:7d:14:4f:bf:be:6a:38:5c:af:ec:00:4e:14: e3:9d:a6:7b:15:05:4a:69:85:af:e9:fb:35:d6:a7: de:a8:fc:32:bd:e7:6a:d1:37:ce:f4:4d:6b:96:81: 39:45:11:82:09:57:54:88:7e:f0:01:7a:3e:cc:10: ec:26:5f:ec:8a:c0:21:d0:d6:d4:6d:96:c6:e5:95: 61:03:48:bf:e8:9b:1c:fc:00:ff:0f:ca:d5:75:d3: 3c:b7:d0:e5:e1:cb:17:fe:58:71:01:ea:88:a7:51: 33:75:77:ef:b2:09:a2:14:52:8d:7d:0c:32:69:2f: 27:c4:d4:98:e5:ef:28:2e:06:44:ca:b8:1b:03:7c: d8:ac:6b:ac:bc:1c:02:1c:a3:11:90:df:1c:37:15: 28:64:43:bb:f9:55:79:71:bf:45:87:ca:89:b7:01: 56:32:f6:f3:3d:af:d0:4a:e6:71:87:f2:b3:03:02: 8f:99:ca:18:01:24:7e:7a:b1:bc:90:c3:e1:03:d7: 9a:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:6E:E6:AD:AD:73:36:75:E2:EC:CB:4E:A2:26:9A:ED:52:CD:4C:FD X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/OW7mra1zNnXi7MtOoiaa7VLNTP0.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.67.128.0/19 Signature Algorithm: sha256WithRSAEncryption 4c:05:e9:79:00:f9:b1:5e:a2:97:ff:d7:40:a0:7f:67:72:d6: e2:5b:2c:3d:e4:30:09:9b:ea:e1:bd:7f:9d:42:fe:11:a1:81: 8b:06:ea:14:a6:58:c2:92:2f:57:16:ec:c8:43:0c:1a:ee:b3: c7:63:7e:d5:c6:f0:3b:21:91:f7:04:a1:fa:70:93:95:9f:ac: c6:7c:39:6c:c4:85:f3:a8:f2:e1:9b:c5:0b:76:b9:8c:1b:b0: 40:bb:8d:19:3d:35:66:aa:b4:22:3e:d6:dd:cb:4b:f7:0f:f2: aa:55:40:b0:fe:00:38:fc:03:1f:a7:35:b9:11:2c:6a:76:63: 41:3d:7e:16:49:67:3a:bd:ad:6e:81:65:3b:c3:d5:f1:4e:95: 13:82:1a:50:06:a5:0b:91:b5:1c:e7:b7:b4:e2:5b:9a:50:05: 82:18:bb:a7:28:55:90:99:f3:9c:16:d3:50:81:91:27:38:8e: f6:d5:1d:d8:1a:10:31:fd:62:e7:25:ef:8a:36:e8:8a:2f:04: 19:34:5b:16:16:08:a2:90:a2:71:b5:67:80:89:4b:4f:92:dd: a8:dd:fa:4e:22:79:fc:c7:95:29:99:51:f6:7a:15:e9:81:b2: 95:1f:fc:c5:e8:0f:25:4b:57:04:b1:a5:21:ec:6b:77:65:bb: 59:07:79:16 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBQwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA3Mjcx NjUyMTFaFw0yNDA3MTQwMTMwMDNaMDMxMTAvBgNVBAMTKDM5NkVFNkFEQUQ3MzM2 NzVFMkVDQ0I0RUEyMjY5QUVENTJDRDRDRkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDOikt7v47mfC0UL4PzkP4jLKaTRvzGCMhs6NnOJO+dwVagtKhC wh76TQMur9c0EgbyAq4sNlXy1iBWZHlvfRRPv75qOFyv7ABOFOOdpnsVBUppha/p +zXWp96o/DK952rRN870TWuWgTlFEYIJV1SIfvABej7MEOwmX+yKwCHQ1tRtlsbl lWEDSL/omxz8AP8PytV10zy30OXhyxf+WHEB6oinUTN1d++yCaIUUo19DDJpLyfE 1Jjl7yguBkTKuBsDfNisa6y8HAIcoxGQ3xw3FShkQ7v5VXlxv0WHyom3AVYy9vM9 r9BK5nGH8rMDAo+ZyhgBJH56sbyQw+ED15qpAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUOW7mra1zNnXi7MtOoiaa7VLNTP0wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L09XN21yYTF6Tm5YaTdNdE9vaWFhN1ZMTlRQMC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAUBQ4AwDQYJKoZIhvcNAQELBQADggEBAEwF6XkA+bFeopf/10Cgf2dy1uJb LD3kMAmb6uG9f51C/hGhgYsG6hSmWMKSL1cW7MhDDBrus8djftXG8DshkfcEofpw k5WfrMZ8OWzEhfOo8uGbxQt2uYwbsEC7jRk9NWaqtCI+1t3LS/cP8qpVQLD+ADj8 Ax+nNbkRLGp2Y0E9fhZJZzq9rW6BZTvD1fFOlROCGlAGpQuRtRznt7TiW5pQBYIY u6coVZCZ85wW01CBkSc4jvbVHdgaEDH9Yucl74o26IovBBk0WxYWCKKQonG1Z4CJ S0+S3ajd+k4iefzHlSmZUfZ6FemBspUf/MXoDyVLVwSxpSHsa3dlu1kHeRY= -----END CERTIFICATE-----Generated at Sat Jun 1 15:54:30 2024 by rpki-client on console-ams.rpki-client.org