$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/PaAwnXbgp49B_YqbkpD6rftV0hw.roa File: PaAwnXbgp49B_YqbkpD6rftV0hw.roa (raw, json) Hash identifier: Yj++REGU8uNuluOAkto8ez0zgDPnTOhTe85liYv5UY4= Subject key identifier: 3D:A0:30:9D:76:E0:A7:8F:41:FD:8A:9B:92:90:FA:AD:FB:55:D2:1C Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 052E Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/PaAwnXbgp49B_YqbkpD6rftV0hw.roa Signing time: Thu 27 Jul 2023 16:54:13 +0000 ROA not before: Thu 27 Jul 2023 16:54:13 +0000 ROA not after: Sun 14 Jul 2024 01:30:03 +0000 asID: 9605 IP address blocks: 27.230.88.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1326 (0x52e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jul 27 16:54:13 2023 GMT Not After : Jul 14 01:30:03 2024 GMT Subject: CN=3DA0309D76E0A78F41FD8A9B9290FAADFB55D21C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b5:0b:f5:d3:31:d7:12:dc:08:6f:3f:f1:9e: 2d:1e:ee:d9:9d:21:aa:c8:3e:62:c8:d0:9f:dd:5e: c5:04:a3:06:1e:0a:68:53:8c:e7:8b:ec:57:dd:24: 5a:f3:36:b9:6d:26:f8:23:78:4b:1c:d1:10:dd:a7: 69:ab:6f:fe:ce:6e:f3:6f:7a:ba:09:04:d3:f5:10: 57:3a:20:e6:70:e1:72:14:06:b6:1f:01:e0:3d:42: 05:7c:17:b0:58:07:76:32:ff:3d:9c:14:bb:64:10: 20:43:2b:7a:57:37:cc:82:94:9e:cf:82:30:f1:7e: fe:88:09:d7:b4:a1:1d:8c:b0:f7:51:fb:f3:61:4b: f1:f0:eb:42:70:24:f5:dc:52:a9:8c:28:d8:67:82: 37:43:a3:c3:5e:93:c7:da:56:c4:a2:0f:f0:0f:36: 55:ca:17:6a:b6:43:c2:18:62:75:a9:14:4d:d8:90: b0:26:be:0f:fa:01:73:ff:02:99:ae:15:20:39:d6: 66:fc:15:e4:89:09:7c:81:54:19:02:3b:28:33:9b: 3f:8c:3b:47:f4:37:15:4e:42:51:71:0f:5c:67:4c: c8:35:9d:5f:97:f4:d9:aa:95:c5:02:9d:d3:34:a9: b5:13:f4:0d:b4:77:9a:54:39:9c:f7:8b:fd:b1:00: ac:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:A0:30:9D:76:E0:A7:8F:41:FD:8A:9B:92:90:FA:AD:FB:55:D2:1C X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/PaAwnXbgp49B_YqbkpD6rftV0hw.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.230.88.0/23 Signature Algorithm: sha256WithRSAEncryption aa:62:e0:ce:a1:83:2f:e9:1a:04:4f:7a:8a:dc:ef:35:b4:33: 8f:fd:67:33:40:71:9c:94:cd:1d:ee:be:8c:ae:43:da:dd:13: c6:b2:61:c5:de:e3:60:2a:d7:59:78:a0:96:15:60:b3:91:10: df:1f:2b:cc:c7:5d:f4:ba:4f:43:5c:52:bc:16:0a:7d:a0:3a: 43:b8:ed:d7:ba:37:bc:01:d3:25:aa:d1:6a:cf:01:49:e9:49: 3e:d3:77:e5:be:e8:ed:2b:55:09:6e:bd:df:f3:10:fa:00:a9: 6f:3d:eb:fc:bb:54:f9:ae:5f:d1:db:47:41:11:f8:75:46:72: ca:81:aa:68:13:f8:eb:c0:1d:e7:ab:fa:d4:76:02:e1:63:1e: fa:be:e5:b9:77:c2:0d:d8:1a:41:21:14:4f:87:e2:a6:e2:35: d1:b4:60:b9:12:a6:39:1a:05:ab:08:45:23:1c:26:13:f9:12: 70:fa:1c:06:71:c6:95:9d:36:48:87:ca:6d:ef:ef:fb:c0:36: 75:2b:9b:71:e1:d1:53:e1:2c:9d:51:a8:eb:e2:2e:aa:fb:39: 0b:27:d0:aa:58:c5:62:05:5f:ae:59:e4:70:19:01:c9:d3:a4: 05:d3:85:4e:32:e1:f6:d5:e8:c4:b2:e6:dd:cc:5e:b7:a6:da: 07:3f:05:6f -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBS4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA3Mjcx NjU0MTNaFw0yNDA3MTQwMTMwMDNaMDMxMTAvBgNVBAMTKDNEQTAzMDlENzZFMEE3 OEY0MUZEOEE5QjkyOTBGQUFERkI1NUQyMUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCntQv10zHXEtwIbz/xni0e7tmdIarIPmLI0J/dXsUEowYeCmhT jOeL7FfdJFrzNrltJvgjeEsc0RDdp2mrb/7ObvNveroJBNP1EFc6IOZw4XIUBrYf AeA9QgV8F7BYB3Yy/z2cFLtkECBDK3pXN8yClJ7PgjDxfv6ICde0oR2MsPdR+/Nh S/Hw60JwJPXcUqmMKNhngjdDo8Nek8faVsSiD/APNlXKF2q2Q8IYYnWpFE3YkLAm vg/6AXP/ApmuFSA51mb8FeSJCXyBVBkCOygzmz+MO0f0NxVOQlFxD1xnTMg1nV+X 9NmqlcUCndM0qbUT9A20d5pUOZz3i/2xAKw7AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUPaAwnXbgp49B/YqbkpD6rftV0hwwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1BhQXduWGJncDQ5Ql9ZcWJrcEQ2cmZ0VjBody5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEb5lgwDQYJKoZIhvcNAQELBQADggEBAKpi4M6hgy/pGgRPeorc7zW0M4/9 ZzNAcZyUzR3uvoyuQ9rdE8ayYcXe42Aq11l4oJYVYLOREN8fK8zHXfS6T0NcUrwW Cn2gOkO47de6N7wB0yWq0WrPAUnpST7Td+W+6O0rVQluvd/zEPoAqW896/y7VPmu X9HbR0ER+HVGcsqBqmgT+OvAHeer+tR2AuFjHvq+5bl3wg3YGkEhFE+H4qbiNdG0 YLkSpjkaBasIRSMcJhP5EnD6HAZxxpWdNkiHym3v7/vANnUrm3Hh0VPhLJ1RqOvi Lqr7OQsn0KpYxWIFX65Z5HAZAcnTpAXThU4y4fbV6MSy5t3MXrem2gc/BW8= -----END CERTIFICATE-----Generated at Sat Jun 1 15:54:30 2024 by rpki-client on console-ams.rpki-client.org