$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/PjWMMN4CbcxvRGB3XGsKC-rFNx0.roa File: PjWMMN4CbcxvRGB3XGsKC-rFNx0.roa (raw, json) Hash identifier: atsiP5sdWr+inCMpKj2RpxmQJmVxyUpnsB2WQKuDMEs= Subject key identifier: 3E:35:8C:30:DE:02:6D:CC:6F:44:60:77:5C:6B:0A:0B:EA:C5:37:1D Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 044A Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/PjWMMN4CbcxvRGB3XGsKC-rFNx0.roa Signing time: Thu 27 Jul 2023 16:43:12 +0000 ROA not before: Thu 27 Jul 2023 16:43:12 +0000 ROA not after: Sun 14 Jul 2024 01:30:03 +0000 asID: 9605 IP address blocks: 1.72.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Jun 2024 06:27:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1098 (0x44a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jul 27 16:43:12 2023 GMT Not After : Jul 14 01:30:03 2024 GMT Subject: CN=3E358C30DE026DCC6F4460775C6B0A0BEAC5371D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:03:f6:5f:12:25:4f:8c:6d:9a:79:a6:4b:72: d8:d7:4c:dc:5b:b9:c4:9c:a5:75:06:9a:b0:15:20: b8:32:b1:e4:1d:3a:28:4f:c3:8b:ea:66:26:d5:d4: a4:49:8d:0b:6d:2c:0f:fe:34:3c:7c:5a:6d:11:c0: 1e:d4:30:10:4d:f9:1e:da:5d:59:aa:ed:08:d4:c1: 64:5d:5c:c5:21:b6:46:f8:ff:34:0f:27:7d:d7:d2: 4f:cb:c0:9f:a9:a6:f0:19:76:d6:df:ed:49:ff:93: 5b:94:ae:18:f4:52:48:3e:9f:8b:95:59:44:79:f0: cb:c1:69:32:11:6e:27:2a:94:8d:bb:27:4d:37:1d: 57:be:b5:c9:64:1b:14:2f:19:13:ea:79:46:0f:84: 37:ce:37:9e:a1:e2:eb:36:15:1b:46:57:8d:63:bf: d5:44:19:b7:4d:17:06:80:a7:be:f2:4b:65:51:d4: b4:03:cf:9d:0a:c8:b6:0d:5e:d8:74:43:9d:64:a3: 1d:f8:74:25:63:18:f6:74:51:3d:44:3a:f5:f2:af: 79:6b:44:4a:60:9a:3d:fe:9f:20:36:e3:9a:c5:bc: 0b:f2:6c:c9:02:a0:00:78:c5:fd:1b:ac:0d:61:8a: 5e:4e:93:2b:a2:21:db:1f:89:7b:28:fc:f4:a8:6b: 24:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:35:8C:30:DE:02:6D:CC:6F:44:60:77:5C:6B:0A:0B:EA:C5:37:1D X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/PjWMMN4CbcxvRGB3XGsKC-rFNx0.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.72.16.0/21 Signature Algorithm: sha256WithRSAEncryption 19:bc:01:1e:73:9f:cd:4d:0a:9f:9b:34:dd:df:f7:0e:7f:c8: c0:8b:d0:6a:06:92:a6:d1:45:a7:b2:3a:6d:69:d3:17:83:24: 5a:5a:0c:f4:a7:10:c4:fd:2e:a0:9d:e2:dd:f8:7c:7d:30:3c: c1:77:70:b8:d6:4b:1e:ba:2d:1d:02:b6:15:72:0c:f0:63:1a: 70:50:e8:2c:ec:99:0b:1a:40:bb:83:7a:18:88:d4:02:84:d7: 01:b3:41:af:d8:21:c5:aa:6c:ac:19:da:82:3b:2a:2b:d4:b8: 88:f5:de:66:23:8b:3b:e6:d7:2a:8c:13:06:37:79:3d:3a:80: a4:2b:e5:f1:d7:8e:32:7d:37:f6:12:c0:60:a7:36:b6:fe:46: e9:24:cc:77:e7:a6:a1:0e:98:46:69:70:a3:7b:5e:c9:8d:07: 95:67:a7:9c:85:a6:d1:30:ac:bc:97:58:cc:ea:a7:e5:00:58: be:1c:e7:eb:a1:e3:be:2d:ff:9a:a1:2c:6c:a8:e8:1a:16:b9: bd:17:77:4f:aa:85:1e:95:4c:2f:41:a8:b2:c2:4b:a9:a7:be: 89:39:d4:cb:53:f5:19:57:98:1f:6b:ad:95:4b:3d:f3:38:cd: 22:2f:71:69:36:70:e4:df:0f:8a:9c:f4:c8:9e:ac:61:b1:fc: 44:7f:06:f3 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBEowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA3Mjcx NjQzMTJaFw0yNDA3MTQwMTMwMDNaMDMxMTAvBgNVBAMTKDNFMzU4QzMwREUwMjZE Q0M2RjQ0NjA3NzVDNkIwQTBCRUFDNTM3MUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDTA/ZfEiVPjG2aeaZLctjXTNxbucScpXUGmrAVILgyseQdOihP w4vqZibV1KRJjQttLA/+NDx8Wm0RwB7UMBBN+R7aXVmq7QjUwWRdXMUhtkb4/zQP J33X0k/LwJ+ppvAZdtbf7Un/k1uUrhj0Ukg+n4uVWUR58MvBaTIRbicqlI27J003 HVe+tclkGxQvGRPqeUYPhDfON56h4us2FRtGV41jv9VEGbdNFwaAp77yS2VR1LQD z50KyLYNXth0Q51kox34dCVjGPZ0UT1EOvXyr3lrREpgmj3+nyA245rFvAvybMkC oAB4xf0brA1hil5OkyuiIdsfiXso/PSoayR3AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUPjWMMN4CbcxvRGB3XGsKC+rFNx0wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1BqV01NTjRDYmN4dlJHQjNYR3NLQy1yRk54MC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMBSBAwDQYJKoZIhvcNAQELBQADggEBABm8AR5zn81NCp+bNN3f9w5/yMCL 0GoGkqbRRaeyOm1p0xeDJFpaDPSnEMT9LqCd4t34fH0wPMF3cLjWSx66LR0CthVy DPBjGnBQ6CzsmQsaQLuDehiI1AKE1wGzQa/YIcWqbKwZ2oI7KivUuIj13mYjizvm 1yqMEwY3eT06gKQr5fHXjjJ9N/YSwGCnNrb+RukkzHfnpqEOmEZpcKN7XsmNB5Vn p5yFptEwrLyXWMzqp+UAWL4c5+uh474t/5qhLGyo6BoWub0Xd0+qhR6VTC9BqLLC S6mnvok51MtT9RlXmB9rrZVLPfM4zSIvcWk2cOTfD4qc9MierGGx/ER/BvM= -----END CERTIFICATE-----Generated at Mon Jun 24 23:50:26 2024 by rpki-client on console-fra.rpki-client.org