$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/S9utxmX6HXZkh7g3LHW1mAEIAuQ.roa File: S9utxmX6HXZkh7g3LHW1mAEIAuQ.roa (raw, json) Hash identifier: devH2FQqGaxYvjtuezbPe+5vsMl5Emfn3R56xYQMUlQ= Subject key identifier: 4B:DB:AD:C6:65:FA:1D:76:64:87:B8:37:2C:75:B5:98:01:08:02:E4 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 04E7 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/S9utxmX6HXZkh7g3LHW1mAEIAuQ.roa Signing time: Thu 27 Jul 2023 16:50:15 +0000 ROA not before: Thu 27 Jul 2023 16:50:15 +0000 ROA not after: Sun 14 Jul 2024 01:30:03 +0000 asID: 9605 IP address blocks: 220.210.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1255 (0x4e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jul 27 16:50:15 2023 GMT Not After : Jul 14 01:30:03 2024 GMT Subject: CN=4BDBADC665FA1D766487B8372C75B598010802E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:2b:d2:99:f5:fc:9f:d2:40:0d:b8:9b:e2:c0: 0f:bb:04:a0:6e:25:19:aa:a6:ec:ba:43:a3:e9:b5: 30:1e:b0:f8:6e:17:d2:ca:c5:a2:66:7e:8d:68:df: 38:42:82:34:41:d6:61:10:16:fc:6c:21:5a:ce:d5: 0d:9a:9a:75:14:0a:0b:7f:76:b7:7d:85:2a:04:b7: 43:f7:bb:1c:ee:53:88:a8:0c:05:a2:e2:1c:06:0d: 6e:b7:2c:20:a4:2b:89:2e:c1:87:02:cf:6b:d1:64: 8f:39:4e:83:20:49:62:90:59:18:fd:86:17:4c:06: 25:e6:47:2d:14:38:7d:1d:ef:83:f7:b8:45:0b:74: 4f:45:6a:f9:c0:1d:e7:b5:02:9d:14:de:ee:b3:59: 99:c1:4b:ec:5e:79:0d:89:ca:73:81:97:85:24:1d: 7a:0a:cd:e2:c7:cb:9f:a1:8b:18:e3:de:59:bf:d2: 3f:01:53:a4:93:af:74:c2:b3:0d:66:dc:ae:d3:98: 70:35:00:07:a8:a5:8d:16:95:75:a0:09:61:fe:43: f0:a6:14:27:3c:d9:7d:d3:a4:c0:25:63:43:59:cf: c3:02:ea:cd:ac:5c:bf:ee:d9:80:99:b3:68:53:8a: 58:12:75:c4:ae:87:04:64:e8:0c:e5:d0:0b:4c:2f: 4c:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:DB:AD:C6:65:FA:1D:76:64:87:B8:37:2C:75:B5:98:01:08:02:E4 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/S9utxmX6HXZkh7g3LHW1mAEIAuQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 220.210.104.0/24 Signature Algorithm: sha256WithRSAEncryption 13:6e:a5:15:12:23:c7:f0:4b:6e:8b:6a:a1:dd:b1:25:de:fc: 08:9d:93:17:ef:60:32:0d:b7:6d:e7:16:11:1b:aa:60:13:11: fc:d1:c9:51:d2:57:f0:65:75:d3:7f:44:2a:0d:01:7c:91:43: 9a:bc:9c:3e:3f:53:48:92:0c:36:10:af:22:18:5d:f6:21:21: c4:44:fd:7a:9a:7c:d9:c2:95:91:69:e9:1a:5a:ca:fa:d3:a6: bf:ac:3e:04:37:73:0d:47:72:30:64:e2:21:ea:97:3b:b6:21: 66:40:1b:6a:f2:00:65:ca:2d:39:b2:a3:df:86:d0:6e:b8:37: d8:ab:aa:f3:50:67:6c:ec:29:53:48:41:62:3d:60:2a:88:28: 38:4c:b7:0a:a8:3f:2a:fd:b3:cc:58:bd:cd:36:11:e2:6a:60: 7d:8b:5a:a7:90:04:e1:1b:9d:98:3d:ea:04:37:d6:3d:80:49: 63:b2:66:32:d5:a0:32:49:40:c2:1e:ea:8e:d9:3d:ad:d9:b8: ff:7f:22:8c:4c:49:27:e4:65:a9:94:a9:88:56:b0:04:d9:8a: 3d:9a:75:6a:83:0a:66:f2:68:3f:e4:71:f1:34:22:b8:ec:96: 15:6d:4b:1a:20:7e:bb:25:3e:39:ab:9f:e0:8f:9c:f3:13:e5: 48:e3:d4:e8 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBOcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA3Mjcx NjUwMTVaFw0yNDA3MTQwMTMwMDNaMDMxMTAvBgNVBAMTKDRCREJBREM2NjVGQTFE NzY2NDg3QjgzNzJDNzVCNTk4MDEwODAyRTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDXK9KZ9fyf0kANuJviwA+7BKBuJRmqpuy6Q6PptTAesPhuF9LK xaJmfo1o3zhCgjRB1mEQFvxsIVrO1Q2amnUUCgt/drd9hSoEt0P3uxzuU4ioDAWi 4hwGDW63LCCkK4kuwYcCz2vRZI85ToMgSWKQWRj9hhdMBiXmRy0UOH0d74P3uEUL dE9FavnAHee1Ap0U3u6zWZnBS+xeeQ2JynOBl4UkHXoKzeLHy5+hixjj3lm/0j8B U6STr3TCsw1m3K7TmHA1AAeopY0WlXWgCWH+Q/CmFCc82X3TpMAlY0NZz8MC6s2s XL/u2YCZs2hTilgSdcSuhwRk6Azl0AtML0ynAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUS9utxmX6HXZkh7g3LHW1mAEIAuQwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1M5dXR4bVg2SFhaa2g3ZzNMSFcxbUFFSUF1US5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADc0mgwDQYJKoZIhvcNAQELBQADggEBABNupRUSI8fwS26LaqHdsSXe/Aid kxfvYDINt23nFhEbqmATEfzRyVHSV/BlddN/RCoNAXyRQ5q8nD4/U0iSDDYQryIY XfYhIcRE/XqafNnClZFp6RpayvrTpr+sPgQ3cw1HcjBk4iHqlzu2IWZAG2ryAGXK LTmyo9+G0G64N9irqvNQZ2zsKVNIQWI9YCqIKDhMtwqoPyr9s8xYvc02EeJqYH2L WqeQBOEbnZg96gQ31j2ASWOyZjLVoDJJQMIe6o7ZPa3ZuP9/IoxMSSfkZamUqYhW sATZij2adWqDCmbyaD/kcfE0IrjslhVtSxogfrslPjmrn+CPnPMT5Ujj1Og= -----END CERTIFICATE-----Generated at Sat Jun 1 13:38:47 2024 by rpki-client on console-fra.rpki-client.org