$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Sqrca0wTpwSDzexKlbhL7JyUH9s.roa File: Sqrca0wTpwSDzexKlbhL7JyUH9s.roa (raw, json) Hash identifier: Yz4UjyCbov19oX+nkb9eJJ2gt0Quoj+ZoU/s9pVcn8I= Subject key identifier: 4A:AA:DC:6B:4C:13:A7:04:83:CD:EC:4A:95:B8:4B:EC:9C:94:1F:DB Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 054A Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Sqrca0wTpwSDzexKlbhL7JyUH9s.roa Signing time: Thu 27 Jul 2023 16:56:10 +0000 ROA not before: Thu 27 Jul 2023 16:56:10 +0000 ROA not after: Sun 14 Jul 2024 01:30:03 +0000 asID: 9605 IP address blocks: 110.161.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1354 (0x54a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jul 27 16:56:10 2023 GMT Not After : Jul 14 01:30:03 2024 GMT Subject: CN=4AAADC6B4C13A70483CDEC4A95B84BEC9C941FDB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:3b:e4:ba:57:6f:c4:b2:df:c9:ad:46:26:f0: 3a:ab:34:8a:85:9c:67:0b:f6:9e:2c:54:d1:62:20: 1f:a5:ce:66:d1:81:2f:13:c4:80:c9:56:f9:49:63: 42:7e:9c:44:13:ae:5e:b4:26:23:17:e0:aa:c1:ee: 87:e6:e0:b9:53:97:0d:44:3b:34:61:99:fb:e2:f0: 22:9e:49:6a:b1:16:66:c3:90:fc:ca:c6:f1:fc:9e: af:2e:79:1e:e7:52:7a:4e:88:e9:1a:d0:0c:69:ad: bc:b6:a2:be:88:fb:c4:bb:ff:04:a8:3e:a8:a6:5c: b8:44:03:1f:6d:20:1b:f5:0a:72:3e:8c:1a:24:68: 51:42:2e:20:94:cb:63:b3:fe:5b:13:c0:d3:2a:e7: c5:db:da:cc:c0:a3:f3:cf:6b:7d:a5:b7:4e:08:83: 5c:5b:b5:fc:1a:1c:d9:46:a3:fa:2f:05:3e:48:fa: 8b:5e:67:22:86:7e:78:5c:32:da:eb:c5:a4:43:43: 28:3a:f3:ce:77:71:97:a3:17:1c:51:88:6e:fc:28: d3:48:83:9d:c0:e0:e5:bd:5b:89:8a:a6:1e:9e:25: 43:46:ed:1e:a4:82:8d:a0:3d:22:ed:dd:47:c7:6b: 43:5f:46:77:88:8b:94:b3:20:7e:f9:cc:eb:0a:4c: 6b:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:AA:DC:6B:4C:13:A7:04:83:CD:EC:4A:95:B8:4B:EC:9C:94:1F:DB X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Sqrca0wTpwSDzexKlbhL7JyUH9s.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 110.161.240.0/20 Signature Algorithm: sha256WithRSAEncryption e5:f2:01:4e:fd:a9:0c:cf:8e:ce:87:ff:60:0e:7b:b3:ac:bf: ba:d8:af:6b:4f:e6:62:a1:f9:07:22:92:a7:87:e5:29:cc:06: e8:09:a0:e2:72:29:6a:d1:ea:28:57:6b:16:eb:1e:0e:93:86: 3a:4b:4e:f5:02:6e:21:0e:55:b2:17:e3:fd:8b:a6:37:57:91: 5c:92:1d:38:35:57:6f:af:af:43:a6:64:6c:4e:88:0b:0c:14: 0d:a1:1f:1e:95:56:9b:fd:b8:a5:4f:c8:01:8c:92:21:36:98: a2:8f:3e:9c:90:5d:27:fa:2d:dc:12:46:4f:e6:4f:31:98:a8: 79:e2:9c:8f:7c:22:00:b7:9b:77:e6:cc:20:87:07:82:2f:db: 7e:6a:af:44:89:5a:4d:fc:c7:ee:d6:f3:b8:d5:3f:a1:4a:aa: 53:c6:75:39:bd:b0:4a:f0:eb:d2:a0:82:9b:0c:0d:ef:b6:e1: 57:be:4d:f4:2c:b8:a7:82:32:f6:5d:b1:d6:6c:ef:22:c6:b0: f8:93:e9:3b:4c:6e:fd:cd:13:f0:ff:92:f6:04:74:3e:77:de: 39:ed:e2:d3:93:bd:f5:ce:c6:9c:de:f9:84:d0:ec:96:4e:61: 76:e8:d9:f8:37:c1:cb:c4:a8:4c:57:4b:7f:a9:f3:6a:67:82: ca:7c:f4:0c -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBUowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA3Mjcx NjU2MTBaFw0yNDA3MTQwMTMwMDNaMDMxMTAvBgNVBAMTKDRBQUFEQzZCNEMxM0E3 MDQ4M0NERUM0QTk1Qjg0QkVDOUM5NDFGREIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+O+S6V2/Est/JrUYm8DqrNIqFnGcL9p4sVNFiIB+lzmbRgS8T xIDJVvlJY0J+nEQTrl60JiMX4KrB7ofm4LlTlw1EOzRhmfvi8CKeSWqxFmbDkPzK xvH8nq8ueR7nUnpOiOka0Axprby2or6I+8S7/wSoPqimXLhEAx9tIBv1CnI+jBok aFFCLiCUy2Oz/lsTwNMq58Xb2szAo/PPa32lt04Ig1xbtfwaHNlGo/ovBT5I+ote ZyKGfnhcMtrrxaRDQyg68853cZejFxxRiG78KNNIg53A4OW9W4mKph6eJUNG7R6k go2gPSLt3UfHa0NfRneIi5SzIH75zOsKTGvfAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUSqrca0wTpwSDzexKlbhL7JyUH9swHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1NxcmNhMHdUcHdTRHpleEtsYmhMN0p5VUg5cy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBARuofAwDQYJKoZIhvcNAQELBQADggEBAOXyAU79qQzPjs6H/2AOe7Osv7rY r2tP5mKh+QcikqeH5SnMBugJoOJyKWrR6ihXaxbrHg6ThjpLTvUCbiEOVbIX4/2L pjdXkVySHTg1V2+vr0OmZGxOiAsMFA2hHx6VVpv9uKVPyAGMkiE2mKKPPpyQXSf6 LdwSRk/mTzGYqHninI98IgC3m3fmzCCHB4Iv235qr0SJWk38x+7W87jVP6FKqlPG dTm9sErw69KggpsMDe+24Ve+TfQsuKeCMvZdsdZs7yLGsPiT6TtMbv3NE/D/kvYE dD533jnt4tOTvfXOxpze+YTQ7JZOYXbo2fg3wcvEqExXS3+p82pngsp89Aw= -----END CERTIFICATE-----Generated at Sat Jun 1 13:38:47 2024 by rpki-client on console-fra.rpki-client.org