$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/TJAJuEnj5c9JAkRKe9Pc1Sp9PSM.roa File: TJAJuEnj5c9JAkRKe9Pc1Sp9PSM.roa (raw, json) Hash identifier: GY5j86q51S4UCITs9qJ9lYJQT45Ke9AVSA9R3bMCrl0= Subject key identifier: 4C:90:09:B8:49:E3:E5:CF:49:02:44:4A:7B:D3:DC:D5:2A:7D:3D:23 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0490 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/TJAJuEnj5c9JAkRKe9Pc1Sp9PSM.roa Signing time: Thu 27 Jul 2023 16:46:05 +0000 ROA not before: Thu 27 Jul 2023 16:46:05 +0000 ROA not after: Sun 14 Jul 2024 01:30:03 +0000 asID: 9605 IP address blocks: 27.230.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1168 (0x490) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jul 27 16:46:05 2023 GMT Not After : Jul 14 01:30:03 2024 GMT Subject: CN=4C9009B849E3E5CF4902444A7BD3DCD52A7D3D23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:22:30:b8:4f:6b:01:9c:39:ca:5f:a9:46:b2: 47:05:1a:43:5e:51:45:27:c1:16:00:20:bc:3f:d8: 58:6b:a1:31:a9:08:2b:0c:58:d0:c8:bc:25:25:cd: 88:eb:48:73:45:b3:ce:60:77:00:ce:c7:00:52:5f: a7:da:99:73:65:eb:ba:4f:ac:cc:14:75:fa:e4:4e: 89:33:5d:59:69:04:65:88:b1:91:f3:59:43:ba:6b: 87:75:00:a7:86:e4:f4:19:46:24:88:45:6d:e3:e3: e9:42:5f:22:5d:f2:76:e3:eb:90:85:b1:1b:b1:a3: b0:cf:0c:12:0f:9c:7e:08:53:96:69:9b:e6:91:f1: 5a:8b:7e:df:4e:41:12:b5:20:0b:6e:dd:f6:7c:3d: 76:76:32:4a:59:33:25:6a:56:61:b1:98:9d:5f:46: a4:91:3c:3f:e9:c9:ce:23:31:57:e6:dd:17:a2:9f: ff:22:1e:96:14:48:2d:0a:67:20:ad:15:37:5d:0e: fc:34:0e:b1:bc:1e:12:6b:bb:6a:51:d0:bf:98:a3: 9c:66:0f:39:bd:d9:f1:05:49:c8:c0:b2:6e:60:d8: 82:c1:25:5c:14:8d:ba:98:03:c9:d8:8b:94:2a:04: 27:28:ad:2a:cb:cd:71:c9:d5:6a:50:6a:4b:8c:53: 62:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:90:09:B8:49:E3:E5:CF:49:02:44:4A:7B:D3:DC:D5:2A:7D:3D:23 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/TJAJuEnj5c9JAkRKe9Pc1Sp9PSM.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.230.99.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:05:b5:b5:3b:95:28:25:43:7f:af:ae:4c:9a:27:21:ea:28: 53:77:47:ed:66:df:12:f9:96:03:95:5e:2c:37:7f:cf:d9:c6: 10:e0:a9:d0:a5:29:3f:4a:d8:08:13:7f:80:c8:27:48:6b:6a: c2:b5:3a:52:a4:e9:6c:36:49:04:bc:d2:85:53:d1:25:82:9d: 3f:5b:b4:5f:b7:0e:3b:c7:55:7f:e3:4f:2e:d8:f4:15:e0:29: 1c:04:49:48:c0:2a:fc:97:11:95:57:70:b4:f6:63:93:ce:6f: e8:00:8a:93:19:c0:57:e9:1c:34:97:e0:28:f8:1e:93:db:ce: 57:c1:12:cf:f5:7f:1e:14:d1:0e:b9:d9:a4:dc:f6:7b:51:47: 78:dc:f8:dc:33:9b:b8:c2:da:d8:5d:5c:ca:e2:b9:df:cf:49: ff:1f:18:0f:66:2f:b0:71:75:3d:63:82:a5:29:6b:d2:9b:ac: a8:4d:f0:20:1b:15:66:7c:58:5d:2b:4b:7b:da:63:42:13:7c: cb:09:7c:cc:b6:53:85:61:05:d5:43:f8:01:88:46:77:1a:07: 89:16:2b:8c:aa:51:cd:8b:e9:a4:f6:1d:9b:80:b7:0f:ba:f0: 93:32:14:1e:9a:1c:76:32:89:e7:bb:d8:2d:a8:aa:e6:d7:d5: 36:0e:dd:dd -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBJAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA3Mjcx NjQ2MDVaFw0yNDA3MTQwMTMwMDNaMDMxMTAvBgNVBAMTKDRDOTAwOUI4NDlFM0U1 Q0Y0OTAyNDQ0QTdCRDNEQ0Q1MkE3RDNEMjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCtIjC4T2sBnDnKX6lGskcFGkNeUUUnwRYAILw/2FhroTGpCCsM WNDIvCUlzYjrSHNFs85gdwDOxwBSX6famXNl67pPrMwUdfrkTokzXVlpBGWIsZHz WUO6a4d1AKeG5PQZRiSIRW3j4+lCXyJd8nbj65CFsRuxo7DPDBIPnH4IU5Zpm+aR 8VqLft9OQRK1IAtu3fZ8PXZ2MkpZMyVqVmGxmJ1fRqSRPD/pyc4jMVfm3Rein/8i HpYUSC0KZyCtFTddDvw0DrG8HhJru2pR0L+Yo5xmDzm92fEFScjAsm5g2ILBJVwU jbqYA8nYi5QqBCcorSrLzXHJ1WpQakuMU2KHAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUTJAJuEnj5c9JAkRKe9Pc1Sp9PSMwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1RKQUp1RW5qNWM5SkFrUktlOVBjMVNwOVBTTS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAb5mMwDQYJKoZIhvcNAQELBQADggEBAEoFtbU7lSglQ3+vrkyaJyHqKFN3 R+1m3xL5lgOVXiw3f8/ZxhDgqdClKT9K2AgTf4DIJ0hrasK1OlKk6Ww2SQS80oVT 0SWCnT9btF+3DjvHVX/jTy7Y9BXgKRwESUjAKvyXEZVXcLT2Y5POb+gAipMZwFfp HDSX4Cj4HpPbzlfBEs/1fx4U0Q652aTc9ntRR3jc+Nwzm7jC2thdXMriud/PSf8f GA9mL7BxdT1jgqUpa9KbrKhN8CAbFWZ8WF0rS3vaY0ITfMsJfMy2U4VhBdVD+AGI RncaB4kWK4yqUc2L6aT2HZuAtw+68JMyFB6aHHYyiee72C2oqubX1TYO3d0= -----END CERTIFICATE-----Generated at Sat Jun 1 13:38:47 2024 by rpki-client on console-fra.rpki-client.org