$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/TN5wsQYO1sQkXYvlGuHx-DV1BSo.roa File: TN5wsQYO1sQkXYvlGuHx-DV1BSo.roa (raw, json) Hash identifier: PEZkpKHMivrT6zjZhu0yd74WIEU00tvlBstSrhg20Kg= Subject key identifier: 4C:DE:70:B1:06:0E:D6:C4:24:5D:8B:E5:1A:E1:F1:F8:35:75:05:2A Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0905 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/TN5wsQYO1sQkXYvlGuHx-DV1BSo.roa Signing time: Tue 30 Apr 2024 02:28:38 +0000 ROA not before: Tue 30 Apr 2024 02:28:38 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 1.72.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2309 (0x905) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 30 02:28:38 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=4CDE70B1060ED6C4245D8BE51AE1F1F83575052A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ff:56:31:a7:7e:b5:bb:84:10:00:4d:ab:10: ff:68:1f:da:15:cc:e3:8d:b3:f0:a9:cb:ea:ed:bd: 8d:9e:96:16:ea:01:da:45:bc:ba:8a:93:a3:34:e1: 38:0f:42:1b:f4:1f:70:d5:18:3c:78:94:83:bd:f0: d4:f1:cf:95:bf:4e:a4:b9:f1:e1:a6:42:24:05:c6: c4:58:d1:26:c1:c8:84:29:d2:c6:02:0f:d1:59:ed: 53:c6:1d:f5:d1:9e:e2:ee:85:a9:72:1f:11:cc:7c: c4:32:02:ca:47:11:fa:8b:b6:1b:3f:d1:7b:30:7a: 8b:f9:7c:57:6f:b1:96:84:5c:85:48:98:06:0d:af: b2:a1:ba:a5:67:6e:da:a0:f2:d0:80:40:77:75:9e: 54:48:f4:71:8d:88:73:c8:ca:54:4c:b6:d6:c5:f3: 68:11:4f:0d:5f:b3:24:9a:eb:06:4a:c5:fb:7b:66: 3e:e1:59:9f:d1:d9:ca:c3:4e:72:ed:53:bf:29:09: b2:81:5d:1f:be:d9:08:88:48:f0:b2:29:f2:e8:00: 90:6d:8e:54:02:92:3d:c9:f8:96:fc:ca:0c:31:3b: 5c:5a:53:4c:93:76:63:58:60:6a:31:63:72:8d:e0: 59:af:f7:75:c5:6d:9f:51:66:9e:ea:d4:86:10:94: 27:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:DE:70:B1:06:0E:D6:C4:24:5D:8B:E5:1A:E1:F1:F8:35:75:05:2A X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/TN5wsQYO1sQkXYvlGuHx-DV1BSo.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.72.16.0/20 Signature Algorithm: sha256WithRSAEncryption e6:fd:db:6b:80:ba:a2:8a:4a:2f:72:4f:bf:bf:64:70:0d:0f: 82:a5:3e:b7:e9:d0:32:69:69:bb:df:b5:db:00:f3:0e:9e:10: 81:40:82:e0:9a:32:1c:41:53:e1:98:71:0b:26:c7:ed:c3:9a: 07:c9:a7:c9:d3:2d:47:b8:9a:8e:e2:e7:27:4c:1d:ef:8e:e0: dc:dc:9c:b3:cd:42:e3:fe:10:ed:b6:ef:c2:85:8f:43:3c:90: 09:0a:2b:5b:cf:bd:da:7f:f9:5e:a0:0a:67:4f:89:87:89:37: 07:ed:3b:a1:83:08:23:d7:4b:57:79:ac:c0:e8:e0:ef:0c:32: d8:da:fa:6d:55:69:72:b8:a2:41:01:9c:7e:cc:32:40:f7:2f: 69:c3:8d:3f:84:e9:33:6a:80:40:70:df:de:c7:6a:4a:e5:73: d3:83:12:49:06:68:ea:b8:7e:27:0e:39:de:e8:3b:00:fc:d5: 6e:4f:66:54:c0:0d:68:16:c2:e9:de:f0:08:c1:70:88:a9:47: 7e:4a:e0:27:36:a9:8e:22:f5:09:fa:39:72:bf:e2:5e:b5:a0: a3:c6:1f:91:c6:2b:6d:80:57:0e:66:eb:26:70:cd:9e:7e:cd: cf:96:76:5e:b8:eb:66:7c:79:2f:a5:9d:63:f4:88:3d:a7:15: 2b:b2:bf:7c -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCQUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw MjI4MzhaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDRDREU3MEIxMDYwRUQ2 QzQyNDVEOEJFNTFBRTFGMUY4MzU3NTA1MkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDM/1Yxp361u4QQAE2rEP9oH9oVzOONs/Cpy+rtvY2elhbqAdpF vLqKk6M04TgPQhv0H3DVGDx4lIO98NTxz5W/TqS58eGmQiQFxsRY0SbByIQp0sYC D9FZ7VPGHfXRnuLuhalyHxHMfMQyAspHEfqLths/0Xsweov5fFdvsZaEXIVImAYN r7KhuqVnbtqg8tCAQHd1nlRI9HGNiHPIylRMttbF82gRTw1fsySa6wZKxft7Zj7h WZ/R2crDTnLtU78pCbKBXR++2QiISPCyKfLoAJBtjlQCkj3J+Jb8ygwxO1xaU0yT dmNYYGoxY3KN4Fmv93XFbZ9RZp7q1IYQlCdvAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUTN5wsQYO1sQkXYvlGuHx+DV1BSowHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1RONXdzUVlPMXNRa1hZdmxHdUh4LURWMUJTby5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQBSBAwDQYJKoZIhvcNAQELBQADggEBAOb922uAuqKKSi9yT7+/ZHAND4Kl Prfp0DJpabvftdsA8w6eEIFAguCaMhxBU+GYcQsmx+3DmgfJp8nTLUe4mo7i5ydM He+O4NzcnLPNQuP+EO2278KFj0M8kAkKK1vPvdp/+V6gCmdPiYeJNwftO6GDCCPX S1d5rMDo4O8MMtja+m1VaXK4okEBnH7MMkD3L2nDjT+E6TNqgEBw397Hakrlc9OD EkkGaOq4ficOOd7oOwD81W5PZlTADWgWwune8AjBcIipR35K4Cc2qY4i9Qn6OXK/ 4l61oKPGH5HGK22AVw5m6yZwzZ5+zc+Wdl6462Z8eS+lnWP0iD2nFSuyv3w= -----END CERTIFICATE-----Generated at Sat Jun 1 15:54:30 2024 by rpki-client on console-ams.rpki-client.org