$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/UG2QyAiwKFpYuqYx_f6qysU1of8.roa File: UG2QyAiwKFpYuqYx_f6qysU1of8.roa (raw, json) Hash identifier: 9svtmHw2rZql5RArrdPKKN8xEkKTJysudAYphYvwsjI= Subject key identifier: 50:6D:90:C8:08:B0:28:5A:58:BA:A6:31:FD:FE:AA:CA:C5:35:A1:FF Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0541 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/UG2QyAiwKFpYuqYx_f6qysU1of8.roa Signing time: Thu 27 Jul 2023 16:54:18 +0000 ROA not before: Thu 27 Jul 2023 16:54:18 +0000 ROA not after: Sun 14 Jul 2024 01:30:03 +0000 asID: 9605 IP address blocks: 1.76.150.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1345 (0x541) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jul 27 16:54:18 2023 GMT Not After : Jul 14 01:30:03 2024 GMT Subject: CN=506D90C808B0285A58BAA631FDFEAACAC535A1FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:b3:23:e0:0f:6b:46:ea:55:57:df:f8:2c:63: 85:70:0c:6d:13:71:99:66:14:60:b0:24:c5:26:58: eb:1e:40:f4:ec:f0:b7:a7:3d:3e:89:89:88:11:4a: 10:2e:30:78:c0:94:5c:b9:c6:14:17:7b:9c:30:29: a4:7a:86:b3:67:e2:77:f0:29:ea:2c:0d:62:b3:f0: d7:94:87:19:28:d6:e5:17:f0:8a:f3:fa:82:1b:d7: ad:26:1e:b2:30:bc:56:41:2e:ef:fc:99:1a:33:6a: 14:ac:c3:7c:d3:82:9e:75:01:90:86:c6:74:bd:2f: e1:15:da:3b:be:d4:55:17:ed:29:c6:23:ef:05:7e: 61:21:2e:0b:56:0b:7f:e6:90:46:4c:f8:65:c2:6d: e5:55:a6:13:48:03:ac:b1:66:cb:e0:f0:33:71:f9: 42:2e:80:9c:d9:f0:86:5e:60:5b:75:be:fc:8a:43: 0c:52:54:80:11:ab:2a:d4:de:a0:5a:b9:e8:37:8e: 5c:41:1e:99:9a:9c:fe:b4:0c:13:cd:9f:9b:67:b0: fd:93:ae:58:62:99:d5:3d:4e:ed:a6:a4:8e:eb:71: dd:cf:a3:91:8e:31:4f:b5:50:ee:dc:c8:0d:f2:db: 54:5d:b7:77:ea:01:71:83:0a:39:6a:31:4f:e3:84: 65:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:6D:90:C8:08:B0:28:5A:58:BA:A6:31:FD:FE:AA:CA:C5:35:A1:FF X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/UG2QyAiwKFpYuqYx_f6qysU1of8.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.76.150.0/23 Signature Algorithm: sha256WithRSAEncryption 14:dd:27:b4:50:59:05:82:53:34:97:07:f5:7a:4f:1f:4d:36: 2a:e3:15:7d:3d:e1:12:09:28:1f:64:d4:b0:b7:fa:13:ea:c3: d4:0b:58:5f:1f:97:56:ff:cc:b3:95:ee:3d:bd:31:f8:99:aa: d4:bc:a9:07:5c:58:5c:db:13:76:0a:07:31:79:3c:bf:66:15: 4e:f5:f4:18:7f:1e:fb:45:bf:69:39:63:77:fd:c4:88:76:2a: 1d:5c:7e:95:d2:b4:ba:e1:53:69:4c:e7:87:c1:99:a3:59:b4: ae:76:88:12:94:05:bd:d4:94:ec:c3:17:48:ba:a9:ba:65:2d: 7d:c9:dc:24:59:b6:45:98:9b:65:c6:e3:8c:b0:42:c3:c2:b1: ca:10:a1:17:e2:80:cf:69:02:1d:e5:a2:ed:21:7d:13:90:64: cb:b1:6b:97:95:2d:06:f3:d7:51:e5:84:c4:f6:54:70:74:6d: af:88:e7:78:08:ed:00:1e:6d:32:de:db:71:22:24:fd:da:fb: 7c:61:b9:c0:44:91:6e:38:79:22:25:da:a8:ca:6a:9a:07:83: 61:72:8d:61:a7:32:48:57:43:d1:33:ef:6c:01:a1:fb:2b:66: b7:78:f5:29:2f:40:96:dc:d2:9d:98:fe:6f:d0:24:c1:f7:a9: 0a:f5:c0:b8 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBUEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA3Mjcx NjU0MThaFw0yNDA3MTQwMTMwMDNaMDMxMTAvBgNVBAMTKDUwNkQ5MEM4MDhCMDI4 NUE1OEJBQTYzMUZERkVBQUNBQzUzNUExRkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCfsyPgD2tG6lVX3/gsY4VwDG0TcZlmFGCwJMUmWOseQPTs8Len PT6JiYgRShAuMHjAlFy5xhQXe5wwKaR6hrNn4nfwKeosDWKz8NeUhxko1uUX8Irz +oIb160mHrIwvFZBLu/8mRozahSsw3zTgp51AZCGxnS9L+EV2ju+1FUX7SnGI+8F fmEhLgtWC3/mkEZM+GXCbeVVphNIA6yxZsvg8DNx+UIugJzZ8IZeYFt1vvyKQwxS VIARqyrU3qBaueg3jlxBHpmanP60DBPNn5tnsP2TrlhimdU9Tu2mpI7rcd3Po5GO MU+1UO7cyA3y21Rdt3fqAXGDCjlqMU/jhGUlAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUUG2QyAiwKFpYuqYx/f6qysU1of8wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1VHMlF5QWl3S0ZwWXVxWXhfZjZxeXNVMW9mOC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEBTJYwDQYJKoZIhvcNAQELBQADggEBABTdJ7RQWQWCUzSXB/V6Tx9NNirj FX094RIJKB9k1LC3+hPqw9QLWF8fl1b/zLOV7j29MfiZqtS8qQdcWFzbE3YKBzF5 PL9mFU719Bh/HvtFv2k5Y3f9xIh2Kh1cfpXStLrhU2lM54fBmaNZtK52iBKUBb3U lOzDF0i6qbplLX3J3CRZtkWYm2XG44ywQsPCscoQoRfigM9pAh3lou0hfROQZMux a5eVLQbz11HlhMT2VHB0ba+I53gI7QAebTLe23EiJP3a+3xhucBEkW44eSIl2qjK apoHg2FyjWGnMkhXQ9Ez72wBofsrZrd49SkvQJbc0p2Y/m/QJMH3qQr1wLg= -----END CERTIFICATE-----Generated at Sat Jun 1 13:38:47 2024 by rpki-client on console-fra.rpki-client.org