$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/UTyVFThxLKnXzxrY86xifaGFV00.roa File: UTyVFThxLKnXzxrY86xifaGFV00.roa (raw, json) Hash identifier: 5d9RjU05CDGgjfW+EwOP30Zcb14WuB66++n8iYbHuIo= Subject key identifier: 51:3C:95:15:38:71:2C:A9:D7:CF:1A:D8:F3:AC:62:7D:A1:85:57:4D Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0295 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/UTyVFThxLKnXzxrY86xifaGFV00.roa Signing time: Tue 30 May 2023 16:36:29 +0000 ROA not before: Tue 30 May 2023 16:36:29 +0000 ROA not after: Tue 14 May 2024 01:30:02 +0000 asID: 9605 IP address blocks: 1.74.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 May 2024 13:36:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 661 (0x295) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: May 30 16:36:29 2023 GMT Not After : May 14 01:30:02 2024 GMT Subject: CN=513C951538712CA9D7CF1AD8F3AC627DA185574D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:93:16:14:b9:f7:b4:cc:75:25:ae:53:66:f2: 2a:c2:30:e0:ee:7d:a3:2b:9b:53:54:81:7b:02:8a: f8:3f:9e:02:9b:08:cd:0b:45:c3:5c:8d:32:f2:82: 22:cf:ca:38:da:54:42:56:99:73:5c:0e:5e:7f:40: 4d:44:6d:69:c5:b9:60:c2:d7:18:ad:d9:e1:d1:7d: 84:fe:36:e3:f7:0d:02:b4:38:3f:ef:48:59:3d:79: 25:12:e1:62:60:bf:33:5f:ce:99:33:65:30:c5:7f: 94:aa:4d:5b:7a:61:8c:db:42:3f:8d:ef:ec:aa:2e: 3c:18:95:c0:4d:a0:76:7b:bd:69:e9:d9:27:a9:57: a7:f9:41:15:a5:53:b0:b3:81:8a:e4:06:af:08:fd: 51:22:f0:6e:43:16:8c:de:4a:77:73:e0:10:b1:22: ef:d2:08:9d:e7:48:1a:c4:92:4b:57:d8:04:f1:52: 96:82:6e:5b:b3:b5:ae:34:5d:bc:b4:ae:95:d5:d7: 85:bb:49:4f:b2:e3:0d:fe:d3:b6:3a:ae:9c:23:c9: db:24:34:2f:56:34:31:97:a1:9f:93:f9:b7:3f:33: 3b:7a:23:0e:75:5c:cb:4a:b8:10:af:f1:d4:ca:24: a2:38:58:04:b0:7b:2a:d0:45:2b:9e:00:0e:c1:73: a2:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:3C:95:15:38:71:2C:A9:D7:CF:1A:D8:F3:AC:62:7D:A1:85:57:4D X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/UTyVFThxLKnXzxrY86xifaGFV00.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.74.208.0/20 Signature Algorithm: sha256WithRSAEncryption 46:7d:62:81:aa:59:c7:be:37:54:55:91:7c:cd:ce:da:36:df: d7:d3:b3:15:d9:db:dc:97:7c:67:76:b5:bb:39:d4:90:86:07: 14:cd:b9:ec:d9:b8:df:71:7a:fa:30:f8:ac:d2:f1:90:f6:f6: c3:ee:54:26:04:15:05:17:41:a1:fc:59:fb:c5:0f:06:3d:78: 70:5f:80:ba:41:64:d4:3b:50:b1:b8:0d:a5:32:8c:de:af:1b: 26:d3:45:40:63:01:e5:47:02:a9:29:1c:73:d6:5c:f4:cb:0d: d1:d8:14:f4:e2:e3:14:99:7d:65:64:01:62:b5:0f:c7:95:19: e8:6b:a1:72:77:fa:c9:7d:82:1d:23:5e:f2:30:2c:28:90:29: 29:2c:73:fd:8c:98:ff:6c:95:01:ce:f0:4b:e0:aa:e1:28:14: 26:e7:29:1a:70:4d:06:34:24:e6:7f:b0:b5:7d:48:7f:56:cd: bb:bd:89:3b:2f:d5:da:76:a2:44:f2:54:04:84:65:40:84:3d: 06:5f:86:cd:36:3d:c9:1b:90:46:79:ea:5b:d2:06:42:ef:cb: 7a:25:a6:69:f4:98:72:68:19:16:bc:40:ff:8e:09:b5:af:de: 9d:c0:a1:2a:23:3b:72:20:46:5b:c3:39:47:d8:85:be:b8:e3: 2a:52:03:30 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICApUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA1MzAx NjM2MjlaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDUxM0M5NTE1Mzg3MTJD QTlEN0NGMUFEOEYzQUM2MjdEQTE4NTU3NEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC7kxYUufe0zHUlrlNm8irCMODufaMrm1NUgXsCivg/ngKbCM0L RcNcjTLygiLPyjjaVEJWmXNcDl5/QE1EbWnFuWDC1xit2eHRfYT+NuP3DQK0OD/v SFk9eSUS4WJgvzNfzpkzZTDFf5SqTVt6YYzbQj+N7+yqLjwYlcBNoHZ7vWnp2Sep V6f5QRWlU7CzgYrkBq8I/VEi8G5DFozeSndz4BCxIu/SCJ3nSBrEkktX2ATxUpaC bluzta40Xby0rpXV14W7SU+y4w3+07Y6rpwjydskNC9WNDGXoZ+T+bc/Mzt6Iw51 XMtKuBCv8dTKJKI4WASweyrQRSueAA7Bc6J1AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUUTyVFThxLKnXzxrY86xifaGFV00wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1VUeVZGVGh4TEtuWHp4clk4NnhpZmFHRlYwMC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQBStAwDQYJKoZIhvcNAQELBQADggEBAEZ9YoGqWce+N1RVkXzNzto239fT sxXZ29yXfGd2tbs51JCGBxTNuezZuN9xevow+KzS8ZD29sPuVCYEFQUXQaH8WfvF DwY9eHBfgLpBZNQ7ULG4DaUyjN6vGybTRUBjAeVHAqkpHHPWXPTLDdHYFPTi4xSZ fWVkAWK1D8eVGehroXJ3+sl9gh0jXvIwLCiQKSksc/2MmP9slQHO8EvgquEoFCbn KRpwTQY0JOZ/sLV9SH9Wzbu9iTsv1dp2okTyVASEZUCEPQZfhs02PckbkEZ56lvS BkLvy3olpmn0mHJoGRa8QP+OCbWv3p3AoSojO3IgRlvDOUfYhb644ypSAzA= -----END CERTIFICATE-----Generated at Sat Apr 27 10:15:56 2024 by rpki-client on console-ams.rpki-client.org