$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Ufzd6jRO78NYFct4XT1ZJLMl03A.roa File: Ufzd6jRO78NYFct4XT1ZJLMl03A.roa (raw, json) Hash identifier: +kXy3bA0n7EpFCLA5WrvllwkjcnSEz6LBlyEASnk1Ao= Subject key identifier: 51:FC:DD:EA:34:4E:EF:C3:58:15:CB:78:5D:3D:59:24:B3:25:D3:70 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0153 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Ufzd6jRO78NYFct4XT1ZJLMl03A.roa Signing time: Wed 24 May 2023 16:31:19 +0000 ROA not before: Wed 24 May 2023 16:31:19 +0000 ROA not after: Tue 14 May 2024 01:30:02 +0000 asID: 9605 IP address blocks: 1.78.0.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 May 2024 13:36:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 339 (0x153) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: May 24 16:31:19 2023 GMT Not After : May 14 01:30:02 2024 GMT Subject: CN=51FCDDEA344EEFC35815CB785D3D5924B325D370 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:19:92:9d:b3:25:33:48:f9:db:c7:85:68:63: dd:33:be:eb:46:4c:52:86:0c:5c:56:64:c3:0f:ca: 30:3b:53:b4:b3:02:db:38:69:03:a3:31:09:e3:c2: aa:d5:99:b7:78:4d:b6:e1:67:cb:06:79:15:77:be: 1e:06:03:07:b9:06:40:11:bd:61:f7:73:cb:a3:fc: 69:07:d7:b2:69:7a:d7:e9:79:09:30:38:37:90:9a: 59:a9:d1:0f:5d:ab:a5:19:28:f1:24:af:60:58:f7: 42:c4:0b:ed:3c:a7:94:f6:fb:bd:68:1a:b3:98:6c: 92:4b:e3:8c:04:53:70:07:b7:bd:99:54:cf:6e:a2: 5e:d2:b6:26:8f:72:9c:80:e7:06:77:ce:b2:18:aa: 58:9b:82:f6:4e:44:86:46:b8:32:24:4a:57:91:24: eb:96:cc:fa:63:55:4a:0e:73:16:3e:42:fc:37:38: 08:f7:9b:89:27:11:b3:55:0a:57:52:3d:2c:8f:11: 4c:eb:c6:b0:77:1d:04:78:07:b5:c0:d5:d5:e1:57: 3c:63:1b:62:e3:37:77:a2:67:81:69:b7:36:cf:fb: 4f:fb:a3:ac:ef:b0:60:fa:8a:21:ce:0b:47:55:a8: b3:78:da:48:d1:e8:99:86:a0:0d:3f:cb:26:9e:a1: 5d:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:FC:DD:EA:34:4E:EF:C3:58:15:CB:78:5D:3D:59:24:B3:25:D3:70 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Ufzd6jRO78NYFct4XT1ZJLMl03A.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.78.0.0/23 Signature Algorithm: sha256WithRSAEncryption 74:61:88:e4:4d:0d:7e:fd:0c:d3:71:ec:64:a8:0b:7d:1e:ad: fa:9f:cf:29:b9:df:73:29:18:b4:8b:64:eb:e7:c8:64:ad:75: 70:d9:d0:05:a2:fa:53:4b:23:97:2a:93:77:df:65:4a:aa:ad: 11:5f:6f:f1:0e:ea:05:81:09:50:46:fb:c9:8a:d3:91:b5:e5: ad:4a:41:c4:63:41:2a:4b:3c:2e:5d:fc:07:c7:65:d2:46:89: f9:a9:56:c1:e9:35:bc:6d:ef:6d:ce:a8:dd:92:5b:45:9d:e9: 58:76:3c:0d:43:f4:20:32:ea:13:0b:97:f5:75:6a:07:f4:35: 8a:1f:8b:81:51:82:e0:7a:cf:b1:39:24:77:ec:72:e0:63:2f: b3:64:a7:a5:10:4f:9f:20:e0:97:f4:0e:51:86:45:d0:c5:5d: 41:8d:1a:6d:96:47:a5:07:7d:7d:d7:fc:66:56:7c:65:f2:29: 91:1e:d5:ef:9a:f9:a5:d3:da:12:31:b1:88:27:58:c5:ab:e5: 80:89:ab:3d:33:dc:c6:49:3f:36:61:fa:f9:2c:19:94:d5:03: 63:08:ad:0c:6d:9e:2f:b4:9b:5b:eb:c0:f4:a7:c7:3d:7e:68: e4:6e:49:3d:13:9c:6e:ee:7f:29:d5:af:e8:b4:36:89:e0:bb: a0:e4:37:9b -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAVMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA1MjQx NjMxMTlaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDUxRkNEREVBMzQ0RUVG QzM1ODE1Q0I3ODVEM0Q1OTI0QjMyNUQzNzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCnGZKdsyUzSPnbx4VoY90zvutGTFKGDFxWZMMPyjA7U7SzAts4 aQOjMQnjwqrVmbd4TbbhZ8sGeRV3vh4GAwe5BkARvWH3c8uj/GkH17JpetfpeQkw ODeQmlmp0Q9dq6UZKPEkr2BY90LEC+08p5T2+71oGrOYbJJL44wEU3AHt72ZVM9u ol7StiaPcpyA5wZ3zrIYqlibgvZORIZGuDIkSleRJOuWzPpjVUoOcxY+Qvw3OAj3 m4knEbNVCldSPSyPEUzrxrB3HQR4B7XA1dXhVzxjG2LjN3eiZ4FptzbP+0/7o6zv sGD6iiHOC0dVqLN42kjR6JmGoA0/yyaeoV3PAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUUfzd6jRO78NYFct4XT1ZJLMl03AwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1VmemQ2alJPNzhOWUZjdDRYVDFaSkxNbDAzQS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEBTgAwDQYJKoZIhvcNAQELBQADggEBAHRhiORNDX79DNNx7GSoC30erfqf zym533MpGLSLZOvnyGStdXDZ0AWi+lNLI5cqk3ffZUqqrRFfb/EO6gWBCVBG+8mK 05G15a1KQcRjQSpLPC5d/AfHZdJGifmpVsHpNbxt723OqN2SW0Wd6Vh2PA1D9CAy 6hMLl/V1agf0NYofi4FRguB6z7E5JHfscuBjL7Nkp6UQT58g4Jf0DlGGRdDFXUGN Gm2WR6UHfX3X/GZWfGXyKZEe1e+a+aXT2hIxsYgnWMWr5YCJqz0z3MZJPzZh+vks GZTVA2MIrQxtni+0m1vrwPSnxz1+aORuST0TnG7ufynVr+i0Nongu6DkN5s= -----END CERTIFICATE-----Generated at Sat Apr 27 10:15:56 2024 by rpki-client on console-ams.rpki-client.org