$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Vxdu2YlE6fqF6pT4chlI-_ckDis.roa File: Vxdu2YlE6fqF6pT4chlI-_ckDis.roa (raw, json) Hash identifier: mwrBQLCN0RtMEXIiLauMJUxOQ6J5DfO4Ej0i/hofOuk= Subject key identifier: 57:17:6E:D9:89:44:E9:FA:85:EA:94:F8:72:19:48:FB:F7:24:0E:2B Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 04CF Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Vxdu2YlE6fqF6pT4chlI-_ckDis.roa Signing time: Thu 27 Jul 2023 16:48:20 +0000 ROA not before: Thu 27 Jul 2023 16:48:20 +0000 ROA not after: Sun 14 Jul 2024 01:30:03 +0000 asID: 9605 IP address blocks: 220.159.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1231 (0x4cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jul 27 16:48:20 2023 GMT Not After : Jul 14 01:30:03 2024 GMT Subject: CN=57176ED98944E9FA85EA94F8721948FBF7240E2B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:9b:29:e7:d3:d3:b3:0f:b3:f2:91:d6:89:f2: fa:a0:fa:fa:41:35:6b:4a:50:11:7d:80:a9:63:69: f1:9e:8f:27:01:82:56:cd:66:e7:0e:92:20:ff:5f: 0f:5d:fd:bf:e8:e7:3f:e3:bd:b3:48:1e:cf:a1:87: 32:f9:32:8c:a2:b9:ef:89:d3:b5:07:cf:52:95:b5: 0e:7d:ab:10:5b:c5:d5:e4:8f:85:26:0b:e8:4e:5a: 1f:fd:35:a3:ad:5d:56:88:ce:a1:85:93:55:fc:bb: a5:de:99:08:5e:e4:89:12:2c:10:07:e6:29:8d:c2: 6a:2e:f9:70:25:29:bd:cb:da:21:df:e8:da:9f:07: b3:b4:45:ce:f6:f6:8e:29:4c:77:ee:84:e1:96:b9: 0c:cc:15:65:a2:a6:a9:a4:f4:11:21:84:85:37:2e: b9:a2:6f:bc:50:aa:a3:4e:1b:9b:67:6b:7f:74:c9: 34:e9:3b:2a:85:bb:eb:fe:71:14:99:b2:c0:1c:71: ef:22:22:05:c9:06:de:c7:08:37:1b:16:a0:a0:4f: 6c:0e:7a:21:f3:d0:30:ee:7d:9b:0f:a5:6f:ea:30: d1:9b:31:a4:30:3f:ca:51:1b:a7:3e:0d:79:39:bc: 75:11:f0:33:2c:6a:db:9a:de:c0:1a:54:90:bc:4e: 95:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:17:6E:D9:89:44:E9:FA:85:EA:94:F8:72:19:48:FB:F7:24:0E:2B X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Vxdu2YlE6fqF6pT4chlI-_ckDis.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 220.159.212.0/22 Signature Algorithm: sha256WithRSAEncryption dd:a0:74:93:fd:58:62:1d:45:e7:57:13:6c:69:e2:38:e9:92: 08:0c:cc:0f:5f:c6:14:b7:9a:14:51:66:63:3d:03:35:40:a1: 5b:d2:c2:2c:03:6a:63:db:b2:a1:11:a6:87:e4:98:ec:53:d5: 86:70:33:bb:39:3d:c7:ac:9c:96:68:9b:6c:2d:db:76:8f:33: 39:cd:c6:93:78:8b:51:dd:58:ca:c3:0b:f6:f9:a6:18:2e:dc: 4e:cb:84:de:36:57:4e:d3:97:47:4e:69:c9:82:5a:27:67:33: d5:30:cd:dd:ce:69:34:5a:b2:ef:f4:4b:f3:73:42:27:d9:6a: 20:0a:54:59:dc:ec:bb:7c:54:f8:22:1c:ce:91:6a:1c:23:f1: aa:0e:93:e5:03:5e:45:f6:ee:d7:03:f6:b6:94:e6:55:73:a9: da:43:b9:71:21:55:74:0e:e9:46:3e:9e:e3:7e:5b:a7:20:cf: 78:44:d3:22:51:82:c3:5b:46:05:8d:9b:b3:17:7a:ef:6b:50: 13:e4:90:67:4b:6d:60:08:fb:55:3a:6f:79:00:15:e2:e5:48: e8:5c:e3:ae:d3:32:e9:d9:64:36:ae:b8:30:b6:66:98:bc:71: 77:61:93:86:b2:46:09:90:79:82:f8:ed:87:ad:6f:2e:4e:4e: 34:cd:fb:0a -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBM8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA3Mjcx NjQ4MjBaFw0yNDA3MTQwMTMwMDNaMDMxMTAvBgNVBAMTKDU3MTc2RUQ5ODk0NEU5 RkE4NUVBOTRGODcyMTk0OEZCRjcyNDBFMkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDKmynn09OzD7PykdaJ8vqg+vpBNWtKUBF9gKljafGejycBglbN ZucOkiD/Xw9d/b/o5z/jvbNIHs+hhzL5Moyiue+J07UHz1KVtQ59qxBbxdXkj4Um C+hOWh/9NaOtXVaIzqGFk1X8u6XemQhe5IkSLBAH5imNwmou+XAlKb3L2iHf6Nqf B7O0Rc729o4pTHfuhOGWuQzMFWWipqmk9BEhhIU3Lrmib7xQqqNOG5tna390yTTp OyqFu+v+cRSZssAcce8iIgXJBt7HCDcbFqCgT2wOeiHz0DDufZsPpW/qMNGbMaQw P8pRG6c+DXk5vHUR8DMsatua3sAaVJC8TpUVAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUVxdu2YlE6fqF6pT4chlI+/ckDiswHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1Z4ZHUyWWxFNmZxRjZwVDRjaGxJLV9ja0Rpcy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBALcn9QwDQYJKoZIhvcNAQELBQADggEBAN2gdJP9WGIdRedXE2xp4jjpkggM zA9fxhS3mhRRZmM9AzVAoVvSwiwDamPbsqERpofkmOxT1YZwM7s5PcesnJZom2wt 23aPMznNxpN4i1HdWMrDC/b5phgu3E7LhN42V07Tl0dOacmCWidnM9Uwzd3OaTRa su/0S/NzQifZaiAKVFnc7Lt8VPgiHM6Rahwj8aoOk+UDXkX27tcD9raU5lVzqdpD uXEhVXQO6UY+nuN+W6cgz3hE0yJRgsNbRgWNm7MXeu9rUBPkkGdLbWAI+1U6b3kA FeLlSOhc467TMunZZDauuDC2Zpi8cXdhk4ayRgmQeYL47Yetby5OTjTN+wo= -----END CERTIFICATE-----Generated at Sat Jun 1 15:54:31 2024 by rpki-client on console-ams.rpki-client.org