$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/XJX6YaZa9FiCxEbL3kul9WExmUQ.roa File: XJX6YaZa9FiCxEbL3kul9WExmUQ.roa (raw, json) Hash identifier: VYvE3j1K5vpCbi4HpbOMAEqEVXB020J3tvicoruzVa8= Subject key identifier: 5C:95:FA:61:A6:5A:F4:58:82:C4:46:CB:DE:4B:A5:F5:61:31:99:44 Certificate issuer: /CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E Certificate serial: 28 Authority key identifier: F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/XJX6YaZa9FiCxEbL3kul9WExmUQ.roa Signing time: Thu 27 Jul 2023 16:50:17 +0000 ROA not before: Thu 27 Jul 2023 16:50:17 +0000 ROA not after: Sun 14 Jul 2024 01:30:03 +0000 asID: 9605 IP address blocks: 146.99.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 08:46:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40 (0x28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E Validity Not Before: Jul 27 16:50:17 2023 GMT Not After : Jul 14 01:30:03 2024 GMT Subject: CN=5C95FA61A65AF45882C446CBDE4BA5F561319944 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d0:a2:14:49:42:23:4f:24:84:1d:d2:86:9d: 72:59:aa:1e:43:c7:80:86:60:ae:dc:0a:62:79:d9: f1:fa:19:fc:6f:a9:14:4b:bf:17:3e:7f:68:b5:84: 36:85:c4:83:7e:73:24:5b:4f:eb:b3:6c:d9:01:e3: 6f:d5:e2:51:4c:de:3c:b3:9a:1e:6c:1e:a6:95:31: 4e:2a:5f:3a:6a:a4:88:b8:b2:18:ba:22:02:f1:96: 25:d8:50:da:63:dc:51:9b:41:db:47:ea:68:f4:f3: 74:e7:16:4e:e4:7e:a0:e9:e5:40:e4:1f:42:15:d7: a0:8f:c6:aa:aa:f5:8d:b2:84:27:35:14:ae:62:9e: 33:f1:82:b0:de:5c:56:b1:d3:06:c9:76:d0:74:13: 09:61:ab:ac:0a:5c:78:8e:d8:b9:11:52:65:b0:0f: 9d:1f:8b:3e:28:8a:f3:7c:78:c7:11:21:ee:2e:4c: db:bd:a4:49:34:26:39:a7:81:e9:ca:48:ef:a8:6f: bf:d6:95:05:96:39:18:72:c8:7a:fc:56:cf:b5:2c: c7:d0:27:0b:be:be:bf:0c:9e:b2:37:fa:0c:91:a4: 4d:e1:8c:a0:87:68:dd:57:41:bc:1a:44:4c:40:bc: b5:8d:8f:3f:b5:f4:0d:9e:c0:0a:87:45:73:81:a8: dc:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:95:FA:61:A6:5A:F4:58:82:C4:46:CB:DE:4B:A5:F5:61:31:99:44 X509v3 Authority Key Identifier: keyid:F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/XJX6YaZa9FiCxEbL3kul9WExmUQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 146.99.128.0/17 Signature Algorithm: sha256WithRSAEncryption 4f:85:0d:31:a9:a1:45:10:63:51:63:8c:6c:2c:d2:ca:90:af: 4a:b3:5b:3c:63:0d:b5:7f:ea:fe:23:e6:88:b7:91:37:34:11: 25:8d:9e:93:ee:59:c2:72:6b:ca:52:2f:f3:9d:9e:5d:89:c9: 83:f0:ac:50:1e:52:a4:04:f4:74:f7:4f:cd:c7:16:85:8a:6c: b5:d4:69:14:30:14:df:50:6a:f4:a6:f4:c9:44:8e:e1:fe:72: b5:24:d7:f1:3a:6b:13:0a:08:50:96:8b:06:06:de:be:13:55: fc:d6:72:c0:d0:36:ce:bd:b0:28:1a:1d:0d:53:20:ca:a8:38: 8d:64:3b:41:2d:55:e1:c7:58:06:a0:10:51:f5:af:05:64:24: 6a:1d:78:6b:88:b9:8f:e4:fc:1f:1c:8e:a9:5d:3a:8c:48:76: 61:71:1c:51:1f:51:9f:9c:ea:ba:cf:08:66:e4:cf:42:11:5c: 1d:3b:8e:6b:08:c9:9a:64:ef:4e:3c:e5:48:cd:f9:4d:e5:39: a1:87:cc:44:f2:4f:a7:98:5a:80:25:9b:b4:09:cc:8e:d5:35: 47:e9:ad:69:b0:f1:ad:e4:81:60:33:3a:c7:49:3f:49:73:3b: 61:2b:86:a9:e8:09:61:f3:95:ed:31:aa:39:ec:9f:ff:dc:73: f1:2a:1d:de -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBKDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGODlF MEYxNUMxRTIwRTE5MUFBRjE3Mjg4RjZFMzBGRjAxODY5QTZFMB4XDTIzMDcyNzE2 NTAxN1oXDTI0MDcxNDAxMzAwM1owMzExMC8GA1UEAxMoNUM5NUZBNjFBNjVBRjQ1 ODgyQzQ0NkNCREU0QkE1RjU2MTMxOTk0NDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALXQohRJQiNPJIQd0oadclmqHkPHgIZgrtwKYnnZ8foZ/G+pFEu/ Fz5/aLWENoXEg35zJFtP67Ns2QHjb9XiUUzePLOaHmweppUxTipfOmqkiLiyGLoi AvGWJdhQ2mPcUZtB20fqaPTzdOcWTuR+oOnlQOQfQhXXoI/Gqqr1jbKEJzUUrmKe M/GCsN5cVrHTBsl20HQTCWGrrApceI7YuRFSZbAPnR+LPiiK83x4xxEh7i5M272k STQmOaeB6cpI76hvv9aVBZY5GHLIevxWz7Usx9AnC76+vwyesjf6DJGkTeGMoIdo 3VdBvBpETEC8tY2PP7X0DZ7ACodFc4Go3DkCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBRclfphplr0WILERsveS6X1YTGZRDAfBgNVHSMEGDAWgBT4ng8VweIOGRqvFyiP bjD/AYaabjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzA5Ly1KNFBGY0hpRGhrYXJ4Y29qMjR3X3dHR21tNC5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLy1KNFBGY0hpRGhrYXJ4Y29qMjR3X3dH R21tNC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8zMDkvWEpYNllhWmE5RmlDeEViTDNrdWw5V0V4bVVRLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEB5JjgDANBgkqhkiG9w0BAQsFAAOCAQEAT4UNMamhRRBjUWOMbCzSypCvSrNb PGMNtX/q/iPmiLeRNzQRJY2ek+5ZwnJrylIv852eXYnJg/CsUB5SpAT0dPdPzccW hYpstdRpFDAU31Bq9Kb0yUSO4f5ytSTX8TprEwoIUJaLBgbevhNV/NZywNA2zr2w KBodDVMgyqg4jWQ7QS1V4cdYBqAQUfWvBWQkah14a4i5j+T8HxyOqV06jEh2YXEc UR9Rn5zqus8IZuTPQhFcHTuOawjJmmTvTjzlSM35TeU5oYfMRPJPp5hagCWbtAnM jtU1R+mtabDxreSBYDM6x0k/SXM7YSuGqegJYfOV7TGqOeyf/9xz8Sod3g== -----END CERTIFICATE-----Generated at Sat Jun 1 13:38:47 2024 by rpki-client on console-fra.rpki-client.org