$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/XNEY0aMpXlwWiD5Qk32q29veTgQ.roa File: XNEY0aMpXlwWiD5Qk32q29veTgQ.roa (raw, json) Hash identifier: yAd5UZdmRGO70opv38yBQP+/Uk1JuJd24PagtOcn3Ek= Subject key identifier: 5C:D1:18:D1:A3:29:5E:5C:16:88:3E:50:93:7D:AA:DB:DB:DE:4E:04 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0263 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/XNEY0aMpXlwWiD5Qk32q29veTgQ.roa Signing time: Tue 30 May 2023 16:34:14 +0000 ROA not before: Tue 30 May 2023 16:34:14 +0000 ROA not after: Tue 14 May 2024 01:30:02 +0000 asID: 9605 IP address blocks: 220.159.60.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 May 2024 13:36:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 611 (0x263) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: May 30 16:34:14 2023 GMT Not After : May 14 01:30:02 2024 GMT Subject: CN=5CD118D1A3295E5C16883E50937DAADBDBDE4E04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:4a:4f:df:01:7e:2b:ff:8e:e7:f8:3a:a5:38: c8:b0:11:2f:fd:77:30:ae:da:bc:38:1f:39:df:f0: 12:1b:2d:2c:4d:ab:4b:52:0d:c7:4a:47:3d:86:d5: 73:73:71:64:9e:d8:1d:e6:c2:8a:f8:3d:e7:ae:f7: 31:34:f4:8d:24:54:a6:fa:46:ee:1b:3b:cc:9d:53: 5c:21:60:af:0c:a4:b3:d1:b3:07:ff:09:4b:7d:75: c9:3b:4c:a6:39:e8:97:ca:23:c9:61:65:c2:bf:b9: 4f:49:19:1a:92:8d:7a:2a:be:e9:21:d6:5e:55:13: 89:80:95:71:72:a2:59:36:35:6a:50:b4:43:c5:69: 11:17:a8:7c:f8:f1:ce:1a:7b:5a:68:e0:82:0e:7e: e4:9d:94:5b:85:0f:d5:49:8c:ff:46:f8:01:4f:50: b6:aa:58:df:72:84:45:e6:f0:38:9e:85:6d:33:0d: 62:1e:5c:c1:0e:bb:ee:9f:d5:11:b0:0d:d1:03:68: 95:57:0f:98:e4:14:96:10:26:c5:68:ed:d8:c9:b2: 32:47:5c:f5:aa:d7:db:8f:0e:76:6b:6c:49:a1:14: 2e:8c:12:89:ea:ca:ce:3f:17:66:cb:8c:47:fb:de: 6b:0b:d4:e0:be:f0:d5:34:18:8e:86:7e:bc:27:19: 03:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:D1:18:D1:A3:29:5E:5C:16:88:3E:50:93:7D:AA:DB:DB:DE:4E:04 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/XNEY0aMpXlwWiD5Qk32q29veTgQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 220.159.60.0/22 Signature Algorithm: sha256WithRSAEncryption 15:90:7d:c4:eb:e3:2d:02:6b:94:ab:5e:34:e2:f9:9d:3c:a3: ba:13:54:0b:36:ea:fa:ec:27:50:c0:dc:44:ed:9d:f4:1d:39: da:83:16:e6:3d:cf:b2:61:9c:41:62:00:c3:cf:4b:9c:05:3f: 5b:1a:9f:4c:28:c3:47:72:bc:81:4d:7e:74:c1:17:d8:75:2f: 5e:8e:c6:54:ad:e3:45:3b:85:7a:3b:6f:bc:d4:c4:d7:1e:ac: 71:8b:77:6c:76:e4:43:87:80:fa:1f:e4:8f:b9:ba:a4:43:8a: a7:ef:e1:39:0b:a6:d4:38:42:8f:4b:10:51:db:52:18:a5:16: 6a:02:31:9e:a3:a7:6a:2e:1b:d8:73:3b:8b:bc:85:a1:8c:58: da:19:8a:ef:fb:db:05:6b:89:e9:d4:8a:47:29:f3:e9:ef:e3: d2:7d:a4:e8:26:6c:3b:e8:2f:5c:10:eb:a7:d4:10:05:3d:c4: 7e:23:dd:09:57:75:52:e2:6f:95:01:e4:58:ce:72:9e:a6:cc: b2:86:e7:20:e6:d4:9b:13:eb:7c:5d:c8:b6:45:19:10:4a:d2: d7:9f:a9:fb:a3:fc:5f:8e:ac:55:a1:65:ea:86:d5:fe:9c:b9: 21:a4:b0:3c:24:81:ae:f9:0b:f6:26:01:62:65:fe:bb:ec:6c: 69:54:a5:11 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAmMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA1MzAx NjM0MTRaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDVDRDExOEQxQTMyOTVF NUMxNjg4M0U1MDkzN0RBQURCREJERTRFMDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC5Sk/fAX4r/47n+DqlOMiwES/9dzCu2rw4Hznf8BIbLSxNq0tS DcdKRz2G1XNzcWSe2B3mwor4Peeu9zE09I0kVKb6Ru4bO8ydU1whYK8MpLPRswf/ CUt9dck7TKY56JfKI8lhZcK/uU9JGRqSjXoqvukh1l5VE4mAlXFyolk2NWpQtEPF aREXqHz48c4ae1po4IIOfuSdlFuFD9VJjP9G+AFPULaqWN9yhEXm8DiehW0zDWIe XMEOu+6f1RGwDdEDaJVXD5jkFJYQJsVo7djJsjJHXPWq19uPDnZrbEmhFC6MEonq ys4/F2bLjEf73msL1OC+8NU0GI6GfrwnGQMhAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUXNEY0aMpXlwWiD5Qk32q29veTgQwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1hORVkwYU1wWGx3V2lENVFrMzJxMjl2ZVRnUS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBALcnzwwDQYJKoZIhvcNAQELBQADggEBABWQfcTr4y0Ca5SrXjTi+Z08o7oT VAs26vrsJ1DA3ETtnfQdOdqDFuY9z7JhnEFiAMPPS5wFP1san0wow0dyvIFNfnTB F9h1L16OxlSt40U7hXo7b7zUxNcerHGLd2x25EOHgPof5I+5uqRDiqfv4TkLptQ4 Qo9LEFHbUhilFmoCMZ6jp2ouG9hzO4u8haGMWNoZiu/72wVrienUikcp8+nv49J9 pOgmbDvoL1wQ66fUEAU9xH4j3QlXdVLib5UB5FjOcp6mzLKG5yDm1JsT63xdyLZF GRBK0tefqfuj/F+OrFWhZeqG1f6cuSGksDwkga75C/YmAWJl/rvsbGlUpRE= -----END CERTIFICATE-----Generated at Sat Apr 27 10:15:56 2024 by rpki-client on console-ams.rpki-client.org