$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZTPxY1wE8rNYwtx25jZ5jSc6TV0.roa File: ZTPxY1wE8rNYwtx25jZ5jSc6TV0.roa (raw, json) Hash identifier: LFaTFzfw/SYh5cNxJnKxOgycZu/fSSyZAKNQ227U1m0= Subject key identifier: 65:33:F1:63:5C:04:F2:B3:58:C2:DC:76:E6:36:79:8D:27:3A:4D:5D Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 02D8 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZTPxY1wE8rNYwtx25jZ5jSc6TV0.roa Signing time: Tue 30 May 2023 17:18:25 +0000 ROA not before: Tue 30 May 2023 17:18:25 +0000 ROA not after: Tue 14 May 2024 01:30:02 +0000 asID: 9605 IP address blocks: 49.105.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 May 2024 13:36:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 728 (0x2d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: May 30 17:18:25 2023 GMT Not After : May 14 01:30:02 2024 GMT Subject: CN=6533F1635C04F2B358C2DC76E636798D273A4D5D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c2:d3:91:d8:f1:69:21:bc:57:a1:2e:9f:cf: 90:e8:f7:9f:f1:95:b4:90:52:07:9f:78:77:c5:0d: 67:b9:29:49:53:37:4d:6e:aa:10:bc:b3:ab:0f:e7: 4f:be:80:7c:3d:61:cf:71:0f:fc:47:9c:eb:d3:d9: 28:f4:8f:4f:90:b3:bb:93:e0:d1:99:4b:bf:8b:2a: b5:d5:73:50:e5:52:8a:16:fe:78:46:6e:6e:51:61: 8d:77:23:d8:0a:4a:26:b0:5b:9f:0b:4c:f8:e8:2a: 8f:15:3d:da:8b:a0:d5:02:11:71:0f:a6:32:f6:b7: 9d:dd:a7:b8:06:98:7a:3d:7a:24:41:8c:cb:41:6d: 0b:fa:00:28:08:81:e8:81:e9:47:d1:e4:f1:66:64: 65:32:54:7f:8c:c5:21:71:a4:d7:b9:bd:75:fd:bd: ce:d4:c2:71:32:ca:f3:1f:a1:a8:e7:44:0f:c6:68: 34:c6:be:dc:4e:97:74:f3:37:9f:fe:9e:dc:c6:d8: ca:bd:7c:e1:82:d5:61:88:55:fc:b0:8f:fc:e5:8e: 7e:f0:65:b9:c5:6f:7e:8f:23:af:67:50:24:3a:48: 54:35:9c:e9:dc:6f:ec:c9:6a:b6:28:93:c8:fd:e5: 9f:e8:04:45:56:91:5f:e5:f5:d0:fc:e6:a4:af:cf: 3c:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:33:F1:63:5C:04:F2:B3:58:C2:DC:76:E6:36:79:8D:27:3A:4D:5D X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZTPxY1wE8rNYwtx25jZ5jSc6TV0.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.105.10.0/24 Signature Algorithm: sha256WithRSAEncryption c3:90:e1:56:ad:d1:38:a7:13:2f:73:40:d1:fd:04:42:38:9f: 3c:86:7f:9a:85:48:bb:bb:08:10:c6:90:e5:f7:30:5b:1e:70: f6:96:30:a9:ff:44:2c:5a:3d:3f:19:db:fe:30:71:20:de:67: 96:a7:b0:64:df:33:5b:e0:e7:ae:26:8f:05:2e:3b:d3:4f:2d: 04:29:08:99:23:51:74:99:c8:94:df:0d:c0:fb:d4:96:c4:43: 94:70:29:f4:e2:54:4d:5e:ba:ed:81:76:38:69:91:c6:ca:74: 72:6c:7f:10:1d:70:6b:23:97:82:89:1f:75:43:46:fb:1f:75: 22:59:dc:90:17:c9:5d:9c:1f:78:99:68:01:9f:13:6d:4f:c9: f0:e8:90:c2:88:9b:6c:8f:04:2b:ca:0d:a8:cd:1d:78:0a:d0: cb:5b:5f:82:97:a4:54:e0:e5:a0:17:ae:2b:11:43:90:02:57: 55:73:de:54:0d:25:2f:31:ef:57:87:27:04:9c:5a:17:db:b4: a4:13:30:4e:c3:96:d5:7d:01:ff:4e:6a:4a:6a:3e:fe:da:69: 0f:1c:af:fb:a8:85:c0:03:12:5b:49:c0:e3:a8:a1:95:c9:7e: a9:98:8a:2f:0c:3c:78:47:3e:b2:21:81:05:6e:01:db:35:bb: 96:0d:4b:11 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAtgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA1MzAx NzE4MjVaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDY1MzNGMTYzNUMwNEYy QjM1OEMyREM3NkU2MzY3OThEMjczQTRENUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDBwtOR2PFpIbxXoS6fz5Do95/xlbSQUgefeHfFDWe5KUlTN01u qhC8s6sP50++gHw9Yc9xD/xHnOvT2Sj0j0+Qs7uT4NGZS7+LKrXVc1DlUooW/nhG bm5RYY13I9gKSiawW58LTPjoKo8VPdqLoNUCEXEPpjL2t53dp7gGmHo9eiRBjMtB bQv6ACgIgeiB6UfR5PFmZGUyVH+MxSFxpNe5vXX9vc7UwnEyyvMfoajnRA/GaDTG vtxOl3TzN5/+ntzG2Mq9fOGC1WGIVfywj/zljn7wZbnFb36PI69nUCQ6SFQ1nOnc b+zJarYok8j95Z/oBEVWkV/l9dD85qSvzzw9AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUZTPxY1wE8rNYwtx25jZ5jSc6TV0wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1pUUHhZMXdFOHJOWXd0eDI1alo1alNjNlRWMC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAxaQowDQYJKoZIhvcNAQELBQADggEBAMOQ4Vat0TinEy9zQNH9BEI4nzyG f5qFSLu7CBDGkOX3MFsecPaWMKn/RCxaPT8Z2/4wcSDeZ5ansGTfM1vg564mjwUu O9NPLQQpCJkjUXSZyJTfDcD71JbEQ5RwKfTiVE1euu2BdjhpkcbKdHJsfxAdcGsj l4KJH3VDRvsfdSJZ3JAXyV2cH3iZaAGfE21PyfDokMKIm2yPBCvKDajNHXgK0Mtb X4KXpFTg5aAXrisRQ5ACV1Vz3lQNJS8x71eHJwScWhfbtKQTME7DltV9Af9Oakpq Pv7aaQ8cr/uohcADEltJwOOooZXJfqmYii8MPHhHPrIhgQVuAds1u5YNSxE= -----END CERTIFICATE-----Generated at Sat Apr 27 10:15:57 2024 by rpki-client on console-ams.rpki-client.org