$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZoYNpjAk935-xO4qMSmqDkSxxRs.roa File: ZoYNpjAk935-xO4qMSmqDkSxxRs.roa (raw, json) Hash identifier: B3eO9fBMXds/ckTlUT87wywZhltZS9HT47F1ZTg0zis= Subject key identifier: 66:86:0D:A6:30:24:F7:7E:7E:C4:EE:2A:31:29:AA:0E:44:B1:C5:1B Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0213 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZoYNpjAk935-xO4qMSmqDkSxxRs.roa Signing time: Tue 30 May 2023 16:30:24 +0000 ROA not before: Tue 30 May 2023 16:30:24 +0000 ROA not after: Tue 14 May 2024 01:30:02 +0000 asID: 9605 IP address blocks: 110.161.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 May 2024 13:36:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 531 (0x213) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: May 30 16:30:24 2023 GMT Not After : May 14 01:30:02 2024 GMT Subject: CN=66860DA63024F77E7EC4EE2A3129AA0E44B1C51B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:54:72:93:ba:af:d9:69:6f:5b:59:86:32:2e: 58:67:28:c2:f6:0b:0c:a5:26:37:b9:10:b0:c4:57: 03:4e:77:0b:f4:1f:41:cb:23:05:ce:80:53:35:27: d6:75:b1:8b:39:54:71:fa:06:b1:27:1a:e6:73:9a: 98:77:15:57:c4:42:3d:00:d5:b6:d6:3f:68:2f:37: 36:a8:ef:c7:c4:2d:bb:61:88:68:d6:56:47:4f:c1: 53:a4:c3:1f:37:db:ac:53:9e:47:41:a1:5f:81:1c: 61:38:f5:ac:36:3c:6e:b0:d4:37:6d:ee:2d:72:17: a9:e1:ae:bf:8b:40:46:97:d7:85:8a:82:00:b4:1b: 77:ee:65:11:fb:bd:94:8b:6d:f1:7f:dc:4c:ed:25: 4b:fc:03:e6:e8:2e:e3:02:43:b7:eb:2a:92:25:3a: 4c:06:b2:a9:d7:56:35:7d:13:21:b7:8a:12:9b:a7: 86:79:ab:25:0c:a9:7a:c4:f1:ea:ee:ea:b3:c2:20: f0:16:ea:b6:a9:8b:b3:84:ea:08:9b:59:40:42:f8: cf:f3:6c:34:41:59:6b:02:7b:a9:64:19:5d:78:17: 6f:cd:b5:bc:92:80:3b:01:cb:5a:03:f3:8b:c1:fe: 89:07:b4:de:ae:09:59:ce:11:96:2d:9b:14:4e:69: 82:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:86:0D:A6:30:24:F7:7E:7E:C4:EE:2A:31:29:AA:0E:44:B1:C5:1B X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZoYNpjAk935-xO4qMSmqDkSxxRs.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 110.161.0.0/17 Signature Algorithm: sha256WithRSAEncryption 29:8a:17:15:e0:0b:8e:6c:9f:9a:a6:c6:65:fc:77:07:79:78: c4:81:8a:92:5d:71:d4:62:d1:b9:22:5a:c5:16:d6:06:7c:35: cc:51:62:c2:6b:a6:07:fe:2c:ed:ad:d6:35:7d:e4:e1:ce:c5: db:9a:4f:d6:c5:b3:66:17:c0:7e:8d:6f:58:85:0e:11:80:35: a0:c6:73:d5:79:c4:da:70:f5:87:54:e3:8a:e7:fe:da:be:b6: 11:16:79:be:24:03:db:89:c8:94:23:89:75:34:ed:74:68:f8: 7b:3e:0f:36:6f:28:8b:74:37:53:d3:06:de:82:d5:dd:3a:69: 3f:17:3c:fe:b2:fe:e7:ea:28:28:83:5c:46:a6:5b:27:63:d9: 2d:dd:db:8b:2a:14:08:7d:5d:5a:9d:ab:48:cc:19:98:0a:33: 29:b0:b9:7e:25:07:d0:c0:9f:8e:61:86:c1:90:85:5e:1c:2e: 2e:b4:e1:d9:02:cd:cb:b0:d5:8c:be:fa:90:9d:5b:91:76:f2: 8f:f5:dc:68:99:d9:c1:97:b1:48:59:99:ba:d8:45:71:14:37: f5:a2:95:82:cc:28:08:c2:e2:cb:10:85:c0:34:bf:e4:72:fe: 18:5d:07:bd:53:e5:ef:65:dd:32:06:2e:e1:67:a2:50:ee:6d: 45:c3:bc:3f -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAhMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA1MzAx NjMwMjRaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDY2ODYwREE2MzAyNEY3 N0U3RUM0RUUyQTMxMjlBQTBFNDRCMUM1MUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC2VHKTuq/ZaW9bWYYyLlhnKML2CwylJje5ELDEVwNOdwv0H0HL IwXOgFM1J9Z1sYs5VHH6BrEnGuZzmph3FVfEQj0A1bbWP2gvNzao78fELbthiGjW VkdPwVOkwx8326xTnkdBoV+BHGE49aw2PG6w1Ddt7i1yF6nhrr+LQEaX14WKggC0 G3fuZRH7vZSLbfF/3EztJUv8A+boLuMCQ7frKpIlOkwGsqnXVjV9EyG3ihKbp4Z5 qyUMqXrE8eru6rPCIPAW6rapi7OE6gibWUBC+M/zbDRBWWsCe6lkGV14F2/NtbyS gDsBy1oD84vB/okHtN6uCVnOEZYtmxROaYILAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUZoYNpjAk935+xO4qMSmqDkSxxRswHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1pvWU5wakFrOTM1LXhPNHFNU21xRGtTeHhScy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAduoQAwDQYJKoZIhvcNAQELBQADggEBACmKFxXgC45sn5qmxmX8dwd5eMSB ipJdcdRi0bkiWsUW1gZ8NcxRYsJrpgf+LO2t1jV95OHOxduaT9bFs2YXwH6Nb1iF DhGANaDGc9V5xNpw9YdU44rn/tq+thEWeb4kA9uJyJQjiXU07XRo+Hs+DzZvKIt0 N1PTBt6C1d06aT8XPP6y/ufqKCiDXEamWydj2S3d24sqFAh9XVqdq0jMGZgKMymw uX4lB9DAn45hhsGQhV4cLi604dkCzcuw1Yy++pCdW5F28o/13GiZ2cGXsUhZmbrY RXEUN/WilYLMKAjC4ssQhcA0v+Ry/hhdB71T5e9l3TIGLuFnolDubUXDvD8= -----END CERTIFICATE-----Generated at Sat Apr 27 10:15:57 2024 by rpki-client on console-ams.rpki-client.org