$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZrbGoN_p5cnsHrvhTSaVwlBHXFY.roa File: ZrbGoN_p5cnsHrvhTSaVwlBHXFY.roa (raw, json) Hash identifier: o68HmQCn4UgPIaDIkwKCUmWx16X7vle4CorvIafZ0mU= Subject key identifier: 66:B6:C6:A0:DF:E9:E5:C9:EC:1E:BB:E1:4D:26:95:C2:50:47:5C:56 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 022F Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZrbGoN_p5cnsHrvhTSaVwlBHXFY.roa Signing time: Tue 30 May 2023 16:30:35 +0000 ROA not before: Tue 30 May 2023 16:30:35 +0000 ROA not after: Tue 14 May 2024 01:30:02 +0000 asID: 9605 IP address blocks: 1.76.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 May 2024 13:36:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 559 (0x22f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: May 30 16:30:35 2023 GMT Not After : May 14 01:30:02 2024 GMT Subject: CN=66B6C6A0DFE9E5C9EC1EBBE14D2695C250475C56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d4:a0:39:d4:23:80:e8:e3:86:c7:19:b4:8a: 13:16:af:8a:83:df:b7:b8:0c:43:7a:f9:70:66:78: d1:00:92:be:3c:ee:aa:cb:c5:09:db:e9:60:a6:3c: 79:5f:61:9f:7e:fa:bf:40:a7:7b:ab:2e:ec:de:c8: 8c:ba:0b:a5:f9:1b:af:c1:3c:ad:eb:ea:e2:40:70: 47:11:c7:33:58:a6:1b:fe:0d:8a:0d:87:f9:e3:1a: 27:07:d6:27:23:33:7c:d0:3d:a9:87:28:a9:56:0e: 71:93:45:03:58:d1:19:d3:b3:5e:1c:8f:c1:87:ac: 1f:b5:53:c9:05:a0:33:a1:2a:7d:7c:0e:d5:8e:62: c0:83:72:a3:ac:43:9f:32:f5:bc:bb:a7:db:e3:c3: 7c:49:cc:3b:6b:da:6d:8a:59:8b:6f:13:ac:f2:a6: ce:6e:78:d3:e9:d5:32:57:ef:4c:24:77:9b:f2:f7: 71:fb:d9:b4:7d:46:32:e7:cd:24:81:6f:c0:26:86: 62:7f:ef:e4:09:41:e3:df:1c:8d:ab:ee:35:a8:63: 73:20:3d:3b:83:78:d6:88:5b:8d:27:46:a4:97:4b: c0:7d:f6:5f:98:bc:a5:b3:8a:5a:4d:27:0f:18:54: b7:4e:53:6e:7a:19:f0:df:29:54:67:2c:d2:5f:8f: e5:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:B6:C6:A0:DF:E9:E5:C9:EC:1E:BB:E1:4D:26:95:C2:50:47:5C:56 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZrbGoN_p5cnsHrvhTSaVwlBHXFY.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.76.16.0/20 Signature Algorithm: sha256WithRSAEncryption 02:8d:72:9d:79:79:b5:ec:a9:2d:cc:64:c7:24:4f:97:f4:2e: 53:8f:c5:5b:fa:64:52:fe:da:3d:d3:4a:3e:1d:5a:e0:13:17: 1f:d8:d1:ef:3f:70:11:d8:f5:4d:c5:8e:95:37:bf:26:5b:b9: 31:19:b1:ae:82:91:89:95:20:90:a9:61:83:22:9b:21:0b:a3: b0:ab:c0:1a:9a:45:87:7b:2e:63:8a:f7:88:bc:ec:4d:da:18: d6:17:88:70:51:82:40:c9:e4:7a:6b:e9:67:c3:42:8d:e1:61: 42:fd:99:a2:8a:f3:02:01:64:cf:ad:5e:1f:3b:1a:97:2f:a1: 56:d6:97:44:5a:50:71:85:fd:1e:4d:9f:ca:53:cc:23:8e:01: 9b:b1:70:59:bd:bd:22:ac:e7:71:36:51:d6:58:98:2d:40:11: 05:69:35:52:67:ac:b0:5f:8d:ac:ef:8e:77:d1:71:2c:88:92: be:2f:2b:e0:4f:30:84:3c:fa:ab:4d:41:14:0f:84:41:f0:26: b9:7d:ca:f1:6a:89:7e:6c:e8:b6:1b:59:d9:1d:44:39:2c:7a: bd:15:03:1a:8f:da:2b:27:29:4e:d1:e0:75:6f:f8:2d:36:ee: 8a:68:30:a3:19:4f:6d:91:24:a6:d3:cc:22:05:d5:65:f1:f9: f9:ac:82:49 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAi8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA1MzAx NjMwMzVaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDY2QjZDNkEwREZFOUU1 QzlFQzFFQkJFMTREMjY5NUMyNTA0NzVDNTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC41KA51COA6OOGxxm0ihMWr4qD37e4DEN6+XBmeNEAkr487qrL xQnb6WCmPHlfYZ9++r9Ap3urLuzeyIy6C6X5G6/BPK3r6uJAcEcRxzNYphv+DYoN h/njGicH1icjM3zQPamHKKlWDnGTRQNY0RnTs14cj8GHrB+1U8kFoDOhKn18DtWO YsCDcqOsQ58y9by7p9vjw3xJzDtr2m2KWYtvE6zyps5ueNPp1TJX70wkd5vy93H7 2bR9RjLnzSSBb8AmhmJ/7+QJQePfHI2r7jWoY3MgPTuDeNaIW40nRqSXS8B99l+Y vKWzilpNJw8YVLdOU256GfDfKVRnLNJfj+XXAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUZrbGoN/p5cnsHrvhTSaVwlBHXFYwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1pyYkdvTl9wNWNuc0hydmhUU2FWd2xCSFhGWS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQBTBAwDQYJKoZIhvcNAQELBQADggEBAAKNcp15ebXsqS3MZMckT5f0LlOP xVv6ZFL+2j3TSj4dWuATFx/Y0e8/cBHY9U3FjpU3vyZbuTEZsa6CkYmVIJCpYYMi myELo7CrwBqaRYd7LmOK94i87E3aGNYXiHBRgkDJ5Hpr6WfDQo3hYUL9maKK8wIB ZM+tXh87GpcvoVbWl0RaUHGF/R5Nn8pTzCOOAZuxcFm9vSKs53E2UdZYmC1AEQVp NVJnrLBfjazvjnfRcSyIkr4vK+BPMIQ8+qtNQRQPhEHwJrl9yvFqiX5s6LYbWdkd RDkser0VAxqP2isnKU7R4HVv+C027opoMKMZT22RJKbTzCIF1WXx+fmsgkk= -----END CERTIFICATE-----Generated at Sat Apr 27 10:15:57 2024 by rpki-client on console-ams.rpki-client.org