$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Zzcs6QJRhD0qERuKZuUPkqYJers.roa File: Zzcs6QJRhD0qERuKZuUPkqYJers.roa (raw, json) Hash identifier: NSCFRG8PMyyn8CWh6akdMNq+mRHKysupHuxOEB1OObs= Subject key identifier: 67:37:2C:E9:02:51:84:3D:2A:11:1B:8A:66:E5:0F:92:A6:09:7A:BB Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0545 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Zzcs6QJRhD0qERuKZuUPkqYJers.roa Signing time: Thu 27 Jul 2023 16:56:09 +0000 ROA not before: Thu 27 Jul 2023 16:56:09 +0000 ROA not after: Sun 14 Jul 2024 01:30:03 +0000 asID: 9605 IP address blocks: 220.159.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1349 (0x545) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jul 27 16:56:09 2023 GMT Not After : Jul 14 01:30:03 2024 GMT Subject: CN=67372CE90251843D2A111B8A66E50F92A6097ABB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:44:dd:96:85:b1:87:18:40:fa:bf:18:39:62: fe:68:03:62:1d:8a:78:c3:80:f1:72:22:6a:a8:aa: c0:37:6f:1b:49:b1:53:ea:e7:f1:f3:8d:ea:5a:14: 9d:05:76:ca:1b:f4:73:0f:fc:23:7a:a4:8c:23:5b: 05:95:e8:af:1a:52:f2:36:74:a6:ca:83:d1:6e:ea: 0f:4b:41:4d:4e:43:00:92:84:8d:a6:f8:21:8c:e7: 6d:bc:ec:03:f0:07:30:a1:c0:81:a2:60:41:98:01: b4:c1:35:4c:75:fc:e7:1d:76:0b:91:2d:9a:3b:d8: 84:9e:3b:f6:77:97:b6:fe:25:96:d4:c0:fe:c7:13: 16:2d:07:b3:99:39:d4:ca:fa:b4:af:b8:7e:9d:3b: d1:86:42:93:19:ec:14:fa:38:da:9c:f7:20:66:a2: d5:be:90:d3:21:92:1d:6e:7b:9a:2d:18:4c:a1:4f: 80:c9:36:9e:30:a6:51:de:43:e4:12:28:ec:56:03: 17:07:27:ed:01:b7:24:4a:c3:73:cc:af:27:82:e3: 57:18:ba:1a:0d:ab:4e:28:14:ef:45:f5:aa:10:5c: 8b:75:11:94:d0:84:ba:73:d7:dd:57:8a:8b:ef:7b: 61:e9:b0:bc:66:ca:2a:17:15:c4:d9:cb:ea:bd:fe: f3:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:37:2C:E9:02:51:84:3D:2A:11:1B:8A:66:E5:0F:92:A6:09:7A:BB X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Zzcs6QJRhD0qERuKZuUPkqYJers.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 220.159.238.0/24 Signature Algorithm: sha256WithRSAEncryption e5:53:60:f1:b7:ad:f4:43:fa:c4:6a:6b:89:b0:7d:c8:4c:1a: c4:96:b4:b2:68:b6:24:85:4b:15:52:ef:08:61:80:1f:aa:f3: f1:e8:11:80:bf:7c:92:87:7b:b7:0e:c9:03:5c:12:43:12:b3: 53:f7:f1:39:f7:96:b7:07:b8:01:70:96:71:bc:f6:de:95:d3: 64:c4:97:14:52:b2:38:86:85:58:7a:69:41:06:2d:4d:95:e6: 90:7d:d1:05:84:79:b5:23:f3:f6:73:66:c9:53:72:07:16:6a: 4a:52:eb:e0:e3:b7:cf:be:33:15:52:07:87:04:47:7c:c5:b6: 94:62:cf:b1:24:dc:41:88:c7:fe:74:9d:b6:8c:b5:f4:66:56: 70:0f:09:37:f2:18:d5:7e:5f:e4:f4:70:43:d4:51:b3:27:86: 3d:2a:06:f6:41:d4:b3:e8:71:a3:55:dc:a9:4b:39:93:6e:46: 0e:d8:e0:df:65:f7:a4:ce:a2:a9:2b:57:9e:25:ec:7d:6b:7e: a1:5b:9e:94:d6:77:56:7c:5d:56:4b:33:4e:ee:5b:35:16:0e: 22:15:02:3e:7f:f8:8f:19:ac:e4:49:3b:8f:50:ea:56:88:af: 6d:1a:93:83:a8:22:7c:54:8d:28:b4:6b:6b:b1:74:51:fb:79: 13:fc:50:f4 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBUUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA3Mjcx NjU2MDlaFw0yNDA3MTQwMTMwMDNaMDMxMTAvBgNVBAMTKDY3MzcyQ0U5MDI1MTg0 M0QyQTExMUI4QTY2RTUwRjkyQTYwOTdBQkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQClRN2WhbGHGED6vxg5Yv5oA2IdinjDgPFyImqoqsA3bxtJsVPq 5/HzjepaFJ0Fdsob9HMP/CN6pIwjWwWV6K8aUvI2dKbKg9Fu6g9LQU1OQwCShI2m +CGM52287APwBzChwIGiYEGYAbTBNUx1/OcddguRLZo72ISeO/Z3l7b+JZbUwP7H ExYtB7OZOdTK+rSvuH6dO9GGQpMZ7BT6ONqc9yBmotW+kNMhkh1ue5otGEyhT4DJ Np4wplHeQ+QSKOxWAxcHJ+0BtyRKw3PMryeC41cYuhoNq04oFO9F9aoQXIt1EZTQ hLpz191Xiovve2HpsLxmyioXFcTZy+q9/vNzAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUZzcs6QJRhD0qERuKZuUPkqYJerswHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1p6Y3M2UUpSaEQwcUVSdUtadVVQa3FZSmVycy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADcn+4wDQYJKoZIhvcNAQELBQADggEBAOVTYPG3rfRD+sRqa4mwfchMGsSW tLJotiSFSxVS7whhgB+q8/HoEYC/fJKHe7cOyQNcEkMSs1P38Tn3lrcHuAFwlnG8 9t6V02TElxRSsjiGhVh6aUEGLU2V5pB90QWEebUj8/ZzZslTcgcWakpS6+Djt8++ MxVSB4cER3zFtpRiz7Ek3EGIx/50nbaMtfRmVnAPCTfyGNV+X+T0cEPUUbMnhj0q BvZB1LPocaNV3KlLOZNuRg7Y4N9l96TOoqkrV54l7H1rfqFbnpTWd1Z8XVZLM07u WzUWDiIVAj5/+I8ZrORJO49Q6laIr20ak4OoInxUjSi0a2uxdFH7eRP8UPQ= -----END CERTIFICATE-----Generated at Sat Jun 1 15:54:31 2024 by rpki-client on console-ams.rpki-client.org