$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/b1cYpfVWqjfhjyZBKmpf9A6WgZM.roa File: b1cYpfVWqjfhjyZBKmpf9A6WgZM.roa (raw, json) Hash identifier: Ep/Yc8JqsSPwBBYft4c7yUwk4dV0327MmJcuj+jvqdA= Subject key identifier: 6F:57:18:A5:F5:56:AA:37:E1:8F:26:41:2A:6A:5F:F4:0E:96:81:93 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0497 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/b1cYpfVWqjfhjyZBKmpf9A6WgZM.roa Signing time: Thu 27 Jul 2023 16:46:07 +0000 ROA not before: Thu 27 Jul 2023 16:46:07 +0000 ROA not after: Sun 14 Jul 2024 01:30:03 +0000 asID: 9605 IP address blocks: 1.76.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1175 (0x497) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jul 27 16:46:07 2023 GMT Not After : Jul 14 01:30:03 2024 GMT Subject: CN=6F5718A5F556AA37E18F26412A6A5FF40E968193 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:0b:1e:88:63:2b:62:e4:f8:de:fb:ed:2d:67: 2a:2d:62:a2:1d:0a:79:b5:d5:70:66:04:9b:41:9f: 0f:b9:41:77:04:b1:1b:74:26:ec:bf:0c:a4:10:c9: 54:95:79:f3:3a:81:bb:4a:9f:39:e8:70:4a:3d:33: ee:6e:f5:d8:38:d4:0e:2f:e0:02:51:ef:65:b7:98: 3b:ad:53:aa:85:b2:9c:83:89:46:e7:62:32:a7:3a: 71:dd:75:5a:b3:67:f1:cd:87:e6:c8:c8:d4:42:30: 64:e3:c2:e0:ee:29:f2:8b:eb:e5:e4:7c:48:60:d2: f5:45:ba:dd:6e:88:87:de:56:8f:01:8b:78:f1:98: 75:18:62:15:68:d3:9b:01:0a:19:01:6a:c8:d6:5b: a3:fe:eb:66:23:1b:30:41:88:7d:8b:88:6a:56:1c: 7b:98:12:78:1f:de:fe:ad:a4:d5:1b:db:7d:9e:4e: 05:ea:e1:35:02:dc:85:9b:28:21:f5:41:07:e4:d4: 03:aa:56:1c:e0:e3:18:21:96:05:98:e3:1c:32:d1: 21:d9:4c:d2:24:f1:80:3f:60:1f:18:5b:81:3a:87: 23:2e:64:e1:8a:9e:a0:73:d0:a9:5e:49:0d:44:cb: 1e:43:8b:07:69:31:d3:47:a3:59:02:33:ea:eb:86: cc:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:57:18:A5:F5:56:AA:37:E1:8F:26:41:2A:6A:5F:F4:0E:96:81:93 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/b1cYpfVWqjfhjyZBKmpf9A6WgZM.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.76.32.0/20 Signature Algorithm: sha256WithRSAEncryption 44:c4:46:89:51:23:6c:b2:c1:6d:0d:8a:c8:fc:af:a3:eb:3e: 02:1b:03:56:d1:3d:ed:18:2c:db:6f:16:3e:a3:b9:87:79:e9: 09:c9:cf:04:66:fd:e8:d1:41:42:c5:87:14:39:a4:36:07:81: 27:b0:b1:b2:95:d7:7d:6c:75:08:69:d3:3b:96:2e:c6:fa:df: 1a:4d:b4:f3:3b:d4:ee:2a:58:32:7e:15:24:0f:68:03:38:0a: 2b:4c:84:4f:3f:7c:12:0c:da:fb:d3:eb:41:b4:97:b1:d0:ae: f5:fc:25:0c:46:6f:56:9c:60:ba:2e:84:b3:b0:89:9d:6e:ff: 86:93:5b:c5:f5:58:62:b0:55:87:a2:e5:e3:74:9a:6e:66:54: 4c:ab:3b:82:b4:1e:35:c6:ed:a1:5b:f7:b0:6a:23:bd:84:a4: 60:6d:fc:51:26:5b:78:2c:3a:8b:50:a0:ea:d2:60:cc:c1:cd: 32:fe:ff:e7:98:10:15:4c:55:3c:24:9d:f3:68:70:02:bd:bc: 16:17:11:db:ba:a8:b6:a8:2a:9d:f3:08:93:19:a7:39:48:7a: 25:e6:f4:03:43:34:f4:7a:a4:5d:b0:47:b0:39:fa:03:04:3f: 9a:8b:7b:ae:24:23:6a:c8:58:1e:58:0f:98:ec:3a:40:9e:58: 14:2f:d3:ec -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBJcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA3Mjcx NjQ2MDdaFw0yNDA3MTQwMTMwMDNaMDMxMTAvBgNVBAMTKDZGNTcxOEE1RjU1NkFB MzdFMThGMjY0MTJBNkE1RkY0MEU5NjgxOTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC/Cx6IYyti5Pje++0tZyotYqIdCnm11XBmBJtBnw+5QXcEsRt0 Juy/DKQQyVSVefM6gbtKnznocEo9M+5u9dg41A4v4AJR72W3mDutU6qFspyDiUbn YjKnOnHddVqzZ/HNh+bIyNRCMGTjwuDuKfKL6+XkfEhg0vVFut1uiIfeVo8Bi3jx mHUYYhVo05sBChkBasjWW6P+62YjGzBBiH2LiGpWHHuYEngf3v6tpNUb232eTgXq 4TUC3IWbKCH1QQfk1AOqVhzg4xghlgWY4xwy0SHZTNIk8YA/YB8YW4E6hyMuZOGK nqBz0KleSQ1Eyx5DiwdpMdNHo1kCM+rrhswJAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUb1cYpfVWqjfhjyZBKmpf9A6WgZMwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2IxY1lwZlZXcWpmaGp5WkJLbXBmOUE2V2daTS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQBTCAwDQYJKoZIhvcNAQELBQADggEBAETERolRI2yywW0Nisj8r6PrPgIb A1bRPe0YLNtvFj6juYd56QnJzwRm/ejRQULFhxQ5pDYHgSewsbKV131sdQhp0zuW Lsb63xpNtPM71O4qWDJ+FSQPaAM4CitMhE8/fBIM2vvT60G0l7HQrvX8JQxGb1ac YLouhLOwiZ1u/4aTW8X1WGKwVYei5eN0mm5mVEyrO4K0HjXG7aFb97BqI72EpGBt /FEmW3gsOotQoOrSYMzBzTL+/+eYEBVMVTwknfNocAK9vBYXEdu6qLaoKp3zCJMZ pzlIeiXm9ANDNPR6pF2wR7A5+gMEP5qLe64kI2rIWB5YD5jsOkCeWBQv0+w= -----END CERTIFICATE-----Generated at Sat Jun 1 15:54:31 2024 by rpki-client on console-ams.rpki-client.org