$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/cIXAtvalgnHfKTKOnG2emO8gk2c.roa File: cIXAtvalgnHfKTKOnG2emO8gk2c.roa (raw, json) Hash identifier: jRrF2KjtxFRkrjAeUFE6RA73GrLECrvqEYrsJ3hHQhk= Subject key identifier: 70:85:C0:B6:F6:A5:82:71:DF:29:32:8E:9C:6D:9E:98:EF:20:93:67 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 04C3 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/cIXAtvalgnHfKTKOnG2emO8gk2c.roa Signing time: Thu 27 Jul 2023 16:48:16 +0000 ROA not before: Thu 27 Jul 2023 16:48:16 +0000 ROA not after: Sun 14 Jul 2024 01:30:03 +0000 asID: 9605 IP address blocks: 110.161.194.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1219 (0x4c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jul 27 16:48:16 2023 GMT Not After : Jul 14 01:30:03 2024 GMT Subject: CN=7085C0B6F6A58271DF29328E9C6D9E98EF209367 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:91:f5:bc:04:cb:45:91:c1:92:bd:0f:27:41: 60:cc:e6:42:ef:82:4a:2b:2b:88:02:35:6c:69:b2: 30:3a:57:b3:89:82:96:5f:1a:2f:ee:cb:60:a4:f6: 7c:9b:80:1e:d7:cd:4b:e2:8a:ec:ea:d3:5f:f5:7e: ed:7b:0b:ac:42:6f:79:da:1e:e9:98:4d:4a:93:7a: 5d:ac:bb:95:f0:6a:94:e3:70:0f:9d:9c:a2:01:67: b4:7f:cf:6d:f4:60:e5:96:58:36:b5:8a:bb:9a:f5: 93:b9:4b:cd:b4:d8:c1:88:4f:a3:88:8c:79:bc:4c: f8:6b:87:70:d6:e9:85:dd:f8:ea:69:8b:d5:b6:01: 83:47:ca:b2:87:97:0a:47:43:06:c3:be:f5:82:dc: a3:d2:0a:ba:8b:98:d7:88:d2:4b:75:e0:97:91:f1: d2:3f:43:56:bc:96:09:c1:88:06:07:ef:09:18:3e: 0c:3d:72:d2:38:a9:03:26:2d:19:4e:72:b4:17:bf: 6c:8f:78:77:83:c0:ed:6f:1d:f6:8e:e5:05:49:5a: 75:78:d8:ed:c2:9d:66:7a:53:48:6e:3d:ec:03:3f: 50:4d:d3:1b:04:a3:14:49:ea:39:2c:a7:b4:36:7a: e9:85:05:02:b8:d9:15:ba:95:91:eb:06:e2:96:e3: 21:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:85:C0:B6:F6:A5:82:71:DF:29:32:8E:9C:6D:9E:98:EF:20:93:67 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/cIXAtvalgnHfKTKOnG2emO8gk2c.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 110.161.194.0/23 Signature Algorithm: sha256WithRSAEncryption 01:f7:09:48:56:c5:2b:b0:42:fe:13:f8:f1:17:c7:9c:59:c9: ea:1f:04:c3:c9:37:29:46:b4:75:2c:47:03:09:ae:72:c7:33: 32:f3:d2:39:cd:51:18:18:57:aa:eb:b1:c0:33:e7:07:af:05: 59:7a:53:93:dd:12:dc:4b:8e:59:18:35:c6:d4:23:46:1d:65: c9:f7:6b:f9:35:43:e0:0e:24:a8:5d:6f:c1:75:41:91:9e:e8: 23:3b:b8:a7:f3:55:d7:f4:d4:db:4b:1e:b4:9d:ff:a3:50:5f: 01:6c:91:7d:c6:45:38:39:13:e8:01:15:88:2c:ff:ba:fe:0c: 6a:a8:b6:85:ee:46:05:26:90:54:08:43:7e:00:31:68:75:93: 93:32:67:40:51:c8:ee:5f:ee:a5:51:f9:d8:09:c3:98:c0:8a: 23:f7:81:e1:06:13:78:50:fe:69:f7:c5:54:b8:17:54:56:ee: a0:97:c3:55:cc:2d:94:0b:08:17:16:4e:ba:0f:9a:d5:ad:6d: 2f:78:73:b2:66:17:b3:eb:18:89:12:d7:27:e3:43:cc:98:e3: 0b:eb:24:55:bb:25:d6:38:3a:ce:d4:be:f6:3f:f0:b2:e7:c2: 53:ea:4c:de:86:5c:ef:cc:ca:18:e7:41:68:c2:b3:ae:fc:d8: 2d:c8:19:f0 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBMMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA3Mjcx NjQ4MTZaFw0yNDA3MTQwMTMwMDNaMDMxMTAvBgNVBAMTKDcwODVDMEI2RjZBNTgy NzFERjI5MzI4RTlDNkQ5RTk4RUYyMDkzNjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDLkfW8BMtFkcGSvQ8nQWDM5kLvgkorK4gCNWxpsjA6V7OJgpZf Gi/uy2Ck9nybgB7XzUviiuzq01/1fu17C6xCb3naHumYTUqTel2su5XwapTjcA+d nKIBZ7R/z230YOWWWDa1irua9ZO5S8202MGIT6OIjHm8TPhrh3DW6YXd+Oppi9W2 AYNHyrKHlwpHQwbDvvWC3KPSCrqLmNeI0kt14JeR8dI/Q1a8lgnBiAYH7wkYPgw9 ctI4qQMmLRlOcrQXv2yPeHeDwO1vHfaO5QVJWnV42O3CnWZ6U0huPewDP1BN0xsE oxRJ6jksp7Q2eumFBQK42RW6lZHrBuKW4yGtAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUcIXAtvalgnHfKTKOnG2emO8gk2cwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2NJWEF0dmFsZ25IZktUS09uRzJlbU84Z2syYy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFuocIwDQYJKoZIhvcNAQELBQADggEBAAH3CUhWxSuwQv4T+PEXx5xZyeof BMPJNylGtHUsRwMJrnLHMzLz0jnNURgYV6rrscAz5wevBVl6U5PdEtxLjlkYNcbU I0YdZcn3a/k1Q+AOJKhdb8F1QZGe6CM7uKfzVdf01NtLHrSd/6NQXwFskX3GRTg5 E+gBFYgs/7r+DGqotoXuRgUmkFQIQ34AMWh1k5MyZ0BRyO5f7qVR+dgJw5jAiiP3 geEGE3hQ/mn3xVS4F1RW7qCXw1XMLZQLCBcWTroPmtWtbS94c7JmF7PrGIkS1yfj Q8yY4wvrJFW7JdY4Os7UvvY/8LLnwlPqTN6GXO/MyhjnQWjCs6782C3IGfA= -----END CERTIFICATE-----Generated at Sat Jun 1 15:54:31 2024 by rpki-client on console-ams.rpki-client.org