$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/fIaOqTfLtGFKRxbB8eM-LWLJiAk.roa File: fIaOqTfLtGFKRxbB8eM-LWLJiAk.roa (raw, json) Hash identifier: cfU1JkaXEOsbijkRfBK9wVoqM6p1ymCvj9+uH73DxxU= Subject key identifier: 7C:86:8E:A9:37:CB:B4:61:4A:47:16:C1:F1:E3:3E:2D:62:C9:88:09 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0598 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/fIaOqTfLtGFKRxbB8eM-LWLJiAk.roa Signing time: Thu 27 Jul 2023 17:00:12 +0000 ROA not before: Thu 27 Jul 2023 17:00:12 +0000 ROA not after: Sun 14 Jul 2024 01:30:03 +0000 asID: 9605 IP address blocks: 27.230.72.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1432 (0x598) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jul 27 17:00:12 2023 GMT Not After : Jul 14 01:30:03 2024 GMT Subject: CN=7C868EA937CBB4614A4716C1F1E33E2D62C98809 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:9e:e1:b1:f1:9b:71:82:b9:fd:34:3e:e9:3f: ae:69:54:a7:1c:0a:02:bb:88:2e:4f:3f:57:f8:95: 55:6e:4c:dd:59:f0:9a:83:a4:83:22:42:16:f7:68: 0c:49:94:bf:f2:ac:e1:71:b6:c2:c7:9f:bf:82:90: 82:7f:b4:08:6b:63:39:a0:f1:bb:2c:b0:af:ae:6a: 0e:cf:9f:44:a7:2c:7b:e7:fe:13:13:7d:b6:7a:05: 6a:82:e4:da:68:ab:20:bb:e3:76:29:32:7c:38:bc: 32:a6:be:43:56:7f:91:ec:c6:3f:a0:dd:72:74:3b: a2:77:5e:6c:3c:49:14:1c:f3:8f:e9:a9:49:70:fe: 76:0c:d1:19:15:fc:f3:ec:29:c4:a7:83:70:be:d7: de:65:cf:d7:61:b5:70:ba:bb:e0:97:8c:b8:da:07: 01:eb:2b:dd:d9:55:ad:5d:2e:6f:31:d2:7d:3a:d6: 34:6f:e3:e4:70:df:53:22:b5:bb:e5:96:17:d7:d8: de:c7:1e:fb:44:11:8c:00:1d:47:52:ac:6e:0d:8d: a1:dd:56:3e:d8:05:f7:3b:21:3d:ec:db:cf:c6:f5: d6:3c:31:ae:df:78:5d:e4:7c:32:94:d5:31:bc:18: 59:d1:37:5d:14:39:1c:b7:70:03:92:dd:b9:2b:b6: 73:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:86:8E:A9:37:CB:B4:61:4A:47:16:C1:F1:E3:3E:2D:62:C9:88:09 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/fIaOqTfLtGFKRxbB8eM-LWLJiAk.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.230.72.0/21 Signature Algorithm: sha256WithRSAEncryption 5d:8a:b4:30:6b:d6:c1:bd:7c:a3:22:87:88:1b:ec:dd:ab:4d: fe:b3:62:20:35:c7:e0:fe:71:64:a0:c6:7d:04:f5:64:5a:2c: 97:3e:0b:dd:e7:f1:66:2d:a5:e2:48:9d:f0:42:e2:cc:76:81: 17:38:98:43:02:4c:13:46:a9:fc:12:fd:69:33:56:9d:fb:56: 3f:6b:ff:d5:56:68:08:02:ef:35:45:16:f2:43:d9:f5:fa:e8: 40:76:ce:89:cf:6f:1c:bc:4c:12:1c:72:73:79:c3:87:de:ec: a4:08:69:99:92:79:00:07:9c:46:e9:d6:7f:5d:91:aa:ff:55: b0:4b:f5:e4:1f:46:c3:b1:98:70:e6:50:19:82:0a:66:0c:c3: 1c:0e:97:74:d8:8c:4d:25:0f:ef:96:05:5d:11:6a:12:06:8e: 35:ce:80:65:9c:aa:4d:fb:83:eb:a9:ee:38:9a:c3:02:3c:67: 27:41:59:4d:d7:3d:30:95:69:33:4a:c0:3a:b7:66:9f:44:8f: 01:8b:1b:1a:cd:55:6a:80:6d:2b:c5:25:8a:f5:1c:3a:34:61: 71:ed:46:e4:15:ec:11:20:96:fc:31:79:ae:2b:bc:e3:32:5d: 21:e9:ca:34:b3:6e:ea:61:60:bb:30:07:21:de:42:99:9d:f1: 59:a9:f1:d9 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBZgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA3Mjcx NzAwMTJaFw0yNDA3MTQwMTMwMDNaMDMxMTAvBgNVBAMTKDdDODY4RUE5MzdDQkI0 NjE0QTQ3MTZDMUYxRTMzRTJENjJDOTg4MDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC9nuGx8Ztxgrn9ND7pP65pVKccCgK7iC5PP1f4lVVuTN1Z8JqD pIMiQhb3aAxJlL/yrOFxtsLHn7+CkIJ/tAhrYzmg8bsssK+uag7Pn0SnLHvn/hMT fbZ6BWqC5NpoqyC743YpMnw4vDKmvkNWf5Hsxj+g3XJ0O6J3Xmw8SRQc84/pqUlw /nYM0RkV/PPsKcSng3C+195lz9dhtXC6u+CXjLjaBwHrK93ZVa1dLm8x0n061jRv 4+Rw31MitbvllhfX2N7HHvtEEYwAHUdSrG4NjaHdVj7YBfc7IT3s28/G9dY8Ma7f eF3kfDKU1TG8GFnRN10UORy3cAOS3bkrtnMVAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUfIaOqTfLtGFKRxbB8eM+LWLJiAkwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2ZJYU9xVGZMdEdGS1J4YkI4ZU0tTFdMSmlBay5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMb5kgwDQYJKoZIhvcNAQELBQADggEBAF2KtDBr1sG9fKMih4gb7N2rTf6z YiA1x+D+cWSgxn0E9WRaLJc+C93n8WYtpeJInfBC4sx2gRc4mEMCTBNGqfwS/Wkz Vp37Vj9r/9VWaAgC7zVFFvJD2fX66EB2zonPbxy8TBIccnN5w4fe7KQIaZmSeQAH nEbp1n9dkar/VbBL9eQfRsOxmHDmUBmCCmYMwxwOl3TYjE0lD++WBV0RahIGjjXO gGWcqk37g+up7jiawwI8ZydBWU3XPTCVaTNKwDq3Zp9EjwGLGxrNVWqAbSvFJYr1 HDo0YXHtRuQV7BEglvwxea4rvOMyXSHpyjSzbuphYLswByHeQpmd8Vmp8dk= -----END CERTIFICATE-----Generated at Sat Jun 1 13:38:48 2024 by rpki-client on console-fra.rpki-client.org