$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/hwTX0UImyReZlwfToxEuVoapDF8.roa File: hwTX0UImyReZlwfToxEuVoapDF8.roa (raw, json) Hash identifier: DoCrpY3peV8n+8ZoAsfS+7R2DCG1OqdOQpktCp29r1g= Subject key identifier: 87:04:D7:D1:42:26:C9:17:99:97:07:D3:A3:11:2E:56:86:A9:0C:5F Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 05B2 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/hwTX0UImyReZlwfToxEuVoapDF8.roa Signing time: Thu 27 Jul 2023 17:00:23 +0000 ROA not before: Thu 27 Jul 2023 17:00:23 +0000 ROA not after: Sun 14 Jul 2024 01:30:03 +0000 asID: 9605 IP address blocks: 1.67.232.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 23 Jun 2024 14:09:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1458 (0x5b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jul 27 17:00:23 2023 GMT Not After : Jul 14 01:30:03 2024 GMT Subject: CN=8704D7D14226C917999707D3A3112E5686A90C5F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:0f:07:b6:3d:74:06:87:34:6c:45:66:17:16: d5:14:0d:fb:5a:3d:49:25:32:26:8b:b0:8c:e4:45: ef:1b:65:a0:30:ef:9c:ed:5e:da:7b:44:ae:64:c2: 50:a2:df:74:92:08:c7:d5:03:ac:5f:a3:92:5b:86: 24:14:29:d9:28:e5:92:a2:8f:f0:91:57:34:88:ff: 33:f9:37:97:6e:b6:26:11:1c:a0:59:33:6a:97:a3: 22:fa:b9:f2:de:9e:1c:b2:68:eb:af:68:ee:b0:7d: ba:4b:b9:47:c5:9f:47:35:3f:53:b4:c9:13:14:73: cc:e8:6e:14:d6:ef:ff:ce:74:e0:76:f1:a0:14:30: 49:b0:d3:09:bf:ca:d5:04:29:b3:a3:24:ad:ad:fa: 60:69:e9:7d:82:67:1f:4b:93:aa:b1:8f:02:7f:9d: 45:cb:11:32:1c:58:1b:9d:c5:bd:51:0b:1f:28:ca: 38:64:f5:eb:f5:eb:a5:74:db:4e:9e:87:74:c0:5e: a1:8c:f0:59:66:c5:fa:3a:5c:81:c9:cc:c1:ff:70: 78:8b:b2:3a:f9:be:40:45:68:77:c6:7b:8a:89:e5: 79:0f:00:81:d4:0f:7b:41:db:b2:cf:bc:00:9a:e0: 49:7c:93:d7:be:60:e1:9a:76:37:36:ce:0a:05:60: e7:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:04:D7:D1:42:26:C9:17:99:97:07:D3:A3:11:2E:56:86:A9:0C:5F X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/hwTX0UImyReZlwfToxEuVoapDF8.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.67.232.0/23 Signature Algorithm: sha256WithRSAEncryption 7b:25:96:a7:83:36:f0:6d:83:4a:08:af:39:63:fc:68:64:90: e8:c7:e9:eb:c5:bc:f1:5a:62:8c:9f:4a:ff:f6:26:e5:da:18: dc:7b:49:7c:bf:04:9c:0c:7e:22:f2:83:80:b7:60:30:e6:e2: 45:51:6f:53:c4:bf:de:1c:c9:a0:82:bb:b9:d8:80:f1:df:82: 4b:3e:79:d2:ec:2f:42:2a:9f:df:2d:e3:b5:74:ad:55:b1:96: 02:33:a3:ae:e7:54:de:69:3f:76:3a:2d:41:bc:8f:38:fc:71: ed:16:a1:05:ea:93:57:80:bd:25:8d:86:2c:fc:98:84:a3:17: 20:1b:09:0c:a4:0d:92:6b:53:22:b0:fd:a7:b9:31:33:6a:d5: 73:ac:9b:5d:1c:71:34:c7:e8:5b:96:07:57:66:f9:d0:bb:66: a6:d1:bb:ff:a5:63:94:a3:5f:27:bc:17:b6:9f:cc:e5:e3:02: ab:f8:f2:ed:b3:8f:f8:d7:71:3e:71:11:d3:5b:ad:bc:a6:17: 80:09:52:69:0c:7c:11:ff:b4:8b:c7:7e:a9:a7:0f:04:3b:eb: 0b:f2:40:27:4f:09:a6:ca:1a:41:d3:51:5a:0b:27:d7:1a:a5: 6e:db:db:11:75:72:d5:54:d1:78:64:1e:f1:d3:71:78:86:a5: 40:bc:0b:e1 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBbIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA3Mjcx NzAwMjNaFw0yNDA3MTQwMTMwMDNaMDMxMTAvBgNVBAMTKDg3MDREN0QxNDIyNkM5 MTc5OTk3MDdEM0EzMTEyRTU2ODZBOTBDNUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCkDwe2PXQGhzRsRWYXFtUUDftaPUklMiaLsIzkRe8bZaAw75zt Xtp7RK5kwlCi33SSCMfVA6xfo5JbhiQUKdko5ZKij/CRVzSI/zP5N5dutiYRHKBZ M2qXoyL6ufLenhyyaOuvaO6wfbpLuUfFn0c1P1O0yRMUc8zobhTW7//OdOB28aAU MEmw0wm/ytUEKbOjJK2t+mBp6X2CZx9Lk6qxjwJ/nUXLETIcWBudxb1RCx8oyjhk 9ev166V0206eh3TAXqGM8Flmxfo6XIHJzMH/cHiLsjr5vkBFaHfGe4qJ5XkPAIHU D3tB27LPvACa4El8k9e+YOGadjc2zgoFYOdFAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUhwTX0UImyReZlwfToxEuVoapDF8wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2h3VFgwVUlteVJlWmx3ZlRveEV1Vm9hcERGOC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEBQ+gwDQYJKoZIhvcNAQELBQADggEBAHsllqeDNvBtg0oIrzlj/GhkkOjH 6evFvPFaYoyfSv/2JuXaGNx7SXy/BJwMfiLyg4C3YDDm4kVRb1PEv94cyaCCu7nY gPHfgks+edLsL0Iqn98t47V0rVWxlgIzo67nVN5pP3Y6LUG8jzj8ce0WoQXqk1eA vSWNhiz8mISjFyAbCQykDZJrUyKw/ae5MTNq1XOsm10ccTTH6FuWB1dm+dC7ZqbR u/+lY5SjXye8F7afzOXjAqv48u2zj/jXcT5xEdNbrbymF4AJUmkMfBH/tIvHfqmn DwQ76wvyQCdPCabKGkHTUVoLJ9capW7b2xF1ctVU0XhkHvHTcXiGpUC8C+E= -----END CERTIFICATE-----Generated at Mon Jun 17 11:41:37 2024 by rpki-client on console-ams.rpki-client.org