$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/jUwn_9If4qMkIeiRj4s_Mn_a0eU.roa File: jUwn_9If4qMkIeiRj4s_Mn_a0eU.roa (raw, json) Hash identifier: 2F/aO7u8mLgHE+9dJraWmCMuG9z7i/LsHpJrq/hqSb8= Subject key identifier: 8D:4C:27:FF:D2:1F:E2:A3:24:21:E8:91:8F:8B:3F:32:7F:DA:D1:E5 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 01E8 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/jUwn_9If4qMkIeiRj4s_Mn_a0eU.roa Signing time: Wed 24 May 2023 16:42:33 +0000 ROA not before: Wed 24 May 2023 16:42:33 +0000 ROA not after: Tue 14 May 2024 01:30:02 +0000 asID: 9605 IP address blocks: 1.79.74.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 May 2024 13:36:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 488 (0x1e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: May 24 16:42:33 2023 GMT Not After : May 14 01:30:02 2024 GMT Subject: CN=8D4C27FFD21FE2A32421E8918F8B3F327FDAD1E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:e1:0a:bf:ee:a1:ba:1c:1a:0a:c8:32:eb:fc: 70:35:ed:da:92:a1:9d:b8:ee:22:d9:27:9d:fa:f1: 24:e9:d2:2a:81:9a:4b:ed:82:01:64:b8:36:5d:0a: b9:40:62:cc:a4:ed:fe:c0:a9:f2:2e:5d:c6:bb:68: 41:4d:15:40:ef:f3:65:48:10:13:cc:be:f2:38:0c: 33:f5:c1:6a:91:74:7d:b7:22:5d:d9:d6:e2:dd:8b: 4c:2e:00:47:e0:2e:b3:25:2e:ab:e4:29:d2:46:01: 84:46:a3:f4:ff:c4:dc:c1:e1:d4:f3:18:ed:c5:d0: 38:2f:3d:52:94:6c:3a:ec:d7:92:80:4c:2e:bd:d5: e1:33:f7:11:a9:64:01:d4:42:f3:0b:c5:08:f5:36: 61:a2:7d:d2:1e:0e:01:d7:00:ed:ac:80:22:f1:36: ef:fd:9b:d4:ac:37:4d:29:df:57:49:56:0f:c7:a2: 24:11:53:fe:8a:d8:2c:24:9e:e8:c5:d9:a7:ad:91: 0e:cb:ee:8c:81:84:16:f1:7e:8d:3d:83:82:dc:42: 8a:64:cc:73:47:10:96:07:07:d3:6f:e6:1e:0d:a7: d0:ef:d5:9b:e1:42:70:f5:d7:bb:fc:d7:61:d2:20: 70:77:6e:c6:30:79:1c:1f:a2:65:7b:d9:6d:74:2d: 39:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:4C:27:FF:D2:1F:E2:A3:24:21:E8:91:8F:8B:3F:32:7F:DA:D1:E5 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/jUwn_9If4qMkIeiRj4s_Mn_a0eU.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.79.74.0/23 Signature Algorithm: sha256WithRSAEncryption 4a:b9:28:ac:8c:f7:2e:db:b4:e6:70:d7:8e:b2:00:d4:a8:cf: db:1e:71:bc:4a:10:2f:d0:c9:b4:0c:4b:a2:18:3f:5f:02:2d: 12:ec:34:28:ff:67:43:af:93:38:23:83:30:e9:3a:dd:d5:51: 5d:1c:2f:11:77:dc:6c:09:31:6f:ad:bb:7c:3c:44:09:1c:39: 17:72:39:c8:80:90:b1:12:b5:f6:37:17:bf:7c:fa:ee:e3:ac: df:bb:2b:47:b9:8c:19:3f:8b:f6:56:ed:15:2e:ba:76:85:f4: 06:32:00:76:fe:76:46:02:b1:2f:eb:03:47:6a:6c:3b:b8:50: 69:e8:56:2b:01:2d:55:5a:87:5d:2b:ca:e3:5d:91:40:3e:0c: 4e:d1:57:c9:ea:4a:23:d6:55:d5:ae:78:2d:a4:ab:ef:8d:94: a4:b8:42:4f:de:ba:77:ab:68:2c:f7:48:72:d0:29:f4:d9:a2: 76:7c:01:da:c2:21:cd:ef:62:5b:fc:e5:6b:84:7c:1c:d2:d9: c9:51:ac:11:7b:89:55:4c:84:9f:ca:e0:78:3a:04:97:8a:b2: 59:ba:cb:8f:22:82:d3:3d:28:63:b2:f0:24:bc:96:07:70:f1: f9:b1:e3:57:b0:7b:27:18:12:30:82:31:e8:3b:34:35:e4:50: 7d:2b:e8:f6 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAegwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA1MjQx NjQyMzNaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDhENEMyN0ZGRDIxRkUy QTMyNDIxRTg5MThGOEIzRjMyN0ZEQUQxRTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDU4Qq/7qG6HBoKyDLr/HA17dqSoZ247iLZJ5368STp0iqBmkvt ggFkuDZdCrlAYsyk7f7AqfIuXca7aEFNFUDv82VIEBPMvvI4DDP1wWqRdH23Il3Z 1uLdi0wuAEfgLrMlLqvkKdJGAYRGo/T/xNzB4dTzGO3F0DgvPVKUbDrs15KATC69 1eEz9xGpZAHUQvMLxQj1NmGifdIeDgHXAO2sgCLxNu/9m9SsN00p31dJVg/HoiQR U/6K2CwknujF2aetkQ7L7oyBhBbxfo09g4LcQopkzHNHEJYHB9Nv5h4Np9Dv1Zvh QnD117v812HSIHB3bsYweRwfomV72W10LTlHAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUjUwn/9If4qMkIeiRj4s/Mn/a0eUwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2pVd25fOUlmNHFNa0llaVJqNHNfTW5fYTBlVS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEBT0owDQYJKoZIhvcNAQELBQADggEBAEq5KKyM9y7btOZw146yANSoz9se cbxKEC/QybQMS6IYP18CLRLsNCj/Z0OvkzgjgzDpOt3VUV0cLxF33GwJMW+tu3w8 RAkcORdyOciAkLEStfY3F798+u7jrN+7K0e5jBk/i/ZW7RUuunaF9AYyAHb+dkYC sS/rA0dqbDu4UGnoVisBLVVah10ryuNdkUA+DE7RV8nqSiPWVdWueC2kq++NlKS4 Qk/euneraCz3SHLQKfTZonZ8AdrCIc3vYlv85WuEfBzS2clRrBF7iVVMhJ/K4Hg6 BJeKslm6y48igtM9KGOy8CS8lgdw8fmx41eweycYEjCCMeg7NDXkUH0r6PY= -----END CERTIFICATE-----Generated at Sat Apr 27 10:15:57 2024 by rpki-client on console-ams.rpki-client.org