$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/lUxsPLnNYm5k4dwkzhMz6aQsyaY.roa File: lUxsPLnNYm5k4dwkzhMz6aQsyaY.roa (raw, json) Hash identifier: G2q+thAkVhJ6qy9We60eNUkSx8epYlBq5GGcGO5IFFo= Subject key identifier: 95:4C:6C:3C:B9:CD:62:6E:64:E1:DC:24:CE:13:33:E9:A4:2C:C9:A6 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 020F Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/lUxsPLnNYm5k4dwkzhMz6aQsyaY.roa Signing time: Tue 30 May 2023 16:29:32 +0000 ROA not before: Tue 30 May 2023 16:29:32 +0000 ROA not after: Tue 14 May 2024 01:30:02 +0000 asID: 9605 IP address blocks: 27.230.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 May 2024 13:36:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 527 (0x20f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: May 30 16:29:32 2023 GMT Not After : May 14 01:30:02 2024 GMT Subject: CN=954C6C3CB9CD626E64E1DC24CE1333E9A42CC9A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:e0:12:ca:9c:bb:91:86:c9:c9:c4:12:31:cc: 5f:03:f0:80:14:61:74:f4:60:56:39:63:85:00:39: 55:6e:91:54:c1:d5:30:fb:62:97:49:d5:b3:85:48: 85:09:8a:e9:57:01:6e:01:9c:ec:0b:18:44:5a:bc: 3d:9a:b6:75:11:d3:88:1f:b5:ea:62:a8:48:ed:ee: 37:cd:fc:ac:4f:83:39:d4:f3:82:9e:67:1c:4d:41: 75:71:df:40:d0:ce:e2:7d:6f:f4:96:e6:04:24:a3: 22:11:a0:c7:8e:8a:55:bc:d6:67:07:c1:82:04:92: 11:5a:58:03:48:7c:e6:98:27:ce:0d:1c:5c:64:5b: 49:8e:7d:ae:ba:f9:6b:a2:cd:5c:8d:78:82:16:1e: 10:54:3a:b9:33:12:65:00:0f:41:87:e1:a8:19:4a: e9:4f:93:6d:e7:03:59:03:7f:6d:ee:92:00:ec:7f: d3:92:1e:d6:e4:87:4e:5c:51:0f:c5:ad:22:1e:6d: ec:34:3b:5d:3f:fa:15:0e:21:f9:31:98:24:d8:e3: b4:b9:8a:18:94:cb:7b:d5:1f:bb:08:a4:13:7c:1d: 65:53:62:b0:da:10:b8:a0:1f:ea:5c:3f:ba:fb:a5: 5c:6d:c4:ba:3c:1b:b9:d4:7c:f8:1d:9c:70:95:96: 92:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:4C:6C:3C:B9:CD:62:6E:64:E1:DC:24:CE:13:33:E9:A4:2C:C9:A6 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/lUxsPLnNYm5k4dwkzhMz6aQsyaY.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.230.64.0/20 Signature Algorithm: sha256WithRSAEncryption 53:ac:a5:d1:62:fa:85:fe:f0:c1:ab:df:d9:2b:30:53:a0:4f: 9d:43:2c:e9:c5:ad:98:b8:ca:63:6a:1e:83:be:ab:55:84:9c: c0:3e:9d:63:79:58:47:92:54:c6:da:62:b0:e6:86:b6:5a:72: 4f:d0:48:5e:20:44:ea:33:43:af:8a:47:a3:62:ba:fb:0f:19: a5:94:fa:11:01:9e:5e:b9:b4:6a:e1:a8:14:cd:c1:6a:3d:c2: f3:41:bc:33:17:d2:4e:50:89:b4:09:51:e3:fc:6e:1d:46:96: 99:b2:48:f3:b6:21:87:80:23:cf:84:d9:5e:65:3d:64:7b:2e: b7:ae:0d:22:9f:f5:25:0b:50:f1:09:53:bb:2a:7f:bf:fe:c2: 49:fb:1e:c1:c6:93:36:6c:a0:e7:48:51:fd:35:79:a8:51:30: 63:12:20:5b:45:7a:47:f2:54:10:fc:4b:d9:c4:38:39:5b:f6: 04:3d:56:60:c4:f0:c1:99:18:ea:57:fc:c2:8f:d5:b1:a5:77: dc:eb:30:1d:d9:ff:92:71:93:ff:42:41:a0:30:e5:54:54:72: 87:f3:02:c9:7b:a9:3d:62:6a:14:1c:41:7e:0e:37:24:a1:cc: ae:d5:b7:39:18:a5:37:7f:7e:26:b7:ba:db:71:c4:08:35:50: 03:ba:e8:6a -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAg8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA1MzAx NjI5MzJaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDk1NEM2QzNDQjlDRDYy NkU2NEUxREMyNENFMTMzM0U5QTQyQ0M5QTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDY4BLKnLuRhsnJxBIxzF8D8IAUYXT0YFY5Y4UAOVVukVTB1TD7 YpdJ1bOFSIUJiulXAW4BnOwLGERavD2atnUR04gftepiqEjt7jfN/KxPgznU84Ke ZxxNQXVx30DQzuJ9b/SW5gQkoyIRoMeOilW81mcHwYIEkhFaWANIfOaYJ84NHFxk W0mOfa66+WuizVyNeIIWHhBUOrkzEmUAD0GH4agZSulPk23nA1kDf23ukgDsf9OS Htbkh05cUQ/FrSIebew0O10/+hUOIfkxmCTY47S5ihiUy3vVH7sIpBN8HWVTYrDa ELigH+pcP7r7pVxtxLo8G7nUfPgdnHCVlpL5AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUlUxsPLnNYm5k4dwkzhMz6aQsyaYwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2xVeHNQTG5OWW01azRkd2t6aE16NmFRc3lhWS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQb5kAwDQYJKoZIhvcNAQELBQADggEBAFOspdFi+oX+8MGr39krMFOgT51D LOnFrZi4ymNqHoO+q1WEnMA+nWN5WEeSVMbaYrDmhrZack/QSF4gROozQ6+KR6Ni uvsPGaWU+hEBnl65tGrhqBTNwWo9wvNBvDMX0k5QibQJUeP8bh1GlpmySPO2IYeA I8+E2V5lPWR7LreuDSKf9SULUPEJU7sqf7/+wkn7HsHGkzZsoOdIUf01eahRMGMS IFtFekfyVBD8S9nEODlb9gQ9VmDE8MGZGOpX/MKP1bGld9zrMB3Z/5Jxk/9CQaAw 5VRUcofzAsl7qT1iahQcQX4ONyShzK7VtzkYpTd/fia3uttxxAg1UAO66Go= -----END CERTIFICATE-----Generated at Sat Apr 27 10:15:57 2024 by rpki-client on console-ams.rpki-client.org