$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ldo4wgW2-YRYHuJDdrbpCeCoYpo.roa File: ldo4wgW2-YRYHuJDdrbpCeCoYpo.roa (raw, json) Hash identifier: /MyJxDfkXKo+ucSi9R2Y7HDqsSezzrWm6ZxyWhai/j4= Subject key identifier: 95:DA:38:C2:05:B6:F9:84:58:1E:E2:43:76:B6:E9:09:E0:A8:62:9A Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 02DB Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ldo4wgW2-YRYHuJDdrbpCeCoYpo.roa Signing time: Tue 30 May 2023 17:31:46 +0000 ROA not before: Tue 30 May 2023 17:31:46 +0000 ROA not after: Tue 14 May 2024 01:30:02 +0000 asID: 9605 IP address blocks: 61.195.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 May 2024 13:36:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 731 (0x2db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: May 30 17:31:46 2023 GMT Not After : May 14 01:30:02 2024 GMT Subject: CN=95DA38C205B6F984581EE24376B6E909E0A8629A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:97:84:49:e5:98:50:a6:3d:53:cb:2a:fc:cb: 60:74:7e:22:74:6d:90:38:53:0c:ea:c8:ac:fa:bc: a9:e8:b5:6e:d3:94:50:90:0b:6d:94:1c:8e:e9:c6: 5e:22:7a:a1:1e:d7:29:ec:d3:e1:54:4f:46:c8:8b: 27:03:74:3c:7f:9d:8e:bc:e4:3a:fd:9d:92:9d:36: 34:b6:8f:76:f7:9f:80:76:9c:d1:02:90:de:4f:a3: 5f:78:06:ee:cb:64:50:85:0c:f0:20:89:6e:3e:50: 2b:0c:43:a3:0e:18:dc:a1:a7:80:e8:9e:66:e0:fc: 95:59:f3:a3:33:e5:2a:86:a9:17:1e:8c:fc:2c:7c: 23:c4:64:08:8e:90:d1:05:97:95:9e:f1:2e:1e:33: 8d:4c:7e:d1:c3:3c:7b:c1:08:46:d9:ac:24:cd:43: 65:88:ae:2a:42:ab:c2:aa:b2:79:97:6a:5f:c3:63: 22:a3:5b:b0:62:5a:72:81:dd:ba:f4:01:11:7b:2e: a6:e1:b9:a2:c6:0a:08:99:cc:5b:d8:44:05:dd:98: 50:3a:68:7a:cb:e5:06:c8:c0:c8:41:52:f7:c7:a3: 7c:8f:02:90:4e:06:71:0a:6a:7c:0d:18:83:ea:27: c5:b6:bf:61:ee:68:df:1f:d6:e4:3b:90:f6:0c:5b: ed:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:DA:38:C2:05:B6:F9:84:58:1E:E2:43:76:B6:E9:09:E0:A8:62:9A X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ldo4wgW2-YRYHuJDdrbpCeCoYpo.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 61.195.208.0/20 Signature Algorithm: sha256WithRSAEncryption d9:d3:38:91:6a:fc:7d:98:35:9f:ab:fa:81:a9:33:04:a6:db: d6:e7:8a:ea:22:4b:97:d5:b9:85:66:c3:6d:7d:92:5e:e1:2a: 21:6c:cc:48:1f:79:46:f2:28:3d:3f:a0:e5:8e:a6:6e:bc:cf: 7c:ef:dc:ed:da:cb:fc:bb:a9:d5:70:f6:15:08:96:f3:ba:29: 6e:81:f1:e6:9a:09:0c:a4:36:8b:5b:65:4a:3e:90:47:9d:76: 14:93:ed:94:60:15:a4:97:db:f6:51:46:f1:51:17:4d:33:a8: 27:8c:5a:c7:09:d4:78:0c:13:9d:f3:03:9b:6b:e9:bf:a7:43: e4:b1:67:09:8c:52:61:b9:bc:b9:71:09:42:3e:ef:a8:82:f7: 80:8a:eb:a9:0d:b0:d6:cd:9c:f8:6e:63:32:26:79:83:ce:54: fc:4f:d7:65:52:9c:36:e9:5c:d7:fa:f4:98:1b:4b:20:59:de: bb:f8:8d:fd:87:31:97:e5:41:26:82:28:3c:90:6e:27:be:c6: 48:e1:3d:24:ba:ac:7b:53:86:0a:34:a4:06:ef:00:16:5d:9f: c0:f8:f4:2e:5a:ee:07:50:04:20:30:2c:8d:6f:9f:1e:2b:fd: b5:dd:e4:8a:5a:d9:59:53:07:3c:fb:b1:c0:52:44:d3:78:b0: 71:4f:70:55 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAtswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA1MzAx NzMxNDZaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDk1REEzOEMyMDVCNkY5 ODQ1ODFFRTI0Mzc2QjZFOTA5RTBBODYyOUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+l4RJ5ZhQpj1Tyyr8y2B0fiJ0bZA4UwzqyKz6vKnotW7TlFCQ C22UHI7pxl4ieqEe1yns0+FUT0bIiycDdDx/nY685Dr9nZKdNjS2j3b3n4B2nNEC kN5Po194Bu7LZFCFDPAgiW4+UCsMQ6MOGNyhp4Donmbg/JVZ86Mz5SqGqRcejPws fCPEZAiOkNEFl5We8S4eM41MftHDPHvBCEbZrCTNQ2WIripCq8KqsnmXal/DYyKj W7BiWnKB3br0ARF7LqbhuaLGCgiZzFvYRAXdmFA6aHrL5QbIwMhBUvfHo3yPApBO BnEKanwNGIPqJ8W2v2HuaN8f1uQ7kPYMW+3/AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUldo4wgW2+YRYHuJDdrbpCeCoYpowHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2xkbzR3Z1cyLVlSWUh1SkRkcmJwQ2VDb1lwby5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQ9w9AwDQYJKoZIhvcNAQELBQADggEBANnTOJFq/H2YNZ+r+oGpMwSm29bn iuoiS5fVuYVmw219kl7hKiFszEgfeUbyKD0/oOWOpm68z3zv3O3ay/y7qdVw9hUI lvO6KW6B8eaaCQykNotbZUo+kEeddhST7ZRgFaSX2/ZRRvFRF00zqCeMWscJ1HgM E53zA5tr6b+nQ+SxZwmMUmG5vLlxCUI+76iC94CK66kNsNbNnPhuYzImeYPOVPxP 12VSnDbpXNf69JgbSyBZ3rv4jf2HMZflQSaCKDyQbie+xkjhPSS6rHtThgo0pAbv ABZdn8D49C5a7gdQBCAwLI1vnx4r/bXd5Ipa2VlTBzz7scBSRNN4sHFPcFU= -----END CERTIFICATE-----Generated at Sat Apr 27 10:15:57 2024 by rpki-client on console-ams.rpki-client.org