$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/mIXhLS8VloPLZ-piV5iLXa3LFy8.roa File: mIXhLS8VloPLZ-piV5iLXa3LFy8.roa (raw, json) Hash identifier: jA9e4hrmc5CdWE8eY5sO0NIMrx7yTiNkBmxLEZXsTo4= Subject key identifier: 98:85:E1:2D:2F:15:96:83:CB:67:EA:62:57:98:8B:5D:AD:CB:17:2F Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 05A1 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/mIXhLS8VloPLZ-piV5iLXa3LFy8.roa Signing time: Thu 27 Jul 2023 17:00:15 +0000 ROA not before: Thu 27 Jul 2023 17:00:15 +0000 ROA not after: Sun 14 Jul 2024 01:30:03 +0000 asID: 9605 IP address blocks: 220.159.96.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1441 (0x5a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jul 27 17:00:15 2023 GMT Not After : Jul 14 01:30:03 2024 GMT Subject: CN=9885E12D2F159683CB67EA6257988B5DADCB172F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:f5:5e:83:9b:c2:18:52:c8:40:12:8e:e0:cd: 3c:c2:0f:94:d7:d1:0b:a6:7c:79:c0:25:e8:ed:5d: 2d:2c:02:34:a1:2b:0f:ca:35:a9:66:dd:b9:99:4d: e8:75:7b:78:84:33:8f:9a:a6:60:58:ba:3b:11:8e: ab:1a:63:b5:1e:f3:8c:be:1f:1d:ea:ea:5a:58:11: 90:28:bb:ed:c9:67:9a:d3:81:98:b6:7a:1f:3b:8f: e6:21:fd:c2:e6:b6:18:6e:f7:39:37:df:a9:15:2e: 1e:a1:01:b2:dd:82:17:cc:83:54:fc:cc:97:bd:49: 9c:c2:90:f3:64:77:d4:fd:1f:19:7a:99:ae:97:20: b2:c8:2e:3e:44:e7:fe:ee:0f:38:0a:bc:92:d0:04: 70:92:68:a2:2c:d1:32:1e:ff:a7:de:35:85:da:84: 9c:bd:ee:ae:f0:53:bd:f0:c7:5a:18:b7:10:d0:dd: fd:8e:56:10:c1:e0:9d:83:c4:e6:ca:d9:42:f5:48: a3:3f:70:ac:bb:2f:43:eb:2b:f7:bb:9c:ad:b1:ad: af:45:2b:37:9e:e4:fb:67:cb:76:d2:0d:c7:7b:65: a9:87:11:d9:8e:00:66:e6:02:13:f5:4f:d5:7e:a9: 31:76:c4:9b:25:4b:cc:76:fe:e1:59:63:9c:2f:1d: c2:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:85:E1:2D:2F:15:96:83:CB:67:EA:62:57:98:8B:5D:AD:CB:17:2F X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/mIXhLS8VloPLZ-piV5iLXa3LFy8.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 220.159.96.0/19 Signature Algorithm: sha256WithRSAEncryption 19:40:c3:d5:7d:4f:a7:56:4a:d9:b3:a4:ff:ab:13:7b:82:27: ca:7a:62:9e:e3:16:4f:15:66:39:2f:be:d9:1a:d5:7e:ff:6b: ad:04:d6:0f:9b:e3:72:7e:d1:22:4e:59:17:6f:94:a3:9d:0f: 3b:e7:69:2d:c5:61:59:69:34:96:c8:1e:f0:bf:3b:28:80:1a: b1:13:1a:73:00:0b:b7:aa:bd:dc:a8:1a:73:a2:17:48:be:59: 2d:69:22:a5:44:d5:c1:1e:91:b8:8a:64:b6:17:59:d9:f8:e9: 9e:cb:1f:fe:28:21:0c:66:ea:8d:f8:eb:b1:63:eb:fa:34:4c: 6d:fe:c1:d1:ef:1f:2b:74:bd:10:d9:0e:8f:a4:3e:66:5a:f6: 71:af:b8:ce:f7:07:00:3d:82:a0:62:a1:24:d8:80:86:35:71: 82:4d:05:01:d7:26:0f:c3:4b:e7:c5:27:0d:bb:ef:c6:62:95: 03:c7:fd:50:24:92:4b:18:d6:61:3d:b2:83:0a:43:ec:9b:03: 41:32:82:75:07:8d:18:5d:75:40:fe:19:ac:a4:79:6a:61:87: 01:5d:42:c3:80:1d:d1:72:56:2e:70:57:4e:3d:11:fa:57:71: a4:1e:43:d0:6e:5c:b3:30:f0:ad:d7:f0:0d:74:2e:57:dc:f6: 33:46:bd:19 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBaEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA3Mjcx NzAwMTVaFw0yNDA3MTQwMTMwMDNaMDMxMTAvBgNVBAMTKDk4ODVFMTJEMkYxNTk2 ODNDQjY3RUE2MjU3OTg4QjVEQURDQjE3MkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDL9V6Dm8IYUshAEo7gzTzCD5TX0QumfHnAJejtXS0sAjShKw/K Nalm3bmZTeh1e3iEM4+apmBYujsRjqsaY7Ue84y+Hx3q6lpYEZAou+3JZ5rTgZi2 eh87j+Yh/cLmthhu9zk336kVLh6hAbLdghfMg1T8zJe9SZzCkPNkd9T9Hxl6ma6X ILLILj5E5/7uDzgKvJLQBHCSaKIs0TIe/6feNYXahJy97q7wU73wx1oYtxDQ3f2O VhDB4J2DxObK2UL1SKM/cKy7L0PrK/e7nK2xra9FKzee5Ptny3bSDcd7ZamHEdmO AGbmAhP1T9V+qTF2xJslS8x2/uFZY5wvHcK9AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUmIXhLS8VloPLZ+piV5iLXa3LFy8wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L21JWGhMUzhWbG9QTFotcGlWNWlMWGEzTEZ5OC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAXcn2AwDQYJKoZIhvcNAQELBQADggEBABlAw9V9T6dWStmzpP+rE3uCJ8p6 Yp7jFk8VZjkvvtka1X7/a60E1g+b43J+0SJOWRdvlKOdDzvnaS3FYVlpNJbIHvC/ OyiAGrETGnMAC7eqvdyoGnOiF0i+WS1pIqVE1cEekbiKZLYXWdn46Z7LH/4oIQxm 6o3467Fj6/o0TG3+wdHvHyt0vRDZDo+kPmZa9nGvuM73BwA9gqBioSTYgIY1cYJN BQHXJg/DS+fFJw2778ZilQPH/VAkkksY1mE9soMKQ+ybA0EygnUHjRhddUD+Gayk eWphhwFdQsOAHdFyVi5wV049EfpXcaQeQ9BuXLMw8K3X8A10Llfc9jNGvRk= -----END CERTIFICATE-----Generated at Sat Jun 1 13:38:48 2024 by rpki-client on console-fra.rpki-client.org