$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/q-UNZnn2JKPuZ5xTox7cK7LV5lk.roa File: q-UNZnn2JKPuZ5xTox7cK7LV5lk.roa (raw, json) Hash identifier: fodH1SMI7psUs7FgVjGvKhCcP1nE7x/NWLzUx9N8s3c= Subject key identifier: AB:E5:0D:66:79:F6:24:A3:EE:67:9C:53:A3:1E:DC:2B:B2:D5:E6:59 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 057C Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/q-UNZnn2JKPuZ5xTox7cK7LV5lk.roa Signing time: Thu 27 Jul 2023 16:58:09 +0000 ROA not before: Thu 27 Jul 2023 16:58:09 +0000 ROA not after: Sun 14 Jul 2024 01:30:03 +0000 asID: 9605 IP address blocks: 220.159.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1404 (0x57c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jul 27 16:58:09 2023 GMT Not After : Jul 14 01:30:03 2024 GMT Subject: CN=ABE50D6679F624A3EE679C53A31EDC2BB2D5E659 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:96:0f:51:dd:c4:1e:75:2d:eb:27:5a:78:d5: 56:68:91:e9:c3:b2:78:b8:5d:e2:0d:86:40:52:fd: 96:32:41:52:34:c0:21:a5:5f:1d:30:b1:be:2c:1c: 29:f7:46:f1:75:9b:2b:ee:38:d6:bd:25:4e:af:14: b5:91:1d:4c:ad:f0:89:61:77:ae:a3:c7:19:a6:37: ca:46:6b:e5:31:a0:56:29:58:b3:08:8b:5f:8d:e1: f2:c8:23:71:f5:d3:4b:8e:77:e1:97:ea:1c:8a:79: df:3c:84:f1:d2:f3:15:e8:69:61:d1:2a:d2:bb:91: 03:65:c8:8b:ac:68:87:7b:68:34:8f:5c:6c:33:0d: 7a:2a:3a:b9:87:d6:0d:7e:64:99:d8:93:90:00:45: ac:c2:0d:db:84:52:50:6d:f4:e4:3e:77:78:82:2e: 9a:3e:c1:82:58:46:aa:bf:cc:b3:b7:3d:af:ac:da: 2b:74:0c:bc:03:04:3f:f5:89:80:f2:4b:af:66:6e: d6:5d:02:49:d3:82:5a:c0:01:40:39:45:ea:ef:6f: 12:a0:74:42:c9:24:fb:28:7b:8b:45:b5:6f:52:d1: 46:ab:7b:42:b7:2a:a6:5d:35:61:f7:5f:0f:c1:6f: a6:ac:4a:c2:80:a7:ae:6b:47:23:1d:61:44:c8:4b: 69:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:E5:0D:66:79:F6:24:A3:EE:67:9C:53:A3:1E:DC:2B:B2:D5:E6:59 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/q-UNZnn2JKPuZ5xTox7cK7LV5lk.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 220.159.31.0/24 Signature Algorithm: sha256WithRSAEncryption 2e:13:b6:f6:e3:29:ac:a5:c2:ce:1b:ec:86:6f:1f:2e:d2:6a: 3e:f4:7e:91:58:17:87:71:39:db:ac:cf:68:9b:7a:8f:74:73: 81:d4:12:ce:b9:b1:60:c8:7d:32:d9:29:29:3f:3d:dc:dd:c9: 6d:12:57:79:bc:ce:c8:a3:a4:7c:de:00:28:a5:49:fd:70:cd: b3:8a:70:2d:67:7c:ab:31:c3:02:c3:e8:64:24:b7:3f:a4:67: 73:72:f7:c3:15:54:b4:c4:5d:91:92:de:77:d1:b3:b6:9d:7e: 5b:5a:e9:5a:57:5a:bf:ae:95:c3:4e:aa:5f:cb:93:23:58:e1: 33:b1:1b:3d:4a:12:ca:b1:62:58:60:13:0d:cd:f9:2d:41:a9: c7:10:6c:2c:9e:98:7a:86:e3:ba:83:ea:e8:3d:6e:99:73:52: cc:b4:61:b6:12:9d:d0:9e:cf:c0:a0:5a:28:37:78:a6:fa:7a: 66:93:d8:97:a7:f6:2c:34:58:b5:0d:84:68:e6:db:c1:4d:8b: 44:47:c0:29:07:fa:e6:59:7c:86:3f:35:dc:e6:bf:e7:13:ad: 13:ab:ee:09:dc:40:cf:61:04:6c:b4:47:d1:ae:1c:98:85:cf: 5c:63:e3:16:e7:a5:de:05:44:66:08:da:4d:94:ad:70:ed:3c: 8e:54:38:d8 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBXwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA3Mjcx NjU4MDlaFw0yNDA3MTQwMTMwMDNaMDMxMTAvBgNVBAMTKEFCRTUwRDY2NzlGNjI0 QTNFRTY3OUM1M0EzMUVEQzJCQjJENUU2NTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDElg9R3cQedS3rJ1p41VZokenDsni4XeINhkBS/ZYyQVI0wCGl Xx0wsb4sHCn3RvF1myvuONa9JU6vFLWRHUyt8Ilhd66jxxmmN8pGa+UxoFYpWLMI i1+N4fLII3H100uOd+GX6hyKed88hPHS8xXoaWHRKtK7kQNlyIusaId7aDSPXGwz DXoqOrmH1g1+ZJnYk5AARazCDduEUlBt9OQ+d3iCLpo+wYJYRqq/zLO3Pa+s2it0 DLwDBD/1iYDyS69mbtZdAknTglrAAUA5RervbxKgdELJJPsoe4tFtW9S0Uare0K3 KqZdNWH3Xw/Bb6asSsKAp65rRyMdYUTIS2npAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUq+UNZnn2JKPuZ5xTox7cK7LV5lkwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3EtVU5abm4ySktQdVo1eFRveDdjSzdMVjVsay5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADcnx8wDQYJKoZIhvcNAQELBQADggEBAC4TtvbjKaylws4b7IZvHy7Saj70 fpFYF4dxOdusz2ibeo90c4HUEs65sWDIfTLZKSk/PdzdyW0SV3m8zsijpHzeACil Sf1wzbOKcC1nfKsxwwLD6GQktz+kZ3Ny98MVVLTEXZGS3nfRs7adflta6VpXWr+u lcNOql/LkyNY4TOxGz1KEsqxYlhgEw3N+S1BqccQbCyemHqG47qD6ug9bplzUsy0 YbYSndCez8CgWig3eKb6emaT2Jen9iw0WLUNhGjm28FNi0RHwCkH+uZZfIY/Ndzm v+cTrROr7gncQM9hBGy0R9GuHJiFz1xj4xbnpd4FRGYI2k2UrXDtPI5UONg= -----END CERTIFICATE-----Generated at Sat Jun 1 13:38:48 2024 by rpki-client on console-fra.rpki-client.org