$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/q0W50OH1FrCpIV5we1Ijovrqhb4.roa File: q0W50OH1FrCpIV5we1Ijovrqhb4.roa (raw, json) Hash identifier: hSfb8RDC6DQB7IZSD+huTzd8pjotDvRMVV2m/DhDSJk= Subject key identifier: AB:45:B9:D0:E1:F5:16:B0:A9:21:5E:70:7B:52:23:A2:FA:EA:85:BE Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0564 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/q0W50OH1FrCpIV5we1Ijovrqhb4.roa Signing time: Thu 27 Jul 2023 16:56:20 +0000 ROA not before: Thu 27 Jul 2023 16:56:20 +0000 ROA not after: Sun 14 Jul 2024 01:30:03 +0000 asID: 9605 IP address blocks: 219.114.180.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1380 (0x564) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jul 27 16:56:20 2023 GMT Not After : Jul 14 01:30:03 2024 GMT Subject: CN=AB45B9D0E1F516B0A9215E707B5223A2FAEA85BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:d1:9d:2c:30:bf:50:74:7d:33:fd:a3:00:c4: 48:e2:54:75:b2:9f:09:ee:2b:82:29:c1:2e:ed:f3: 0a:56:b8:ce:29:32:73:2a:57:63:1f:b7:88:f9:28: 3a:5b:ce:40:5b:75:bb:b3:5a:ee:99:bb:99:a8:96: 5b:d5:fd:f5:53:a1:fe:a8:1d:a0:d3:6e:41:3b:d6: 8a:ca:1c:09:d7:2e:79:f4:1c:f1:b7:ba:76:41:f7: 17:e9:7c:ea:02:1e:87:07:d5:22:d6:c8:ce:ad:3e: 54:34:df:8f:d6:cb:54:5c:8c:d2:67:d6:c1:5e:4e: b1:06:79:19:2c:9c:7b:41:d2:dc:cc:9a:c8:63:8e: f4:e2:39:d3:4d:d9:59:fd:49:2a:34:42:aa:12:05: e9:54:39:d1:a3:24:69:16:51:48:34:c3:ef:b7:c7: 1a:d8:60:90:2f:1b:82:75:49:13:98:46:01:ca:1c: d3:50:e5:5b:4d:97:ae:12:56:bf:ab:c5:9f:80:2e: 27:4a:d0:ef:35:b1:c9:f9:ee:ad:10:fb:6d:b8:db: 76:19:7a:32:d7:b6:fc:8b:02:dc:40:93:27:03:18: bc:9d:2b:9f:69:19:b3:dd:9e:04:f3:a4:91:65:4b: a2:7e:ad:e7:e1:9b:4d:a3:03:3a:08:c0:8b:27:19: 79:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:45:B9:D0:E1:F5:16:B0:A9:21:5E:70:7B:52:23:A2:FA:EA:85:BE X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/q0W50OH1FrCpIV5we1Ijovrqhb4.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 219.114.180.0/22 Signature Algorithm: sha256WithRSAEncryption 64:20:7b:0b:ba:84:0c:ee:99:ff:8e:a5:25:78:8c:8b:b8:20: 3d:7d:e9:38:a0:e4:68:dd:07:77:7c:09:12:c6:26:b5:35:49: c0:16:95:b0:28:fb:4f:5b:f5:0c:e9:7e:52:82:7e:d3:47:5e: 13:bd:d3:ce:9f:db:b4:cc:2c:c4:90:18:02:c5:b1:44:6f:1b: 29:6a:a5:1e:1e:72:ea:5b:52:88:3b:76:dc:ee:d5:24:e6:4f: e6:7f:9c:72:79:28:dd:c7:6d:39:b6:c8:c9:87:8b:79:cb:91: d9:55:fd:8a:c4:2b:6a:50:25:93:a3:5d:07:f1:cb:7d:68:54: a1:9b:64:c7:15:31:3b:3e:1c:7a:1b:58:cd:d3:1c:a9:a9:e9: e5:aa:da:6d:7f:fc:22:da:d5:29:46:89:e6:4a:19:b3:37:6d: 82:d6:e9:95:88:0e:4a:b4:34:af:e3:5a:38:77:0d:c5:a5:86: 44:c7:4c:db:61:57:cd:9c:d2:e6:39:a8:38:ef:4b:79:d6:ca: 82:c5:bd:3f:c1:26:8e:bd:d2:e5:37:9c:b9:ec:07:0b:76:09: 25:76:e8:1e:64:a2:c6:05:6d:71:ac:ee:57:83:95:d7:a3:87: a3:57:17:68:9f:76:6c:8d:65:b8:00:91:1a:92:c4:8f:5b:c9: d8:c8:60:90 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBWQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA3Mjcx NjU2MjBaFw0yNDA3MTQwMTMwMDNaMDMxMTAvBgNVBAMTKEFCNDVCOUQwRTFGNTE2 QjBBOTIxNUU3MDdCNTIyM0EyRkFFQTg1QkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDe0Z0sML9QdH0z/aMAxEjiVHWynwnuK4IpwS7t8wpWuM4pMnMq V2Mft4j5KDpbzkBbdbuzWu6Zu5mollvV/fVTof6oHaDTbkE71orKHAnXLnn0HPG3 unZB9xfpfOoCHocH1SLWyM6tPlQ034/Wy1RcjNJn1sFeTrEGeRksnHtB0tzMmshj jvTiOdNN2Vn9SSo0QqoSBelUOdGjJGkWUUg0w++3xxrYYJAvG4J1SROYRgHKHNNQ 5VtNl64SVr+rxZ+ALidK0O81scn57q0Q+22423YZejLXtvyLAtxAkycDGLydK59p GbPdngTzpJFlS6J+refhm02jAzoIwIsnGXl/AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUq0W50OH1FrCpIV5we1Ijovrqhb4wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3EwVzUwT0gxRnJDcElWNXdlMUlqb3ZycWhiNC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBALbcrQwDQYJKoZIhvcNAQELBQADggEBAGQgewu6hAzumf+OpSV4jIu4ID19 6Tig5GjdB3d8CRLGJrU1ScAWlbAo+09b9QzpflKCftNHXhO9086f27TMLMSQGALF sURvGylqpR4ecupbUog7dtzu1STmT+Z/nHJ5KN3HbTm2yMmHi3nLkdlV/YrEK2pQ JZOjXQfxy31oVKGbZMcVMTs+HHobWM3THKmp6eWq2m1//CLa1SlGieZKGbM3bYLW 6ZWIDkq0NK/jWjh3DcWlhkTHTNthV82c0uY5qDjvS3nWyoLFvT/BJo690uU3nLns Bwt2CSV26B5kosYFbXGs7leDldejh6NXF2ifdmyNZbgAkRqSxI9bydjIYJA= -----END CERTIFICATE-----Generated at Sat Jun 1 15:54:32 2024 by rpki-client on console-ams.rpki-client.org