$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/qEuMVcL4rCI-lOxE5dw-Q802T0c.roa File: qEuMVcL4rCI-lOxE5dw-Q802T0c.roa (raw, json) Hash identifier: ErwSXaBMuSa5kISZdXZR/6HvTzvAaxm9g8LfrdkKo8k= Subject key identifier: A8:4B:8C:55:C2:F8:AC:22:3E:94:EC:44:E5:DC:3E:43:CD:36:4F:47 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0137 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/qEuMVcL4rCI-lOxE5dw-Q802T0c.roa Signing time: Wed 24 May 2023 16:30:24 +0000 ROA not before: Wed 24 May 2023 16:30:24 +0000 ROA not after: Tue 14 May 2024 01:30:02 +0000 asID: 9605 IP address blocks: 1.79.182.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 May 2024 13:36:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 311 (0x137) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: May 24 16:30:24 2023 GMT Not After : May 14 01:30:02 2024 GMT Subject: CN=A84B8C55C2F8AC223E94EC44E5DC3E43CD364F47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:db:30:a1:69:e0:2a:7f:87:a2:b9:70:ff:68: 71:5e:ed:40:34:be:26:77:fe:5b:af:43:bb:a9:66: f3:4d:d7:83:f4:ef:ac:60:b4:a3:f4:00:ac:1d:c9: 6f:b0:8b:9d:77:7e:bc:4e:54:36:87:34:8b:2d:36: fb:c9:2f:4a:c2:ff:ae:46:15:00:6c:8e:7b:98:ce: e4:bc:73:4e:9e:a7:e6:48:71:56:56:4c:dd:82:46: 8e:18:fe:4e:22:c9:2a:65:b2:1f:62:7c:de:da:53: b0:ad:15:d4:5c:f6:b2:c6:0c:4c:5c:dc:69:07:d4: a9:31:4d:2a:d2:fc:ac:d6:60:58:0f:19:af:40:c2: 18:e2:3b:c0:c7:42:6d:52:9d:fe:ce:39:dc:c9:00: 76:49:33:e1:fe:9a:2a:9c:a8:f3:e4:e6:8a:69:3c: b9:d0:14:a1:78:c4:fc:dd:66:8e:98:0b:e7:ab:f9: 20:e1:51:20:dd:8e:97:00:f4:c7:a2:14:aa:11:ee: ee:42:cc:ce:0f:db:5c:d4:e8:8b:65:f4:a7:bd:53: 56:fe:a6:ac:1c:e0:c6:08:cb:e4:a7:ec:7f:73:46: 74:9f:c8:1d:41:77:ba:28:bd:0b:79:22:bf:c5:72: 3b:71:40:c3:85:54:38:68:50:e7:23:8f:56:f7:e2: 9d:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:4B:8C:55:C2:F8:AC:22:3E:94:EC:44:E5:DC:3E:43:CD:36:4F:47 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/qEuMVcL4rCI-lOxE5dw-Q802T0c.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.79.182.0/23 Signature Algorithm: sha256WithRSAEncryption cb:d4:24:94:09:f7:46:23:b3:00:b9:c7:52:e5:c6:76:fe:47: 43:39:a4:ae:f5:55:93:54:e8:38:e1:44:0c:98:9a:d6:28:82: ac:f6:4b:2e:b7:46:87:c2:e3:cd:9a:a1:f7:f1:de:7a:8c:75: 90:b4:42:e5:6b:42:42:a3:f3:86:a0:7f:30:b8:6e:4e:61:fa: d0:9e:05:7f:27:ea:6d:ea:97:23:88:5a:6a:2a:a7:21:5a:e4: 59:d2:92:aa:05:19:c7:38:28:d2:5a:3c:0f:a0:50:38:29:17: 79:3d:18:d9:77:fe:da:40:36:e3:d8:b7:0e:cd:2a:14:5b:4f: d8:fe:0d:50:0f:a1:81:f9:82:c2:c5:11:5d:1a:c3:ae:8a:9b: d8:4d:9f:87:88:ff:31:86:ad:0d:4f:76:b9:34:a5:f4:62:d8: ef:72:ea:62:66:31:d8:07:47:a3:ac:50:9a:34:a8:71:06:43: 8d:d7:13:7e:c6:c7:1f:4a:20:53:90:04:2b:83:c0:08:04:93: 5c:86:88:76:b6:0e:9f:40:42:fa:81:ca:74:fd:fb:e7:0b:c3: c2:08:ce:75:0d:09:10:fc:72:0f:80:2e:fc:9c:0b:4e:1e:a2: 4f:33:0b:fb:07:f2:8d:df:1e:70:df:b7:bc:92:40:9f:40:46: 15:9b:f5:8a -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICATcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA1MjQx NjMwMjRaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKEE4NEI4QzU1QzJGOEFD MjIzRTk0RUM0NEU1REMzRTQzQ0QzNjRGNDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+2zChaeAqf4eiuXD/aHFe7UA0viZ3/luvQ7upZvNN14P076xg tKP0AKwdyW+wi513frxOVDaHNIstNvvJL0rC/65GFQBsjnuYzuS8c06ep+ZIcVZW TN2CRo4Y/k4iySplsh9ifN7aU7CtFdRc9rLGDExc3GkH1KkxTSrS/KzWYFgPGa9A whjiO8DHQm1Snf7OOdzJAHZJM+H+miqcqPPk5oppPLnQFKF4xPzdZo6YC+er+SDh USDdjpcA9MeiFKoR7u5CzM4P21zU6Itl9Ke9U1b+pqwc4MYIy+Sn7H9zRnSfyB1B d7oovQt5Ir/FcjtxQMOFVDhoUOcjj1b34p1lAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUqEuMVcL4rCI+lOxE5dw+Q802T0cwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3FFdU1WY0w0ckNJLWxPeEU1ZHctUTgwMlQwYy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEBT7YwDQYJKoZIhvcNAQELBQADggEBAMvUJJQJ90YjswC5x1Llxnb+R0M5 pK71VZNU6DjhRAyYmtYogqz2Sy63RofC482aoffx3nqMdZC0QuVrQkKj84agfzC4 bk5h+tCeBX8n6m3qlyOIWmoqpyFa5FnSkqoFGcc4KNJaPA+gUDgpF3k9GNl3/tpA NuPYtw7NKhRbT9j+DVAPoYH5gsLFEV0aw66Km9hNn4eI/zGGrQ1Pdrk0pfRi2O9y 6mJmMdgHR6OsUJo0qHEGQ43XE37Gxx9KIFOQBCuDwAgEk1yGiHa2Dp9AQvqBynT9 ++cLw8IIznUNCRD8cg+ALvycC04eok8zC/sH8o3fHnDft7ySQJ9ARhWb9Yo= -----END CERTIFICATE-----Generated at Sat Apr 27 10:15:57 2024 by rpki-client on console-ams.rpki-client.org