$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/r9u_1j_x_o9k9kTMLt8G70Eicgs.roa File: r9u_1j_x_o9k9kTMLt8G70Eicgs.roa (raw, json) Hash identifier: LZHkQ2ycifIoTpc3F7vgLqD+PGmGFxmTLIEAqZj6r/4= Subject key identifier: AF:DB:BF:D6:3F:F1:FE:8F:64:F6:44:CC:2E:DF:06:EF:41:22:72:0B Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0203 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/r9u_1j_x_o9k9kTMLt8G70Eicgs.roa Signing time: Tue 30 May 2023 16:29:26 +0000 ROA not before: Tue 30 May 2023 16:29:26 +0000 ROA not after: Tue 14 May 2024 01:30:02 +0000 asID: 9605 IP address blocks: 183.75.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 May 2024 13:36:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 515 (0x203) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: May 30 16:29:26 2023 GMT Not After : May 14 01:30:02 2024 GMT Subject: CN=AFDBBFD63FF1FE8F64F644CC2EDF06EF4122720B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:50:c9:ff:18:b4:4f:65:37:88:2e:2a:8e:5f: 2d:83:b8:8c:c7:ad:a0:a9:7d:dc:20:44:36:5e:9e: b4:5d:a6:67:74:5a:98:d4:01:76:b9:1a:81:0d:4a: f3:9c:66:7f:74:f9:f2:88:9e:4f:be:af:c8:c4:ca: 09:05:29:0b:6c:31:89:55:fb:1b:c3:ac:c9:c5:66: f0:21:24:bf:b5:89:c3:a4:68:5d:36:62:e2:44:8e: 7d:d5:86:29:49:a9:fd:5d:c7:d7:f3:3d:f4:72:49: b0:22:b5:58:75:70:60:fa:38:1d:48:da:81:2f:96: 26:32:9f:1c:95:f2:95:aa:85:73:62:a8:2d:8f:c4: 86:e6:ba:b3:bb:a3:e2:99:45:5f:6a:50:92:af:c7: 7b:cb:8a:f4:e5:7c:d5:2b:61:f7:c2:4d:7c:03:1a: 41:fc:60:4f:f6:8d:29:fe:4a:a2:d5:cd:30:99:19: 0b:4d:bc:04:69:21:28:99:3a:61:19:f4:d0:23:5c: d6:81:4e:87:f5:c5:03:e2:6c:1f:0e:51:38:4d:cd: e1:26:02:a2:90:53:1f:5e:95:d7:2f:82:05:1e:48: e9:4f:79:3c:a6:df:7f:8b:55:bd:70:0a:b2:78:ed: e3:48:ca:07:e3:7b:c2:eb:44:05:7d:94:ea:24:6a: 37:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:DB:BF:D6:3F:F1:FE:8F:64:F6:44:CC:2E:DF:06:EF:41:22:72:0B X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/r9u_1j_x_o9k9kTMLt8G70Eicgs.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 183.75.0.0/17 Signature Algorithm: sha256WithRSAEncryption 74:56:9d:5c:aa:23:15:ff:f2:60:bf:1c:3d:40:a6:9d:f2:fb: 91:71:e4:56:da:56:9b:77:db:00:3f:7b:10:4c:59:31:79:b7: 35:e2:8c:57:33:25:f7:84:fc:53:2a:91:56:33:00:c3:e3:75: 73:e6:e1:82:86:c0:e1:84:22:c1:d1:e7:fd:8c:7a:f3:2b:1b: 58:1d:95:bd:93:e0:9f:06:49:44:a7:3b:c2:ec:92:3a:5c:ea: 97:01:3f:0a:e8:59:4a:a0:ca:77:c5:2d:59:d6:9c:9b:e1:10: d0:68:7c:2c:57:99:c2:15:a4:42:cc:12:0f:10:9a:4e:8f:be: c9:36:be:a0:c6:ec:29:97:32:43:70:03:da:6a:6a:a5:b9:7e: d4:93:b9:4f:12:da:58:52:cf:9d:b4:b6:b9:8d:dd:0b:67:d1: 61:a5:16:28:aa:fd:1c:23:ea:27:51:a3:47:5c:47:60:ce:46: 6e:c6:2f:36:ab:4c:aa:8f:7b:0f:1e:ac:16:d6:8c:49:55:08: 70:12:61:6d:83:aa:b1:70:73:83:60:69:6f:40:eb:09:c3:bb: 47:ac:68:91:22:81:47:88:aa:2c:a3:16:e2:a3:b4:d6:41:a6: 17:8e:b7:67:1d:39:8e:22:47:7e:d7:f9:fe:24:0b:7b:75:df: ec:8c:b3:ab -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAgMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA1MzAx NjI5MjZaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKEFGREJCRkQ2M0ZGMUZF OEY2NEY2NDRDQzJFREYwNkVGNDEyMjcyMEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDGUMn/GLRPZTeILiqOXy2DuIzHraCpfdwgRDZenrRdpmd0WpjU AXa5GoENSvOcZn90+fKInk++r8jEygkFKQtsMYlV+xvDrMnFZvAhJL+1icOkaF02 YuJEjn3VhilJqf1dx9fzPfRySbAitVh1cGD6OB1I2oEvliYynxyV8pWqhXNiqC2P xIbmurO7o+KZRV9qUJKvx3vLivTlfNUrYffCTXwDGkH8YE/2jSn+SqLVzTCZGQtN vARpISiZOmEZ9NAjXNaBTof1xQPibB8OUThNzeEmAqKQUx9eldcvggUeSOlPeTym 33+LVb1wCrJ47eNIygfje8LrRAV9lOokajc5AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUr9u/1j/x/o9k9kTMLt8G70EicgswHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3I5dV8xal94X285azlrVE1MdDhHNzBFaWNncy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAe3SwAwDQYJKoZIhvcNAQELBQADggEBAHRWnVyqIxX/8mC/HD1App3y+5Fx 5FbaVpt32wA/exBMWTF5tzXijFczJfeE/FMqkVYzAMPjdXPm4YKGwOGEIsHR5/2M evMrG1gdlb2T4J8GSUSnO8Lskjpc6pcBPwroWUqgynfFLVnWnJvhENBofCxXmcIV pELMEg8Qmk6Pvsk2vqDG7CmXMkNwA9pqaqW5ftSTuU8S2lhSz520trmN3Qtn0WGl Fiiq/Rwj6idRo0dcR2DORm7GLzarTKqPew8erBbWjElVCHASYW2DqrFwc4NgaW9A 6wnDu0esaJEigUeIqiyjFuKjtNZBpheOt2cdOY4iR37X+f4kC3t13+yMs6s= -----END CERTIFICATE-----Generated at Sat Apr 27 10:15:57 2024 by rpki-client on console-ams.rpki-client.org