$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/rbPnLvOm5dTB6NJOU_iNIEd8E7E.roa File: rbPnLvOm5dTB6NJOU_iNIEd8E7E.roa (raw, json) Hash identifier: JYTJnqAcdVfp8hgJ+kJFLZANitg3KUuT++L8Wr0YTcs= Subject key identifier: AD:B3:E7:2E:F3:A6:E5:D4:C1:E8:D2:4E:53:F8:8D:20:47:7C:13:B1 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0538 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/rbPnLvOm5dTB6NJOU_iNIEd8E7E.roa Signing time: Thu 27 Jul 2023 16:54:16 +0000 ROA not before: Thu 27 Jul 2023 16:54:16 +0000 ROA not after: Sun 14 Jul 2024 01:30:03 +0000 asID: 9605 IP address blocks: 1.67.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1336 (0x538) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jul 27 16:54:16 2023 GMT Not After : Jul 14 01:30:03 2024 GMT Subject: CN=ADB3E72EF3A6E5D4C1E8D24E53F88D20477C13B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:6f:70:68:e9:fb:a7:7a:e2:d5:e8:5b:ce:15: 68:bc:0d:fd:1b:2e:9d:de:43:89:e7:be:1d:5a:4a: 9b:2e:36:20:ae:6f:be:5c:57:ed:f4:35:c2:28:2f: e8:53:92:5e:e6:31:b7:aa:78:a8:6f:b1:c1:a4:da: b4:f6:40:42:98:7c:75:47:94:08:65:6a:62:a6:7e: 45:50:10:86:79:b5:cf:b3:f7:41:01:de:d1:fb:af: 19:c7:a4:b2:d8:a1:d2:37:7c:e6:22:5b:1a:a0:d3: 41:98:50:3e:d2:ec:9f:3f:bf:68:ac:14:66:fb:37: 25:7c:05:9f:8f:27:0e:5f:92:99:3a:bb:af:65:7c: 55:cb:11:d0:2f:31:41:be:fb:7a:32:c1:32:aa:65: 04:23:12:93:72:d6:d0:a2:84:d3:63:92:7b:5c:74: ec:47:4d:60:e0:a1:d9:98:11:da:ab:48:4e:a5:fa: 51:9f:b5:1c:53:f2:04:a0:b9:37:91:7a:20:5b:dc: 9c:7d:86:72:14:11:12:d6:e1:88:f7:22:7d:c1:d6: 7b:40:1f:8a:d8:27:ec:ef:76:f8:99:14:5e:b4:ac: 5a:fb:35:b8:7d:5a:e0:c1:81:4a:37:39:f5:3d:a4: 99:56:6a:97:24:50:7c:f2:13:f6:0e:a4:da:09:96: 9d:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:B3:E7:2E:F3:A6:E5:D4:C1:E8:D2:4E:53:F8:8D:20:47:7C:13:B1 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/rbPnLvOm5dTB6NJOU_iNIEd8E7E.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.67.208.0/20 Signature Algorithm: sha256WithRSAEncryption e2:20:54:2c:43:3c:49:81:49:bc:11:8b:b7:a7:a3:95:f3:20: 5f:9a:60:ea:96:3f:18:e6:92:13:6c:c1:77:87:b5:ea:12:20: 8b:37:9c:75:2d:42:8d:7e:34:e3:57:a8:ec:86:c8:64:e3:a8: df:a3:76:b3:81:a8:27:69:99:18:a1:36:94:80:db:fe:84:4f: 9d:fb:ca:4d:c6:ff:ed:09:38:4d:1c:a7:ee:4f:0a:cf:1e:16: 68:99:22:18:d2:01:85:72:70:f1:c5:ae:7a:4b:5b:55:fb:6e: b6:75:24:a2:f5:8a:bc:22:0b:f3:63:ee:47:4b:b6:0e:42:4e: b2:60:0e:58:61:99:d3:48:7c:fa:d7:06:fc:28:f9:dd:db:f4: d9:cf:6d:dc:19:fe:a8:b3:d7:9d:18:1f:25:af:04:0f:a8:6a: 5c:84:8f:29:1e:b7:94:ac:f7:30:d7:8e:7a:c0:68:75:ee:91: a5:fc:e6:46:b5:f9:7d:9f:05:d5:10:ff:15:e6:9f:50:a4:ed: 25:63:2f:06:57:0b:6b:6c:f5:90:b9:b1:c7:ad:36:bd:cf:4c: 3a:41:e1:22:3a:f1:fb:ec:4e:a3:77:01:7f:66:24:8d:b6:30: 6c:51:39:b4:06:32:bf:f4:35:18:ad:c0:a8:74:72:d0:40:1a: 2b:26:1e:d3 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBTgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA3Mjcx NjU0MTZaFw0yNDA3MTQwMTMwMDNaMDMxMTAvBgNVBAMTKEFEQjNFNzJFRjNBNkU1 RDRDMUU4RDI0RTUzRjg4RDIwNDc3QzEzQjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCgb3Bo6funeuLV6FvOFWi8Df0bLp3eQ4nnvh1aSpsuNiCub75c V+30NcIoL+hTkl7mMbeqeKhvscGk2rT2QEKYfHVHlAhlamKmfkVQEIZ5tc+z90EB 3tH7rxnHpLLYodI3fOYiWxqg00GYUD7S7J8/v2isFGb7NyV8BZ+PJw5fkpk6u69l fFXLEdAvMUG++3oywTKqZQQjEpNy1tCihNNjkntcdOxHTWDgodmYEdqrSE6l+lGf tRxT8gSguTeReiBb3Jx9hnIUERLW4Yj3In3B1ntAH4rYJ+zvdviZFF60rFr7Nbh9 WuDBgUo3OfU9pJlWapckUHzyE/YOpNoJlp3vAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUrbPnLvOm5dTB6NJOU/iNIEd8E7EwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3JiUG5Mdk9tNWRUQjZOSk9VX2lOSUVkOEU3RS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQBQ9AwDQYJKoZIhvcNAQELBQADggEBAOIgVCxDPEmBSbwRi7eno5XzIF+a YOqWPxjmkhNswXeHteoSIIs3nHUtQo1+NONXqOyGyGTjqN+jdrOBqCdpmRihNpSA 2/6ET537yk3G/+0JOE0cp+5PCs8eFmiZIhjSAYVycPHFrnpLW1X7brZ1JKL1irwi C/Nj7kdLtg5CTrJgDlhhmdNIfPrXBvwo+d3b9NnPbdwZ/qiz150YHyWvBA+oalyE jyket5Ss9zDXjnrAaHXukaX85ka1+X2fBdUQ/xXmn1Ck7SVjLwZXC2ts9ZC5scet Nr3PTDpB4SI68fvsTqN3AX9mJI22MGxRObQGMr/0NRitwKh0ctBAGismHtM= -----END CERTIFICATE-----Generated at Sat Jun 1 15:54:32 2024 by rpki-client on console-ams.rpki-client.org