$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/tA4O4pEZhOtmBBC2Ab4XExevp1A.roa File: tA4O4pEZhOtmBBC2Ab4XExevp1A.roa (raw, json) Hash identifier: L6TEiNqV17utCZTFdpPSGUcd0cPBueH8kjHwVSWHEGM= Subject key identifier: B4:0E:0E:E2:91:19:84:EB:66:04:10:B6:01:BE:17:13:17:AF:A7:50 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 04B1 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/tA4O4pEZhOtmBBC2Ab4XExevp1A.roa Signing time: Thu 27 Jul 2023 16:48:08 +0000 ROA not before: Thu 27 Jul 2023 16:48:08 +0000 ROA not after: Sun 14 Jul 2024 01:30:03 +0000 asID: 9605 IP address blocks: 110.158.132.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1201 (0x4b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jul 27 16:48:08 2023 GMT Not After : Jul 14 01:30:03 2024 GMT Subject: CN=B40E0EE2911984EB660410B601BE171317AFA750 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b6:1e:83:11:ae:b9:15:f7:2f:fe:1b:51:ee: 01:b8:fe:c7:e6:98:20:c6:60:10:73:6d:7a:04:d2: c9:ac:19:e5:14:72:e1:b7:20:a9:ca:c1:80:37:f5: 3f:8b:e5:7c:b6:50:c0:26:e9:9a:02:78:77:56:4e: b2:ba:b5:fb:c9:f0:5e:e0:f4:43:40:db:a8:fc:3f: 21:fb:9e:11:c9:6b:f3:5a:db:7b:e3:40:86:06:5b: 54:9b:27:91:c8:fd:9f:b9:89:1f:f8:dd:74:c6:2e: 13:0b:3b:51:10:2c:d5:28:f5:a9:31:72:73:f5:c2: b4:43:17:4f:44:87:2d:af:08:83:f2:ed:52:56:39: 9e:4f:74:0c:e9:0c:34:e5:7e:73:8f:b5:fb:90:07: 8c:aa:52:16:3d:b5:22:72:01:25:2a:4d:d7:d1:dc: 96:fe:d1:32:d9:cf:42:d5:d5:1c:b6:73:f1:fc:d9: 44:ba:89:5d:3c:5c:d1:ff:0d:43:ec:e9:4a:86:f3: 2b:a2:a7:9d:48:8b:d3:ad:e2:5a:ed:cb:a2:1d:1c: 6a:ed:e1:bd:f7:ea:eb:10:f2:b8:0e:cd:5e:dc:a1: af:cc:9b:62:0b:bc:c4:f5:04:f0:63:52:da:2c:7c: ce:c5:78:c2:be:23:db:f8:f6:d9:0a:d9:07:6b:ce: c6:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:0E:0E:E2:91:19:84:EB:66:04:10:B6:01:BE:17:13:17:AF:A7:50 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/tA4O4pEZhOtmBBC2Ab4XExevp1A.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 110.158.132.0/23 Signature Algorithm: sha256WithRSAEncryption 79:0b:7f:6c:a5:b0:a2:ae:14:ab:0d:73:1c:76:dd:fd:69:f4: 67:c4:13:2b:2f:42:29:4d:04:96:7a:39:76:ef:16:1c:5d:7b: 03:5e:1c:d3:27:ad:08:cc:64:79:c5:90:c0:11:c2:aa:6d:43: 24:ad:2b:65:8f:68:d3:b0:36:74:5a:f7:60:f6:34:fe:ab:9e: c9:01:6e:5d:76:4a:d0:2e:b0:02:21:fb:6f:9c:83:90:de:25: ab:7a:e5:43:42:47:f0:b3:b3:b2:31:c3:07:6d:b4:79:e5:93: aa:b2:de:fe:30:3e:b2:ca:d0:31:c7:e7:63:eb:51:6f:36:20: dd:a3:c5:96:9b:eb:3c:46:c4:8b:b7:61:fe:66:8a:ab:ae:b2: 70:2f:e6:98:89:d8:ed:8b:c6:85:40:39:55:72:2a:45:4f:43: 3e:24:bb:df:a9:20:3a:af:f7:57:18:3b:cd:bb:49:8a:54:22: 98:52:64:dd:76:f3:ea:c5:c6:f8:14:0f:2d:98:4d:80:8e:e1: 65:ca:27:49:03:9b:60:0b:ed:67:ff:f5:77:66:a0:70:83:18: 2f:02:14:08:8b:41:c5:37:84:0c:ac:da:c3:1e:d5:22:e6:00: bc:50:e5:a5:8b:bd:ea:e4:19:27:d4:c8:1e:07:cc:b1:08:30: 64:ff:6a:34 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBLEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA3Mjcx NjQ4MDhaFw0yNDA3MTQwMTMwMDNaMDMxMTAvBgNVBAMTKEI0MEUwRUUyOTExOTg0 RUI2NjA0MTBCNjAxQkUxNzEzMTdBRkE3NTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDGth6DEa65Ffcv/htR7gG4/sfmmCDGYBBzbXoE0smsGeUUcuG3 IKnKwYA39T+L5Xy2UMAm6ZoCeHdWTrK6tfvJ8F7g9ENA26j8PyH7nhHJa/Na23vj QIYGW1SbJ5HI/Z+5iR/43XTGLhMLO1EQLNUo9akxcnP1wrRDF09Ehy2vCIPy7VJW OZ5PdAzpDDTlfnOPtfuQB4yqUhY9tSJyASUqTdfR3Jb+0TLZz0LV1Ry2c/H82US6 iV08XNH/DUPs6UqG8yuip51Ii9Ot4lrty6IdHGrt4b336usQ8rgOzV7coa/Mm2IL vMT1BPBjUtosfM7FeMK+I9v49tkK2QdrzsbzAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUtA4O4pEZhOtmBBC2Ab4XExevp1AwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3RBNE80cEVaaE90bUJCQzJBYjRYRXhldnAxQS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFunoQwDQYJKoZIhvcNAQELBQADggEBAHkLf2ylsKKuFKsNcxx23f1p9GfE EysvQilNBJZ6OXbvFhxdewNeHNMnrQjMZHnFkMARwqptQyStK2WPaNOwNnRa92D2 NP6rnskBbl12StAusAIh+2+cg5DeJat65UNCR/Czs7IxwwdttHnlk6qy3v4wPrLK 0DHH52PrUW82IN2jxZab6zxGxIu3Yf5miquusnAv5piJ2O2LxoVAOVVyKkVPQz4k u9+pIDqv91cYO827SYpUIphSZN128+rFxvgUDy2YTYCO4WXKJ0kDm2AL7Wf/9Xdm oHCDGC8CFAiLQcU3hAys2sMe1SLmALxQ5aWLverkGSfUyB4HzLEIMGT/ajQ= -----END CERTIFICATE-----Generated at Sat Jun 1 13:38:48 2024 by rpki-client on console-fra.rpki-client.org