$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/tcGV3HzzPAGjE0GGxODUXwLRcmE.roa File: tcGV3HzzPAGjE0GGxODUXwLRcmE.roa (raw, json) Hash identifier: 8xzeu+/hvyrfA4gaA9g1B1NHLcxE9TIh6dY+VQdsymY= Subject key identifier: B5:C1:95:DC:7C:F3:3C:01:A3:13:41:86:C4:E0:D4:5F:02:D1:72:61 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 058A Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/tcGV3HzzPAGjE0GGxODUXwLRcmE.roa Signing time: Thu 27 Jul 2023 16:58:14 +0000 ROA not before: Thu 27 Jul 2023 16:58:14 +0000 ROA not after: Sun 14 Jul 2024 01:30:03 +0000 asID: 9605 IP address blocks: 220.159.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 23 Jun 2024 11:53:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1418 (0x58a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jul 27 16:58:14 2023 GMT Not After : Jul 14 01:30:03 2024 GMT Subject: CN=B5C195DC7CF33C01A3134186C4E0D45F02D17261 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:47:67:df:05:ae:31:8d:e5:94:c9:13:fa:3d: 47:b6:c0:3a:a4:9b:06:d1:b0:2a:5e:d0:03:d6:d4: 5f:34:46:16:22:94:d6:1a:8a:5d:98:78:57:dc:a8: 8f:bf:ba:c3:48:55:d0:43:92:96:12:7d:15:e4:d8: db:94:f0:ea:46:11:ae:61:95:cb:70:af:6c:fb:40: 95:38:99:86:37:71:b6:eb:70:61:7c:4f:ad:21:75: 61:5b:7a:be:bf:6f:a7:63:16:eb:27:85:30:b7:66: 88:4f:08:3c:c4:c2:83:02:26:ed:cc:87:80:63:c0: 51:18:e1:d7:1d:c5:5b:70:47:5e:7b:8c:0c:e0:70: d8:10:bc:15:0a:36:19:26:bb:95:8b:68:96:d2:3e: 6a:7f:fe:f4:d6:29:d9:53:ff:be:9c:f5:6d:cb:c6: d8:d0:d0:1c:f8:31:da:ed:72:1b:3d:4f:92:86:e0: 73:d5:0b:c8:14:c2:00:58:02:b4:14:a3:3c:32:a8: 64:44:90:ef:4e:1f:2b:9f:ad:19:67:ca:7f:71:c0: b7:a9:07:2f:af:da:fc:a4:82:00:b6:a1:2c:5e:73: 25:d5:66:f4:3c:e7:7f:a4:c6:3e:58:ff:d1:0a:da: b4:32:5a:df:c2:66:a1:ce:00:38:08:65:60:e8:87: 6b:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:C1:95:DC:7C:F3:3C:01:A3:13:41:86:C4:E0:D4:5F:02:D1:72:61 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/tcGV3HzzPAGjE0GGxODUXwLRcmE.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 220.159.250.0/24 Signature Algorithm: sha256WithRSAEncryption e7:15:25:7e:1b:95:43:a7:85:dd:45:15:6c:15:0a:9d:b9:c3: ce:1d:00:b4:27:45:e9:6b:de:a8:79:63:a6:3d:24:c4:91:21: 59:56:fe:ad:f5:03:4e:4b:24:7d:16:cb:b6:55:3a:14:05:b3: 68:58:60:ab:47:7f:76:bb:24:60:b6:b3:ee:28:62:da:a7:b6: f7:41:66:99:b5:b6:01:e2:f6:3d:b5:78:e1:53:8b:41:5b:9c: b4:17:67:1b:06:de:09:0a:ab:24:02:33:a6:a0:f1:50:e0:a0: 8b:62:6a:e1:4d:b4:1f:ca:61:18:6f:99:81:97:53:1e:e8:0b: 76:f0:91:ce:93:8d:49:b7:04:42:79:2a:bd:d4:70:7d:ed:d8: 9f:48:56:59:58:0e:35:ef:a7:9b:13:50:68:24:3d:b4:bd:cc: f1:45:2e:67:ff:a9:b6:e9:45:d3:da:f0:09:b2:b0:00:46:09: 60:ca:94:33:57:4d:3b:28:49:10:7a:86:69:3a:39:f4:6c:01: 87:68:1f:25:4e:69:ae:04:a7:a5:6f:63:75:c8:c8:5e:88:cf: 56:54:2e:fe:9d:3b:7d:19:71:63:94:26:a4:5f:1a:5e:61:91: 21:f5:c1:e5:2b:51:84:9c:f3:cd:f3:61:33:41:e1:d0:83:cc: 0a:b7:47:4f -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBYowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA3Mjcx NjU4MTRaFw0yNDA3MTQwMTMwMDNaMDMxMTAvBgNVBAMTKEI1QzE5NURDN0NGMzND MDFBMzEzNDE4NkM0RTBENDVGMDJEMTcyNjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCoR2ffBa4xjeWUyRP6PUe2wDqkmwbRsCpe0APW1F80RhYilNYa il2YeFfcqI+/usNIVdBDkpYSfRXk2NuU8OpGEa5hlctwr2z7QJU4mYY3cbbrcGF8 T60hdWFber6/b6djFusnhTC3ZohPCDzEwoMCJu3Mh4BjwFEY4dcdxVtwR157jAzg cNgQvBUKNhkmu5WLaJbSPmp//vTWKdlT/76c9W3LxtjQ0Bz4Mdrtchs9T5KG4HPV C8gUwgBYArQUozwyqGREkO9OHyufrRlnyn9xwLepBy+v2vykggC2oSxecyXVZvQ8 53+kxj5Y/9EK2rQyWt/CZqHOADgIZWDoh2vlAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUtcGV3HzzPAGjE0GGxODUXwLRcmEwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3RjR1YzSHp6UEFHakUwR0d4T0RVWHdMUmNtRS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADcn/owDQYJKoZIhvcNAQELBQADggEBAOcVJX4blUOnhd1FFWwVCp25w84d ALQnRelr3qh5Y6Y9JMSRIVlW/q31A05LJH0Wy7ZVOhQFs2hYYKtHf3a7JGC2s+4o YtqntvdBZpm1tgHi9j21eOFTi0FbnLQXZxsG3gkKqyQCM6ag8VDgoItiauFNtB/K YRhvmYGXUx7oC3bwkc6TjUm3BEJ5Kr3UcH3t2J9IVllYDjXvp5sTUGgkPbS9zPFF Lmf/qbbpRdPa8AmysABGCWDKlDNXTTsoSRB6hmk6OfRsAYdoHyVOaa4Ep6VvY3XI yF6Iz1ZULv6dO30ZcWOUJqRfGl5hkSH1weUrUYSc883zYTNB4dCDzAq3R08= -----END CERTIFICATE-----Generated at Sun Jun 16 14:31:56 2024 by rpki-client on console-ams.rpki-client.org