$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/uQnG6PubeFhDU9VZ3hCBhssUHqA.roa File: uQnG6PubeFhDU9VZ3hCBhssUHqA.roa (raw, json) Hash identifier: s+S995vSuv+K77Lgd/rSteBQsjkNia0FcPyYXFgLf8I= Subject key identifier: B9:09:C6:E8:FB:9B:78:58:43:53:D5:59:DE:10:81:86:CB:14:1E:A0 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 02AF Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/uQnG6PubeFhDU9VZ3hCBhssUHqA.roa Signing time: Tue 30 May 2023 17:17:28 +0000 ROA not before: Tue 30 May 2023 17:17:28 +0000 ROA not after: Tue 14 May 2024 01:30:02 +0000 asID: 9605 IP address blocks: 220.159.230.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 May 2024 13:36:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 687 (0x2af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: May 30 17:17:28 2023 GMT Not After : May 14 01:30:02 2024 GMT Subject: CN=B909C6E8FB9B78584353D559DE108186CB141EA0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f2:38:f9:32:cf:5f:91:fb:bd:71:d4:05:87: b5:53:68:db:6e:79:1e:2f:59:4c:fb:0e:49:ca:43: 46:ec:62:b1:ce:15:b0:c6:44:63:94:69:ad:c2:f2: de:13:38:f8:0f:93:e9:86:58:ed:72:00:2a:24:86: d0:20:b9:e7:9d:ab:30:d2:c5:7b:09:74:9b:63:40: 90:63:71:91:72:12:1e:a9:1f:b8:1d:41:1f:8f:e1: f0:9f:f1:15:46:7e:dd:85:6b:e1:1b:8c:35:c6:46: 20:ab:8a:bb:3b:82:8c:b3:da:ef:e8:db:d4:1b:b0: 96:6d:47:ad:44:9c:5f:8d:90:9d:c2:8d:f9:f0:7b: 64:04:31:e6:e4:f3:64:6f:c1:10:8f:fd:e3:74:f8: da:4e:89:2e:e6:c8:91:3c:da:a4:0a:aa:d9:cf:98: c9:a1:96:43:c2:d4:80:d7:d0:93:47:fd:08:40:fc: f5:34:5d:d8:c9:37:09:f7:8d:d6:ad:a1:a3:dc:52: d5:b2:d5:3f:22:f2:41:89:90:b0:e8:28:27:7d:8c: 00:eb:f3:65:e2:c6:05:e9:ec:5c:45:40:b9:35:c6: 94:8b:c2:d7:8c:0a:fb:c6:2d:c4:37:7b:f3:07:2f: 63:77:c8:81:7e:ad:f2:1d:81:21:85:23:a9:f8:82: dc:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:09:C6:E8:FB:9B:78:58:43:53:D5:59:DE:10:81:86:CB:14:1E:A0 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/uQnG6PubeFhDU9VZ3hCBhssUHqA.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 220.159.230.0/23 Signature Algorithm: sha256WithRSAEncryption b0:d3:6f:b1:fd:8c:6c:53:b9:8d:4b:e6:00:bb:ff:b2:f1:14: 6b:92:76:85:22:60:8a:cb:74:a4:c2:94:8e:78:94:b2:71:98: cb:a1:28:2f:d0:c9:41:8c:4e:07:75:e6:79:d4:f5:51:57:22: 6e:3a:fc:a8:9b:97:18:b1:df:c5:5e:d2:44:9a:aa:1d:2f:97: ea:d9:e2:7e:eb:8a:38:56:6d:36:f5:c0:74:d8:e0:6f:00:b7: db:3e:fb:70:12:52:5c:48:68:2d:46:ba:21:17:d6:86:93:74: d6:30:48:dc:4a:9e:1a:41:cf:eb:c4:2b:80:3f:06:55:13:f9: 84:48:ac:ad:ad:72:3f:36:62:2e:ab:bd:3b:a0:a9:5d:fd:92: b3:dd:ed:bb:35:01:8d:0a:6f:a8:ef:5f:37:ab:32:9f:2c:3f: 87:ba:d9:bc:49:3b:a2:4f:2f:93:4e:13:2f:54:9d:32:e6:c8: cc:8d:ca:d9:c2:9d:29:79:d1:17:bc:db:31:1f:c7:8a:07:33: 18:09:b9:2a:de:dd:7d:bc:2e:31:9d:83:e0:b9:ef:5c:17:de: 1e:fd:b1:b6:e2:4b:44:16:c0:81:a3:f4:b1:b2:8a:40:42:96: 3b:ec:3f:66:d2:e9:f9:aa:cc:70:e2:95:83:21:2e:cf:f7:f5: 89:3f:ba:ff -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAq8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA1MzAx NzE3MjhaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKEI5MDlDNkU4RkI5Qjc4 NTg0MzUzRDU1OURFMTA4MTg2Q0IxNDFFQTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDH8jj5Ms9fkfu9cdQFh7VTaNtueR4vWUz7DknKQ0bsYrHOFbDG RGOUaa3C8t4TOPgPk+mGWO1yACokhtAgueedqzDSxXsJdJtjQJBjcZFyEh6pH7gd QR+P4fCf8RVGft2Fa+EbjDXGRiCrirs7goyz2u/o29QbsJZtR61EnF+NkJ3Cjfnw e2QEMebk82RvwRCP/eN0+NpOiS7myJE82qQKqtnPmMmhlkPC1IDX0JNH/QhA/PU0 XdjJNwn3jdatoaPcUtWy1T8i8kGJkLDoKCd9jADr82XixgXp7FxFQLk1xpSLwteM CvvGLcQ3e/MHL2N3yIF+rfIdgSGFI6n4gtx3AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUuQnG6PubeFhDU9VZ3hCBhssUHqAwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3VRbkc2UHViZUZoRFU5VlozaENCaHNzVUhxQS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAHcn+YwDQYJKoZIhvcNAQELBQADggEBALDTb7H9jGxTuY1L5gC7/7LxFGuS doUiYIrLdKTClI54lLJxmMuhKC/QyUGMTgd15nnU9VFXIm46/Kiblxix38Ve0kSa qh0vl+rZ4n7rijhWbTb1wHTY4G8At9s++3ASUlxIaC1GuiEX1oaTdNYwSNxKnhpB z+vEK4A/BlUT+YRIrK2tcj82Yi6rvTugqV39krPd7bs1AY0Kb6jvXzerMp8sP4e6 2bxJO6JPL5NOEy9UnTLmyMyNytnCnSl50Re82zEfx4oHMxgJuSre3X28LjGdg+C5 71wX3h79sbbiS0QWwIGj9LGyikBCljvsP2bS6fmqzHDilYMhLs/39Yk/uv8= -----END CERTIFICATE-----Generated at Sat Apr 27 10:15:58 2024 by rpki-client on console-ams.rpki-client.org