$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/aT7Grt19fPAv1HVOzEpGFVoh_V8.roa File: aT7Grt19fPAv1HVOzEpGFVoh_V8.roa (raw, json) Hash identifier: gjrqpGdUxgtJIj5FGQXyZaDWr5PtRtxQ4EpiQpnESa0= Subject key identifier: 69:3E:C6:AE:DD:7D:7C:F0:2F:D4:75:4E:CC:4A:46:15:5A:21:FD:5F Certificate issuer: /CN=40610DA68E93ED538A48A46C5214024ED54D07F6 Certificate serial: FB Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/aT7Grt19fPAv1HVOzEpGFVoh_V8.roa Signing time: Fri 01 Dec 2023 01:29:47 +0000 ROA not before: Fri 01 Dec 2023 01:29:47 +0000 ROA not after: Thu 14 Nov 2024 01:30:03 +0000 asID: 8220 IP address blocks: 202.95.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 251 (0xfb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6 Validity Not Before: Dec 1 01:29:47 2023 GMT Not After : Nov 14 01:30:03 2024 GMT Subject: CN=693EC6AEDD7D7CF02FD4754ECC4A46155A21FD5F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:bf:bb:af:54:fd:a0:a6:30:62:80:ce:cd:a2: 79:b5:96:20:2f:cb:84:f4:c8:85:e8:70:c4:2c:5c: b8:3b:b6:72:a4:fe:b4:f0:14:64:3a:1c:48:22:65: 2f:f0:eb:62:fd:ef:95:17:03:0b:c7:e0:6b:f9:b2: 0f:7e:63:87:85:e7:1a:1b:7d:88:94:4f:df:7b:18: 81:cb:f1:3b:0a:05:6e:dc:9e:58:68:e9:61:b4:53: 5e:c5:3c:ce:e9:4a:50:39:0e:42:95:30:3f:06:a1: c7:3a:bd:1c:cd:0c:0e:71:7a:cf:43:6c:8d:64:64: 25:ec:9c:65:f8:e6:7a:4c:8e:a0:bc:66:d3:f3:0e: 47:7e:a7:9d:63:c4:2e:1f:c1:8c:e1:28:f1:e6:47: 42:51:f0:64:17:cd:8e:d9:99:71:7b:08:35:a1:ff: c5:a3:f2:82:49:60:df:0f:f6:52:4b:9a:36:15:8d: 5f:71:af:be:26:d7:a5:0d:93:5b:69:e2:c8:41:0c: 36:68:02:40:9c:e9:79:92:22:18:7e:37:12:d4:8a: cd:93:1d:22:14:5d:9a:e4:03:0a:a8:9a:1c:70:72: 56:68:4a:7f:a4:e0:0c:6a:62:04:d5:a8:d1:20:6f: 8e:cb:78:b3:1a:60:b0:bc:4c:cf:69:4a:c2:90:11: 69:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:3E:C6:AE:DD:7D:7C:F0:2F:D4:75:4E:CC:4A:46:15:5A:21:FD:5F X509v3 Authority Key Identifier: keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/aT7Grt19fPAv1HVOzEpGFVoh_V8.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.95.208.0/20 Signature Algorithm: sha256WithRSAEncryption 7f:54:21:77:82:88:a7:50:6d:22:35:7d:ad:41:22:70:33:d1: 54:2c:ed:8a:e3:30:6d:5d:92:2b:2c:fa:33:4f:33:f3:92:93: d9:4f:01:be:07:6b:dc:9b:13:12:27:80:4c:7e:ae:e6:d3:4d: 29:3c:16:b7:51:3a:cb:9c:06:87:4f:d0:09:5d:90:18:7e:62: 57:cb:54:cb:ca:53:4a:cd:3a:78:45:33:d7:d3:5a:bc:18:16: cc:24:25:86:4f:29:b3:73:21:ba:82:fc:5d:41:ce:e9:8a:e7: 2a:7f:9c:11:09:68:09:1d:59:a5:f0:0e:13:97:e1:f3:6d:c1: 76:d8:8d:41:46:93:77:dc:aa:30:68:83:c7:1e:c8:2c:1a:ef: 27:65:c0:7d:a3:2e:7d:58:c4:75:35:3b:9e:03:11:e8:ce:3d: ef:3a:b5:4a:c4:72:bb:ba:47:66:7c:e1:ea:0d:7e:fa:37:19: 9b:51:a5:b2:fc:6f:d7:38:78:00:f1:63:9c:d0:37:a6:58:7c: d8:fc:39:a6:e4:dd:71:90:fe:77:5a:b3:49:51:8d:49:ad:18: 49:6d:d2:ef:3a:88:86:c0:4f:a1:7a:5f:f2:5a:ec:20:75:76: 29:0b:7f:b6:4b:78:27:6f:db:d9:a1:a0:16:86:8d:c7:83:a5: 5a:3f:98:25 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAPswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDA2 MTBEQTY4RTkzRUQ1MzhBNDhBNDZDNTIxNDAyNEVENTREMDdGNjAeFw0yMzEyMDEw MTI5NDdaFw0yNDExMTQwMTMwMDNaMDMxMTAvBgNVBAMTKDY5M0VDNkFFREQ3RDdD RjAyRkQ0NzU0RUNDNEE0NjE1NUEyMUZENUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDkv7uvVP2gpjBigM7Nonm1liAvy4T0yIXocMQsXLg7tnKk/rTw FGQ6HEgiZS/w62L975UXAwvH4Gv5sg9+Y4eF5xobfYiUT997GIHL8TsKBW7cnlho 6WG0U17FPM7pSlA5DkKVMD8Gocc6vRzNDA5xes9DbI1kZCXsnGX45npMjqC8ZtPz Dkd+p51jxC4fwYzhKPHmR0JR8GQXzY7ZmXF7CDWh/8Wj8oJJYN8P9lJLmjYVjV9x r74m16UNk1tp4shBDDZoAkCc6XmSIhh+NxLUis2THSIUXZrkAwqomhxwclZoSn+k 4AxqYgTVqNEgb47LeLMaYLC8TM9pSsKQEWlZAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUaT7Grt19fPAv1HVOzEpGFVoh/V8wHwYDVR0jBBgwFoAUQGENpo6T7VOKSKRs UhQCTtVNB/YwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzQ2OS9RR0VOcG82VDdWT0tTS1JzVWhRQ1R0Vk5CX1kuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9RR0VOcG82VDdWT0tTS1JzVWhRQ1R0 Vk5CX1kuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNDY5L2FUN0dydDE5ZlBBdjFIVk96RXBHRlZvaF9WOC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBATKX9AwDQYJKoZIhvcNAQELBQADggEBAH9UIXeCiKdQbSI1fa1BInAz0VQs 7YrjMG1dkiss+jNPM/OSk9lPAb4Ha9ybExIngEx+rubTTSk8FrdROsucBodP0Ald kBh+YlfLVMvKU0rNOnhFM9fTWrwYFswkJYZPKbNzIbqC/F1BzumK5yp/nBEJaAkd WaXwDhOX4fNtwXbYjUFGk3fcqjBog8ceyCwa7ydlwH2jLn1YxHU1O54DEejOPe86 tUrEcru6R2Z84eoNfvo3GZtRpbL8b9c4eADxY5zQN6ZYfNj8Oabk3XGQ/ndas0lR jUmtGElt0u86iIbAT6F6X/Ja7CB1dikLf7ZLeCdv29mhoBaGjceDpVo/mCU= -----END CERTIFICATE-----Generated at Mon Jun 3 08:49:52 2024 by rpki-client on console-fra.rpki-client.org