$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/0eFEiByFWwgEXKW-Sg_tnKqkRBM.roa File: 0eFEiByFWwgEXKW-Sg_tnKqkRBM.roa (raw, json) Hash identifier: 80KCyHHmybcuIL7Ja9DzGZQrsomlVoOSwJhfLO/y1Lk= Subject key identifier: D1:E1:44:88:1C:85:5B:08:04:5C:A5:BE:4A:0F:ED:9C:AA:A4:44:13 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 054B Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/0eFEiByFWwgEXKW-Sg_tnKqkRBM.roa Signing time: Thu 27 Jul 2023 16:56:11 +0000 ROA not before: Thu 27 Jul 2023 16:56:11 +0000 ROA not after: Sun 14 Jul 2024 01:30:03 +0000 asID: 9605 IP address blocks: 110.161.204.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Jun 2024 06:27:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1355 (0x54b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jul 27 16:56:11 2023 GMT Not After : Jul 14 01:30:03 2024 GMT Subject: CN=D1E144881C855B08045CA5BE4A0FED9CAAA44413 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:bf:1a:36:9c:19:f2:75:37:8d:f0:61:6f:45: 7b:35:2b:f8:4e:16:10:eb:a4:7f:b6:41:9c:b7:6a: b0:4a:78:4f:83:45:cf:93:2c:e3:a0:23:06:c7:6d: 22:59:df:0f:9b:8d:de:1e:31:f9:74:fb:7f:b0:18: 4a:50:ba:3f:5a:ac:05:a6:c9:bf:8c:b2:bc:6c:01: b8:bf:c7:3e:68:10:31:7f:d7:a9:a6:e0:6d:6e:cf: ee:f9:5e:85:06:e1:48:5a:d0:ca:70:87:e7:76:b2: a5:7c:19:f8:1b:ed:be:5a:bd:be:85:ef:4c:40:84: d5:0c:5e:50:c7:ed:3a:fb:a7:e0:0d:b7:2e:99:54: 81:6e:94:14:31:01:a9:11:b5:19:58:eb:bd:ca:9f: 7f:2c:92:fe:48:3f:7d:2b:1c:d4:e0:8e:f4:29:0c: 75:7b:82:20:eb:93:41:ac:60:0b:09:e4:b4:82:a9: ba:31:8c:6c:cc:b1:dd:51:71:0f:20:8b:a8:b9:6a: 08:0c:93:39:63:d5:b4:c6:fc:6c:98:55:3b:30:18: b6:e8:b3:75:0d:48:3e:f2:08:0b:9e:e5:4c:8b:81: ff:fc:6a:bd:a3:fb:44:aa:b2:06:31:3f:98:56:a1: 70:c0:8b:7f:61:c6:c6:3e:fa:b5:83:95:46:19:a0: a7:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:E1:44:88:1C:85:5B:08:04:5C:A5:BE:4A:0F:ED:9C:AA:A4:44:13 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/0eFEiByFWwgEXKW-Sg_tnKqkRBM.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 110.161.204.0/23 Signature Algorithm: sha256WithRSAEncryption 98:da:76:19:cf:30:41:fa:0f:cd:fa:51:2b:95:32:e4:63:03: 12:d2:00:79:94:90:9d:ea:c1:b6:82:d4:d0:5e:f4:6c:0c:57: 5b:f1:05:e0:25:f0:a6:d6:25:7c:0e:29:a9:c7:a5:95:bf:f4: af:95:d1:b6:62:2b:eb:b1:19:bd:bd:dd:bf:36:bc:aa:bd:52: f5:e9:6b:4a:2c:37:d7:d1:e2:86:c9:73:ac:b9:0c:eb:79:a6: 2e:7d:e6:a0:4e:73:1f:f3:32:88:27:b3:53:db:ab:f8:e3:1d: 04:fc:e8:ac:45:dc:f8:42:78:2b:4b:a0:a2:cb:e9:67:95:33: 13:3d:be:15:a5:4f:d2:82:2a:43:1a:5e:0e:61:11:80:7c:3c: 5a:45:b0:c6:26:5d:51:e4:9d:92:8d:d0:28:7c:be:14:7f:76: 10:38:9f:f9:91:eb:90:fc:f7:40:cc:11:6c:78:a5:0a:a4:cb: b3:82:39:cd:5e:7c:35:27:b4:24:9b:37:2f:6a:c4:41:f5:a4: 2b:32:26:18:ac:ff:c4:70:8e:82:27:c9:26:b7:8a:40:da:fe: 87:23:99:e6:75:21:32:f2:91:c1:d5:c4:28:f5:2a:b5:fd:9b: d0:7d:a9:2c:df:c7:38:3d:27:74:82:0a:bd:aa:53:78:41:bd: b5:82:50:77 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBUswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA3Mjcx NjU2MTFaFw0yNDA3MTQwMTMwMDNaMDMxMTAvBgNVBAMTKEQxRTE0NDg4MUM4NTVC MDgwNDVDQTVCRTRBMEZFRDlDQUFBNDQ0MTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC0vxo2nBnydTeN8GFvRXs1K/hOFhDrpH+2QZy3arBKeE+DRc+T LOOgIwbHbSJZ3w+bjd4eMfl0+3+wGEpQuj9arAWmyb+MsrxsAbi/xz5oEDF/16mm 4G1uz+75XoUG4Uha0Mpwh+d2sqV8Gfgb7b5avb6F70xAhNUMXlDH7Tr7p+ANty6Z VIFulBQxAakRtRlY673Kn38skv5IP30rHNTgjvQpDHV7giDrk0GsYAsJ5LSCqbox jGzMsd1RcQ8gi6i5aggMkzlj1bTG/GyYVTswGLbos3UNSD7yCAue5UyLgf/8ar2j +0SqsgYxP5hWoXDAi39hxsY++rWDlUYZoKdbAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU0eFEiByFWwgEXKW+Sg/tnKqkRBMwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5LzBlRkVpQnlGV3dnRVhLVy1TZ190bktxa1JCTS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFuocwwDQYJKoZIhvcNAQELBQADggEBAJjadhnPMEH6D836USuVMuRjAxLS AHmUkJ3qwbaC1NBe9GwMV1vxBeAl8KbWJXwOKanHpZW/9K+V0bZiK+uxGb293b82 vKq9UvXpa0osN9fR4obJc6y5DOt5pi595qBOcx/zMogns1Pbq/jjHQT86KxF3PhC eCtLoKLL6WeVMxM9vhWlT9KCKkMaXg5hEYB8PFpFsMYmXVHknZKN0Ch8vhR/dhA4 n/mR65D890DMEWx4pQqky7OCOc1efDUntCSbNy9qxEH1pCsyJhis/8RwjoInySa3 ikDa/ocjmeZ1ITLykcHVxCj1KrX9m9B9qSzfxzg9J3SCCr2qU3hBvbWCUHc= -----END CERTIFICATE-----Generated at Tue Jun 25 02:54:23 2024 by rpki-client on console.sobornost.net