$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/2l5MtB121GiB-W5IFPj_8b8YsVE.roa File: 2l5MtB121GiB-W5IFPj_8b8YsVE.roa (raw, json) Hash identifier: 96vhVXetMA37vOvrnIVkEEVsUWTbzbt7k+fnMpbgO5c= Subject key identifier: DA:5E:4C:B4:1D:76:D4:68:81:F9:6E:48:14:F8:FF:F1:BF:18:B1:51 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 04CE Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/2l5MtB121GiB-W5IFPj_8b8YsVE.roa Signing time: Thu 27 Jul 2023 16:48:20 +0000 ROA not before: Thu 27 Jul 2023 16:48:20 +0000 ROA not after: Sun 14 Jul 2024 01:30:03 +0000 asID: 9605 IP address blocks: 27.230.56.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Jun 2024 06:27:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1230 (0x4ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jul 27 16:48:20 2023 GMT Not After : Jul 14 01:30:03 2024 GMT Subject: CN=DA5E4CB41D76D46881F96E4814F8FFF1BF18B151 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:48:b6:22:44:68:fc:a3:3c:a2:4c:f1:57:f2: 51:2c:06:4d:96:31:62:12:23:6f:95:a4:91:e7:4e: a1:f6:43:a0:e8:48:e2:9c:7a:8b:77:c1:24:f9:c2: 1b:d8:51:4f:01:ac:b9:89:a1:30:11:06:5e:a7:b4: 1c:fd:8b:11:83:e7:2a:73:71:66:33:46:39:f8:24: 77:17:10:64:89:df:36:4a:da:0c:34:3f:7a:b5:fb: 39:7b:cb:e2:cd:a5:94:90:01:be:0f:7a:b3:db:82: 8a:93:30:1b:7f:92:0e:cf:dd:c3:c8:1c:0b:f9:6c: aa:df:d2:96:48:de:10:ed:a7:dd:db:e1:0d:44:4f: 4d:50:b2:95:46:b4:1b:8f:02:a9:75:ff:8c:db:0d: 7e:9e:a2:5f:0a:87:10:25:5a:ac:2b:ad:73:18:6b: a0:ad:51:b9:17:29:09:38:b7:45:d5:4f:9e:e6:1b: df:a6:ce:0c:be:d6:9b:78:b5:81:4b:66:fe:b9:c6: d8:96:bb:7b:7d:fc:2b:d7:9e:d1:7f:92:c6:1c:f8: 4e:c6:33:14:e4:53:52:45:88:df:8d:21:25:da:f9: 8d:56:81:56:93:d0:97:1f:34:ce:12:06:3f:92:c2: ec:00:4b:a5:ce:29:f0:a2:98:f2:17:9e:51:62:87: 7e:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:5E:4C:B4:1D:76:D4:68:81:F9:6E:48:14:F8:FF:F1:BF:18:B1:51 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/2l5MtB121GiB-W5IFPj_8b8YsVE.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.230.56.0/22 Signature Algorithm: sha256WithRSAEncryption c9:d1:c9:60:a4:18:7f:c1:93:0b:73:da:fc:c8:d3:a9:5c:89: c3:7b:dc:bd:3c:4e:a5:a1:52:a5:61:13:53:ac:51:48:b5:e8: a5:be:62:d5:56:03:6c:75:c9:f2:7a:e0:72:63:65:cc:91:cb: 5f:7f:a3:31:58:cf:2f:9a:23:bc:13:e1:1d:26:12:35:6a:d7: 4d:4f:ed:c4:2b:a3:75:5c:9b:f1:e2:4a:96:f1:ac:21:a5:a3: bb:ff:26:30:7f:b0:63:99:72:47:b6:f5:56:f4:c6:e4:1f:6b: 56:ba:56:29:0e:cf:da:5b:f3:e7:0b:b9:33:63:b5:74:f8:8b: 98:87:ed:92:4d:4a:ae:2d:b8:cd:72:7f:2d:44:c8:d8:ba:f2: c0:f7:d1:be:c2:e2:33:a6:be:de:d0:5f:88:1c:58:93:ec:a9: 6b:4c:85:f2:0d:1d:75:d9:d6:53:b0:17:ce:0a:5a:a4:b6:4b: 11:e0:e0:d7:02:26:96:22:db:41:1d:70:73:bd:98:aa:e1:f4: 50:6c:87:35:38:a9:28:81:8d:33:1e:65:e4:4b:b2:73:62:8f: 1f:90:06:42:9f:c2:4a:08:b9:91:8b:57:2f:bf:63:59:f4:19: b5:0c:4c:11:1e:91:15:03:4b:6d:73:16:7c:6f:e7:08:62:8b: 35:9a:a5:70 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBM4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA3Mjcx NjQ4MjBaFw0yNDA3MTQwMTMwMDNaMDMxMTAvBgNVBAMTKERBNUU0Q0I0MUQ3NkQ0 Njg4MUY5NkU0ODE0RjhGRkYxQkYxOEIxNTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC3SLYiRGj8ozyiTPFX8lEsBk2WMWISI2+VpJHnTqH2Q6DoSOKc eot3wST5whvYUU8BrLmJoTARBl6ntBz9ixGD5ypzcWYzRjn4JHcXEGSJ3zZK2gw0 P3q1+zl7y+LNpZSQAb4PerPbgoqTMBt/kg7P3cPIHAv5bKrf0pZI3hDtp93b4Q1E T01QspVGtBuPAql1/4zbDX6eol8KhxAlWqwrrXMYa6CtUbkXKQk4t0XVT57mG9+m zgy+1pt4tYFLZv65xtiWu3t9/CvXntF/ksYc+E7GMxTkU1JFiN+NISXa+Y1WgVaT 0JcfNM4SBj+SwuwAS6XOKfCimPIXnlFih355AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU2l5MtB121GiB+W5IFPj/8b8YsVEwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5LzJsNU10QjEyMUdpQi1XNUlGUGpfOGI4WXNWRS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIb5jgwDQYJKoZIhvcNAQELBQADggEBAMnRyWCkGH/Bkwtz2vzI06lcicN7 3L08TqWhUqVhE1OsUUi16KW+YtVWA2x1yfJ64HJjZcyRy19/ozFYzy+aI7wT4R0m EjVq101P7cQro3Vcm/HiSpbxrCGlo7v/JjB/sGOZcke29Vb0xuQfa1a6VikOz9pb 8+cLuTNjtXT4i5iH7ZJNSq4tuM1yfy1EyNi68sD30b7C4jOmvt7QX4gcWJPsqWtM hfINHXXZ1lOwF84KWqS2SxHg4NcCJpYi20EdcHO9mKrh9FBshzU4qSiBjTMeZeRL snNijx+QBkKfwkoIuZGLVy+/Y1n0GbUMTBEekRUDS21zFnxv5whiizWapXA= -----END CERTIFICATE-----Generated at Tue Jun 25 02:54:23 2024 by rpki-client on console.sobornost.net