$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Mtx1wB3Nv9iLDtOpfcYxo-kZnuM.roa File: Mtx1wB3Nv9iLDtOpfcYxo-kZnuM.roa (raw, json) Hash identifier: /g/VB8hOwae8/IX5mbal9N+OXEht+x+1Vn/k/TRSCUg= Subject key identifier: 32:DC:75:C0:1D:CD:BF:D8:8B:0E:D3:A9:7D:C6:31:A3:E9:19:9E:E3 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 05AD Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Mtx1wB3Nv9iLDtOpfcYxo-kZnuM.roa Signing time: Thu 27 Jul 2023 17:00:22 +0000 ROA not before: Thu 27 Jul 2023 17:00:22 +0000 ROA not after: Sun 14 Jul 2024 01:30:03 +0000 asID: 9605 IP address blocks: 110.158.188.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Jul 2024 00:06:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1453 (0x5ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jul 27 17:00:22 2023 GMT Not After : Jul 14 01:30:03 2024 GMT Subject: CN=32DC75C01DCDBFD88B0ED3A97DC631A3E9199EE3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:85:b3:de:82:ae:d0:55:a2:fe:de:18:25:cb: b0:9f:ce:99:30:06:3f:0e:03:de:ee:a6:61:d9:e7: a6:77:eb:7d:00:11:eb:a7:74:70:5c:ab:cb:30:35: cc:83:79:e0:1c:7e:e3:3a:fe:ac:38:c7:1f:05:49: 29:03:ce:7f:82:bb:0d:94:79:5b:f7:2b:ec:9b:ac: 2c:25:58:e8:4f:72:7d:55:ae:c9:fa:2f:d9:27:03: 1d:bd:10:c5:a0:90:8f:13:a4:08:b7:44:02:55:22: 9c:45:02:5c:37:bf:5a:4f:aa:0e:d4:d5:dd:b2:00: 66:b3:64:4f:97:68:cf:57:36:f2:7f:b7:aa:fc:65: 6b:dd:40:7b:fb:4e:97:8e:99:67:39:b8:6e:2b:71: 7a:9a:a3:42:e3:37:6b:da:9f:e3:5e:1c:05:45:bb: 3f:be:c8:5f:c4:0e:67:90:3a:68:f7:1e:76:0b:91: a5:4e:2b:29:d7:ae:7e:d5:4a:c9:24:4d:d1:37:19: c7:49:75:b3:23:8b:92:5e:88:ee:5a:11:24:4a:76: 9f:9b:f0:2f:89:87:b6:b9:24:4e:a5:72:dc:ec:5a: 14:b9:1d:17:7e:69:c9:6c:cf:fe:36:fd:04:f4:bc: db:a1:a7:4e:a0:37:46:fe:74:8d:f4:5c:62:cf:fc: 24:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:DC:75:C0:1D:CD:BF:D8:8B:0E:D3:A9:7D:C6:31:A3:E9:19:9E:E3 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Mtx1wB3Nv9iLDtOpfcYxo-kZnuM.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 110.158.188.0/23 Signature Algorithm: sha256WithRSAEncryption a1:f4:19:a1:46:ab:a1:a9:56:98:77:da:09:f1:04:9b:d3:c0: 48:3e:22:1c:a0:f9:07:ac:b3:37:8e:73:cf:b9:76:b3:b1:79: 72:4e:f8:47:0b:c5:97:a3:74:2b:1b:51:01:1e:16:d1:d3:e2: cb:14:59:80:3e:b5:2d:f5:7b:ed:5a:b1:35:dc:ea:87:2b:4b: b4:29:34:4f:fa:95:40:d4:8a:dc:bb:68:4d:76:0c:17:dc:1d: 83:b4:ef:83:17:93:43:88:82:23:ec:53:c2:7a:2d:dd:b0:b0: c2:38:c9:74:be:65:9c:f6:c9:9d:43:ad:b3:99:e3:c1:8f:96: 51:55:82:44:99:fb:a5:71:d9:39:48:9e:c2:0f:48:88:79:0e: ef:02:91:40:af:54:0e:b4:f5:5b:60:89:6a:ea:dd:e7:c7:09: 73:c9:89:43:d1:a2:b1:ea:29:4e:cd:24:6c:ab:e6:f3:35:4e: 66:98:d9:47:99:f0:d1:67:bb:27:21:57:f2:22:f2:2d:79:e8: c8:2b:cc:d5:1a:c9:2c:e1:70:57:3d:7d:79:e8:c7:85:bd:c5: 56:9d:4b:68:e1:a2:95:9e:f2:46:fa:b8:cb:2c:85:be:f3:8b: 11:d3:b7:03:ff:74:a1:c1:05:37:88:7d:18:4b:0e:1c:24:52: ae:21:31:38 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBa0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA3Mjcx NzAwMjJaFw0yNDA3MTQwMTMwMDNaMDMxMTAvBgNVBAMTKDMyREM3NUMwMURDREJG RDg4QjBFRDNBOTdEQzYzMUEzRTkxOTlFRTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC1hbPegq7QVaL+3hgly7CfzpkwBj8OA97upmHZ56Z3630AEeun dHBcq8swNcyDeeAcfuM6/qw4xx8FSSkDzn+Cuw2UeVv3K+ybrCwlWOhPcn1Vrsn6 L9knAx29EMWgkI8TpAi3RAJVIpxFAlw3v1pPqg7U1d2yAGazZE+XaM9XNvJ/t6r8 ZWvdQHv7TpeOmWc5uG4rcXqao0LjN2van+NeHAVFuz++yF/EDmeQOmj3HnYLkaVO KynXrn7VSskkTdE3GcdJdbMji5JeiO5aESRKdp+b8C+Jh7a5JE6lctzsWhS5HRd+ aclsz/42/QT0vNuhp06gN0b+dI30XGLP/CS7AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUMtx1wB3Nv9iLDtOpfcYxo+kZnuMwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L010eDF3QjNOdjlpTER0T3BmY1l4by1rWm51TS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFunrwwDQYJKoZIhvcNAQELBQADggEBAKH0GaFGq6GpVph32gnxBJvTwEg+ Ihyg+QesszeOc8+5drOxeXJO+EcLxZejdCsbUQEeFtHT4ssUWYA+tS31e+1asTXc 6ocrS7QpNE/6lUDUity7aE12DBfcHYO074MXk0OIgiPsU8J6Ld2wsMI4yXS+ZZz2 yZ1DrbOZ48GPllFVgkSZ+6Vx2TlInsIPSIh5Du8CkUCvVA609VtgiWrq3efHCXPJ iUPRorHqKU7NJGyr5vM1TmaY2UeZ8NFnuychV/Ii8i156MgrzNUaySzhcFc9fXno x4W9xVadS2jhopWe8kb6uMsshb7zixHTtwP/dKHBBTeIfRhLDhwkUq4hMTg= -----END CERTIFICATE-----Generated at Sun Jun 30 02:54:17 2024 by rpki-client on console.sobornost.net