$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/cYfGlbPYJVOc5VqX8q5Ktigb4lA.roa File: cYfGlbPYJVOc5VqX8q5Ktigb4lA.roa (raw, json) Hash identifier: wZmWKCsnBIDgQuMzLhpcPJYHUX29ls6y6HsEg3Eq1GY= Subject key identifier: 71:87:C6:95:B3:D8:25:53:9C:E5:5A:97:F2:AE:4A:B6:28:1B:E2:50 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0596 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/cYfGlbPYJVOc5VqX8q5Ktigb4lA.roa Signing time: Thu 27 Jul 2023 17:00:10 +0000 ROA not before: Thu 27 Jul 2023 17:00:10 +0000 ROA not after: Sun 14 Jul 2024 01:30:03 +0000 asID: 9605 IP address blocks: 49.106.96.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Jun 2024 06:27:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1430 (0x596) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jul 27 17:00:10 2023 GMT Not After : Jul 14 01:30:03 2024 GMT Subject: CN=7187C695B3D825539CE55A97F2AE4AB6281BE250 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:19:c7:ae:a3:e1:b9:c8:c6:bf:45:e6:70:fa: 9d:e4:b8:ea:e5:b1:2f:d2:36:93:41:66:fc:29:ea: 94:a6:90:85:02:66:0d:b7:74:2a:fb:42:21:47:10: c1:50:d9:c5:60:22:d5:6a:6d:db:c2:14:d8:53:0e: 09:97:b0:3d:b8:6d:9d:09:d7:34:0a:9b:6f:81:dc: bf:6f:92:b9:24:68:25:23:8c:48:62:c8:33:60:6c: c4:c8:98:cb:89:83:f3:c1:c4:bb:8a:26:80:37:3f: d2:57:e6:a7:09:bc:30:b2:56:0e:04:f3:c0:f2:ac: 1a:28:2d:c4:e0:49:fe:74:3f:8a:f0:06:92:37:da: 90:09:08:da:20:ea:fa:12:1b:f3:3e:d1:c2:d5:04: 9f:99:25:fa:26:46:77:94:2d:52:53:6d:90:69:ca: db:4e:55:37:74:4f:64:f6:f6:a7:27:01:fa:69:5a: 15:c9:a2:6b:06:96:90:1f:fa:22:8d:27:c3:09:c8: 07:a9:85:c3:94:6c:00:73:de:1a:96:50:f6:20:34: ad:1d:fb:27:d4:8f:8c:a7:92:67:73:c5:da:fd:43: 8a:8c:08:40:13:7c:83:2d:48:8f:a0:99:0d:b1:6a: e0:97:23:95:3c:da:1c:63:ff:13:a2:d7:de:31:e7: 0d:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:87:C6:95:B3:D8:25:53:9C:E5:5A:97:F2:AE:4A:B6:28:1B:E2:50 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/cYfGlbPYJVOc5VqX8q5Ktigb4lA.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.106.96.0/23 Signature Algorithm: sha256WithRSAEncryption 64:ad:c8:88:66:aa:5d:9d:57:de:1d:e8:79:60:19:c4:f6:a7: 41:48:f3:42:b2:44:5d:8b:d2:7f:18:ac:52:88:ce:58:45:0a: dc:da:b5:00:7f:0f:5d:c7:93:1e:b6:4c:c2:52:16:86:be:42: 23:50:42:62:ee:4f:34:50:64:43:27:1f:4c:7a:1e:7c:4f:80: ec:6f:57:27:d0:14:0f:87:6b:8d:66:17:5a:56:17:7b:98:f8: 17:b4:d3:95:ed:fa:a9:9d:a2:8c:11:30:cf:41:77:7e:e1:f6: f0:da:da:45:cc:7f:03:38:bf:3d:3e:22:28:3c:b0:ac:91:b8: 1f:50:de:21:46:82:65:51:cd:f1:02:ca:74:06:97:d9:4a:2a: dc:48:34:10:25:90:b7:fe:b3:39:8f:f8:b6:f1:aa:ad:3a:f3: 15:dc:db:f4:5d:eb:44:34:2e:e1:ba:c4:69:de:54:32:e0:67: 55:3b:78:28:cd:31:98:8c:05:08:9e:2e:da:9c:27:bd:a0:e0: d0:5a:11:b4:aa:d5:bd:27:c0:c9:eb:13:f8:b8:e0:b3:4b:ca: c2:d1:e3:f1:84:e9:03:09:cd:15:2a:56:d6:62:64:2e:87:81: 99:b9:4a:bf:0e:ed:50:44:8c:f7:db:78:aa:e6:6f:69:95:6b: 67:0f:0a:18 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBZYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA3Mjcx NzAwMTBaFw0yNDA3MTQwMTMwMDNaMDMxMTAvBgNVBAMTKDcxODdDNjk1QjNEODI1 NTM5Q0U1NUE5N0YyQUU0QUI2MjgxQkUyNTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDKGceuo+G5yMa/ReZw+p3kuOrlsS/SNpNBZvwp6pSmkIUCZg23 dCr7QiFHEMFQ2cVgItVqbdvCFNhTDgmXsD24bZ0J1zQKm2+B3L9vkrkkaCUjjEhi yDNgbMTImMuJg/PBxLuKJoA3P9JX5qcJvDCyVg4E88DyrBooLcTgSf50P4rwBpI3 2pAJCNog6voSG/M+0cLVBJ+ZJfomRneULVJTbZBpyttOVTd0T2T29qcnAfppWhXJ omsGlpAf+iKNJ8MJyAephcOUbABz3hqWUPYgNK0d+yfUj4ynkmdzxdr9Q4qMCEAT fIMtSI+gmQ2xauCXI5U82hxj/xOi194x5w3NAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUcYfGlbPYJVOc5VqX8q5Ktigb4lAwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2NZZkdsYlBZSlZPYzVWcVg4cTVLdGlnYjRsQS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExamAwDQYJKoZIhvcNAQELBQADggEBAGStyIhmql2dV94d6HlgGcT2p0FI 80KyRF2L0n8YrFKIzlhFCtzatQB/D13Hkx62TMJSFoa+QiNQQmLuTzRQZEMnH0x6 HnxPgOxvVyfQFA+Ha41mF1pWF3uY+Be005Xt+qmdoowRMM9Bd37h9vDa2kXMfwM4 vz0+Iig8sKyRuB9Q3iFGgmVRzfECynQGl9lKKtxINBAlkLf+szmP+Lbxqq068xXc 2/Rd60Q0LuG6xGneVDLgZ1U7eCjNMZiMBQieLtqcJ72g4NBaEbSq1b0nwMnrE/i4 4LNLysLR4/GE6QMJzRUqVtZiZC6HgZm5Sr8O7VBEjPfbeKrmb2mVa2cPChg= -----END CERTIFICATE-----Generated at Tue Jun 25 02:54:25 2024 by rpki-client on console.sobornost.net