$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/kl3YMBmQQwjANivJuMx61871lTs.roa File: kl3YMBmQQwjANivJuMx61871lTs.roa (raw, json) Hash identifier: AL3EFXuV1hBa+nIhrjfkR1p9/83cgzdtfkTApAvFjEs= Subject key identifier: 92:5D:D8:30:19:90:43:08:C0:36:2B:C9:B8:CC:7A:D7:CE:F5:95:3B Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 051A Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/kl3YMBmQQwjANivJuMx61871lTs.roa Signing time: Thu 27 Jul 2023 16:54:06 +0000 ROA not before: Thu 27 Jul 2023 16:54:06 +0000 ROA not after: Sun 14 Jul 2024 01:30:03 +0000 asID: 9605 IP address blocks: 1.77.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Jun 2024 06:27:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1306 (0x51a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jul 27 16:54:06 2023 GMT Not After : Jul 14 01:30:03 2024 GMT Subject: CN=925DD83019904308C0362BC9B8CC7AD7CEF5953B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:bd:01:f0:70:f6:ba:0f:89:15:4b:1f:ee:e8: 0b:90:c8:fa:dd:75:6a:44:b5:cf:a4:e4:9f:4f:e4: 9d:57:ae:5d:67:76:7f:62:24:a8:44:e3:fc:76:62: 16:36:b5:31:e6:d1:ad:30:85:81:9e:1d:a1:c5:4e: 6d:cf:26:33:f3:0e:e4:51:6c:69:16:91:61:39:ae: f2:c9:79:48:c6:c3:ae:18:8a:0a:27:63:9f:6c:ee: 38:60:a3:45:27:ea:b5:e5:26:78:68:d0:cc:5d:64: 7b:10:6b:80:95:0c:53:63:26:fd:47:0c:4c:11:ff: 09:05:7b:2e:6f:38:e1:0b:bf:83:bb:9f:9b:06:fb: dd:68:55:25:68:48:63:1a:8a:8a:4e:6a:71:f2:8b: fa:0f:44:93:42:12:3c:20:d3:5f:26:ca:54:fd:33: 18:bc:6b:b9:98:45:b8:b8:50:15:50:09:cd:8d:ff: 19:7c:ef:1c:44:ff:52:87:49:14:d6:3e:b4:6b:f8: bd:ee:94:8b:d9:0a:13:68:fc:b9:de:f1:00:7f:36: b6:16:f2:c1:09:7b:d4:9e:64:3f:c1:70:8e:ed:d6: 35:0d:53:97:74:ae:46:fb:1f:a9:8b:41:49:40:6e: 99:9b:51:55:c7:79:ea:8a:21:fa:1e:96:ef:d9:65: fe:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:5D:D8:30:19:90:43:08:C0:36:2B:C9:B8:CC:7A:D7:CE:F5:95:3B X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/kl3YMBmQQwjANivJuMx61871lTs.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.77.128.0/17 Signature Algorithm: sha256WithRSAEncryption 52:3f:ae:61:95:f2:52:fa:c3:e8:be:59:90:bc:ab:9a:35:15: 98:e5:2f:7a:fd:74:5d:86:f6:81:ea:e6:69:4a:e6:15:da:73: e8:34:48:2a:6f:16:72:c5:c7:4c:3e:f3:a3:ef:d2:1d:6d:01: 89:49:f4:cd:88:24:70:04:76:02:6e:d7:1a:5b:34:d3:f7:4f: c0:8c:c0:7c:29:7a:0a:2b:6e:74:ef:43:9c:c1:dc:37:3f:00: 4e:93:f0:75:e9:a2:78:26:31:e8:44:1a:5d:e8:9e:07:50:75: 50:c6:26:95:fd:81:5f:e3:ce:1f:d7:62:9d:ab:74:30:29:f4: 4e:01:ff:d4:04:92:62:8c:cb:80:73:ed:73:5e:97:63:6e:29: 0d:99:e0:80:63:90:11:f1:d7:3b:6d:ed:c9:3b:c5:97:19:bf: 12:87:aa:35:48:00:f4:32:1d:4f:0c:37:50:e4:a6:86:62:e9: b4:67:e2:fd:c2:03:d9:93:3d:37:4a:fe:2b:5e:3f:5a:3f:f3: b8:19:e9:33:5d:d3:60:81:09:b1:43:20:2d:f8:1d:b0:8c:6e: 55:d9:ad:f9:6e:83:81:55:e4:10:1c:a7:89:bb:d9:b6:00:c6: ff:ef:aa:3f:fa:76:76:31:d2:e6:13:fe:e8:85:03:37:f8:24: 44:b6:33:a3 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBRowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA3Mjcx NjU0MDZaFw0yNDA3MTQwMTMwMDNaMDMxMTAvBgNVBAMTKDkyNUREODMwMTk5MDQz MDhDMDM2MkJDOUI4Q0M3QUQ3Q0VGNTk1M0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDavQHwcPa6D4kVSx/u6AuQyPrddWpEtc+k5J9P5J1Xrl1ndn9i JKhE4/x2YhY2tTHm0a0whYGeHaHFTm3PJjPzDuRRbGkWkWE5rvLJeUjGw64Yigon Y59s7jhgo0Un6rXlJnho0MxdZHsQa4CVDFNjJv1HDEwR/wkFey5vOOELv4O7n5sG +91oVSVoSGMaiopOanHyi/oPRJNCEjwg018mylT9Mxi8a7mYRbi4UBVQCc2N/xl8 7xxE/1KHSRTWPrRr+L3ulIvZChNo/Lne8QB/NrYW8sEJe9SeZD/BcI7t1jUNU5d0 rkb7H6mLQUlAbpmbUVXHeeqKIfoelu/ZZf7tAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUkl3YMBmQQwjANivJuMx61871lTswHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2tsM1lNQm1RUXdqQU5pdkp1TXg2MTg3MWxUcy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAcBTYAwDQYJKoZIhvcNAQELBQADggEBAFI/rmGV8lL6w+i+WZC8q5o1FZjl L3r9dF2G9oHq5mlK5hXac+g0SCpvFnLFx0w+86Pv0h1tAYlJ9M2IJHAEdgJu1xpb NNP3T8CMwHwpegorbnTvQ5zB3Dc/AE6T8HXpongmMehEGl3ongdQdVDGJpX9gV/j zh/XYp2rdDAp9E4B/9QEkmKMy4Bz7XNel2NuKQ2Z4IBjkBHx1ztt7ck7xZcZvxKH qjVIAPQyHU8MN1DkpoZi6bRn4v3CA9mTPTdK/iteP1o/87gZ6TNd02CBCbFDIC34 HbCMblXZrflug4FV5BAcp4m72bYAxv/vqj/6dnYx0uYT/uiFAzf4JES2M6M= -----END CERTIFICATE-----Generated at Tue Jun 25 02:54:26 2024 by rpki-client on console.sobornost.net