$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/-8XNKprG28d9P4g9wtV15D45q9Y.roa File: -8XNKprG28d9P4g9wtV15D45q9Y.roa (raw, json) Hash identifier: 041vQk21hTN8WSvLYXz+9WWSV0XWNKaQ4nBxVlYrci4= Subject key identifier: FB:C5:CD:2A:9A:C6:DB:C7:7D:3F:88:3D:C2:D5:75:E4:3E:39:AB:D6 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 07A1 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-8XNKprG28d9P4g9wtV15D45q9Y.roa Signing time: Tue 30 Apr 2024 02:06:29 +0000 ROA not before: Tue 30 Apr 2024 02:06:29 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 49.98.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1953 (0x7a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 30 02:06:29 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=FBC5CD2A9AC6DBC77D3F883DC2D575E43E39ABD6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:88:b3:7a:63:2f:a4:b6:c1:3c:ce:44:5c:a2: 75:a6:d9:91:c1:d9:86:52:57:97:63:ee:eb:d0:4a: 4f:2d:4f:78:ab:f1:5c:d8:5b:88:c9:ef:26:de:49: 91:a3:9c:6b:f3:ed:89:1c:59:c9:97:85:27:3e:7a: fe:35:c6:8f:60:07:51:93:2c:d5:9b:c1:fd:b6:44: ec:94:af:b3:6f:9d:80:c6:13:22:ac:70:87:23:49: 3f:cc:e5:4f:8b:50:69:41:1c:85:84:35:c3:1e:06: c3:f2:a2:58:ce:3b:b7:3d:01:f4:6b:e8:45:97:c1: e9:24:96:4a:7f:98:c2:a8:cf:f2:b5:fe:4d:ab:b8: fd:96:f6:a5:96:61:da:e2:68:b0:52:5a:aa:51:2e: 68:91:1e:46:e0:10:17:a9:3d:35:b5:76:66:e0:58: 18:68:de:ee:3c:a9:8d:61:57:c8:f0:40:99:19:4a: aa:b4:18:3b:a8:5f:1e:c4:9f:37:bc:e2:a0:56:44: 70:9f:a5:6e:10:95:72:50:a9:26:e8:a0:3d:32:84: 3b:cc:3b:e6:e4:eb:a0:08:0b:3b:bd:6a:38:7e:6b: cc:33:e7:7d:43:e4:cd:67:85:2f:af:17:43:b8:03: 11:d1:90:4c:8a:5a:f8:35:d8:ea:24:1c:5b:fd:db: 7d:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:C5:CD:2A:9A:C6:DB:C7:7D:3F:88:3D:C2:D5:75:E4:3E:39:AB:D6 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-8XNKprG28d9P4g9wtV15D45q9Y.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.98.8.0/21 Signature Algorithm: sha256WithRSAEncryption 80:c7:4b:15:32:ea:75:66:8f:4e:b1:60:1b:73:34:ea:a4:4e: 50:fe:b7:24:ee:e4:3b:77:02:e8:7f:e0:31:f8:b1:6a:a5:3a: c3:3e:53:dd:13:38:fe:13:1f:77:89:0b:6c:e8:70:2a:a1:09: fe:d0:9e:52:10:45:f8:46:23:5d:5b:d5:f4:87:dd:de:4b:70: fe:95:a3:4f:d6:bf:c5:d9:28:ea:f1:5f:ea:3d:59:e6:13:ee: fa:6e:76:02:50:9d:be:4d:a3:86:6a:f9:94:96:bb:45:7a:59: a8:be:4b:9f:9d:e3:43:53:4b:d1:5c:ce:ee:b0:77:36:4c:b4: c1:72:58:69:b8:17:d3:fd:22:17:d4:39:65:c8:96:02:3e:21: 82:31:a7:6e:0b:b0:95:9e:b3:76:3a:12:4c:74:ac:4a:f4:aa: 19:2e:80:da:51:88:63:d1:81:52:9c:be:4d:2f:92:c1:d3:b0: 70:8a:d7:29:2a:df:e4:46:8d:d4:f6:62:0c:c4:4c:42:43:10: 10:f9:cf:33:52:84:a1:f6:24:76:05:b1:ef:86:44:ba:09:79: 3e:35:bf:1e:a2:d1:92:81:43:0f:5a:21:c6:67:5d:ed:52:bd: 6d:90:7a:90:69:40:be:47:1c:56:0a:6f:23:0d:eb:91:3e:8e: d8:73:3a:e6 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICB6EwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw MjA2MjlaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEZCQzVDRDJBOUFDNkRC Qzc3RDNGODgzREMyRDU3NUU0M0UzOUFCRDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDFiLN6Yy+ktsE8zkRconWm2ZHB2YZSV5dj7uvQSk8tT3ir8VzY W4jJ7ybeSZGjnGvz7YkcWcmXhSc+ev41xo9gB1GTLNWbwf22ROyUr7NvnYDGEyKs cIcjST/M5U+LUGlBHIWENcMeBsPyoljOO7c9AfRr6EWXwekklkp/mMKoz/K1/k2r uP2W9qWWYdriaLBSWqpRLmiRHkbgEBepPTW1dmbgWBho3u48qY1hV8jwQJkZSqq0 GDuoXx7Enze84qBWRHCfpW4QlXJQqSbooD0yhDvMO+bk66AICzu9ajh+a8wz531D 5M1nhS+vF0O4AxHRkEyKWvg12OokHFv9233FAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU+8XNKprG28d9P4g9wtV15D45q9YwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5Ly04WE5LcHJHMjhkOVA0Zzl3dFYxNUQ0NXE5WS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMxYggwDQYJKoZIhvcNAQELBQADggEBAIDHSxUy6nVmj06xYBtzNOqkTlD+ tyTu5Dt3Auh/4DH4sWqlOsM+U90TOP4TH3eJC2zocCqhCf7QnlIQRfhGI11b1fSH 3d5LcP6Vo0/Wv8XZKOrxX+o9WeYT7vpudgJQnb5No4Zq+ZSWu0V6Wai+S5+d40NT S9Fczu6wdzZMtMFyWGm4F9P9IhfUOWXIlgI+IYIxp24LsJWes3Y6Ekx0rEr0qhku gNpRiGPRgVKcvk0vksHTsHCK1ykq3+RGjdT2YgzETEJDEBD5zzNShKH2JHYFse+G RLoJeT41vx6i0ZKBQw9aIcZnXe1SvW2QepBpQL5HHFYKbyMN65E+jthzOuY= -----END CERTIFICATE-----Generated at Sat Jun 1 15:54:28 2024 by rpki-client on console-ams.rpki-client.org