$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/-oQyZNyQKnPO3CgE-c3yjGMVNLw.roa File: -oQyZNyQKnPO3CgE-c3yjGMVNLw.roa (raw, json) Hash identifier: kD6Atl63CmeIBYyC47noNRK6YcEAsRd/NKveSsWFxx8= Subject key identifier: FA:84:32:64:DC:90:2A:73:CE:DC:28:04:F9:CD:F2:8C:63:15:34:BC Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 08EC Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-oQyZNyQKnPO3CgE-c3yjGMVNLw.roa Signing time: Tue 30 Apr 2024 02:26:31 +0000 ROA not before: Tue 30 Apr 2024 02:26:31 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 49.104.4.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2284 (0x8ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 30 02:26:31 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=FA843264DC902A73CEDC2804F9CDF28C631534BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:21:08:c4:cb:c6:c2:bb:60:b7:49:53:cb:fb: bb:1a:6c:aa:61:df:4f:36:72:f7:f0:15:b9:bb:c7: b9:5b:ce:48:45:f1:c7:39:84:42:0a:f4:34:71:65: ff:6b:51:c6:f9:b2:f4:0c:02:fd:60:3c:4c:51:08: cc:05:db:21:89:d7:e2:d0:bb:8a:6f:c5:59:13:24: 98:e8:f0:d1:3f:cc:e5:cf:bd:59:8f:68:e1:af:58: e3:94:cc:84:c3:c7:7c:bb:87:52:e3:9f:57:be:ef: 84:f6:e8:fe:b2:8d:07:46:d3:14:80:b7:6c:d5:54: 41:e6:b3:80:95:40:a8:b9:ca:86:41:de:86:f1:a2: e2:f9:cd:b8:b1:35:22:76:15:e2:ea:9e:79:6d:34: ed:5e:df:34:c8:78:ef:e7:e1:68:c2:fa:05:0b:21: 57:76:b3:cf:f5:f9:1d:c5:c1:6c:b9:64:16:06:26: b5:8d:96:75:3a:ab:e0:de:a6:6a:be:c5:44:a2:92: 0a:80:3b:fe:c5:b1:73:aa:7d:ea:66:43:09:32:57: a9:64:9a:da:04:53:ad:34:8f:b3:d7:e7:4f:83:0c: 8d:6c:15:99:a0:37:4f:af:8d:0c:2c:cd:1d:fb:c8: 01:03:30:94:75:32:ac:ad:62:40:6d:7a:34:86:e8: 80:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:84:32:64:DC:90:2A:73:CE:DC:28:04:F9:CD:F2:8C:63:15:34:BC X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-oQyZNyQKnPO3CgE-c3yjGMVNLw.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.104.4.0/22 Signature Algorithm: sha256WithRSAEncryption ae:59:df:d9:3e:e7:3f:e1:b0:08:1f:76:22:f2:92:53:5e:fa: 75:b3:45:66:20:9b:ba:78:95:cb:cf:9e:d8:f7:8f:61:b8:c0: 06:4d:5d:33:c8:2c:6e:43:1c:d3:71:e2:9e:64:a7:82:6e:db: 54:11:e7:c3:ff:9a:15:26:89:cd:b3:34:ce:4f:9b:2f:2b:0c: 59:84:9a:8b:80:e1:e6:f1:e5:c7:fd:fe:7b:d9:30:50:f6:3f: eb:87:49:32:b5:d0:39:c2:cd:16:93:9c:b5:62:10:9c:e8:69: e4:26:49:14:83:20:49:89:1e:99:ff:82:70:1a:9e:f9:3c:91: ed:fe:4e:f5:2e:db:3c:5c:89:9b:9b:03:06:fd:64:f8:32:5e: b5:83:5c:04:cc:63:62:8f:1f:c1:52:a4:24:ea:d4:f4:e4:b6: 4a:c9:0d:c6:95:72:85:61:cc:01:0d:65:3a:97:5f:8c:58:ea: de:ca:29:53:47:df:0d:d6:05:1f:55:8a:4d:45:95:f7:8f:df: 54:13:c6:96:1e:60:35:a4:77:6a:e7:63:b1:fc:19:ee:62:c8: f9:db:05:4a:50:f3:ea:96:63:42:f6:2f:1a:01:4c:d9:51:b2: 7a:87:af:d3:7c:b6:b0:25:42:a0:6d:fd:33:90:b5:ae:df:2f: ea:f0:43:d8 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCOwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw MjI2MzFaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEZBODQzMjY0REM5MDJB NzNDRURDMjgwNEY5Q0RGMjhDNjMxNTM0QkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDCIQjEy8bCu2C3SVPL+7sabKph3082cvfwFbm7x7lbzkhF8cc5 hEIK9DRxZf9rUcb5svQMAv1gPExRCMwF2yGJ1+LQu4pvxVkTJJjo8NE/zOXPvVmP aOGvWOOUzITDx3y7h1Ljn1e+74T26P6yjQdG0xSAt2zVVEHms4CVQKi5yoZB3obx ouL5zbixNSJ2FeLqnnltNO1e3zTIeO/n4WjC+gULIVd2s8/1+R3FwWy5ZBYGJrWN lnU6q+Depmq+xUSikgqAO/7FsXOqfepmQwkyV6lkmtoEU600j7PX50+DDI1sFZmg N0+vjQwszR37yAEDMJR1MqytYkBtejSG6IDbAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU+oQyZNyQKnPO3CgE+c3yjGMVNLwwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5Ly1vUXlaTnlRS25QTzNDZ0UtYzN5akdNVk5Mdy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIxaAQwDQYJKoZIhvcNAQELBQADggEBAK5Z39k+5z/hsAgfdiLyklNe+nWz RWYgm7p4lcvPntj3j2G4wAZNXTPILG5DHNNx4p5kp4Ju21QR58P/mhUmic2zNM5P my8rDFmEmouA4ebx5cf9/nvZMFD2P+uHSTK10DnCzRaTnLViEJzoaeQmSRSDIEmJ Hpn/gnAanvk8ke3+TvUu2zxciZubAwb9ZPgyXrWDXATMY2KPH8FSpCTq1PTktkrJ DcaVcoVhzAENZTqXX4xY6t7KKVNH3w3WBR9Vik1FlfeP31QTxpYeYDWkd2rnY7H8 Ge5iyPnbBUpQ8+qWY0L2LxoBTNlRsnqHr9N8trAlQqBt/TOQta7fL+rwQ9g= -----END CERTIFICATE-----Generated at Sat Jun 1 13:38:46 2024 by rpki-client on console-fra.rpki-client.org