$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/0m8I6CVU6YXcfL9WFbVbBpMk0hY.roa File: 0m8I6CVU6YXcfL9WFbVbBpMk0hY.roa (raw, json) Hash identifier: ohwD+xSDPNrfntMzypWejo448KVue0qH1hBYzae9L0Q= Subject key identifier: D2:6F:08:E8:25:54:E9:85:DC:7C:BF:56:15:B5:5B:06:93:24:D2:16 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 05EE Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/0m8I6CVU6YXcfL9WFbVbBpMk0hY.roa Signing time: Thu 29 Feb 2024 01:35:39 +0000 ROA not before: Thu 29 Feb 2024 01:35:39 +0000 ROA not after: Fri 14 Feb 2025 01:30:03 +0000 asID: 9605 IP address blocks: 49.97.68.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1518 (0x5ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Feb 29 01:35:39 2024 GMT Not After : Feb 14 01:30:03 2025 GMT Subject: CN=D26F08E82554E985DC7CBF5615B55B069324D216 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:86:ae:b8:48:8d:c4:a1:7d:1c:81:4d:cc:a5: 18:f3:07:db:26:5a:26:76:68:7a:e9:e6:f5:ad:14: 0a:ff:98:62:c5:8d:a4:b0:79:c7:4d:55:8d:78:77: 3a:58:1d:ef:8c:2a:76:a5:68:1f:c5:90:36:15:ca: 70:31:f2:f4:af:0c:53:66:1a:b4:00:d3:0e:f9:34: f6:db:e1:f6:cb:fb:33:97:fa:b2:dc:1a:25:22:45: 58:07:57:65:04:1a:41:60:ab:b3:9c:2a:e7:b8:b4: d5:ab:2b:87:91:f6:72:06:a6:de:f8:5d:91:2f:34: c1:e9:dc:27:12:19:95:c1:09:3f:f5:d3:1a:40:12: ca:ee:19:bf:47:3b:b2:22:b8:bb:a8:9b:0f:9f:26: 71:d0:e1:4e:1c:a3:6d:96:c1:e7:83:aa:8e:ba:35: 17:20:6d:e7:76:fe:74:92:6e:9b:4e:aa:a7:6d:b4: b9:5b:8c:2f:ee:4d:6a:4f:da:05:6a:49:78:41:e1: 90:0d:1c:5c:6b:54:db:ac:bb:2c:a1:c4:0d:13:97: 88:2f:b9:c7:3a:d9:34:c5:41:4e:e3:1e:8e:53:88: bb:60:5b:59:33:47:4d:f3:e7:ee:86:8f:36:4f:49: a2:96:fb:3a:fd:85:32:62:47:5e:f6:d9:cf:0e:3f: 52:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:6F:08:E8:25:54:E9:85:DC:7C:BF:56:15:B5:5B:06:93:24:D2:16 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/0m8I6CVU6YXcfL9WFbVbBpMk0hY.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.97.68.0/22 Signature Algorithm: sha256WithRSAEncryption 6c:17:81:61:a2:de:fd:ff:8e:80:f5:90:cd:ea:5d:77:13:61: 2c:d4:be:a5:fb:6d:4f:8d:56:d8:e9:4b:e1:29:49:97:9d:5e: 1b:81:24:c0:f6:8c:0e:7a:1f:d1:d4:a4:b6:d1:21:7d:3f:d5: cd:74:c3:70:46:f8:c3:4f:07:0f:fa:12:a1:ac:55:75:4c:95: 85:85:f2:81:42:90:b0:f8:a8:45:67:8e:34:04:c7:a2:3f:b6: c3:f0:0a:59:53:15:02:25:67:07:a4:76:2f:86:8f:3a:63:c3: 2f:60:6b:3c:d1:94:09:23:0b:12:bf:92:99:38:af:7d:7d:9d: f0:8e:55:f9:b1:79:f9:1a:89:0a:98:03:2e:28:89:f2:31:be: e2:8f:7d:92:d1:d4:14:24:3f:03:ae:77:d0:76:d5:b3:77:a8: d6:84:a0:5c:b4:05:79:4b:8a:27:57:06:e5:a6:03:45:58:a5: 89:43:d8:8e:f4:6b:13:d3:b4:08:32:bf:3a:b1:56:dc:d1:32: 6b:22:a1:4c:3c:5b:47:c9:b5:41:26:ef:68:48:70:9e:6f:62: 92:bc:4e:5f:93:d7:82:20:ab:34:e2:d3:e7:6a:71:db:8c:ae: 99:60:e1:82:48:18:24:80:6e:d5:44:8a:32:54:ff:69:92:44: b7:55:2e:42 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBe4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDAyMjkw MTM1MzlaFw0yNTAyMTQwMTMwMDNaMDMxMTAvBgNVBAMTKEQyNkYwOEU4MjU1NEU5 ODVEQzdDQkY1NjE1QjU1QjA2OTMyNEQyMTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCnhq64SI3EoX0cgU3MpRjzB9smWiZ2aHrp5vWtFAr/mGLFjaSw ecdNVY14dzpYHe+MKnalaB/FkDYVynAx8vSvDFNmGrQA0w75NPbb4fbL+zOX+rLc GiUiRVgHV2UEGkFgq7OcKue4tNWrK4eR9nIGpt74XZEvNMHp3CcSGZXBCT/10xpA EsruGb9HO7IiuLuomw+fJnHQ4U4co22WweeDqo66NRcgbed2/nSSbptOqqdttLlb jC/uTWpP2gVqSXhB4ZANHFxrVNusuyyhxA0Tl4gvucc62TTFQU7jHo5TiLtgW1kz R03z5+6GjzZPSaKW+zr9hTJiR1722c8OP1LVAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU0m8I6CVU6YXcfL9WFbVbBpMk0hYwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5LzBtOEk2Q1ZVNllYY2ZMOVdGYlZiQnBNazBoWS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIxYUQwDQYJKoZIhvcNAQELBQADggEBAGwXgWGi3v3/joD1kM3qXXcTYSzU vqX7bU+NVtjpS+EpSZedXhuBJMD2jA56H9HUpLbRIX0/1c10w3BG+MNPBw/6EqGs VXVMlYWF8oFCkLD4qEVnjjQEx6I/tsPwCllTFQIlZwekdi+Gjzpjwy9gazzRlAkj CxK/kpk4r319nfCOVfmxefkaiQqYAy4oifIxvuKPfZLR1BQkPwOud9B21bN3qNaE oFy0BXlLiidXBuWmA0VYpYlD2I70axPTtAgyvzqxVtzRMmsioUw8W0fJtUEm72hI cJ5vYpK8Tl+T14IgqzTi0+dqcduMrplg4YJIGCSAbtVEijJU/2mSRLdVLkI= -----END CERTIFICATE-----Generated at Sat Jun 1 13:38:46 2024 by rpki-client on console-fra.rpki-client.org