$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/2ESOZobsCLh6j8TV4snpD6IorVs.roa File: 2ESOZobsCLh6j8TV4snpD6IorVs.roa (raw, json) Hash identifier: SzaybMATM/ctuRexbKe3uBt7Ux2+zLE9g8KLKXGkrMc= Subject key identifier: D8:44:8E:66:86:EC:08:B8:7A:8F:C4:D5:E2:C9:E9:0F:A2:28:AD:5B Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 07C8 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/2ESOZobsCLh6j8TV4snpD6IorVs.roa Signing time: Tue 30 Apr 2024 02:08:48 +0000 ROA not before: Tue 30 Apr 2024 02:08:48 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 49.101.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1992 (0x7c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 30 02:08:48 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=D8448E6686EC08B87A8FC4D5E2C9E90FA228AD5B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e5:86:e0:ed:94:f0:d4:e3:40:b7:b8:54:73: 4e:97:b4:e1:12:e5:49:28:1b:ff:16:0f:67:0b:07: ce:46:aa:61:5a:3d:ea:dd:3c:0c:66:cc:b5:5a:fb: b4:68:21:64:cb:16:dc:41:29:fa:c3:4a:43:53:7a: 0e:53:09:f3:a0:3a:d7:84:15:c2:fe:4a:6b:61:4f: 8f:de:ab:00:8d:f0:5a:13:c4:7f:b7:a2:d5:35:88: 45:64:78:6a:c6:6f:af:21:52:7f:27:e5:2d:f9:29: 3c:e3:ac:e5:46:b4:b8:f6:5f:ab:54:c1:32:01:47: 90:77:d0:3e:61:03:7d:42:c2:73:a9:68:10:03:8b: 93:90:31:ac:17:69:38:d3:a4:1b:30:73:d9:40:6c: 88:91:64:04:fd:b2:ac:96:2c:87:50:2c:0c:ec:77: 14:9e:77:0a:2a:80:96:b0:d0:9a:c1:a2:04:5f:2f: d0:ae:a9:33:e9:1f:b9:78:bb:77:39:46:86:7e:5a: f2:b2:fc:10:29:08:e3:34:3a:d6:75:24:20:ba:14: 7e:df:38:0d:f6:eb:b7:c0:f8:c7:e3:5a:3e:f1:7b: 23:2d:c8:ec:e5:58:fa:87:a6:c8:b6:c6:95:e5:30: a2:e7:7b:a8:1d:e9:43:de:1a:aa:db:3c:ea:29:65: 4b:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:44:8E:66:86:EC:08:B8:7A:8F:C4:D5:E2:C9:E9:0F:A2:28:AD:5B X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/2ESOZobsCLh6j8TV4snpD6IorVs.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.101.128.0/17 Signature Algorithm: sha256WithRSAEncryption 1b:de:70:a8:4d:f4:fe:0e:62:59:21:7c:12:76:8b:cb:6a:7f: 2e:91:a4:ad:a6:33:4c:2a:fa:10:c7:24:da:e0:f6:a3:23:c0: ed:0c:7e:03:10:b5:39:81:8d:10:75:f0:2a:b1:98:2b:6a:8c: a6:94:1d:0e:96:c3:52:2a:8d:62:b0:13:ba:60:f3:0e:27:4b: 30:57:8e:4d:b6:f2:ca:7b:8c:30:df:99:e9:72:fc:42:78:cc: f6:c5:9d:1b:b5:8a:09:35:f5:ee:3e:a2:72:14:fa:68:73:41: 59:d2:81:81:dc:82:75:9b:3f:6e:a3:1b:35:c7:a7:88:4a:28: a0:1b:21:f3:db:1b:94:77:c1:b7:63:b8:a8:a0:c0:0f:1c:94: a6:f2:ef:6e:d0:3a:31:83:81:75:f2:c0:ce:ad:d7:52:fe:a2: a2:20:b1:e7:92:79:7c:1c:8b:52:57:12:79:f7:ea:4c:57:e8: 73:94:e2:d1:86:e9:93:da:e0:e0:9c:95:9e:28:28:81:2b:8b: ba:83:e7:e1:e0:99:1d:0b:b7:c6:94:cc:c3:37:91:17:ca:d2: 8d:80:2e:73:3a:56:eb:00:1e:db:69:f5:11:e6:98:3b:6a:9b: e1:ff:b4:ae:44:60:12:68:9e:55:2e:e8:0e:82:88:90:2d:43: f0:70:a3:b3 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICB8gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw MjA4NDhaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEQ4NDQ4RTY2ODZFQzA4 Qjg3QThGQzRENUUyQzlFOTBGQTIyOEFENUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCm5Ybg7ZTw1ONAt7hUc06XtOES5UkoG/8WD2cLB85GqmFaPerd PAxmzLVa+7RoIWTLFtxBKfrDSkNTeg5TCfOgOteEFcL+SmthT4/eqwCN8FoTxH+3 otU1iEVkeGrGb68hUn8n5S35KTzjrOVGtLj2X6tUwTIBR5B30D5hA31CwnOpaBAD i5OQMawXaTjTpBswc9lAbIiRZAT9sqyWLIdQLAzsdxSedwoqgJaw0JrBogRfL9Cu qTPpH7l4u3c5RoZ+WvKy/BApCOM0OtZ1JCC6FH7fOA3267fA+MfjWj7xeyMtyOzl WPqHpsi2xpXlMKLne6gd6UPeGqrbPOopZUubAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU2ESOZobsCLh6j8TV4snpD6IorVswHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5LzJFU09ab2JzQ0xoNmo4VFY0c25wRDZJb3JWcy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAcxZYAwDQYJKoZIhvcNAQELBQADggEBABvecKhN9P4OYlkhfBJ2i8tqfy6R pK2mM0wq+hDHJNrg9qMjwO0MfgMQtTmBjRB18CqxmCtqjKaUHQ6Ww1IqjWKwE7pg 8w4nSzBXjk228sp7jDDfmely/EJ4zPbFnRu1igk19e4+onIU+mhzQVnSgYHcgnWb P26jGzXHp4hKKKAbIfPbG5R3wbdjuKigwA8clKby727QOjGDgXXywM6t11L+oqIg seeSeXwci1JXEnn36kxX6HOU4tGG6ZPa4OCclZ4oKIEri7qD5+HgmR0Lt8aUzMM3 kRfK0o2ALnM6VusAHttp9RHmmDtqm+H/tK5EYBJonlUu6A6CiJAtQ/Bwo7M= -----END CERTIFICATE-----Generated at Sat Jun 1 15:54:29 2024 by rpki-client on console-ams.rpki-client.org