$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/2NlLSnZpYmxrU7uR2TIFryeNmD8.roa File: 2NlLSnZpYmxrU7uR2TIFryeNmD8.roa (raw, json) Hash identifier: zfHHv94aLgU83JGfTppZBzns3uyxM7DRQKn6beqKkjk= Subject key identifier: D8:D9:4B:4A:76:69:62:6C:6B:53:BB:91:D9:32:05:AF:27:8D:98:3F Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0411 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/2NlLSnZpYmxrU7uR2TIFryeNmD8.roa Signing time: Tue 06 Jun 2023 16:05:55 +0000 ROA not before: Tue 06 Jun 2023 16:05:55 +0000 ROA not after: Tue 14 May 2024 01:30:02 +0000 asID: 9605 IP address blocks: 49.104.4.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 May 2024 13:36:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1041 (0x411) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 6 16:05:55 2023 GMT Not After : May 14 01:30:02 2024 GMT Subject: CN=D8D94B4A7669626C6B53BB91D93205AF278D983F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b7:ae:48:c7:6b:2a:29:57:6a:37:b2:5c:a9: eb:3a:09:f5:a4:dd:10:32:2c:ab:2b:64:40:ad:4f: e5:13:dd:a8:88:12:82:15:b0:9e:79:63:43:52:f5: e8:e0:7d:56:29:5e:4a:c9:d8:0e:5c:31:f3:0a:a8: 5a:ed:a7:bc:d1:90:3f:8a:f8:f3:18:fb:d5:07:91: ab:47:37:00:86:22:08:67:30:87:42:88:54:62:99: e3:fb:22:58:4a:ff:0d:75:d7:25:33:b3:92:6d:78: 6d:ad:14:f3:1b:81:48:b1:8d:b4:a8:fd:68:84:41: 28:55:49:a5:a3:5f:63:75:f7:a5:73:bd:f8:cb:aa: 8a:4a:fa:29:1d:72:61:a5:ec:3f:01:10:f9:c4:3b: b3:27:aa:e5:29:5a:f8:fe:e3:41:ff:00:34:fc:54: 4b:c7:70:69:76:18:b9:e9:a3:07:a2:80:01:2d:ec: 38:9c:a9:d5:25:c4:d4:e3:ea:57:ff:99:00:b0:58: 0b:f4:66:38:f2:3a:83:8b:72:5c:39:cf:0f:8b:1b: ac:5c:e0:70:5e:26:e6:40:81:03:d0:b3:ec:24:9d: a1:33:4c:60:7b:f7:10:0e:43:89:29:e8:2e:7a:9c: 51:52:fc:00:e4:7c:74:48:6c:ab:24:cb:65:4b:8d: 45:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:D9:4B:4A:76:69:62:6C:6B:53:BB:91:D9:32:05:AF:27:8D:98:3F X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/2NlLSnZpYmxrU7uR2TIFryeNmD8.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.104.4.0/23 Signature Algorithm: sha256WithRSAEncryption 56:7f:24:37:17:47:4a:73:ba:a5:6c:58:a1:3d:0d:9d:49:bc: ae:6b:f1:8e:df:f0:fb:28:6a:46:2b:1a:ea:d7:45:b6:10:1d: d3:f8:04:72:96:d4:60:7f:b2:e9:fe:5a:00:c0:34:fe:80:26: cc:34:18:3a:c9:e3:07:74:29:4c:db:a7:e1:09:6b:26:34:07: 96:d1:3c:45:42:96:49:5f:de:ca:47:16:be:ee:7e:3e:fc:c8: cd:22:81:61:ec:47:f0:a4:9c:51:02:be:64:12:48:6e:2b:64: fd:74:8e:bb:ad:4c:05:26:a7:0c:b6:00:3f:aa:3c:e3:a8:f0: be:13:28:6e:39:bd:0e:3e:86:11:df:22:98:97:f5:11:11:f3: 33:74:9b:65:ce:98:03:53:c8:6f:90:85:ca:15:c8:76:bd:8d: 40:f7:79:06:71:75:13:19:45:17:e3:e5:d2:ab:cf:bb:c8:79: 6a:12:fe:17:4b:9b:dc:68:4c:bd:33:46:fe:29:87:54:3a:6a: 98:83:3d:02:e6:9b:7d:b9:a4:96:74:b4:8c:3b:1e:e4:7d:84: 26:ab:46:2f:f4:ff:2b:d7:3d:d7:7b:87:31:33:63:04:56:1a: fb:7b:9f:f1:99:51:53:73:bc:1f:70:8f:5e:ea:c6:b4:40:f0: 9a:7d:08:bc -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBBEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA2MDYx NjA1NTVaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKEQ4RDk0QjRBNzY2OTYy NkM2QjUzQkI5MUQ5MzIwNUFGMjc4RDk4M0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCqt65Ix2sqKVdqN7Jcqes6CfWk3RAyLKsrZECtT+UT3aiIEoIV sJ55Y0NS9ejgfVYpXkrJ2A5cMfMKqFrtp7zRkD+K+PMY+9UHkatHNwCGIghnMIdC iFRimeP7IlhK/w111yUzs5JteG2tFPMbgUixjbSo/WiEQShVSaWjX2N196VzvfjL qopK+ikdcmGl7D8BEPnEO7MnquUpWvj+40H/ADT8VEvHcGl2GLnpoweigAEt7Dic qdUlxNTj6lf/mQCwWAv0ZjjyOoOLclw5zw+LG6xc4HBeJuZAgQPQs+wknaEzTGB7 9xAOQ4kp6C56nFFS/ADkfHRIbKsky2VLjUUlAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU2NlLSnZpYmxrU7uR2TIFryeNmD8wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5LzJObExTblpwWW14clU3dVIyVElGcnllTm1EOC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExaAQwDQYJKoZIhvcNAQELBQADggEBAFZ/JDcXR0pzuqVsWKE9DZ1JvK5r 8Y7f8PsoakYrGurXRbYQHdP4BHKW1GB/sun+WgDANP6AJsw0GDrJ4wd0KUzbp+EJ ayY0B5bRPEVClklf3spHFr7ufj78yM0igWHsR/CknFECvmQSSG4rZP10jrutTAUm pwy2AD+qPOOo8L4TKG45vQ4+hhHfIpiX9RER8zN0m2XOmANTyG+QhcoVyHa9jUD3 eQZxdRMZRRfj5dKrz7vIeWoS/hdLm9xoTL0zRv4ph1Q6apiDPQLmm325pJZ0tIw7 HuR9hCarRi/0/yvXPdd7hzEzYwRWGvt7n/GZUVNzvB9wj17qxrRA8Jp9CLw= -----END CERTIFICATE-----Generated at Sat Apr 27 10:15:55 2024 by rpki-client on console-ams.rpki-client.org