$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/2O8I1fwkR5rjBCg-ZfBkfVr4b8A.roa File: 2O8I1fwkR5rjBCg-ZfBkfVr4b8A.roa (raw, json) Hash identifier: cfq209swM0Z7+Rp46FsEgf05f7IuzLdAFr4Gv6fIDrw= Subject key identifier: D8:EF:08:D5:FC:24:47:9A:E3:04:28:3E:65:F0:64:7D:5A:F8:6F:C0 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 061F Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/2O8I1fwkR5rjBCg-ZfBkfVr4b8A.roa Signing time: Thu 29 Feb 2024 01:38:35 +0000 ROA not before: Thu 29 Feb 2024 01:38:35 +0000 ROA not after: Fri 14 Feb 2025 01:30:03 +0000 asID: 9605 IP address blocks: 49.97.112.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 23 Jun 2024 14:09:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1567 (0x61f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Feb 29 01:38:35 2024 GMT Not After : Feb 14 01:30:03 2025 GMT Subject: CN=D8EF08D5FC24479AE304283E65F0647D5AF86FC0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:50:a5:fa:20:de:8f:95:6b:9d:a7:6e:28:1a: 31:d0:74:c3:43:a1:9c:48:fc:57:9a:de:6c:ae:64: 0e:b4:b9:98:11:da:33:04:14:51:21:13:47:5d:7f: 5a:b8:42:47:90:16:05:6f:1e:b0:90:8e:44:c0:4b: 5f:ab:82:3f:60:d3:4e:30:c8:19:8b:ea:8d:fe:9f: f7:1c:ad:74:58:69:45:2b:37:ad:e6:59:f9:30:98: 34:01:a3:3e:86:79:b0:fa:f5:67:a3:89:c7:19:e0: 91:bf:66:76:da:1d:b6:56:02:48:4c:e3:c6:c1:14: 54:f9:bc:af:fa:98:62:2b:80:da:11:db:40:8a:8b: 96:18:4e:a0:59:10:70:24:2d:95:26:a7:ab:de:2d: 10:8a:72:68:f3:61:f6:fb:3e:4d:d2:7b:e0:6a:ad: 11:29:f8:a8:84:ce:5d:66:fd:7f:b3:b2:29:c7:6e: 6c:30:ba:74:3a:0a:f3:0a:15:3c:e2:83:4f:1a:b4: d4:41:55:0b:fe:c5:ce:a9:03:13:9c:13:5e:a7:86: 01:e8:0f:93:94:cf:07:54:07:9f:a7:3e:b5:aa:99: 4b:f9:32:b9:99:56:db:cb:38:32:b3:0f:f8:49:28: 5d:41:c3:44:55:18:86:0a:b4:e6:9b:26:60:d8:b7: 48:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:EF:08:D5:FC:24:47:9A:E3:04:28:3E:65:F0:64:7D:5A:F8:6F:C0 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/2O8I1fwkR5rjBCg-ZfBkfVr4b8A.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.97.112.0/22 Signature Algorithm: sha256WithRSAEncryption bb:a3:e2:5b:82:0a:6c:13:b5:2e:a2:1b:01:e9:db:03:e2:1c: 2f:34:a5:a9:5f:fa:cf:89:75:5b:2f:98:4f:e2:f3:e4:21:9e: 12:68:e5:89:77:d0:5d:b6:f9:51:7c:53:fe:e1:55:41:e8:68: 93:0c:21:7d:d8:58:9c:3f:63:99:7c:92:d2:aa:a5:80:7f:4d: cf:c3:2a:66:b9:c6:aa:08:a6:d9:64:e3:cf:3c:50:02:2d:4c: 0a:a1:95:d9:aa:49:31:72:41:8a:fc:ae:b1:7b:bb:3c:56:f9: 8d:31:c3:6d:40:8d:df:f6:a0:ad:32:81:45:2f:14:8d:78:58: f8:f8:fb:97:5c:7f:8a:56:6d:59:11:52:25:38:be:37:c5:eb: dc:df:97:03:89:00:6c:a0:68:ad:b9:9b:f1:c8:f4:cc:6c:09: bc:da:33:8b:07:2d:d0:a5:24:66:16:c1:30:13:89:3e:08:e7: 65:e3:86:ca:23:88:43:e8:75:a5:8e:60:12:d6:20:33:69:ba: c8:48:19:16:91:55:dc:c9:81:e0:14:80:fb:03:fb:36:27:57: 3f:73:59:ec:6b:f3:2b:57:1b:9d:eb:ff:4b:61:e5:bc:70:e3: 95:05:d1:3e:f3:1e:04:12:96:cb:fb:3b:44:5c:28:3c:4a:f2: 58:eb:fa:73 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBh8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDAyMjkw MTM4MzVaFw0yNTAyMTQwMTMwMDNaMDMxMTAvBgNVBAMTKEQ4RUYwOEQ1RkMyNDQ3 OUFFMzA0MjgzRTY1RjA2NDdENUFGODZGQzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCnUKX6IN6PlWudp24oGjHQdMNDoZxI/Fea3myuZA60uZgR2jME FFEhE0ddf1q4QkeQFgVvHrCQjkTAS1+rgj9g004wyBmL6o3+n/ccrXRYaUUrN63m WfkwmDQBoz6GebD69WejiccZ4JG/ZnbaHbZWAkhM48bBFFT5vK/6mGIrgNoR20CK i5YYTqBZEHAkLZUmp6veLRCKcmjzYfb7Pk3Se+BqrREp+KiEzl1m/X+zsinHbmww unQ6CvMKFTzig08atNRBVQv+xc6pAxOcE16nhgHoD5OUzwdUB5+nPrWqmUv5MrmZ VtvLODKzD/hJKF1Bw0RVGIYKtOabJmDYt0g7AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU2O8I1fwkR5rjBCg+ZfBkfVr4b8AwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5LzJPOEkxZndrUjVyakJDZy1aZkJrZlZyNGI4QS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIxYXAwDQYJKoZIhvcNAQELBQADggEBALuj4luCCmwTtS6iGwHp2wPiHC80 palf+s+JdVsvmE/i8+QhnhJo5Yl30F22+VF8U/7hVUHoaJMMIX3YWJw/Y5l8ktKq pYB/Tc/DKma5xqoIptlk4888UAItTAqhldmqSTFyQYr8rrF7uzxW+Y0xw21Ajd/2 oK0ygUUvFI14WPj4+5dcf4pWbVkRUiU4vjfF69zflwOJAGygaK25m/HI9MxsCbza M4sHLdClJGYWwTATiT4I52XjhsojiEPodaWOYBLWIDNpushIGRaRVdzJgeAUgPsD +zYnVz9zWexr8ytXG53r/0th5bxw45UF0T7zHgQSlsv7O0RcKDxK8ljr+nM= -----END CERTIFICATE-----Generated at Mon Jun 17 09:40:08 2024 by rpki-client on console-fra.rpki-client.org