$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/3NXuwQm4FplQjbh6Ufu-p2G_djs.roa File: 3NXuwQm4FplQjbh6Ufu-p2G_djs.roa (raw, json) Hash identifier: KrwZTqBCTg9zhsoGF1gRf+CyBJ7TBmW4dbuPveVMxIQ= Subject key identifier: DC:D5:EE:C1:09:B8:16:99:50:8D:B8:7A:51:FB:BE:A7:61:BF:76:3B Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 07E1 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/3NXuwQm4FplQjbh6Ufu-p2G_djs.roa Signing time: Tue 30 Apr 2024 02:10:30 +0000 ROA not before: Tue 30 Apr 2024 02:10:30 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 49.102.132.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 23 Jun 2024 11:53:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2017 (0x7e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 30 02:10:30 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=DCD5EEC109B81699508DB87A51FBBEA761BF763B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:11:a6:59:58:f2:f0:a5:9d:b9:60:6f:95:22: d8:72:24:db:8d:f5:7e:74:ca:75:a2:ae:b9:04:5f: c2:5c:bb:be:7b:d7:b8:a2:84:85:51:4d:71:06:ab: bf:01:ca:f4:81:d4:64:29:ea:2f:63:1b:df:c6:b7: 82:7d:30:a2:47:16:87:16:4d:e2:e0:8d:14:90:c1: 88:8c:6c:46:3f:7b:20:32:12:76:97:2f:14:0b:44: 21:ce:dd:68:82:14:5a:20:79:d3:33:37:ff:69:36: b5:68:a0:7d:8c:44:22:84:d3:a6:8f:85:e1:6c:db: 78:74:a0:46:79:01:26:87:98:3c:88:47:f9:29:fb: 7b:97:ce:c8:0d:dc:2f:06:7e:91:9f:f4:9a:fd:d6: 62:ca:42:ef:af:a3:a9:a9:e3:27:c3:41:0a:4d:e1: 36:7f:1f:f5:29:19:b6:eb:d6:f7:6b:20:43:92:7f: 99:c7:78:b8:0f:bc:ae:25:e7:3f:1b:c6:08:04:18: b7:8c:44:99:99:01:b0:4c:bf:27:10:64:16:61:d8: 84:d1:8e:a6:e2:13:6c:c9:20:20:dc:52:4d:cc:65: db:85:29:4b:3d:17:b3:a9:5b:cc:65:a6:26:0f:e3: f7:3a:3a:0b:69:66:71:39:6c:fd:37:f9:99:fd:e2: 09:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:D5:EE:C1:09:B8:16:99:50:8D:B8:7A:51:FB:BE:A7:61:BF:76:3B X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/3NXuwQm4FplQjbh6Ufu-p2G_djs.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.102.132.0/23 Signature Algorithm: sha256WithRSAEncryption 8c:df:cc:ec:f6:ca:4c:3f:7e:be:d5:3b:86:f3:7f:c0:a2:34: 1b:83:9a:12:65:fe:d0:63:e9:d6:eb:f4:4a:47:43:18:79:9e: 43:2a:ee:bc:20:f4:89:a2:43:c2:29:22:14:46:6a:23:6f:94: 8b:1e:c5:a0:87:2d:d1:7a:bd:57:57:33:b2:e8:e1:78:cf:3f: 6e:22:ef:87:f6:fe:14:c0:03:44:8f:22:f0:03:76:89:cf:b6: 48:df:66:40:61:79:00:19:99:83:10:b3:ae:b8:b5:1a:af:90: 16:90:cf:78:23:61:09:5f:3b:93:99:b4:b7:92:f2:b4:98:cc: 97:dd:ad:f2:f8:5b:2c:b3:ed:27:68:26:2c:67:1c:42:c3:fd: b8:9e:88:f4:f6:99:8e:98:68:40:0d:41:56:04:ff:72:be:c1: 92:34:6c:fb:7a:4d:dd:03:b0:3d:18:c6:a2:5c:0f:43:d1:02: 9d:28:2d:09:0f:a3:ed:e8:b8:f5:45:1c:ea:0a:31:be:dd:71: b9:52:16:64:f9:cd:a6:e8:60:bd:47:1c:65:bd:2d:a8:22:44: 90:1e:28:79:b3:6e:52:2e:de:64:5a:4f:e7:81:07:40:85:39: 04:4d:6f:00:d0:0a:e2:2d:22:41:e6:4e:9e:e3:b6:bb:86:e2: db:fa:df:f0 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICB+EwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw MjEwMzBaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKERDRDVFRUMxMDlCODE2 OTk1MDhEQjg3QTUxRkJCRUE3NjFCRjc2M0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCtEaZZWPLwpZ25YG+VIthyJNuN9X50ynWirrkEX8Jcu75717ii hIVRTXEGq78ByvSB1GQp6i9jG9/Gt4J9MKJHFocWTeLgjRSQwYiMbEY/eyAyEnaX LxQLRCHO3WiCFFogedMzN/9pNrVooH2MRCKE06aPheFs23h0oEZ5ASaHmDyIR/kp +3uXzsgN3C8GfpGf9Jr91mLKQu+vo6mp4yfDQQpN4TZ/H/UpGbbr1vdrIEOSf5nH eLgPvK4l5z8bxggEGLeMRJmZAbBMvycQZBZh2ITRjqbiE2zJICDcUk3MZduFKUs9 F7OpW8xlpiYP4/c6OgtpZnE5bP03+Zn94glhAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU3NXuwQm4FplQjbh6Ufu+p2G/djswHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5LzNOWHV3UW00RnBsUWpiaDZVZnUtcDJHX2Rqcy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExZoQwDQYJKoZIhvcNAQELBQADggEBAIzfzOz2ykw/fr7VO4bzf8CiNBuD mhJl/tBj6dbr9EpHQxh5nkMq7rwg9ImiQ8IpIhRGaiNvlIsexaCHLdF6vVdXM7Lo 4XjPP24i74f2/hTAA0SPIvADdonPtkjfZkBheQAZmYMQs664tRqvkBaQz3gjYQlf O5OZtLeS8rSYzJfdrfL4Wyyz7SdoJixnHELD/bieiPT2mY6YaEANQVYE/3K+wZI0 bPt6Td0DsD0YxqJcD0PRAp0oLQkPo+3ouPVFHOoKMb7dcblSFmT5zaboYL1HHGW9 LagiRJAeKHmzblIu3mRaT+eBB0CFOQRNbwDQCuItIkHmTp7jtruG4tv63/A= -----END CERTIFICATE-----Generated at Sun Jun 16 12:57:20 2024 by rpki-client on console-fra.rpki-client.org