$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/3ToU7q8PY1RCoUdckfZSAzD0yFs.roa File: 3ToU7q8PY1RCoUdckfZSAzD0yFs.roa (raw, json) Hash identifier: I8Fz/8AEzGrV2bKT22S139F7408/HqMWaHJaExcn5YE= Subject key identifier: DD:3A:14:EE:AF:0F:63:54:42:A1:47:5C:91:F6:52:03:30:F4:C8:5B Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: E7 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/3ToU7q8PY1RCoUdckfZSAzD0yFs.roa Signing time: Wed 24 May 2023 16:03:07 +0000 ROA not before: Wed 24 May 2023 16:03:07 +0000 ROA not after: Tue 14 May 2024 01:30:02 +0000 asID: 9605 IP address blocks: 49.96.60.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 May 2024 13:36:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 231 (0xe7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: May 24 16:03:07 2023 GMT Not After : May 14 01:30:02 2024 GMT Subject: CN=DD3A14EEAF0F635442A1475C91F6520330F4C85B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:1e:a8:06:a5:6b:1d:49:92:24:02:bf:4c:e5: 64:22:c4:7e:75:b6:03:86:15:3e:8b:19:31:53:28: c8:92:df:d0:10:50:ee:14:1f:54:a6:e1:0d:21:a5: 61:de:80:3b:56:9c:bc:2b:f9:ec:ae:00:37:4f:2b: b8:71:12:2a:28:f0:e0:c3:fe:fe:76:51:be:b2:4a: 09:77:fa:ac:76:12:bc:b0:64:15:16:4b:4e:17:de: bc:a9:83:06:73:98:ae:e2:7b:85:51:9f:69:0b:65: 26:15:a7:88:97:9e:2b:0b:b6:d1:6d:c6:eb:ba:bd: 0d:39:b2:16:a6:46:33:98:d8:a8:54:6b:89:bd:b2: 27:73:04:d2:98:c3:32:9f:a0:df:2c:4b:d9:45:76: 39:87:d7:82:72:2e:69:7d:4f:50:8f:b2:47:8f:a5: 6f:ba:f1:c4:36:d3:d7:4b:31:e9:1c:d2:22:35:3b: e5:60:56:be:3a:9f:78:a0:02:98:b1:2c:a4:b7:e8: b2:9a:b7:6b:aa:28:3f:1a:4f:25:9a:b4:ae:8f:28: ed:ad:f8:d2:57:f3:f1:75:fc:1e:de:c5:8b:4d:e2: 0e:92:4d:e7:ad:7e:d7:d7:71:02:10:13:ce:43:67: 2a:f4:2b:29:d0:50:dd:ea:63:25:71:c8:05:62:c4: 50:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:3A:14:EE:AF:0F:63:54:42:A1:47:5C:91:F6:52:03:30:F4:C8:5B X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/3ToU7q8PY1RCoUdckfZSAzD0yFs.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.96.60.0/22 Signature Algorithm: sha256WithRSAEncryption 4b:d5:79:3d:80:de:30:0e:30:75:b0:2a:e6:03:43:44:4b:b5: eb:d5:03:26:10:86:ba:a2:3e:b3:2a:8e:55:cf:84:44:74:90: 0e:73:8c:b3:ee:ba:d0:a8:00:f8:3c:91:7e:da:63:75:66:4d: 17:a0:32:11:e1:5e:f3:f9:4f:2e:b1:8f:20:ec:fb:a9:7a:ba: bc:00:50:97:15:2c:95:c4:c5:74:c8:b6:ff:e8:d7:52:97:06: 30:b6:ce:c9:25:11:8f:5e:05:5a:df:52:53:f9:e6:3a:bd:ac: ce:2e:82:66:5b:f2:ee:99:31:0e:4c:8e:35:61:b0:7f:f2:da: 66:fb:05:9b:a9:70:5a:4e:4e:4d:84:d4:28:b4:8d:81:79:68: 7d:ed:b3:16:a7:5e:be:76:f9:c7:cb:24:b5:2e:dc:9f:ac:ef: 8c:4a:ab:3f:bf:4e:c3:82:22:05:02:1a:58:26:29:43:c0:16: eb:db:3c:8c:02:71:d2:75:ef:94:d2:db:6a:bd:56:7f:3a:32: e1:67:bd:e5:ee:13:de:b7:a9:dd:3b:8c:0d:79:85:64:07:91: 64:83:2a:27:50:6c:93:9b:77:ec:62:e7:04:74:65:69:82:82: 7f:de:dc:9a:3a:bd:d6:40:e4:50:dc:a9:86:06:ea:4e:bc:49: 21:23:0c:32 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAOcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA1MjQx NjAzMDdaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKEREM0ExNEVFQUYwRjYz NTQ0MkExNDc1QzkxRjY1MjAzMzBGNEM4NUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDCHqgGpWsdSZIkAr9M5WQixH51tgOGFT6LGTFTKMiS39AQUO4U H1Sm4Q0hpWHegDtWnLwr+eyuADdPK7hxEioo8ODD/v52Ub6ySgl3+qx2ErywZBUW S04X3rypgwZzmK7ie4VRn2kLZSYVp4iXnisLttFtxuu6vQ05shamRjOY2KhUa4m9 sidzBNKYwzKfoN8sS9lFdjmH14JyLml9T1CPskePpW+68cQ209dLMekc0iI1O+Vg Vr46n3igApixLKS36LKat2uqKD8aTyWatK6PKO2t+NJX8/F1/B7exYtN4g6STeet ftfXcQIQE85DZyr0KynQUN3qYyVxyAVixFARAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU3ToU7q8PY1RCoUdckfZSAzD0yFswHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5LzNUb1U3cThQWTFSQ29VZGNrZlpTQXpEMHlGcy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIxYDwwDQYJKoZIhvcNAQELBQADggEBAEvVeT2A3jAOMHWwKuYDQ0RLtevV AyYQhrqiPrMqjlXPhER0kA5zjLPuutCoAPg8kX7aY3VmTRegMhHhXvP5Ty6xjyDs +6l6urwAUJcVLJXExXTItv/o11KXBjC2zsklEY9eBVrfUlP55jq9rM4ugmZb8u6Z MQ5MjjVhsH/y2mb7BZupcFpOTk2E1Ci0jYF5aH3tsxanXr52+cfLJLUu3J+s74xK qz+/TsOCIgUCGlgmKUPAFuvbPIwCcdJ175TS22q9Vn86MuFnveXuE963qd07jA15 hWQHkWSDKidQbJObd+xi5wR0ZWmCgn/e3Jo6vdZA5FDcqYYG6k68SSEjDDI= -----END CERTIFICATE-----Generated at Sat Apr 27 10:15:55 2024 by rpki-client on console-ams.rpki-client.org