$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/4e1teqye9NoKDwGL6GKLcu6O8K0.roa File: 4e1teqye9NoKDwGL6GKLcu6O8K0.roa (raw, json) Hash identifier: FQHpwuN1x9exmI0gqiN3VZdJxUtJWDP88Z15GZG+Yv0= Subject key identifier: E1:ED:6D:7A:AC:9E:F4:DA:0A:0F:01:8B:E8:62:8B:72:EE:8E:F0:AD Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0873 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/4e1teqye9NoKDwGL6GKLcu6O8K0.roa Signing time: Tue 30 Apr 2024 02:18:31 +0000 ROA not before: Tue 30 Apr 2024 02:18:31 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 49.96.0.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2163 (0x873) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 30 02:18:31 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=E1ED6D7AAC9EF4DA0A0F018BE8628B72EE8EF0AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:7a:e2:55:82:45:fc:47:20:a5:2a:a1:ef:ac: c6:c6:d6:bd:b9:83:f3:a1:be:cc:e6:86:24:ea:0c: 1c:ed:01:7a:9d:7e:75:bf:61:02:16:d2:94:a1:ae: 09:04:2e:1b:f8:87:69:84:0c:98:41:73:e7:2e:73: 18:2f:be:a4:fa:cc:3c:ab:b1:db:47:e1:b0:de:b5: d7:f8:ec:c5:04:e0:80:b2:58:12:66:2c:eb:b5:8d: 3d:2f:ae:ad:89:69:8f:d7:43:be:34:85:d5:3b:1b: 93:3d:9d:80:6c:2e:fc:51:5b:e3:14:91:4e:ed:bd: cf:a9:7b:a6:f0:29:c2:4d:1a:68:44:91:96:4c:d5: fc:1e:99:22:9e:3a:14:12:c1:b7:92:19:80:52:8c: 0e:cf:86:1e:03:d4:97:9b:ab:45:a0:29:f7:e3:9a: b6:8c:3f:e4:c9:d4:9b:7c:61:fc:89:21:4b:0e:3d: 83:aa:b1:8e:f6:fb:fd:c8:e0:d0:c3:6f:45:ab:7e: e7:90:8e:6e:2d:34:e9:cd:83:a7:7f:c1:97:23:64: 45:2f:fd:85:2b:55:1e:76:f5:ea:65:a5:08:fa:81: 13:97:b7:f8:78:f8:4e:16:5e:7d:e5:a7:aa:18:73: 14:98:36:54:8f:a4:54:b3:67:36:91:95:b1:be:ff: 5a:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:ED:6D:7A:AC:9E:F4:DA:0A:0F:01:8B:E8:62:8B:72:EE:8E:F0:AD X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/4e1teqye9NoKDwGL6GKLcu6O8K0.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.96.0.0/23 Signature Algorithm: sha256WithRSAEncryption 4c:56:58:3e:be:3e:7f:0b:da:8e:90:d4:29:93:70:d5:f6:12: 7a:a2:66:bd:92:0b:05:87:70:63:f2:99:fa:b6:bb:73:ac:7d: 58:2e:2e:86:8a:c9:fa:47:89:b8:eb:80:51:91:2d:1f:cb:70: ff:b6:b3:f0:a5:05:a8:17:ec:b7:22:c8:77:ee:cc:7e:9d:54: cb:3f:14:10:2a:17:19:f3:db:bd:38:7f:d8:a6:58:af:99:00: bc:9b:23:03:22:88:7b:15:e3:15:8f:4f:99:45:47:0d:4f:07: e9:bc:d5:25:b4:d4:f0:ef:cc:0d:62:54:d9:4e:5f:3f:93:57: 7b:13:0a:c9:65:6a:39:83:44:b8:81:dd:ce:94:66:ef:88:1b: 11:6d:bc:14:a3:07:a7:dc:20:22:08:fa:2d:9f:cf:ba:2e:ed: 91:49:05:0a:77:27:12:e5:e3:60:d0:a1:57:92:1c:e4:75:59: 7b:47:83:22:b5:77:22:1b:9a:2a:5c:4d:66:5b:36:6e:ea:2f: 72:43:30:f6:30:99:08:c7:23:dc:b0:3a:d1:0f:f4:91:3b:e8: 66:07:d3:bb:ab:1c:bb:92:d3:7e:b0:5d:34:a6:73:0c:70:03: ef:aa:8f:2c:c4:72:22:1b:b8:77:f5:7c:39:5a:e3:71:95:40: dc:a5:77:bf -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCHMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw MjE4MzFaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEUxRUQ2RDdBQUM5RUY0 REEwQTBGMDE4QkU4NjI4QjcyRUU4RUYwQUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDreuJVgkX8RyClKqHvrMbG1r25g/OhvszmhiTqDBztAXqdfnW/ YQIW0pShrgkELhv4h2mEDJhBc+cucxgvvqT6zDyrsdtH4bDetdf47MUE4ICyWBJm LOu1jT0vrq2JaY/XQ740hdU7G5M9nYBsLvxRW+MUkU7tvc+pe6bwKcJNGmhEkZZM 1fwemSKeOhQSwbeSGYBSjA7Phh4D1Jebq0WgKffjmraMP+TJ1Jt8YfyJIUsOPYOq sY72+/3I4NDDb0WrfueQjm4tNOnNg6d/wZcjZEUv/YUrVR529eplpQj6gROXt/h4 +E4WXn3lp6oYcxSYNlSPpFSzZzaRlbG+/1pRAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU4e1teqye9NoKDwGL6GKLcu6O8K0wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5LzRlMXRlcXllOU5vS0R3R0w2R0tMY3U2TzhLMC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExYAAwDQYJKoZIhvcNAQELBQADggEBAExWWD6+Pn8L2o6Q1CmTcNX2Enqi Zr2SCwWHcGPymfq2u3OsfVguLoaKyfpHibjrgFGRLR/LcP+2s/ClBagX7LciyHfu zH6dVMs/FBAqFxnz2704f9imWK+ZALybIwMiiHsV4xWPT5lFRw1PB+m81SW01PDv zA1iVNlOXz+TV3sTCsllajmDRLiB3c6UZu+IGxFtvBSjB6fcICII+i2fz7ou7ZFJ BQp3JxLl42DQoVeSHOR1WXtHgyK1dyIbmipcTWZbNm7qL3JDMPYwmQjHI9ywOtEP 9JE76GYH07urHLuS036wXTSmcwxwA++qjyzEciIbuHf1fDla43GVQNyld78= -----END CERTIFICATE-----Generated at Sat Jun 1 15:54:29 2024 by rpki-client on console-ams.rpki-client.org