$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/7YoM5SlYnykjNJeefuHWRZ3gSFc.roa File: 7YoM5SlYnykjNJeefuHWRZ3gSFc.roa (raw, json) Hash identifier: kB9juJ+4jfJzDgn9LosEoQJmw68V0V2Y8uzHkl9ZL2A= Subject key identifier: ED:8A:0C:E5:29:58:9F:29:23:34:97:9E:7E:E1:D6:45:9D:E0:48:57 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0871 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/7YoM5SlYnykjNJeefuHWRZ3gSFc.roa Signing time: Tue 30 Apr 2024 02:18:31 +0000 ROA not before: Tue 30 Apr 2024 02:18:31 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 49.105.12.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2161 (0x871) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 30 02:18:31 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=ED8A0CE529589F292334979E7EE1D6459DE04857 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:92:48:7a:b9:a9:4a:40:d7:b0:22:e0:93:ba: 88:a6:a0:9d:45:49:ad:db:07:4c:b0:3e:31:f7:a5: 38:83:1f:59:41:d0:bd:e2:9f:0c:be:02:4b:80:e3: e4:c6:7b:af:22:c5:2d:62:84:44:8d:39:f6:c3:b2: 38:61:57:51:b0:13:be:ae:89:81:67:8b:51:ff:21: 31:9c:e0:76:02:28:12:62:b9:62:5f:f6:88:bb:b3: 12:cf:ee:4e:37:db:e6:e0:cb:ab:72:c2:ce:94:b5: b2:02:5c:e4:f6:ef:93:85:9e:45:0d:09:0d:d8:16: 30:b3:74:f0:dc:50:cb:6e:a5:85:98:d4:24:ab:23: eb:2c:b2:55:97:75:1d:2e:43:8b:52:29:58:d3:3b: ad:57:f2:e7:a5:ab:5d:bf:31:f6:d4:71:66:ed:c5: 86:e9:53:51:94:f1:7d:07:f3:63:ac:90:50:f8:27: 68:88:4b:10:69:30:2b:c6:5e:12:af:06:fc:69:cf: e0:6d:d1:c0:ad:16:33:ed:16:38:c1:4b:89:31:c4: e2:dd:33:a4:95:dd:01:33:5e:3c:03:75:b6:c8:11: 2e:4a:90:a4:71:ae:b2:44:45:8b:5b:3c:75:fd:60: a4:44:85:1b:ac:1e:de:d6:2a:f2:e1:a2:6e:d9:bb: 75:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:8A:0C:E5:29:58:9F:29:23:34:97:9E:7E:E1:D6:45:9D:E0:48:57 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/7YoM5SlYnykjNJeefuHWRZ3gSFc.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.105.12.0/23 Signature Algorithm: sha256WithRSAEncryption 8a:96:81:6f:8e:37:3b:eb:5e:8b:4d:30:a6:89:82:dd:32:98: 91:05:fb:2b:32:b8:65:cb:43:c7:c3:49:a2:85:c3:fc:fc:8f: 59:01:c4:17:f4:6f:79:6d:ee:4f:8e:66:53:64:85:ec:92:8c: eb:7c:ba:d6:b1:8f:c3:4f:e8:47:5c:bf:90:fe:4b:2e:c4:e8: 25:c9:43:6b:cd:72:59:20:8c:0c:35:f7:0a:b9:ca:2d:86:a6: 3f:78:99:fd:2f:39:3a:af:6e:5b:13:91:0e:9c:53:87:a7:d6: 49:eb:a3:ee:ac:bb:f4:68:ba:28:c0:99:4e:c6:1b:7b:b5:30: a8:7c:55:53:e1:a9:2a:50:7d:6e:88:44:10:59:dc:59:55:1b: 8b:e2:01:ce:22:5e:18:6a:cf:f6:e5:fe:3e:20:93:f5:b2:ad: 69:06:38:75:2d:55:db:06:49:3a:73:ee:d2:09:f2:96:a7:d7: 4b:6f:4a:46:e2:fa:ee:4d:7c:45:22:0e:08:d2:dd:6c:ff:e0: ad:0f:0f:cb:83:3b:fb:1d:80:6e:24:2d:08:0f:5a:09:6d:c0: 70:50:40:8e:49:f2:38:71:9a:15:a5:e8:c1:f7:09:3c:ab:6e: 38:fc:c8:1d:42:60:8e:8c:e7:cb:6b:a6:6e:35:cb:ff:8c:39: 1b:d2:ac:44 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCHEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw MjE4MzFaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEVEOEEwQ0U1Mjk1ODlG MjkyMzM0OTc5RTdFRTFENjQ1OURFMDQ4NTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDSkkh6ualKQNewIuCTuoimoJ1FSa3bB0ywPjH3pTiDH1lB0L3i nwy+AkuA4+TGe68ixS1ihESNOfbDsjhhV1GwE76uiYFni1H/ITGc4HYCKBJiuWJf 9oi7sxLP7k432+bgy6tyws6UtbICXOT275OFnkUNCQ3YFjCzdPDcUMtupYWY1CSr I+ssslWXdR0uQ4tSKVjTO61X8uelq12/MfbUcWbtxYbpU1GU8X0H82OskFD4J2iI SxBpMCvGXhKvBvxpz+Bt0cCtFjPtFjjBS4kxxOLdM6SV3QEzXjwDdbbIES5KkKRx rrJERYtbPHX9YKREhRusHt7WKvLhom7Zu3UDAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU7YoM5SlYnykjNJeefuHWRZ3gSFcwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5LzdZb001U2xZbnlrak5KZWVmdUhXUlozZ1NGYy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExaQwwDQYJKoZIhvcNAQELBQADggEBAIqWgW+ONzvrXotNMKaJgt0ymJEF +ysyuGXLQ8fDSaKFw/z8j1kBxBf0b3lt7k+OZlNkheySjOt8utaxj8NP6Edcv5D+ Sy7E6CXJQ2vNclkgjAw19wq5yi2Gpj94mf0vOTqvblsTkQ6cU4en1knro+6su/Ro uijAmU7GG3u1MKh8VVPhqSpQfW6IRBBZ3FlVG4viAc4iXhhqz/bl/j4gk/WyrWkG OHUtVdsGSTpz7tIJ8pan10tvSkbi+u5NfEUiDgjS3Wz/4K0PD8uDO/sdgG4kLQgP WgltwHBQQI5J8jhxmhWl6MH3CTyrbjj8yB1CYI6M58trpm41y/+MORvSrEQ= -----END CERTIFICATE-----Generated at Sat Jun 1 15:54:29 2024 by rpki-client on console-ams.rpki-client.org