$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/836-fXzray8NJxln0nQ3_GyIFYM.roa File: 836-fXzray8NJxln0nQ3_GyIFYM.roa (raw, json) Hash identifier: +ikadAGMRZz/bVgmaMaxrr9X++W6yCQyx9LSE1NCRnI= Subject key identifier: F3:7E:BE:7D:7C:EB:6B:2F:0D:27:19:67:D2:74:37:FC:6C:88:15:83 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0426 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/836-fXzray8NJxln0nQ3_GyIFYM.roa Signing time: Tue 06 Jun 2023 16:09:07 +0000 ROA not before: Tue 06 Jun 2023 16:09:07 +0000 ROA not after: Tue 14 May 2024 01:30:02 +0000 asID: 9605 IP address blocks: 49.104.32.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 May 2024 13:36:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1062 (0x426) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 6 16:09:07 2023 GMT Not After : May 14 01:30:02 2024 GMT Subject: CN=F37EBE7D7CEB6B2F0D271967D27437FC6C881583 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:49:a9:79:d1:1b:5b:83:cb:8f:69:94:5b:91: f8:4a:a2:e1:e1:4b:ad:6d:23:a0:45:66:79:84:1e: a0:11:0b:44:d2:d6:b7:2a:e7:cd:7c:6e:db:ee:d8: bc:88:0c:5d:fd:d8:d2:b9:95:ed:87:9e:34:ad:2d: 40:c7:59:a2:5a:c2:cd:66:eb:5f:a3:46:18:ea:ff: 54:0b:c8:d1:97:82:b4:87:2c:e3:48:ca:a1:b9:e1: 52:69:d8:3a:90:fb:50:cf:43:2a:2d:27:45:c2:a9: b9:ea:83:50:ae:b6:09:6c:ae:bd:2a:8a:d8:ec:01: 9b:4f:1a:02:7e:d3:0b:0a:19:25:cb:aa:5c:23:aa: a8:39:6d:d6:76:d0:cb:85:eb:f2:78:82:e3:b4:65: e2:52:7a:dd:44:21:5d:ae:e4:00:86:a7:23:fc:5c: 79:84:2d:46:14:39:64:5d:4c:73:ed:93:1f:cb:23: e4:a0:bf:06:1c:e9:25:61:3f:90:2a:00:7f:ee:02: f6:85:38:79:9b:bb:70:3d:47:9f:fd:e8:81:64:78: 36:c3:f9:45:45:5a:0f:4c:dc:c3:f6:01:8a:38:a4: a3:e7:a6:8a:cb:3b:22:b3:ca:0a:61:a7:99:c6:72: e5:4a:9b:85:1e:30:ed:8d:1f:93:8c:6c:ce:35:d7: a5:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:7E:BE:7D:7C:EB:6B:2F:0D:27:19:67:D2:74:37:FC:6C:88:15:83 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/836-fXzray8NJxln0nQ3_GyIFYM.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.104.32.0/23 Signature Algorithm: sha256WithRSAEncryption 10:c1:8a:22:1e:fe:16:5b:a7:56:f5:8e:eb:fa:f0:a4:0b:31: d4:dc:65:6f:57:00:a3:4b:17:87:65:a0:82:d1:d3:ff:fa:72: b1:3f:74:29:ec:3c:41:bc:c0:8e:2f:1f:6b:fa:bf:26:0c:9b: ff:aa:4d:e6:7c:c2:01:dc:26:fc:21:b9:48:0a:c3:06:b1:09: 72:a6:bb:54:f4:7b:89:89:34:3c:68:87:61:cc:50:8f:e4:03: 45:1e:4f:c5:12:de:d3:ff:f1:80:28:76:1d:3b:c4:c8:77:8a: 9c:d4:f4:20:01:78:27:ab:e7:da:cf:ac:f8:e6:68:e8:d7:7a: 53:3c:db:1f:63:ec:e9:9b:51:a0:a7:89:8b:f5:45:3c:9c:c1: 20:ae:b3:c7:db:40:78:ed:ce:75:38:c5:50:90:56:d8:bf:ee: bf:86:fc:04:a0:54:97:58:ee:5b:16:27:75:8d:a8:6a:ee:86: 92:2d:32:e2:b4:a7:e8:57:ee:57:45:a0:d5:7d:43:35:61:72: 63:04:7e:c9:97:81:00:b6:b1:c4:46:dd:6d:af:22:af:9a:4b: d3:dd:55:6f:98:4b:7b:8c:f3:69:e5:2b:e2:ec:bf:5d:28:00: 04:e4:00:ae:ea:59:dc:be:0c:ce:93:0b:85:0d:e7:a6:e4:19: 5e:ba:81:57 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBCYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA2MDYx NjA5MDdaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKEYzN0VCRTdEN0NFQjZC MkYwRDI3MTk2N0QyNzQzN0ZDNkM4ODE1ODMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCeSal50Rtbg8uPaZRbkfhKouHhS61tI6BFZnmEHqARC0TS1rcq 5818btvu2LyIDF392NK5le2HnjStLUDHWaJaws1m61+jRhjq/1QLyNGXgrSHLONI yqG54VJp2DqQ+1DPQyotJ0XCqbnqg1Cutglsrr0qitjsAZtPGgJ+0wsKGSXLqlwj qqg5bdZ20MuF6/J4guO0ZeJSet1EIV2u5ACGpyP8XHmELUYUOWRdTHPtkx/LI+Sg vwYc6SVhP5AqAH/uAvaFOHmbu3A9R5/96IFkeDbD+UVFWg9M3MP2AYo4pKPnporL OyKzygphp5nGcuVKm4UeMO2NH5OMbM4116XnAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU836+fXzray8NJxln0nQ3/GyIFYMwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5LzgzNi1mWHpyYXk4Tkp4bG4wblEzX0d5SUZZTS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExaCAwDQYJKoZIhvcNAQELBQADggEBABDBiiIe/hZbp1b1juv68KQLMdTc ZW9XAKNLF4dloILR0//6crE/dCnsPEG8wI4vH2v6vyYMm/+qTeZ8wgHcJvwhuUgK wwaxCXKmu1T0e4mJNDxoh2HMUI/kA0UeT8US3tP/8YAodh07xMh3ipzU9CABeCer 59rPrPjmaOjXelM82x9j7OmbUaCniYv1RTycwSCus8fbQHjtznU4xVCQVti/7r+G /ASgVJdY7lsWJ3WNqGruhpItMuK0p+hX7ldFoNV9QzVhcmMEfsmXgQC2scRG3W2v Iq+aS9PdVW+YS3uM82nlK+Lsv10oAATkAK7qWdy+DM6TC4UN56bkGV66gVc= -----END CERTIFICATE-----Generated at Sat Apr 27 10:15:55 2024 by rpki-client on console-ams.rpki-client.org