$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/98cka-JpKE1AKPh0sz3ejRH2bVU.roa File: 98cka-JpKE1AKPh0sz3ejRH2bVU.roa (raw, json) Hash identifier: CY/Q31ZiA3CeFI4ZfIvUdiemJMbyEoVloYbD2lteQvk= Subject key identifier: F7:C7:24:6B:E2:69:28:4D:40:28:F8:74:B3:3D:DE:8D:11:F6:6D:55 Certificate issuer: /CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E Certificate serial: 27 Authority key identifier: F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/98cka-JpKE1AKPh0sz3ejRH2bVU.roa Signing time: Thu 27 Jul 2023 16:50:12 +0000 ROA not before: Thu 27 Jul 2023 16:50:12 +0000 ROA not after: Sun 14 Jul 2024 01:30:03 +0000 asID: 9605 IP address blocks: 148.67.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 08:46:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39 (0x27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E Validity Not Before: Jul 27 16:50:12 2023 GMT Not After : Jul 14 01:30:03 2024 GMT Subject: CN=F7C7246BE269284D4028F874B33DDE8D11F66D55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:ab:f3:33:74:66:19:44:ad:db:1c:e1:c0:b5: 4b:96:2a:ce:1b:b2:9d:59:5a:f9:c6:59:32:8a:06: 5c:76:36:a3:eb:dc:74:fe:32:1e:d1:9b:01:cc:3f: 42:78:a3:40:45:df:5c:3a:40:d8:06:95:8a:c5:ef: 03:bc:65:b3:04:d1:93:48:2c:f3:97:6f:be:b4:ee: 18:55:62:1f:4d:f3:73:86:c7:98:ca:27:38:98:31: 12:31:ad:d9:6c:5a:76:4b:0e:5f:46:d9:67:42:0e: af:8c:4a:de:77:ad:d5:96:04:64:a0:cf:73:ee:80: 8e:37:56:eb:64:4a:57:05:9a:b9:ef:71:2d:2d:7b: ef:83:b0:0a:4b:5d:54:4e:96:f2:30:ac:42:9c:f1: a7:14:8a:e2:70:12:ab:82:80:a6:b4:db:c5:1d:b5: e0:ca:3b:92:85:9e:7a:c7:07:fd:b2:f7:7f:1b:b6: 53:36:42:75:dc:fb:32:3a:de:66:a8:58:d6:e0:04: 2d:ee:b1:fc:20:d4:a7:0d:38:68:c9:1a:07:4d:a2: 92:e2:2b:2e:80:21:1a:dd:d1:8a:0d:38:c3:b0:6d: 81:fe:ba:19:4e:9a:e3:a5:e9:cf:f4:de:6b:57:8d: 1b:67:b7:a2:ce:d8:d3:8d:c5:ab:3f:22:61:97:76: f4:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:C7:24:6B:E2:69:28:4D:40:28:F8:74:B3:3D:DE:8D:11:F6:6D:55 X509v3 Authority Key Identifier: keyid:F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/98cka-JpKE1AKPh0sz3ejRH2bVU.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 148.67.0.0/17 Signature Algorithm: sha256WithRSAEncryption bf:d9:51:a6:f1:ba:4d:d2:ed:05:48:4b:21:2d:df:6e:1d:07: 9b:ea:52:50:08:3e:f0:6a:f8:7b:88:2e:28:1d:33:0c:43:24: d7:aa:e3:f4:b9:60:14:26:0c:21:9d:fe:16:16:6e:a3:e3:23: fd:00:01:01:d7:81:24:fe:6e:e3:3c:7b:0a:34:23:46:cf:c5: 09:71:a6:a9:d1:13:ca:da:33:ef:e5:00:0f:09:31:55:bf:b0: 4f:ff:62:f1:af:b3:d9:1d:13:c8:e7:2f:46:58:f6:3b:33:b4: dd:ec:e6:ac:54:d1:13:97:bf:b9:82:9f:96:cc:79:5f:42:05: 4a:2c:c0:58:17:92:db:5e:aa:a8:8d:ae:1d:0a:64:0a:fa:bf: 91:50:f5:ec:f3:89:d1:64:be:9b:9f:6f:bb:4e:5e:94:a5:dd: 89:a8:e2:e7:b5:76:e8:50:0c:ff:b4:d7:5c:91:44:25:37:53: f5:51:b5:59:34:35:02:8e:46:70:c4:0e:27:25:e0:54:28:30: 92:b7:ec:f9:fb:45:d3:e4:0f:c0:42:5c:df:0f:c9:03:6f:c2: 49:50:e4:ef:d0:58:44:90:b8:86:57:95:86:0a:60:4c:99:dd: d2:5c:3c:fe:fc:34:20:dd:c5:80:d1:1f:d7:8f:da:18:b9:60: be:d6:23:65 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBJzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGODlF MEYxNUMxRTIwRTE5MUFBRjE3Mjg4RjZFMzBGRjAxODY5QTZFMB4XDTIzMDcyNzE2 NTAxMloXDTI0MDcxNDAxMzAwM1owMzExMC8GA1UEAxMoRjdDNzI0NkJFMjY5Mjg0 RDQwMjhGODc0QjMzRERFOEQxMUY2NkQ1NTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAPmr8zN0ZhlErdsc4cC1S5YqzhuynVla+cZZMooGXHY2o+vcdP4y HtGbAcw/QnijQEXfXDpA2AaVisXvA7xlswTRk0gs85dvvrTuGFViH03zc4bHmMon OJgxEjGt2WxadksOX0bZZ0IOr4xK3net1ZYEZKDPc+6AjjdW62RKVwWaue9xLS17 74OwCktdVE6W8jCsQpzxpxSK4nASq4KAprTbxR214Mo7koWeescH/bL3fxu2UzZC ddz7MjreZqhY1uAELe6x/CDUpw04aMkaB02ikuIrLoAhGt3Rig04w7Btgf66GU6a 46Xpz/Tea1eNG2e3os7Y043Fqz8iYZd29MUCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBT3xyRr4mkoTUAo+HSzPd6NEfZtVTAfBgNVHSMEGDAWgBT4ng8VweIOGRqvFyiP bjD/AYaabjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzA5Ly1KNFBGY0hpRGhrYXJ4Y29qMjR3X3dHR21tNC5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLy1KNFBGY0hpRGhrYXJ4Y29qMjR3X3dH R21tNC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8zMDkvOThja2EtSnBLRTFBS1BoMHN6M2VqUkgyYlZVLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEB5RDADANBgkqhkiG9w0BAQsFAAOCAQEAv9lRpvG6TdLtBUhLIS3fbh0Hm+pS UAg+8Gr4e4guKB0zDEMk16rj9LlgFCYMIZ3+FhZuo+Mj/QABAdeBJP5u4zx7CjQj Rs/FCXGmqdETytoz7+UADwkxVb+wT/9i8a+z2R0TyOcvRlj2OzO03ezmrFTRE5e/ uYKflsx5X0IFSizAWBeS216qqI2uHQpkCvq/kVD17POJ0WS+m59vu05elKXdiaji 57V26FAM/7TXXJFEJTdT9VG1WTQ1Ao5GcMQOJyXgVCgwkrfs+ftF0+QPwEJc3w/J A2/CSVDk79BYRJC4hleVhgpgTJnd0lw8/vw0IN3FgNEf14/aGLlgvtYjZQ== -----END CERTIFICATE-----Generated at Sat Jun 1 13:38:46 2024 by rpki-client on console-fra.rpki-client.org