$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/9liuvQNPrr6unv40S_BvCMwJC38.roa File: 9liuvQNPrr6unv40S_BvCMwJC38.roa (raw, json) Hash identifier: tSz1pNnps1gzR5rrGaZCDDbB6U6XBLe7kspYLVzUtRw= Subject key identifier: F6:58:AE:BD:03:4F:AE:BE:AE:9E:FE:34:4B:F0:6F:08:CC:09:0B:7F Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 08B7 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/9liuvQNPrr6unv40S_BvCMwJC38.roa Signing time: Tue 30 Apr 2024 02:22:42 +0000 ROA not before: Tue 30 Apr 2024 02:22:42 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 49.98.130.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Dec 2024 00:11:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2231 (0x8b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 30 02:22:42 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=F658AEBD034FAEBEAE9EFE344BF06F08CC090B7F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:eb:ed:10:65:1e:2a:2a:fe:13:5c:c7:1b:c3: 50:46:51:9e:47:8f:34:c1:b8:69:3d:99:52:00:47: 7e:b8:d1:82:04:1e:6e:53:2f:42:8a:ad:41:f2:c3: 48:ec:da:6c:f2:d8:aa:74:32:12:42:e8:5e:b2:53: f5:f7:93:d0:8d:28:ca:cd:39:a8:c0:29:e4:35:65: 32:b4:55:2e:73:21:54:7f:3c:c0:eb:6d:27:ad:b0: bb:9c:8b:81:dc:29:34:82:29:09:13:73:4d:e3:a4: d2:ef:f1:8e:26:de:fc:41:b6:43:4a:1c:ce:84:f1: ac:11:df:d9:34:63:7d:17:3d:34:a6:4a:fa:e0:3a: bb:d9:a7:d9:68:72:08:3c:a7:87:f4:08:c5:64:a8: 4b:ba:88:2d:ca:7e:64:da:0d:17:27:2b:8f:3f:a9: f5:e5:f2:06:0c:4b:44:87:a5:73:90:2a:94:e0:1f: d3:18:f7:06:2e:5a:da:c3:15:dc:68:2b:ed:47:16: c7:eb:03:f9:86:34:47:ba:63:2f:fe:be:b7:01:7a: 27:cb:83:ab:b7:d6:56:47:f6:ae:86:43:4e:c4:a4: 6b:98:bc:93:cb:03:41:44:99:79:a4:a5:46:c7:28: 60:63:2e:84:a1:0b:7e:14:06:74:09:fe:c6:a2:b6: 09:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:58:AE:BD:03:4F:AE:BE:AE:9E:FE:34:4B:F0:6F:08:CC:09:0B:7F X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/9liuvQNPrr6unv40S_BvCMwJC38.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.98.130.0/23 Signature Algorithm: sha256WithRSAEncryption 7f:39:fa:a2:1b:92:23:7c:74:d0:55:b6:06:6a:fa:9f:3a:1c: c1:d0:1e:40:90:38:d3:0a:7a:47:6d:5d:17:f7:ad:07:d0:d0: 4c:37:c2:fb:e4:d5:e1:4a:0d:a6:33:96:3a:df:ef:30:ed:71: fe:ab:7c:df:54:f2:62:47:68:31:37:f5:c1:69:d9:fb:6d:9a: c7:bc:fb:7f:60:71:13:a9:a1:46:5f:6f:52:a0:5a:cc:0f:4e: b8:6e:b8:85:03:e6:1d:32:13:78:f0:26:98:14:d1:87:cd:ad: dd:18:61:1e:f9:1e:ea:69:0c:48:b0:b9:9a:da:2f:a1:e0:68: 87:a7:ce:05:9b:04:b3:7f:92:84:57:6d:5f:be:d9:bc:31:60: 8f:fa:06:38:e4:2b:5e:52:4b:7a:59:8d:07:6b:d9:b1:4c:b8: e7:b3:02:4d:67:4f:c9:65:ee:da:ee:42:f5:50:6c:89:e5:a2: 73:8c:f7:c5:54:25:81:5a:c8:fb:66:96:6c:d0:b8:87:71:1a: 22:ae:0a:65:9d:38:1a:9a:fb:43:ce:09:13:f7:22:5e:53:2f: cd:cb:ab:5b:ac:ad:ef:c7:4b:47:9e:1e:d3:98:9d:48:a6:05: 05:11:25:a9:47:25:b5:6e:11:68:88:f5:e0:af:b8:6a:b8:31: b9:9f:2c:ac -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCLcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw MjIyNDJaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEY2NThBRUJEMDM0RkFF QkVBRTlFRkUzNDRCRjA2RjA4Q0MwOTBCN0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCx6+0QZR4qKv4TXMcbw1BGUZ5HjzTBuGk9mVIAR3640YIEHm5T L0KKrUHyw0js2mzy2Kp0MhJC6F6yU/X3k9CNKMrNOajAKeQ1ZTK0VS5zIVR/PMDr bSetsLuci4HcKTSCKQkTc03jpNLv8Y4m3vxBtkNKHM6E8awR39k0Y30XPTSmSvrg OrvZp9locgg8p4f0CMVkqEu6iC3KfmTaDRcnK48/qfXl8gYMS0SHpXOQKpTgH9MY 9wYuWtrDFdxoK+1HFsfrA/mGNEe6Yy/+vrcBeifLg6u31lZH9q6GQ07EpGuYvJPL A0FEmXmkpUbHKGBjLoShC34UBnQJ/saitglzAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU9liuvQNPrr6unv40S/BvCMwJC38wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5LzlsaXV2UU5QcnI2dW52NDBTX0J2Q013SkMzOC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExYoIwDQYJKoZIhvcNAQELBQADggEBAH85+qIbkiN8dNBVtgZq+p86HMHQ HkCQONMKekdtXRf3rQfQ0Ew3wvvk1eFKDaYzljrf7zDtcf6rfN9U8mJHaDE39cFp 2fttmse8+39gcROpoUZfb1KgWswPTrhuuIUD5h0yE3jwJpgU0YfNrd0YYR75Hupp DEiwuZraL6HgaIenzgWbBLN/koRXbV++2bwxYI/6BjjkK15SS3pZjQdr2bFMuOez Ak1nT8ll7truQvVQbInlonOM98VUJYFayPtmlmzQuIdxGiKuCmWdOBqa+0POCRP3 Il5TL83Lq1usre/HS0eeHtOYnUimBQURJalHJbVuEWiI9eCvuGq4MbmfLKw= -----END CERTIFICATE-----Generated at Tue Nov 26 02:27:14 2024 by rpki-client on console-ams.rpki-client.org