$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/AgkFAqBQ3BFFSgkQJpey7m-nd1A.roa File: AgkFAqBQ3BFFSgkQJpey7m-nd1A.roa (raw, json) Hash identifier: o0C2Od2dmwd21M8bbCFmWMF4PIu9tGf0wjrdLehAGE8= Subject key identifier: 02:09:05:02:A0:50:DC:11:45:4A:09:10:26:97:B2:EE:6F:A7:77:50 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 08D4 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/AgkFAqBQ3BFFSgkQJpey7m-nd1A.roa Signing time: Tue 30 Apr 2024 02:24:42 +0000 ROA not before: Tue 30 Apr 2024 02:24:42 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 49.111.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2260 (0x8d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 30 02:24:42 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=02090502A050DC11454A09102697B2EE6FA77750 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:38:03:d7:4f:5d:e1:2f:ab:0b:0f:bd:dc:a2: 3b:5a:bb:a0:2e:91:7a:94:0d:19:fb:81:0d:4f:6d: 68:fd:0d:56:01:09:36:bf:3f:9c:3d:6d:a7:bd:aa: 6f:79:58:c6:3f:02:e3:ad:e5:a6:0d:a0:4b:a9:30: 47:fe:61:7a:3d:9a:bb:fd:a2:f4:83:ce:5b:97:7d: 34:37:e2:d2:88:f1:90:26:9d:9f:8a:8a:e8:89:65: 86:f4:a2:17:ce:b7:4d:dd:08:46:12:e5:f8:e0:41: a9:25:03:45:49:ce:0c:31:c5:67:17:49:f2:cf:25: 10:4c:43:e5:14:a4:7b:6a:ee:d6:b1:34:88:08:69: c2:45:f1:d6:7b:48:1c:4a:de:a5:51:7f:c5:5b:67: df:1b:85:9e:b4:56:7a:88:e4:d0:74:aa:9e:87:9b: f6:8b:9d:33:42:14:eb:3b:b7:97:0e:2b:6e:1c:2b: c2:94:c0:ec:0c:1f:63:74:36:a0:0e:e3:9c:31:da: 0f:c1:98:73:aa:2a:20:92:7b:00:02:1c:a4:15:ea: e7:c3:8c:35:f8:41:e3:7f:a6:be:62:84:f6:82:3a: c0:ba:56:59:12:98:3b:70:15:04:8b:0a:54:c1:fc: b8:45:95:85:f2:c3:fa:c3:43:75:12:17:66:87:91: 3d:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:09:05:02:A0:50:DC:11:45:4A:09:10:26:97:B2:EE:6F:A7:77:50 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/AgkFAqBQ3BFFSgkQJpey7m-nd1A.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.111.0.0/16 Signature Algorithm: sha256WithRSAEncryption 07:18:a7:d4:98:8e:48:72:38:41:c4:e3:d5:79:a9:22:d1:54: f3:26:ff:3f:88:8d:50:e6:6e:8b:5c:45:87:1a:b9:68:84:89: 4d:1d:b2:e5:d1:ea:d7:96:af:0c:fd:f1:14:63:8b:0d:41:59: df:4f:52:ce:0f:62:20:3d:68:5a:7c:a5:b4:bf:65:b7:23:86: 99:54:be:47:36:11:ab:d8:37:27:8e:10:38:73:c1:79:53:69: e9:99:74:d1:c9:1c:65:95:7d:05:f7:4d:67:0a:41:14:3d:01: 9d:ae:6c:b6:c4:f6:eb:6a:a5:d2:0f:0f:cc:c0:23:72:7d:c1: a8:73:31:b0:ae:2c:18:b1:c9:e1:b8:16:ab:a1:eb:a6:7c:e6: 9d:66:48:d3:98:c8:fb:2d:06:d9:57:82:3a:26:b9:2f:c0:b7: 93:ac:4b:c1:94:4b:bb:17:8f:93:21:e6:35:84:73:7d:89:59: ca:cd:cb:95:bf:31:e5:6c:a3:ae:89:9f:d9:fe:c9:58:e0:7f: 3d:e5:84:94:53:74:98:51:59:8e:bc:cc:79:59:9d:6e:95:6c: 53:07:74:e0:c1:be:45:33:0f:9b:00:7f:d1:ae:0b:5f:d8:4a: 6f:55:17:b2:20:68:b6:09:72:71:8a:95:34:c1:0b:c3:dd:de: f3:12:70:b9 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgICCNQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw MjI0NDJaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDAyMDkwNTAyQTA1MERD MTE0NTRBMDkxMDI2OTdCMkVFNkZBNzc3NTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCmOAPXT13hL6sLD73cojtau6AukXqUDRn7gQ1PbWj9DVYBCTa/ P5w9bae9qm95WMY/AuOt5aYNoEupMEf+YXo9mrv9ovSDzluXfTQ34tKI8ZAmnZ+K iuiJZYb0ohfOt03dCEYS5fjgQaklA0VJzgwxxWcXSfLPJRBMQ+UUpHtq7taxNIgI acJF8dZ7SBxK3qVRf8VbZ98bhZ60VnqI5NB0qp6Hm/aLnTNCFOs7t5cOK24cK8KU wOwMH2N0NqAO45wx2g/BmHOqKiCSewACHKQV6ufDjDX4QeN/pr5ihPaCOsC6VlkS mDtwFQSLClTB/LhFlYXyw/rDQ3USF2aHkT1NAgMBAAGjggIjMIICHzAdBgNVHQ4E FgQUAgkFAqBQ3BFFSgkQJpey7m+nd1AwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0Fna0ZBcUJRM0JGRlNna1FKcGV5N20tbmQxQS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAxbzANBgkqhkiG9w0BAQsFAAOCAQEABxin1JiOSHI4QcTj1XmpItFU8yb/ P4iNUOZui1xFhxq5aISJTR2y5dHq15avDP3xFGOLDUFZ309Szg9iID1oWnyltL9l tyOGmVS+RzYRq9g3J44QOHPBeVNp6Zl00ckcZZV9BfdNZwpBFD0Bna5stsT262ql 0g8PzMAjcn3BqHMxsK4sGLHJ4bgWq6HrpnzmnWZI05jI+y0G2VeCOia5L8C3k6xL wZRLuxePkyHmNYRzfYlZys3Llb8x5Wyjromf2f7JWOB/PeWElFN0mFFZjrzMeVmd bpVsUwd04MG+RTMPmwB/0a4LX9hKb1UXsiBotglycYqVNMELw93e8xJwuQ== -----END CERTIFICATE-----Generated at Sat Jun 1 15:54:29 2024 by rpki-client on console-ams.rpki-client.org