$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/BhWK5thUg2JE9mqYMoPlL5YtRmI.roa File: BhWK5thUg2JE9mqYMoPlL5YtRmI.roa (raw, json) Hash identifier: 829RRW8oozanwW05TZAooo5w9iGEPT0CdVru8Gde0s4= Subject key identifier: 06:15:8A:E6:D8:54:83:62:44:F6:6A:98:32:83:E5:2F:96:2D:46:62 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0428 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/BhWK5thUg2JE9mqYMoPlL5YtRmI.roa Signing time: Tue 06 Jun 2023 16:09:08 +0000 ROA not before: Tue 06 Jun 2023 16:09:08 +0000 ROA not after: Tue 14 May 2024 01:30:02 +0000 asID: 9605 IP address blocks: 49.104.40.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 May 2024 13:36:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1064 (0x428) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 6 16:09:08 2023 GMT Not After : May 14 01:30:02 2024 GMT Subject: CN=06158AE6D854836244F66A983283E52F962D4662 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:da:45:b6:10:8d:3d:63:87:b2:ef:48:0e:8f: a3:01:db:f3:c7:32:2a:45:b3:3f:cd:cd:bc:b6:98: c9:45:83:2f:dd:a0:cf:36:ea:98:f2:32:92:8a:54: c8:42:81:f3:2a:5a:ef:f0:90:47:a7:ba:9e:b8:e0: dd:7d:9f:9d:56:3a:b7:6a:3b:2d:c9:e7:2a:33:44: 8b:03:12:7c:3a:ce:eb:b4:63:05:4c:89:12:b7:c2: e7:57:95:d0:f5:e1:7e:f2:20:41:bb:9c:77:7c:84: 6b:bd:0d:94:c2:b6:cb:c9:c7:bc:3f:42:4d:65:75: 9b:d4:4f:ed:b3:9b:37:46:03:2a:d9:e2:c9:6f:e5: e0:f8:df:6b:72:47:06:c9:a3:eb:1e:62:02:b8:92: c6:b9:78:83:e1:5f:45:50:c4:56:03:e3:72:81:4c: b1:e2:e9:c0:25:14:19:5c:d6:a5:9d:0d:73:2c:aa: 40:fb:d0:50:bf:16:d8:b2:d1:b2:1c:b5:a8:dd:62: 0c:e5:1c:52:71:07:5b:2f:a5:e9:3a:99:74:e8:54: 66:bf:4c:2e:bd:43:50:a6:ff:8a:f3:f1:b0:3a:53: 1d:56:3b:5f:bf:38:40:cb:fd:e4:e3:a1:64:ac:4b: 40:fc:c9:00:d9:fd:fc:3d:ae:26:cb:b8:1b:e2:c2: 85:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:15:8A:E6:D8:54:83:62:44:F6:6A:98:32:83:E5:2F:96:2D:46:62 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/BhWK5thUg2JE9mqYMoPlL5YtRmI.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.104.40.0/22 Signature Algorithm: sha256WithRSAEncryption ae:45:1a:11:a7:be:03:2d:01:ae:47:5f:c4:e9:98:df:54:82: 7d:9b:35:d8:9c:01:57:85:c8:37:b4:8c:43:11:c8:37:00:e7: 27:21:8f:0f:6c:8f:85:9b:11:a9:9c:9a:e0:fb:37:f3:87:a3: 09:40:b9:b4:f5:85:ba:2d:4a:dc:47:69:1d:01:db:21:4b:b2: 7b:fd:45:b0:e1:6a:1c:1d:db:fe:16:83:5b:bc:42:a7:90:1a: 45:6b:33:97:9b:a7:fe:b6:00:cc:dc:fc:1a:f3:c1:29:fa:fb: d1:5d:28:0a:3c:7a:9f:de:b2:52:d4:fb:96:d8:c0:e7:0d:92: 1f:30:d8:39:21:cc:6e:7b:f4:09:49:c7:4c:3e:05:7b:6d:ed: e4:2f:08:26:15:c0:a0:4c:a1:d8:05:58:ad:f5:61:d8:fd:0b: 9c:a2:03:4e:b7:1f:e4:be:29:0e:9c:3c:04:c2:a3:06:b4:26: 49:fa:6f:ae:de:ed:d2:77:34:be:f4:b3:af:40:7d:e8:0a:e2: 92:e5:65:08:49:c4:89:91:3b:0f:7b:a6:3c:80:22:73:c4:96: 32:9e:db:07:1c:e9:ea:f6:28:98:64:20:15:a1:59:aa:91:b9: ca:4d:26:aa:ee:86:24:e6:c6:1d:8b:f4:4c:1a:b3:7f:99:dd: 06:32:6f:c6 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBCgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA2MDYx NjA5MDhaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDA2MTU4QUU2RDg1NDgz NjI0NEY2NkE5ODMyODNFNTJGOTYyRDQ2NjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDL2kW2EI09Y4ey70gOj6MB2/PHMipFsz/Nzby2mMlFgy/doM82 6pjyMpKKVMhCgfMqWu/wkEenup644N19n51WOrdqOy3J5yozRIsDEnw6zuu0YwVM iRK3wudXldD14X7yIEG7nHd8hGu9DZTCtsvJx7w/Qk1ldZvUT+2zmzdGAyrZ4slv 5eD432tyRwbJo+seYgK4ksa5eIPhX0VQxFYD43KBTLHi6cAlFBlc1qWdDXMsqkD7 0FC/Ftiy0bIctajdYgzlHFJxB1svpek6mXToVGa/TC69Q1Cm/4rz8bA6Ux1WO1+/ OEDL/eTjoWSsS0D8yQDZ/fw9ribLuBviwoWZAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUBhWK5thUg2JE9mqYMoPlL5YtRmIwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0JoV0s1dGhVZzJKRTltcVlNb1BsTDVZdFJtSS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIxaCgwDQYJKoZIhvcNAQELBQADggEBAK5FGhGnvgMtAa5HX8TpmN9Ugn2b NdicAVeFyDe0jEMRyDcA5ychjw9sj4WbEamcmuD7N/OHowlAubT1hbotStxHaR0B 2yFLsnv9RbDhahwd2/4Wg1u8QqeQGkVrM5ebp/62AMzc/BrzwSn6+9FdKAo8ep/e slLU+5bYwOcNkh8w2DkhzG579AlJx0w+BXtt7eQvCCYVwKBModgFWK31Ydj9C5yi A063H+S+KQ6cPATCowa0Jkn6b67e7dJ3NL70s69AfegK4pLlZQhJxImROw97pjyA InPEljKe2wcc6er2KJhkIBWhWaqRucpNJqruhiTmxh2L9Ewas3+Z3QYyb8Y= -----END CERTIFICATE-----Generated at Sat Apr 27 10:15:55 2024 by rpki-client on console-ams.rpki-client.org