$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/C4uDlu2-QQDHdLKFXx6qPKx_9yk.roa File: C4uDlu2-QQDHdLKFXx6qPKx_9yk.roa (raw, json) Hash identifier: yuWOlJbpbvVXJVar/Tmd2aF4G8g0HgIzmNPDHhHjAYM= Subject key identifier: 0B:8B:83:96:ED:BE:41:00:C7:74:B2:85:5F:1E:AA:3C:AC:7F:F7:29 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0622 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/C4uDlu2-QQDHdLKFXx6qPKx_9yk.roa Signing time: Thu 29 Feb 2024 01:38:36 +0000 ROA not before: Thu 29 Feb 2024 01:38:36 +0000 ROA not after: Fri 14 Feb 2025 01:30:03 +0000 asID: 9605 IP address blocks: 49.97.100.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1570 (0x622) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Feb 29 01:38:36 2024 GMT Not After : Feb 14 01:30:03 2025 GMT Subject: CN=0B8B8396EDBE4100C774B2855F1EAA3CAC7FF729 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:f5:43:07:71:17:ae:b4:2e:c1:4e:76:ec:86: 05:5d:bc:2f:fd:2d:05:92:b6:93:3a:20:77:25:9d: 9b:bb:75:57:7d:30:64:85:95:e0:93:e3:3f:79:d4: 69:2e:55:7d:dc:dc:f4:4f:69:54:e8:a9:bb:c0:90: fb:56:a2:fb:7d:bf:a5:77:d7:d6:91:6d:d9:c6:cb: cf:ea:0c:2c:df:5b:7b:c5:7f:29:98:3a:3c:8e:dc: c0:8d:19:5d:cd:f8:58:a4:d3:ec:dd:cb:a6:bd:5a: 3e:48:f9:f8:a3:67:ef:67:cb:93:40:2e:e4:11:53: 59:98:2a:1e:4a:6f:ba:3a:3a:c8:93:99:10:5a:a4: 22:24:9f:9e:da:d4:fd:11:9b:61:dc:33:a4:73:59: 03:98:bb:bc:64:e0:64:98:45:97:b8:90:16:0b:6e: 7c:5b:ba:b6:d7:06:fb:94:0c:92:a4:e1:43:85:0f: ed:fe:46:e1:a3:64:da:68:de:3f:e0:c7:c0:a7:17: 82:e4:38:14:94:f8:82:5b:ab:db:ac:72:c4:a7:50: 56:fe:c9:ea:fd:87:42:79:76:bf:15:c8:01:b6:75: 14:5c:f3:53:46:a6:9a:8f:cb:b0:a6:98:ff:c0:ea: c2:5c:85:0e:89:b1:55:74:b3:4c:f6:7a:56:2c:b8: d3:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:8B:83:96:ED:BE:41:00:C7:74:B2:85:5F:1E:AA:3C:AC:7F:F7:29 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/C4uDlu2-QQDHdLKFXx6qPKx_9yk.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.97.100.0/23 Signature Algorithm: sha256WithRSAEncryption 61:c1:83:60:8d:99:a7:c8:62:31:17:23:62:d4:7e:de:6c:94: db:9f:69:f5:c0:95:20:cb:f2:4a:f7:fd:2a:46:5a:f1:12:26: 9c:89:2f:6b:19:22:5e:9e:77:b5:1e:b9:91:95:dd:43:ae:5b: f9:40:4b:ea:63:dd:41:6b:d3:68:26:2e:49:fe:e9:9b:10:8f: a8:16:7a:d1:1e:3e:7b:5e:9e:8e:a2:d2:6c:de:d4:39:e6:da: 10:13:23:db:11:2e:e3:3d:ad:e8:1e:ea:46:e2:fe:33:46:0d: 42:ef:5f:29:30:d5:31:93:a4:c4:cc:4b:a4:8a:7c:b7:6e:a3: 38:8c:fd:5a:94:1b:6a:26:b7:24:3c:76:ac:69:d3:8a:52:6b: 71:5d:63:30:27:c2:02:08:25:cf:c6:90:d8:ea:28:89:3f:1e: 6f:e2:7e:22:c9:65:a4:2f:ca:da:57:ea:43:45:58:d1:7b:a9: 84:1f:96:a1:ea:09:d6:b7:98:54:32:03:ef:7c:9a:0d:cc:7e: ba:50:3b:30:00:28:04:5d:e1:94:6a:fa:30:86:f2:e9:f6:42: ec:02:55:37:df:0d:7a:47:a8:3c:f9:95:62:c8:ea:dd:ed:14: 2e:89:4a:97:2b:1d:23:4c:7d:d8:87:59:2c:95:ae:1b:a7:ad: de:f8:ac:3d -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBiIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDAyMjkw MTM4MzZaFw0yNTAyMTQwMTMwMDNaMDMxMTAvBgNVBAMTKDBCOEI4Mzk2RURCRTQx MDBDNzc0QjI4NTVGMUVBQTNDQUM3RkY3MjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDg9UMHcReutC7BTnbshgVdvC/9LQWStpM6IHclnZu7dVd9MGSF leCT4z951GkuVX3c3PRPaVToqbvAkPtWovt9v6V319aRbdnGy8/qDCzfW3vFfymY OjyO3MCNGV3N+Fik0+zdy6a9Wj5I+fijZ+9ny5NALuQRU1mYKh5Kb7o6OsiTmRBa pCIkn57a1P0Rm2HcM6RzWQOYu7xk4GSYRZe4kBYLbnxburbXBvuUDJKk4UOFD+3+ RuGjZNpo3j/gx8CnF4LkOBSU+IJbq9uscsSnUFb+yer9h0J5dr8VyAG2dRRc81NG ppqPy7CmmP/A6sJchQ6JsVV0s0z2elYsuNMZAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUC4uDlu2+QQDHdLKFXx6qPKx/9ykwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0M0dURsdTItUVFESGRMS0ZYeDZxUEt4Xzl5ay5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExYWQwDQYJKoZIhvcNAQELBQADggEBAGHBg2CNmafIYjEXI2LUft5slNuf afXAlSDL8kr3/SpGWvESJpyJL2sZIl6ed7UeuZGV3UOuW/lAS+pj3UFr02gmLkn+ 6ZsQj6gWetEePnteno6i0mze1Dnm2hATI9sRLuM9rege6kbi/jNGDULvXykw1TGT pMTMS6SKfLduoziM/VqUG2omtyQ8dqxp04pSa3FdYzAnwgIIJc/GkNjqKIk/Hm/i fiLJZaQvytpX6kNFWNF7qYQflqHqCda3mFQyA+98mg3MfrpQOzAAKARd4ZRq+jCG 8un2QuwCVTffDXpHqDz5lWLI6t3tFC6JSpcrHSNMfdiHWSyVrhunrd74rD0= -----END CERTIFICATE-----Generated at Sat Jun 1 15:54:29 2024 by rpki-client on console-ams.rpki-client.org