$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/CLXl0X5mpU8e7IxCK21V_GoEOXM.roa File: CLXl0X5mpU8e7IxCK21V_GoEOXM.roa (raw, json) Hash identifier: 2DlhOKIbrlwFUwH97vXZHxe+j4Awc2/uZCB3+GLOQdU= Subject key identifier: 08:B5:E5:D1:7E:66:A5:4F:1E:EC:8C:42:2B:6D:55:FC:6A:04:39:73 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 030C Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/CLXl0X5mpU8e7IxCK21V_GoEOXM.roa Signing time: Thu 01 Jun 2023 16:05:29 +0000 ROA not before: Thu 01 Jun 2023 16:05:29 +0000 ROA not after: Tue 14 May 2024 01:30:02 +0000 asID: 9605 IP address blocks: 49.98.60.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 May 2024 13:36:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 780 (0x30c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 1 16:05:29 2023 GMT Not After : May 14 01:30:02 2024 GMT Subject: CN=08B5E5D17E66A54F1EEC8C422B6D55FC6A043973 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:68:2e:24:bd:43:38:18:e0:59:3f:0f:23:78: ef:3e:ae:0e:82:9f:d0:04:23:49:bc:19:92:6b:1a: a2:70:a6:62:c3:a5:f2:c3:72:c4:5f:66:31:6a:ed: d6:64:fe:f1:89:50:d0:7a:af:6d:e6:f4:b4:2a:8e: e1:36:d1:da:07:82:dc:70:f1:9e:5d:9b:0e:01:b0: ae:2d:82:59:98:4b:42:d8:b8:e3:89:b0:a8:4f:9b: 15:dd:70:9e:53:07:c9:47:7f:42:74:9a:c0:23:c7: 73:1e:1f:d3:8d:44:da:d6:03:20:b6:ee:35:80:3d: 16:16:f8:a1:67:28:37:93:79:a2:e9:f1:7b:c9:86: da:24:b2:1d:4f:d7:72:3e:b3:cf:06:47:bd:2e:8a: 45:ed:da:82:3f:10:f8:5c:8d:b1:6c:19:e9:1e:17: f2:17:f9:87:87:85:5f:0e:fd:b5:2c:57:16:cc:86: 35:93:b0:ed:6a:de:76:86:8a:7b:2d:37:e2:77:2f: 23:d2:2b:b7:a1:8a:99:06:c9:cc:db:f0:70:f4:4f: 9e:02:fb:0e:50:b3:8a:7c:22:6c:26:dc:01:0c:1a: b7:43:b1:e5:da:ef:a8:e9:14:43:4c:86:0e:e5:5f: 10:74:66:51:ce:10:8c:5e:56:af:20:6d:8d:dc:73: a8:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:B5:E5:D1:7E:66:A5:4F:1E:EC:8C:42:2B:6D:55:FC:6A:04:39:73 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/CLXl0X5mpU8e7IxCK21V_GoEOXM.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.98.60.0/23 Signature Algorithm: sha256WithRSAEncryption b6:3a:16:d4:0d:fc:3f:a0:eb:17:06:55:1d:de:00:fd:f9:90: c5:42:ee:eb:47:54:2d:d9:76:d8:ef:f3:86:55:dd:12:97:2c: a7:2d:8a:22:dc:41:62:f3:ef:fe:46:b1:3d:87:59:76:bf:77: 62:7d:05:6e:9e:4b:ed:fe:b3:65:9d:89:2a:ef:a7:4c:ca:d9: 1c:c4:4e:8f:91:cd:94:20:ea:2e:cf:22:a0:a1:b9:29:33:14: 77:56:3b:be:af:60:ef:42:ff:c6:bb:07:be:50:ea:0f:13:b9: ee:30:b6:f2:d3:4d:3a:50:cf:2c:e9:fd:a3:fe:f1:a7:5b:4d: 7e:87:e7:5d:b4:36:3f:53:ec:97:53:a1:b9:a4:e1:58:5f:22: 3b:9a:73:c9:cb:27:1e:87:63:a2:61:96:f4:5a:66:c6:f8:87: c4:d1:13:25:91:f5:09:54:94:31:64:2a:55:e1:6e:ee:48:b5: 89:1f:2d:b8:85:7c:53:16:f0:55:2d:34:e8:f8:a7:87:7f:26: e5:bd:20:2c:7b:43:69:9e:7f:48:7d:8b:47:7e:4b:1d:d4:bc: 8c:ab:3c:62:db:99:de:8b:cc:e1:4f:03:37:85:ea:fc:cd:1d: d0:c4:02:35:c1:87:46:81:4a:8f:dc:0d:6c:a3:f3:46:ec:cb: 13:60:1b:62 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAwwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA2MDEx NjA1MjlaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDA4QjVFNUQxN0U2NkE1 NEYxRUVDOEM0MjJCNkQ1NUZDNkEwNDM5NzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDEaC4kvUM4GOBZPw8jeO8+rg6Cn9AEI0m8GZJrGqJwpmLDpfLD csRfZjFq7dZk/vGJUNB6r23m9LQqjuE20doHgtxw8Z5dmw4BsK4tglmYS0LYuOOJ sKhPmxXdcJ5TB8lHf0J0msAjx3MeH9ONRNrWAyC27jWAPRYW+KFnKDeTeaLp8XvJ htoksh1P13I+s88GR70uikXt2oI/EPhcjbFsGekeF/IX+YeHhV8O/bUsVxbMhjWT sO1q3naGinstN+J3LyPSK7ehipkGyczb8HD0T54C+w5Qs4p8Imwm3AEMGrdDseXa 76jpFENMhg7lXxB0ZlHOEIxeVq8gbY3cc6gbAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUCLXl0X5mpU8e7IxCK21V/GoEOXMwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0NMWGwwWDVtcFU4ZTdJeENLMjFWX0dvRU9YTS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExYjwwDQYJKoZIhvcNAQELBQADggEBALY6FtQN/D+g6xcGVR3eAP35kMVC 7utHVC3Zdtjv84ZV3RKXLKctiiLcQWLz7/5GsT2HWXa/d2J9BW6eS+3+s2WdiSrv p0zK2RzETo+RzZQg6i7PIqChuSkzFHdWO76vYO9C/8a7B75Q6g8Tue4wtvLTTTpQ zyzp/aP+8adbTX6H5120Nj9T7JdTobmk4VhfIjuac8nLJx6HY6JhlvRaZsb4h8TR EyWR9QlUlDFkKlXhbu5ItYkfLbiFfFMW8FUtNOj4p4d/JuW9ICx7Q2mef0h9i0d+ Sx3UvIyrPGLbmd6LzOFPAzeF6vzNHdDEAjXBh0aBSo/cDWyj80bsyxNgG2I= -----END CERTIFICATE-----Generated at Sat Apr 27 10:15:55 2024 by rpki-client on console-ams.rpki-client.org