$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/D-pniPByCmrOiNNZQpBmTMUTBro.roa File: D-pniPByCmrOiNNZQpBmTMUTBro.roa (raw, json) Hash identifier: bwFehXQcqU16diAJmVM92fhEWZ40U4IBKSRJ8YaEo1o= Subject key identifier: 0F:EA:67:88:F0:72:0A:6A:CE:88:D3:59:42:90:66:4C:C5:13:06:BA Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0302 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/D-pniPByCmrOiNNZQpBmTMUTBro.roa Signing time: Thu 01 Jun 2023 16:05:25 +0000 ROA not before: Thu 01 Jun 2023 16:05:25 +0000 ROA not after: Tue 14 May 2024 01:30:02 +0000 asID: 9605 IP address blocks: 49.98.68.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 May 2024 13:36:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 770 (0x302) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 1 16:05:25 2023 GMT Not After : May 14 01:30:02 2024 GMT Subject: CN=0FEA6788F0720A6ACE88D3594290664CC51306BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d6:86:e0:7a:20:7b:2a:ec:d7:d6:4b:07:c3: 63:8f:51:40:19:4c:9b:32:84:4e:40:f1:d9:38:13: b8:25:fa:b9:a4:98:bb:11:ee:39:b1:80:75:3d:79: 11:81:74:0b:f4:e9:27:80:b8:79:f1:93:a8:e0:2d: db:74:f2:45:86:c0:ca:a3:40:bc:d5:f2:fb:6b:ce: ee:1f:6c:59:17:fa:2f:6e:66:c3:70:54:1b:b5:50: 59:f0:49:19:ea:9b:5e:e4:df:dc:59:dd:0c:b3:e3: 32:5c:be:14:c0:5e:25:cb:b3:bf:5a:dd:6f:03:4b: be:26:cd:a5:c6:58:61:d8:b9:b8:98:cb:84:51:10: 1d:80:88:5d:0b:17:66:ee:2e:ac:ed:b7:1f:18:ec: 0b:7e:5a:b8:c3:ca:89:47:78:ba:85:53:2f:f7:46: 5f:46:85:ad:6f:5d:6f:88:e0:67:74:da:07:6f:4c: 19:d7:5b:5a:f9:d3:6d:0d:d3:56:36:79:ce:45:f4: b6:75:14:fe:4d:47:4c:89:0e:86:dc:cf:12:31:de: af:db:58:65:aa:6d:06:65:59:3e:77:86:bc:7c:b8: e9:eb:b4:79:43:31:06:86:ab:df:5c:ca:dc:fd:a0: 1b:e9:7f:59:9b:17:f3:99:e4:99:fc:a5:b6:49:a1: 0d:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:EA:67:88:F0:72:0A:6A:CE:88:D3:59:42:90:66:4C:C5:13:06:BA X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/D-pniPByCmrOiNNZQpBmTMUTBro.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.98.68.0/22 Signature Algorithm: sha256WithRSAEncryption 9d:aa:b2:6d:1a:56:5f:c7:27:d0:e3:70:6a:02:de:a3:85:2a: 50:92:43:c8:82:ad:d5:61:ec:a2:52:b2:ac:29:2c:1d:13:87: aa:5c:a0:7c:d4:d4:fd:60:25:00:bc:76:90:02:9c:e8:c2:52: 5c:30:08:e8:4c:3a:c7:2a:27:d4:9e:de:72:f8:6c:4d:66:ea: 28:61:f5:4f:18:7e:4e:f1:42:f6:36:a0:3c:2f:15:75:fd:60: 60:c8:74:95:c1:c3:fb:9a:3d:75:a8:4a:19:3d:9f:2b:26:6f: eb:dc:21:dc:73:0a:ad:dc:d7:41:5e:41:0d:32:60:f7:9b:7e: 6c:d2:4f:3a:42:ba:25:8a:72:ff:52:37:87:3b:52:22:45:bd: 78:a1:42:0b:3b:c9:2f:dd:9f:78:70:0a:d8:6b:d6:0a:3f:d2: fd:7c:9d:55:5b:b0:ed:66:aa:3c:d6:57:4e:92:79:c0:bd:e4: 71:5a:c1:d7:5a:15:4f:80:8b:ec:42:fa:97:d2:ac:6b:fe:de: 79:3c:71:f9:85:df:18:7f:8a:19:ee:48:3f:31:ec:b4:34:32: 2f:be:08:ec:6c:36:4c:07:d4:99:34:fc:87:9b:41:e9:09:43: 50:21:70:d9:ca:b1:f9:94:36:4e:6f:df:43:a4:ce:39:30:36: 3f:1e:90:98 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAwIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA2MDEx NjA1MjVaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDBGRUE2Nzg4RjA3MjBB NkFDRTg4RDM1OTQyOTA2NjRDQzUxMzA2QkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC01obgeiB7KuzX1ksHw2OPUUAZTJsyhE5A8dk4E7gl+rmkmLsR 7jmxgHU9eRGBdAv06SeAuHnxk6jgLdt08kWGwMqjQLzV8vtrzu4fbFkX+i9uZsNw VBu1UFnwSRnqm17k39xZ3Qyz4zJcvhTAXiXLs79a3W8DS74mzaXGWGHYubiYy4RR EB2AiF0LF2buLqzttx8Y7At+WrjDyolHeLqFUy/3Rl9Gha1vXW+I4Gd02gdvTBnX W1r5020N01Y2ec5F9LZ1FP5NR0yJDobczxIx3q/bWGWqbQZlWT53hrx8uOnrtHlD MQaGq99cytz9oBvpf1mbF/OZ5Jn8pbZJoQ2bAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUD+pniPByCmrOiNNZQpBmTMUTBrowHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0QtcG5pUEJ5Q21yT2lOTlpRcEJtVE1VVEJyby5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIxYkQwDQYJKoZIhvcNAQELBQADggEBAJ2qsm0aVl/HJ9DjcGoC3qOFKlCS Q8iCrdVh7KJSsqwpLB0Th6pcoHzU1P1gJQC8dpACnOjCUlwwCOhMOscqJ9Se3nL4 bE1m6ihh9U8Yfk7xQvY2oDwvFXX9YGDIdJXBw/uaPXWoShk9nysmb+vcIdxzCq3c 10FeQQ0yYPebfmzSTzpCuiWKcv9SN4c7UiJFvXihQgs7yS/dn3hwCthr1go/0v18 nVVbsO1mqjzWV06SecC95HFawddaFU+Ai+xC+pfSrGv+3nk8cfmF3xh/ihnuSD8x 7LQ0Mi++COxsNkwH1Jk0/IebQekJQ1AhcNnKsfmUNk5v30OkzjkwNj8ekJg= -----END CERTIFICATE-----Generated at Sat Apr 27 10:15:55 2024 by rpki-client on console-ams.rpki-client.org