$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ESU7tJ01XfFE-WDDgnRAwt4WxcI.roa File: ESU7tJ01XfFE-WDDgnRAwt4WxcI.roa (raw, json) Hash identifier: DIbyWCtcLRku2ufpErBx/ElPOYB3gpgRC2eoZe8q848= Subject key identifier: 11:25:3B:B4:9D:35:5D:F1:44:F9:60:C3:82:74:40:C2:DE:16:C5:C2 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0602 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ESU7tJ01XfFE-WDDgnRAwt4WxcI.roa Signing time: Thu 29 Feb 2024 01:35:47 +0000 ROA not before: Thu 29 Feb 2024 01:35:47 +0000 ROA not after: Fri 14 Feb 2025 01:30:03 +0000 asID: 9605 IP address blocks: 49.97.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1538 (0x602) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Feb 29 01:35:47 2024 GMT Not After : Feb 14 01:30:03 2025 GMT Subject: CN=11253BB49D355DF144F960C3827440C2DE16C5C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ef:9c:43:ba:3a:db:98:b9:38:cb:ad:83:b5: c6:43:98:ed:66:46:29:cf:01:51:40:0c:db:f3:a7: 1b:8d:d0:62:fc:4f:9f:e2:eb:8e:4d:28:61:0d:30: d1:fe:ec:fc:ba:2b:a9:fa:b9:e4:cb:e5:70:21:ff: c7:34:c7:d8:a0:ed:51:4f:3d:74:0b:10:46:65:11: 80:ef:84:2e:d8:be:20:b4:ee:5c:45:5c:60:8c:63: 09:ee:d6:f0:38:4a:8b:4c:6f:bc:5d:e5:2d:1f:d2: 65:0c:fe:40:8e:d4:81:3f:3a:6d:6d:fb:21:89:76: ca:c1:38:ea:35:a9:10:0b:2c:f1:b7:85:07:f7:d3: 88:bf:16:a1:0c:23:91:b9:27:3e:3a:df:2d:4c:8e: 10:09:bc:1e:6a:0e:cb:3f:e3:0c:d8:4c:df:76:cc: 7d:1b:38:0a:0b:07:2d:de:52:b4:77:d0:14:70:31: 37:4d:c9:db:15:7d:ad:75:70:26:fc:c2:46:67:56: ca:11:64:91:be:90:57:dd:81:c0:e4:56:bd:da:03: ca:00:d4:0d:7d:d0:29:41:b7:b4:b3:93:6a:67:1d: 34:b5:97:f7:f9:ed:be:8e:80:89:9f:3e:2c:4b:cd: ef:62:6e:8d:e7:02:eb:e9:b6:11:33:75:5c:df:a4: 8d:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:25:3B:B4:9D:35:5D:F1:44:F9:60:C3:82:74:40:C2:DE:16:C5:C2 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ESU7tJ01XfFE-WDDgnRAwt4WxcI.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.97.102.0/24 Signature Algorithm: sha256WithRSAEncryption ba:e7:fd:24:ed:07:9f:09:ec:ed:3b:dc:9c:72:bb:bc:ac:11: 0f:4b:b9:56:3a:69:91:fa:2a:cb:63:e8:99:76:47:b2:ac:4f: 2b:5b:ba:53:44:b8:2c:d4:69:08:41:ca:2a:fb:c7:56:50:82: ee:3b:f1:b0:a3:85:17:e4:20:1e:65:86:99:c4:79:f9:cc:1f: 72:f2:31:4f:30:b1:b0:e4:40:ed:4a:58:ca:19:e9:f6:80:34: 9f:a5:82:6b:ad:03:9b:aa:2d:80:db:86:82:29:86:cd:b1:d6: 3a:20:e6:78:19:7f:45:85:47:4e:96:20:b3:e4:d0:5b:2f:f1: d4:3f:cc:28:dd:a5:bc:eb:64:72:d1:88:17:6b:d2:2a:c5:54: b7:9a:85:36:5f:46:4c:55:5f:74:32:43:a2:9e:f2:1d:8a:45: 0d:76:a3:d9:44:b2:fc:ab:ab:8d:f1:ce:bf:b7:a1:3a:72:9e: 25:c5:eb:25:68:bf:b9:02:d8:5a:ac:a5:6b:74:31:50:78:8e: f6:a5:48:ab:f6:fc:65:21:bf:6d:ce:64:39:7c:ba:6b:11:0c: 7d:bd:64:b0:de:a4:97:f0:3a:45:7c:d4:d2:a9:59:a8:7c:5b: 6e:c9:46:7a:cf:e9:1d:9b:88:9a:cd:54:8a:90:78:55:10:43: f3:f0:7d:a5 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBgIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDAyMjkw MTM1NDdaFw0yNTAyMTQwMTMwMDNaMDMxMTAvBgNVBAMTKDExMjUzQkI0OUQzNTVE RjE0NEY5NjBDMzgyNzQ0MEMyREUxNkM1QzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDM75xDujrbmLk4y62DtcZDmO1mRinPAVFADNvzpxuN0GL8T5/i 645NKGENMNH+7Py6K6n6ueTL5XAh/8c0x9ig7VFPPXQLEEZlEYDvhC7YviC07lxF XGCMYwnu1vA4SotMb7xd5S0f0mUM/kCO1IE/Om1t+yGJdsrBOOo1qRALLPG3hQf3 04i/FqEMI5G5Jz463y1MjhAJvB5qDss/4wzYTN92zH0bOAoLBy3eUrR30BRwMTdN ydsVfa11cCb8wkZnVsoRZJG+kFfdgcDkVr3aA8oA1A190ClBt7Szk2pnHTS1l/f5 7b6OgImfPixLze9ibo3nAuvpthEzdVzfpI0hAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUESU7tJ01XfFE+WDDgnRAwt4WxcIwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0VTVTd0SjAxWGZGRS1XRERnblJBd3Q0V3hjSS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAxYWYwDQYJKoZIhvcNAQELBQADggEBALrn/STtB58J7O073Jxyu7ysEQ9L uVY6aZH6Kstj6Jl2R7KsTytbulNEuCzUaQhByir7x1ZQgu478bCjhRfkIB5lhpnE efnMH3LyMU8wsbDkQO1KWMoZ6faANJ+lgmutA5uqLYDbhoIphs2x1jog5ngZf0WF R06WILPk0Fsv8dQ/zCjdpbzrZHLRiBdr0irFVLeahTZfRkxVX3QyQ6Ke8h2KRQ12 o9lEsvyrq43xzr+3oTpyniXF6yVov7kC2FqspWt0MVB4jvalSKv2/GUhv23OZDl8 umsRDH29ZLDepJfwOkV81NKpWah8W27JRnrP6R2biJrNVIqQeFUQQ/PwfaU= -----END CERTIFICATE-----Generated at Sat Jun 1 13:38:46 2024 by rpki-client on console-fra.rpki-client.org