$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/FDrG6UO5OgFZrjs21k_vtsXs7Qc.roa File: FDrG6UO5OgFZrjs21k_vtsXs7Qc.roa (raw, json) Hash identifier: 3dNv9898gkcWw9snR0s3EbMrYd+HD3a7nvcZ0uMUKgg= Subject key identifier: 14:3A:C6:E9:43:B9:3A:01:59:AE:3B:36:D6:4F:EF:B6:C5:EC:ED:07 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 05CF Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/FDrG6UO5OgFZrjs21k_vtsXs7Qc.roa Signing time: Thu 29 Feb 2024 01:32:11 +0000 ROA not before: Thu 29 Feb 2024 01:32:11 +0000 ROA not after: Fri 14 Feb 2025 01:30:03 +0000 asID: 9605 IP address blocks: 49.97.110.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:22:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1487 (0x5cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Feb 29 01:32:11 2024 GMT Not After : Feb 14 01:30:03 2025 GMT Subject: CN=143AC6E943B93A0159AE3B36D64FEFB6C5ECED07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:d2:9b:14:bc:67:00:01:6b:85:8b:10:42:e0: 72:86:65:69:87:ee:77:59:ad:4f:9b:f7:2e:0d:c3: c1:61:f1:b8:59:c2:e8:99:96:40:4c:3f:af:04:99: c0:9e:9e:07:7a:b0:46:9a:44:d3:da:80:86:e0:10: 14:ce:e0:7b:02:9c:a7:7c:79:58:80:86:78:28:e3: 63:11:96:4e:2c:b6:d8:26:e2:2d:ab:6b:c1:36:2d: 62:ee:0a:8c:7d:f9:c1:b2:42:97:01:00:f3:04:1c: 1b:d9:b7:ed:4c:c1:59:06:1a:6d:cd:50:f1:4d:f5: d7:3c:f5:ec:5a:94:0d:5c:72:6a:00:d1:38:80:ce: 1c:db:25:a9:a9:c6:2c:74:82:22:c3:47:e2:4c:e5: ed:46:45:41:c3:9f:cc:a2:ae:7a:cd:c2:8e:bb:cf: 1b:4d:40:e6:df:a1:5c:ff:cd:0d:a8:49:8a:14:96: 70:09:1d:b1:db:ef:f7:0a:99:c2:7a:c4:c1:0d:4f: c4:bf:58:1f:5c:ab:4f:8c:24:8d:29:a0:d6:64:85: e6:01:71:14:cb:f1:bd:88:c7:ce:2d:a1:7c:64:f8: bb:df:32:7b:d0:4b:7f:c8:fc:57:93:f3:fc:e1:ee: cb:b7:dc:f5:80:fc:c0:b1:d1:f1:41:0d:b9:f4:16: fe:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:3A:C6:E9:43:B9:3A:01:59:AE:3B:36:D6:4F:EF:B6:C5:EC:ED:07 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/FDrG6UO5OgFZrjs21k_vtsXs7Qc.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.97.110.0/23 Signature Algorithm: sha256WithRSAEncryption 89:56:86:5d:fc:22:93:7f:18:19:6b:e0:07:7e:91:0a:20:68: 0d:71:e8:ea:5d:28:00:e7:9c:68:b1:52:6b:e8:38:da:27:9e: 2d:18:5b:1e:02:1a:16:7e:63:c0:01:d8:ab:12:c6:aa:4a:c5: c5:5c:11:e0:22:12:ee:4b:73:f1:66:72:d7:c7:77:43:c7:1d: ca:f3:a3:9e:df:a8:17:99:85:1f:fa:81:75:b8:7a:8b:92:63: d4:2e:a5:bf:3b:04:45:c5:2c:97:f0:4f:df:57:4f:8e:32:4f: d5:6a:9f:2e:ef:b2:12:f9:a6:21:46:c5:0d:cc:54:2b:92:6b: b4:ae:16:00:a4:26:f5:3e:20:cb:3a:d0:17:d8:71:ed:c7:67: ca:65:86:40:bb:4a:fb:68:f1:aa:0e:37:bd:31:33:9a:a2:71: 41:b5:de:82:3b:14:d5:5d:df:84:fb:10:0c:10:4d:0e:a5:b8: 53:8d:c4:eb:5e:ba:da:25:93:03:cd:45:ca:43:a2:f6:53:3a: e1:d6:65:b0:8c:c1:6c:13:17:97:d2:08:70:d2:3e:ea:ab:53: 57:cf:c1:b0:a7:2d:fe:30:ed:4d:f2:d3:04:dd:7a:6b:b0:24: e4:bc:e0:5a:b5:1d:a6:72:3c:d4:49:1a:e3:1b:cd:e6:14:c7: ad:c4:7a:26 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBc8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDAyMjkw MTMyMTFaFw0yNTAyMTQwMTMwMDNaMDMxMTAvBgNVBAMTKDE0M0FDNkU5NDNCOTNB MDE1OUFFM0IzNkQ2NEZFRkI2QzVFQ0VEMDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDp0psUvGcAAWuFixBC4HKGZWmH7ndZrU+b9y4Nw8Fh8bhZwuiZ lkBMP68EmcCengd6sEaaRNPagIbgEBTO4HsCnKd8eViAhngo42MRlk4sttgm4i2r a8E2LWLuCox9+cGyQpcBAPMEHBvZt+1MwVkGGm3NUPFN9dc89exalA1ccmoA0TiA zhzbJampxix0giLDR+JM5e1GRUHDn8yirnrNwo67zxtNQObfoVz/zQ2oSYoUlnAJ HbHb7/cKmcJ6xMENT8S/WB9cq0+MJI0poNZkheYBcRTL8b2Ix84toXxk+LvfMnvQ S3/I/FeT8/zh7su33PWA/MCx0fFBDbn0Fv5DAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUFDrG6UO5OgFZrjs21k/vtsXs7QcwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0ZEckc2VU81T2dGWnJqczIxa192dHNYczdRYy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExYW4wDQYJKoZIhvcNAQELBQADggEBAIlWhl38IpN/GBlr4Ad+kQogaA1x 6OpdKADnnGixUmvoONonni0YWx4CGhZ+Y8AB2KsSxqpKxcVcEeAiEu5Lc/FmctfH d0PHHcrzo57fqBeZhR/6gXW4eouSY9Qupb87BEXFLJfwT99XT44yT9Vqny7vshL5 piFGxQ3MVCuSa7SuFgCkJvU+IMs60BfYce3HZ8plhkC7Svto8aoON70xM5qicUG1 3oI7FNVd34T7EAwQTQ6luFONxOteutolkwPNRcpDovZTOuHWZbCMwWwTF5fSCHDS PuqrU1fPwbCnLf4w7U3y0wTdemuwJOS84Fq1HaZyPNRJGuMbzeYUx63EeiY= -----END CERTIFICATE-----Generated at Fri Nov 22 16:45:39 2024 by rpki-client on console-ams.rpki-client.org