$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/FYlxUk5vIi-ceZJMMKbqCZfI3yc.roa File: FYlxUk5vIi-ceZJMMKbqCZfI3yc.roa (raw, json) Hash identifier: 8Al0SOvX2Rmhhe5Xhjizz08ZDLho/dDQmF3xW0gUlmk= Subject key identifier: 15:89:71:52:4E:6F:22:2F:9C:79:92:4C:30:A6:EA:09:97:C8:DF:27 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 06A5 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/FYlxUk5vIi-ceZJMMKbqCZfI3yc.roa Signing time: Tue 30 Apr 2024 01:43:16 +0000 ROA not before: Tue 30 Apr 2024 01:43:16 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 49.98.140.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1701 (0x6a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 30 01:43:16 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=158971524E6F222F9C79924C30A6EA0997C8DF27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:6f:07:13:59:95:ed:48:1c:59:72:18:27:ac: 5b:a5:4e:1c:3f:94:4c:bf:c4:d6:33:64:4c:e3:b2: d5:85:47:48:4b:f5:df:f6:85:72:96:16:19:db:ba: e6:58:1b:bf:6c:b2:8b:58:44:5e:ec:f3:d9:71:84: ed:6b:b3:12:89:41:56:1d:e0:b2:84:0a:a1:6e:af: a7:b2:b7:e1:ba:5c:bb:8d:8c:70:a0:a2:23:bb:e1: 84:b6:e7:da:bf:0a:ca:40:0e:d1:96:c8:aa:19:d3: 9d:0e:6e:39:0d:bc:39:49:11:11:c9:47:09:7e:1b: a0:bd:f7:81:0f:ef:62:d5:69:7a:7b:d9:c4:1f:71: 31:49:92:e8:bb:f5:5f:5e:ad:28:35:a9:5f:16:39: 8f:7f:19:32:a6:5e:5f:be:7d:96:88:f2:ad:62:17: 1c:d0:ab:1c:95:46:d0:e0:07:00:39:7a:e9:4d:6c: 8e:8f:86:10:91:6d:bd:47:07:3e:91:8b:df:65:c1: 52:83:25:e1:95:67:d8:f8:b0:98:ff:c8:03:0b:3f: 95:8a:cd:c5:9a:7c:f8:bf:84:f3:ea:fc:ae:e1:cd: ab:77:88:ac:60:48:6a:a6:81:f1:e2:96:34:59:33: 3d:e2:70:b0:95:55:2c:a4:87:a7:fa:70:a9:f5:aa: e9:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:89:71:52:4E:6F:22:2F:9C:79:92:4C:30:A6:EA:09:97:C8:DF:27 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/FYlxUk5vIi-ceZJMMKbqCZfI3yc.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.98.140.0/23 Signature Algorithm: sha256WithRSAEncryption 53:33:85:7c:86:f4:6e:aa:fb:ce:e8:ec:31:d4:ff:41:cf:92: 58:a0:c7:99:96:32:90:f0:63:1a:40:66:0b:79:48:e0:a7:8b: c8:d7:c6:da:75:8f:91:20:c5:27:f2:7e:ce:c6:84:d3:cd:ce: 8f:46:74:fb:cd:c3:2b:a8:eb:c2:32:c8:58:1c:a5:8b:bd:fa: cc:ce:78:77:b9:49:4a:9c:9b:d8:52:2a:75:30:0b:d7:00:dd: 9a:68:96:03:39:e9:ae:0d:0b:c9:6b:b1:88:86:8f:40:f9:7f: e3:37:95:3d:a0:f6:76:cc:76:12:c2:89:56:de:50:7a:0b:f2: db:db:0a:1e:d6:e6:75:89:61:d7:0a:d9:0d:88:3e:55:4a:72: 72:aa:e7:17:e1:da:96:37:b2:79:fd:a3:99:7d:00:c1:63:37: 70:cc:e6:42:65:a1:3b:9b:f3:5f:72:85:12:0d:db:bc:75:09: 24:52:14:83:37:2a:83:57:57:b9:87:f0:1f:7f:c9:ff:25:62: b5:f1:43:fa:bc:41:fb:96:52:75:76:00:55:4f:0e:31:35:44: 41:57:9d:35:b3:2f:86:68:9c:d1:e8:5d:28:db:e0:f0:e0:05: f5:ec:0c:0f:3c:b4:fd:c2:83:c2:38:2c:40:b8:00:59:7c:08: db:61:63:1f -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBqUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw MTQzMTZaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDE1ODk3MTUyNEU2RjIy MkY5Qzc5OTI0QzMwQTZFQTA5OTdDOERGMjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDVbwcTWZXtSBxZchgnrFulThw/lEy/xNYzZEzjstWFR0hL9d/2 hXKWFhnbuuZYG79ssotYRF7s89lxhO1rsxKJQVYd4LKECqFur6eyt+G6XLuNjHCg oiO74YS259q/CspADtGWyKoZ050ObjkNvDlJERHJRwl+G6C994EP72LVaXp72cQf cTFJkui79V9erSg1qV8WOY9/GTKmXl++fZaI8q1iFxzQqxyVRtDgBwA5eulNbI6P hhCRbb1HBz6Ri99lwVKDJeGVZ9j4sJj/yAMLP5WKzcWafPi/hPPq/K7hzat3iKxg SGqmgfHiljRZMz3icLCVVSykh6f6cKn1qul9AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUFYlxUk5vIi+ceZJMMKbqCZfI3ycwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0ZZbHhVazV2SWktY2VaSk1NS2JxQ1pmSTN5Yy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExYowwDQYJKoZIhvcNAQELBQADggEBAFMzhXyG9G6q+87o7DHU/0HPklig x5mWMpDwYxpAZgt5SOCni8jXxtp1j5EgxSfyfs7GhNPNzo9GdPvNwyuo68IyyFgc pYu9+szOeHe5SUqcm9hSKnUwC9cA3ZpolgM56a4NC8lrsYiGj0D5f+M3lT2g9nbM dhLCiVbeUHoL8tvbCh7W5nWJYdcK2Q2IPlVKcnKq5xfh2pY3snn9o5l9AMFjN3DM 5kJloTub819yhRIN27x1CSRSFIM3KoNXV7mH8B9/yf8lYrXxQ/q8QfuWUnV2AFVP DjE1REFXnTWzL4ZonNHoXSjb4PDgBfXsDA88tP3Cg8I4LEC4AFl8CNthYx8= -----END CERTIFICATE-----Generated at Sat Jun 1 13:38:46 2024 by rpki-client on console-fra.rpki-client.org