$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/G5XXAK-SFPD9lM8Bvupx4C3WoZs.roa File: G5XXAK-SFPD9lM8Bvupx4C3WoZs.roa (raw, json) Hash identifier: bbT3+iI6YUykbqGrzXJU5X8BSsENEi6jQKbEMDZP5ak= Subject key identifier: 1B:95:D7:00:AF:92:14:F0:FD:94:CF:01:BE:EA:71:E0:2D:D6:A1:9B Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0938 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/G5XXAK-SFPD9lM8Bvupx4C3WoZs.roa Signing time: Mon 17 Jun 2024 08:32:02 +0000 ROA not before: Mon 17 Jun 2024 08:32:02 +0000 ROA not after: Sun 15 Jun 2025 01:30:03 +0000 asID: 9605 IP address blocks: 49.96.112.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 22:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2360 (0x938) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 17 08:32:02 2024 GMT Not After : Jun 15 01:30:03 2025 GMT Subject: CN=1B95D700AF9214F0FD94CF01BEEA71E02DD6A19B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:75:37:a0:9f:82:dc:02:35:76:c1:cf:55:a3: 15:72:a3:6b:67:b7:a8:dc:68:1f:a8:79:f2:a6:c3: c4:27:c9:3a:2e:04:6a:d4:33:d5:41:1a:33:c9:cc: 1e:c5:fc:78:35:c1:5c:d3:53:9c:2f:8a:68:09:5d: 5b:ec:20:44:1a:1c:59:ce:4e:fa:70:2b:b9:c1:f7: b6:76:05:f3:d5:86:e7:ec:f7:54:41:42:ea:30:6d: f6:13:ee:9e:5c:95:6e:10:2b:3c:fe:71:49:b0:0b: 36:90:0c:1b:bb:b7:84:5b:e4:f0:84:fa:78:07:21: ce:c5:05:39:82:f6:b3:ae:fc:90:77:34:9e:68:2a: 90:0c:54:a7:b9:aa:01:18:7c:0b:ea:57:0f:97:d3: 75:53:c0:d8:cd:4a:db:1e:ba:07:3d:0c:52:49:13: a6:19:48:91:c4:67:74:30:37:21:99:52:91:cd:a1: da:b9:f4:6c:7e:e9:da:70:d3:f4:22:a9:bb:91:40: fb:f7:ce:cc:c8:85:14:02:fb:5e:b1:c6:fe:21:db: 00:8d:a6:25:25:63:22:7f:dd:da:34:d9:2e:59:09: cd:8a:50:a1:84:54:a2:93:4d:7d:00:86:e9:80:03: d3:47:4c:5d:bf:12:6f:f3:40:f7:b2:7a:c7:35:cd: 56:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:95:D7:00:AF:92:14:F0:FD:94:CF:01:BE:EA:71:E0:2D:D6:A1:9B X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/G5XXAK-SFPD9lM8Bvupx4C3WoZs.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.96.112.0/22 Signature Algorithm: sha256WithRSAEncryption cd:bc:b1:03:24:a2:af:68:f6:4f:1a:66:14:e0:ba:98:58:7b: 77:66:4d:31:b3:61:30:77:f9:11:46:e5:e6:90:cd:b1:e6:f0: 19:b1:08:c5:6d:83:64:1f:b3:00:54:6c:f6:fc:e2:e3:73:5f: 27:dd:07:c2:7c:f6:ba:92:09:8e:ab:fe:c6:4d:38:db:cb:33: 67:77:7e:23:42:0a:ce:00:0f:0b:3e:1c:ac:47:03:02:39:a3: 6c:77:39:92:c8:48:6e:62:96:c2:c7:95:56:a6:0e:de:7d:b9: 78:18:d2:7d:c8:bd:48:99:ea:54:66:fe:33:4e:58:5b:8c:ea: 05:48:d3:7c:61:cf:32:05:38:d9:53:2e:9b:ee:8a:34:7d:93: e4:0e:88:55:cd:6d:69:63:61:05:92:ad:f1:6a:ad:c0:22:0a: b4:2a:a9:e2:57:16:24:b5:d8:0f:67:df:39:ef:9e:0c:28:c7: 7b:be:b7:92:68:e1:e7:17:be:1b:56:f9:a1:5a:dc:ac:26:d0: 7e:97:a1:fe:a5:19:25:b8:ac:a3:56:4d:ce:99:89:ec:df:97: 6f:5c:46:a7:5b:c3:8a:b9:78:9a:76:bf:e6:7d:44:b7:fe:7e: da:f1:08:cc:e3:b3:e9:eb:de:28:cb:76:65:1a:0a:e3:0d:ec: 7d:19:fa:f9 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCTgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA2MTcw ODMyMDJaFw0yNTA2MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDFCOTVENzAwQUY5MjE0 RjBGRDk0Q0YwMUJFRUE3MUUwMkRENkExOUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCqdTegn4LcAjV2wc9VoxVyo2tnt6jcaB+oefKmw8QnyTouBGrU M9VBGjPJzB7F/Hg1wVzTU5wvimgJXVvsIEQaHFnOTvpwK7nB97Z2BfPVhufs91RB QuowbfYT7p5clW4QKzz+cUmwCzaQDBu7t4Rb5PCE+ngHIc7FBTmC9rOu/JB3NJ5o KpAMVKe5qgEYfAvqVw+X03VTwNjNStseugc9DFJJE6YZSJHEZ3QwNyGZUpHNodq5 9Gx+6dpw0/QiqbuRQPv3zszIhRQC+16xxv4h2wCNpiUlYyJ/3do02S5ZCc2KUKGE VKKTTX0AhumAA9NHTF2/Em/zQPeyesc1zVY5AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUG5XXAK+SFPD9lM8Bvupx4C3WoZswHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0c1WFhBSy1TRlBEOWxNOEJ2dXB4NEMzV29acy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIxYHAwDQYJKoZIhvcNAQELBQADggEBAM28sQMkoq9o9k8aZhTguphYe3dm TTGzYTB3+RFG5eaQzbHm8BmxCMVtg2QfswBUbPb84uNzXyfdB8J89rqSCY6r/sZN ONvLM2d3fiNCCs4ADws+HKxHAwI5o2x3OZLISG5ilsLHlVamDt59uXgY0n3IvUiZ 6lRm/jNOWFuM6gVI03xhzzIFONlTLpvuijR9k+QOiFXNbWljYQWSrfFqrcAiCrQq qeJXFiS12A9n3znvngwox3u+t5Jo4ecXvhtW+aFa3Kwm0H6Xof6lGSW4rKNWTc6Z iezfl29cRqdbw4q5eJp2v+Z9RLf+ftrxCMzjs+nr3ijLdmUaCuMN7H0Z+vk= -----END CERTIFICATE-----Generated at Mon Nov 25 23:59:10 2024 by rpki-client on console-fra.rpki-client.org