$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/GTlVdSUbje1VoSOtQ0nYmouvbbg.roa File: GTlVdSUbje1VoSOtQ0nYmouvbbg.roa (raw, json) Hash identifier: tMbTwAmYL0eSScfjOX5uC6gNwAXPLMCDUD+8ZdnpyHI= Subject key identifier: 19:39:55:75:25:1B:8D:ED:55:A1:23:AD:43:49:D8:9A:8B:AF:6D:B8 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 06D5 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/GTlVdSUbje1VoSOtQ0nYmouvbbg.roa Signing time: Tue 30 Apr 2024 01:49:32 +0000 ROA not before: Tue 30 Apr 2024 01:49:32 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 49.104.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Jun 2024 01:30:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1749 (0x6d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 30 01:49:32 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=19395575251B8DED55A123AD4349D89A8BAF6DB8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:45:97:53:c7:c9:9f:84:01:45:8f:86:1c:79: 75:6d:d3:84:9c:69:57:39:1c:b4:21:bf:b7:29:2b: 74:39:d2:9d:6c:ee:3d:10:96:f4:74:49:7a:20:84: 5a:93:cc:e6:fe:90:7f:65:b7:97:87:99:b7:ff:07: 7e:a0:ad:44:c1:fa:c9:f9:cf:c9:52:76:7d:fe:5d: d2:8c:d5:ab:a6:15:c4:14:f3:51:d0:1f:9a:11:49: 38:33:48:4f:bb:68:53:c1:75:25:50:d9:33:8a:01: 6a:68:58:ff:32:cc:e6:e0:25:f0:d6:26:f0:2d:8c: 24:7a:3b:df:6c:0e:80:9e:12:e1:82:25:64:90:d0: 47:73:a5:c3:51:9c:03:37:14:66:aa:41:4f:fe:7b: 38:6a:17:09:22:49:a2:18:66:b4:93:0a:f1:f1:75: 9d:75:4a:77:5e:53:e9:88:0c:03:f5:35:62:11:62: d5:7c:6f:b7:11:e8:99:88:13:9d:a0:a6:aa:b2:47: 16:04:b6:45:ea:6c:95:9b:2a:b8:c7:39:4a:13:5b: 87:38:9c:50:48:5b:07:da:53:da:9d:9e:ae:5a:82: 94:0e:69:4c:a0:04:05:ad:37:dc:b1:84:b5:bd:c6: e2:4e:e2:59:a8:fa:01:3e:c2:f3:1b:ce:70:10:ff: a0:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:39:55:75:25:1B:8D:ED:55:A1:23:AD:43:49:D8:9A:8B:AF:6D:B8 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/GTlVdSUbje1VoSOtQ0nYmouvbbg.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.104.10.0/24 Signature Algorithm: sha256WithRSAEncryption b7:45:86:fe:97:1c:88:2a:e5:54:86:34:b8:b6:77:db:fb:38: aa:10:7e:70:db:3f:be:75:48:f8:27:2c:41:f9:50:0c:53:61: bc:a9:5d:01:11:62:cc:18:f9:3a:1a:24:4b:29:87:c3:33:14: c1:96:0d:b6:2f:de:c2:12:fb:48:88:3d:09:24:33:84:81:2a: 5b:79:3b:f9:12:48:70:09:19:08:57:1d:cd:d6:9c:85:de:10: ab:27:29:d3:a9:f9:ff:8a:a9:0e:c0:33:40:1f:41:16:38:e7: 67:91:4a:c6:d0:2e:82:1a:b1:d6:42:26:d5:ee:19:b6:de:67: 1b:1f:40:89:f4:e8:c5:31:f3:e0:f4:99:25:07:8d:dd:91:78: c0:fd:fa:46:08:2a:23:2c:ec:7d:32:23:7a:43:ce:72:0d:fb: 3d:ff:bd:3f:ad:30:b5:5a:cb:e2:d0:5c:38:83:6c:c1:c2:b0: 77:6d:b6:f3:7c:ae:7d:86:90:ed:75:1f:e3:a0:8c:6f:30:ee: bc:99:0f:26:46:7e:fd:c0:a9:6a:51:8f:c6:c3:f0:32:a1:aa: 86:d4:6e:f5:20:23:31:eb:53:fb:a5:7b:7f:7f:f2:df:81:d2: b1:c3:be:22:02:6c:df:86:4e:d5:bc:f0:6c:03:10:d5:d1:b8: fa:d5:26:e0 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBtUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw MTQ5MzJaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDE5Mzk1NTc1MjUxQjhE RUQ1NUExMjNBRDQzNDlEODlBOEJBRjZEQjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC/RZdTx8mfhAFFj4YceXVt04ScaVc5HLQhv7cpK3Q50p1s7j0Q lvR0SXoghFqTzOb+kH9lt5eHmbf/B36grUTB+sn5z8lSdn3+XdKM1aumFcQU81HQ H5oRSTgzSE+7aFPBdSVQ2TOKAWpoWP8yzObgJfDWJvAtjCR6O99sDoCeEuGCJWSQ 0EdzpcNRnAM3FGaqQU/+ezhqFwkiSaIYZrSTCvHxdZ11SndeU+mIDAP1NWIRYtV8 b7cR6JmIE52gpqqyRxYEtkXqbJWbKrjHOUoTW4c4nFBIWwfaU9qdnq5agpQOaUyg BAWtN9yxhLW9xuJO4lmo+gE+wvMbznAQ/6AjAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUGTlVdSUbje1VoSOtQ0nYmouvbbgwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0dUbFZkU1ViamUxVm9TT3RRMG5ZbW91dmJiZy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAxaAowDQYJKoZIhvcNAQELBQADggEBALdFhv6XHIgq5VSGNLi2d9v7OKoQ fnDbP751SPgnLEH5UAxTYbypXQERYswY+ToaJEsph8MzFMGWDbYv3sIS+0iIPQkk M4SBKlt5O/kSSHAJGQhXHc3WnIXeEKsnKdOp+f+KqQ7AM0AfQRY452eRSsbQLoIa sdZCJtXuGbbeZxsfQIn06MUx8+D0mSUHjd2ReMD9+kYIKiMs7H0yI3pDznIN+z3/ vT+tMLVay+LQXDiDbMHCsHdttvN8rn2GkO11H+OgjG8w7ryZDyZGfv3AqWpRj8bD 8DKhqobUbvUgIzHrU/ule39/8t+B0rHDviICbN+GTtW88GwDENXRuPrVJuA= -----END CERTIFICATE-----Generated at Sat Jun 15 02:01:41 2024 by rpki-client on console-fra.rpki-client.org