$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/HGIH_Sza6yO4dpjRKpmlqc4uTvY.roa File: HGIH_Sza6yO4dpjRKpmlqc4uTvY.roa (raw, json) Hash identifier: Z6HcnExchKL+HAd4oFixZEVyA9nUjNREYnKV7voQJqY= Subject key identifier: 1C:62:07:FD:2C:DA:EB:23:B8:76:98:D1:2A:99:A5:A9:CE:2E:4E:F6 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 08A4 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/HGIH_Sza6yO4dpjRKpmlqc4uTvY.roa Signing time: Tue 30 Apr 2024 02:22:32 +0000 ROA not before: Tue 30 Apr 2024 02:22:32 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 49.98.160.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2212 (0x8a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 30 02:22:32 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=1C6207FD2CDAEB23B87698D12A99A5A9CE2E4EF6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:af:59:1e:45:3a:85:64:ae:d1:5f:be:cc:15: 80:5f:26:99:50:18:f2:f5:93:5b:4e:ac:f4:bb:a7: 2b:1f:4b:89:2c:d8:09:59:f8:a3:73:04:01:3d:a7: b5:10:00:f3:08:50:99:76:98:f6:d9:49:4c:c0:f5: da:c6:08:0a:67:0c:e5:7d:97:a3:4f:22:6a:d3:e4: 29:e2:7a:0c:b8:33:01:90:a1:c9:ac:1d:ca:d1:d2: 6e:d5:62:19:32:bb:ae:97:71:50:57:da:e4:85:21: e5:56:d2:da:37:3e:79:f8:62:12:a3:ac:4a:b4:3c: 81:84:1f:02:3c:9c:4a:ef:97:c2:ec:a0:c7:f5:00: d9:3c:43:30:48:d6:56:d2:db:40:dd:eb:6d:10:c6: 96:36:41:41:4a:d0:9d:8e:68:87:9f:96:1e:d2:fc: 9e:0a:ca:f7:d4:14:d5:de:21:75:9c:3c:ab:3b:a9: 05:8b:79:69:b0:19:a1:02:40:54:73:91:11:95:f1: dc:42:07:99:28:68:0a:57:fe:12:4f:83:87:77:94: 14:2c:0a:f1:db:60:09:7a:00:3e:5d:06:ea:bf:e4: 76:1b:d7:5a:21:1f:6e:dc:5a:4c:e3:6e:dd:5f:c1: 16:54:86:4e:c7:39:61:a7:0d:c1:d6:02:5c:95:3a: 5e:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:62:07:FD:2C:DA:EB:23:B8:76:98:D1:2A:99:A5:A9:CE:2E:4E:F6 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/HGIH_Sza6yO4dpjRKpmlqc4uTvY.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.98.160.0/22 Signature Algorithm: sha256WithRSAEncryption e1:12:95:eb:8c:04:1b:65:30:90:4a:9b:7f:0b:06:cd:61:d8: 8f:d4:57:89:f0:b6:19:84:18:44:55:fa:63:ad:ec:ad:a3:a8: 20:d4:17:51:89:5a:8a:84:67:f2:57:be:73:ef:90:14:69:b1: 2b:de:51:0c:39:79:c7:df:1b:64:2c:e9:b1:3c:94:39:08:68: 46:a0:a1:b5:99:6d:77:89:a4:f2:74:3a:cf:3d:b4:24:d7:8d: 2a:9d:5f:99:e8:4e:93:5b:0d:21:7b:f1:ca:82:d6:4f:3f:72: 2b:0f:e7:8d:27:ec:32:fd:8b:c3:2b:1d:d4:db:23:dd:38:2e: 50:ed:96:ee:01:c0:75:b5:77:5e:cc:7c:b6:4d:41:2c:ca:bf: c9:34:de:49:dd:ff:70:19:05:a3:68:f3:24:b8:98:5d:c8:4f: 44:79:e5:dc:2c:3e:d7:42:71:e3:05:13:3b:26:29:ea:61:6f: 92:61:d1:f6:f3:dc:8a:f1:68:fe:88:cb:8c:7a:d4:bc:e8:29: c3:37:c3:9e:25:ef:66:fb:4a:c7:7a:0f:e4:b1:50:27:88:56: b3:7e:61:d7:66:41:91:3d:e7:76:ca:76:52:57:de:8d:97:12: 7c:f9:c4:5d:04:e2:50:c7:11:14:c2:6a:78:57:c5:f2:8b:50: 8c:05:06:cc -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCKQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw MjIyMzJaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDFDNjIwN0ZEMkNEQUVC MjNCODc2OThEMTJBOTlBNUE5Q0UyRTRFRjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDor1keRTqFZK7RX77MFYBfJplQGPL1k1tOrPS7pysfS4ks2AlZ +KNzBAE9p7UQAPMIUJl2mPbZSUzA9drGCApnDOV9l6NPImrT5Cniegy4MwGQocms HcrR0m7VYhkyu66XcVBX2uSFIeVW0to3Pnn4YhKjrEq0PIGEHwI8nErvl8LsoMf1 ANk8QzBI1lbS20Dd620QxpY2QUFK0J2OaIeflh7S/J4KyvfUFNXeIXWcPKs7qQWL eWmwGaECQFRzkRGV8dxCB5koaApX/hJPg4d3lBQsCvHbYAl6AD5dBuq/5HYb11oh H27cWkzjbt1fwRZUhk7HOWGnDcHWAlyVOl5NAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUHGIH/Sza6yO4dpjRKpmlqc4uTvYwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0hHSUhfU3phNnlPNGRwalJLcG1scWM0dVR2WS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIxYqAwDQYJKoZIhvcNAQELBQADggEBAOESleuMBBtlMJBKm38LBs1h2I/U V4nwthmEGERV+mOt7K2jqCDUF1GJWoqEZ/JXvnPvkBRpsSveUQw5ecffG2Qs6bE8 lDkIaEagobWZbXeJpPJ0Os89tCTXjSqdX5noTpNbDSF78cqC1k8/cisP540n7DL9 i8MrHdTbI904LlDtlu4BwHW1d17MfLZNQSzKv8k03knd/3AZBaNo8yS4mF3IT0R5 5dwsPtdCceMFEzsmKephb5Jh0fbz3IrxaP6Iy4x61LzoKcM3w54l72b7Ssd6D+Sx UCeIVrN+YddmQZE953bKdlJX3o2XEnz5xF0E4lDHERTCanhXxfKLUIwFBsw= -----END CERTIFICATE-----Generated at Sat Jun 1 13:38:47 2024 by rpki-client on console-fra.rpki-client.org