$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/HfVyROokKTKkqRifWtfh3Pqaews.roa File: HfVyROokKTKkqRifWtfh3Pqaews.roa (raw, json) Hash identifier: XSrUdAF16KJb2//FRI7IUq+K48rzxCQiJ1D9Z1hN480= Subject key identifier: 1D:F5:72:44:EA:24:29:32:A4:A9:18:9F:5A:D7:E1:DC:FA:9A:7B:0B Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 07D9 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/HfVyROokKTKkqRifWtfh3Pqaews.roa Signing time: Tue 30 Apr 2024 02:08:56 +0000 ROA not before: Tue 30 Apr 2024 02:08:56 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 49.104.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 23 Jun 2024 11:53:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2009 (0x7d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 30 02:08:56 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=1DF57244EA242932A4A9189F5AD7E1DCFA9A7B0B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:53:b5:47:9e:ca:3c:d6:01:19:8e:f5:f2:05: 09:2e:2a:f2:fa:8a:cb:5f:e0:9b:b9:2f:1a:90:64: 06:6f:78:f6:e1:cc:48:eb:dc:d9:c2:e6:b1:81:d2: f5:16:be:49:4d:0f:5f:29:9a:2b:33:f2:52:3e:da: ed:01:1e:20:27:5c:2e:43:fe:f7:da:e7:d2:a2:7b: 07:6d:ae:41:6f:f3:3c:fb:2e:54:d0:2a:a0:f3:a7: 92:06:0d:a9:ce:ed:50:62:c7:32:16:9d:f8:d3:87: 8c:ce:9d:c7:aa:0f:65:e3:42:37:2f:6e:54:f5:a7: ee:85:cc:ff:e1:58:bd:51:f5:b1:aa:f5:dd:10:93: 23:d6:d7:b3:fb:01:66:ea:7d:8e:ea:eb:04:3d:44: 9a:f4:29:43:02:ef:bb:97:3e:2e:5b:a0:54:3f:40: 32:e8:58:5a:18:fa:15:6c:c2:42:cb:14:e2:f0:40: fd:4f:cc:c1:dc:08:ac:ed:d5:51:dc:7e:e4:c3:2a: 25:51:78:a9:6d:4e:8e:b6:23:7e:72:86:ff:b5:e2: 83:42:53:ee:5d:f4:69:c4:cc:fe:48:f9:51:74:ab: 92:d3:22:f2:27:46:53:ab:1e:ee:cb:e6:d6:f5:f7: 5a:cc:3c:65:d3:2d:2c:63:84:3c:89:6d:24:e8:fc: fa:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:F5:72:44:EA:24:29:32:A4:A9:18:9F:5A:D7:E1:DC:FA:9A:7B:0B X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/HfVyROokKTKkqRifWtfh3Pqaews.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.104.47.0/24 Signature Algorithm: sha256WithRSAEncryption 7b:54:70:dc:9b:76:2c:f3:09:df:de:e1:60:bf:da:8f:8b:86: 24:66:1d:66:c8:75:de:4d:13:b2:16:f7:b0:3b:15:7f:00:0a: 3f:f9:a4:0e:4c:26:3c:f0:99:80:90:dd:43:55:84:46:db:ee: 23:2c:f4:17:c8:48:d5:80:5e:2e:eb:5c:bd:42:ba:8e:2a:d9: ae:50:54:0b:ef:74:20:d4:8e:63:ea:e2:c4:ed:bc:2e:79:eb: f9:e2:b5:a8:d9:07:0c:d1:1c:d1:12:81:f6:75:36:43:e1:36: 3a:c9:e9:64:3b:dd:c6:18:a3:4a:23:d1:0d:05:7f:30:cd:fe: 01:87:56:2e:64:81:5d:be:25:90:7e:ae:b4:e4:ad:0b:60:db: b8:8f:16:06:7d:51:7e:94:81:93:45:f6:fc:15:e6:3f:e3:bb: 3b:e8:dd:71:fe:cf:d1:0b:49:ef:cb:ff:d9:86:e1:73:05:2f: 7b:05:3a:76:a2:4d:f4:a7:59:51:7c:18:58:cb:3d:4c:06:6b: 68:27:71:77:af:0a:b3:17:61:bb:16:c6:a2:c3:c0:2b:0a:1d: e4:4e:0d:04:25:e1:92:91:7e:6d:14:9c:81:f8:59:1d:99:88: bf:2e:ae:d3:06:4b:95:50:b9:2c:18:3e:9c:46:e2:1c:74:77: 41:b1:da:83 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICB9kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw MjA4NTZaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDFERjU3MjQ0RUEyNDI5 MzJBNEE5MTg5RjVBRDdFMURDRkE5QTdCMEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC1U7VHnso81gEZjvXyBQkuKvL6istf4Ju5LxqQZAZvePbhzEjr 3NnC5rGB0vUWvklND18pmisz8lI+2u0BHiAnXC5D/vfa59KiewdtrkFv8zz7LlTQ KqDzp5IGDanO7VBixzIWnfjTh4zOnceqD2XjQjcvblT1p+6FzP/hWL1R9bGq9d0Q kyPW17P7AWbqfY7q6wQ9RJr0KUMC77uXPi5boFQ/QDLoWFoY+hVswkLLFOLwQP1P zMHcCKzt1VHcfuTDKiVReKltTo62I35yhv+14oNCU+5d9GnEzP5I+VF0q5LTIvIn RlOrHu7L5tb191rMPGXTLSxjhDyJbSTo/Pq1AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUHfVyROokKTKkqRifWtfh3PqaewswHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0hmVnlST29rS1RLa3FSaWZXdGZoM1BxYWV3cy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAxaC8wDQYJKoZIhvcNAQELBQADggEBAHtUcNybdizzCd/e4WC/2o+LhiRm HWbIdd5NE7IW97A7FX8ACj/5pA5MJjzwmYCQ3UNVhEbb7iMs9BfISNWAXi7rXL1C uo4q2a5QVAvvdCDUjmPq4sTtvC556/nitajZBwzRHNESgfZ1NkPhNjrJ6WQ73cYY o0oj0Q0FfzDN/gGHVi5kgV2+JZB+rrTkrQtg27iPFgZ9UX6UgZNF9vwV5j/juzvo 3XH+z9ELSe/L/9mG4XMFL3sFOnaiTfSnWVF8GFjLPUwGa2gncXevCrMXYbsWxqLD wCsKHeRODQQl4ZKRfm0UnIH4WR2ZiL8urtMGS5VQuSwYPpxG4hx0d0Gx2oM= -----END CERTIFICATE-----Generated at Sun Jun 16 12:57:21 2024 by rpki-client on console-fra.rpki-client.org