$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/IHHVD_ZJQcwBX-nZx-G959GyjG4.roa File: IHHVD_ZJQcwBX-nZx-G959GyjG4.roa (raw, json) Hash identifier: nfRutsqc+hRRgTfSkbXbJ0AuYyWqZYkXysd+5yAPiyM= Subject key identifier: 20:71:D5:0F:F6:49:41:CC:01:5F:E9:D9:C7:E1:BD:E7:D1:B2:8C:6E Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0676 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/IHHVD_ZJQcwBX-nZx-G959GyjG4.roa Signing time: Tue 30 Apr 2024 01:37:57 +0000 ROA not before: Tue 30 Apr 2024 01:37:57 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 49.98.64.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1654 (0x676) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 30 01:37:57 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=2071D50FF64941CC015FE9D9C7E1BDE7D1B28C6E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:ee:b3:ba:92:2d:00:48:d3:70:21:ba:ed:b0: 15:6e:ce:2a:62:38:58:ae:91:0a:6b:54:db:05:4c: 8e:b9:5e:f5:c9:23:18:ae:70:b4:90:1f:80:eb:14: ec:30:bf:45:ad:52:b9:61:51:a9:94:18:e6:0e:93: 6f:ee:52:3c:85:6f:bc:ea:bc:88:bf:9b:1f:f8:9a: 68:53:bb:71:3b:a1:39:3b:3d:49:64:8d:a5:74:95: 75:c7:c5:75:ae:92:17:6d:47:1f:2e:20:19:9c:5a: 41:10:3e:7a:70:da:84:84:24:6b:b8:9a:cb:6e:39: ed:50:a6:46:d9:95:3b:88:21:82:f3:e2:29:ae:38: 5b:60:c0:4c:89:68:c9:fa:0c:c4:5d:bd:f9:a1:a0: c4:6a:2b:6f:79:74:d9:62:24:fc:76:d9:03:4d:b0: e8:12:0f:22:31:4d:a8:bb:dd:ae:e4:df:03:92:74: e1:67:24:29:f5:44:62:7d:dc:d3:a8:73:ef:36:0f: 9e:b3:97:e4:d8:76:d9:70:fb:06:6f:83:41:e1:af: 98:22:b4:b8:58:8e:37:e9:df:6e:04:de:89:4f:f5: fc:9d:94:b8:03:b1:6b:b8:8e:5a:6d:2f:2c:58:c7: 65:27:41:b2:9c:8a:cd:76:5f:f3:75:43:3f:2b:aa: 42:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:71:D5:0F:F6:49:41:CC:01:5F:E9:D9:C7:E1:BD:E7:D1:B2:8C:6E X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/IHHVD_ZJQcwBX-nZx-G959GyjG4.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.98.64.0/23 Signature Algorithm: sha256WithRSAEncryption 7c:4d:8d:74:f6:b9:e4:bd:cf:5a:2a:41:ee:57:d2:30:8d:8b: ba:ca:67:23:0e:dc:3e:31:d1:c8:27:6e:a1:d2:0d:a8:a3:46: d2:7b:21:17:f2:57:48:8e:3f:df:b0:b6:00:3c:e6:0a:35:3c: 6f:93:b2:c1:39:8e:06:ec:cc:0d:bf:0c:08:56:94:c6:ba:13: 61:37:79:89:bf:49:1b:19:f7:ff:f3:77:f9:9f:56:57:04:5a: 50:fd:82:5d:ea:5f:4a:81:89:2c:23:01:43:f0:0a:49:df:dd: 76:df:8e:1b:6f:0e:8a:79:92:03:1f:c0:2f:00:83:3d:ea:c0: 6c:d7:b7:76:36:18:9b:35:d6:18:36:50:ca:42:00:17:0c:de: 0e:6e:be:d2:69:12:c1:8d:8d:5d:4f:07:31:14:c4:9c:70:df: 15:f9:16:48:e0:0d:d5:c7:71:28:f3:c9:62:1a:65:26:fd:22: fd:07:bd:c6:c5:ca:88:68:87:8d:43:18:6b:19:c8:90:54:f6: 38:de:8c:68:77:d1:38:84:b5:51:af:d1:b7:1e:79:4a:f1:14: d0:3c:46:08:33:23:d2:31:c3:a0:10:e4:bd:2f:f5:6a:8e:34: 6a:93:8b:b0:a2:39:9d:20:31:dd:f2:ee:85:6e:f9:28:ae:b5: dc:33:5f:ab -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBnYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw MTM3NTdaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDIwNzFENTBGRjY0OTQx Q0MwMTVGRTlEOUM3RTFCREU3RDFCMjhDNkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDe7rO6ki0ASNNwIbrtsBVuzipiOFiukQprVNsFTI65XvXJIxiu cLSQH4DrFOwwv0WtUrlhUamUGOYOk2/uUjyFb7zqvIi/mx/4mmhTu3E7oTk7PUlk jaV0lXXHxXWukhdtRx8uIBmcWkEQPnpw2oSEJGu4mstuOe1QpkbZlTuIIYLz4imu OFtgwEyJaMn6DMRdvfmhoMRqK295dNliJPx22QNNsOgSDyIxTai73a7k3wOSdOFn JCn1RGJ93NOoc+82D56zl+TYdtlw+wZvg0Hhr5gitLhYjjfp324E3olP9fydlLgD sWu4jlptLyxYx2UnQbKcis12X/N1Qz8rqkJ1AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUIHHVD/ZJQcwBX+nZx+G959GyjG4wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0lISFZEX1pKUWN3Qlgtblp4LUc5NTlHeWpHNC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExYkAwDQYJKoZIhvcNAQELBQADggEBAHxNjXT2ueS9z1oqQe5X0jCNi7rK ZyMO3D4x0cgnbqHSDaijRtJ7IRfyV0iOP9+wtgA85go1PG+TssE5jgbszA2/DAhW lMa6E2E3eYm/SRsZ9//zd/mfVlcEWlD9gl3qX0qBiSwjAUPwCknf3XbfjhtvDop5 kgMfwC8Agz3qwGzXt3Y2GJs11hg2UMpCABcM3g5uvtJpEsGNjV1PBzEUxJxw3xX5 FkjgDdXHcSjzyWIaZSb9Iv0HvcbFyohoh41DGGsZyJBU9jjejGh30TiEtVGv0bce eUrxFNA8RggzI9Ixw6AQ5L0v9WqONGqTi7CiOZ0gMd3y7oVu+SiutdwzX6s= -----END CERTIFICATE-----Generated at Sat Jun 1 13:38:47 2024 by rpki-client on console-fra.rpki-client.org