$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/IKF89bPGPTNg6T7Co8jRue3q7pQ.roa File: IKF89bPGPTNg6T7Co8jRue3q7pQ.roa (raw, json) Hash identifier: ECAufrdfEhCPZHh2ApMQVyMYTkaOybaH7uVN3LsCHao= Subject key identifier: 20:A1:7C:F5:B3:C6:3D:33:60:E9:3E:C2:A3:C8:D1:B9:ED:EA:EE:94 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 05DA Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/IKF89bPGPTNg6T7Co8jRue3q7pQ.roa Signing time: Thu 29 Feb 2024 01:32:17 +0000 ROA not before: Thu 29 Feb 2024 01:32:17 +0000 ROA not after: Fri 14 Feb 2025 01:30:03 +0000 asID: 9605 IP address blocks: 49.97.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1498 (0x5da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Feb 29 01:32:17 2024 GMT Not After : Feb 14 01:30:03 2025 GMT Subject: CN=20A17CF5B3C63D3360E93EC2A3C8D1B9EDEAEE94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:0e:63:8c:88:96:e4:92:6b:fa:35:d4:00:f6: 73:be:ce:84:45:1d:d1:e9:06:91:65:11:21:a5:f2: f7:d7:2a:c4:31:13:9c:f3:ef:9e:de:ad:6b:9a:e8: 59:08:64:c1:44:06:84:b1:6c:95:20:82:92:f0:fb: 74:32:94:72:6f:8c:ed:f5:b8:15:94:45:4c:52:12: 3e:ad:45:d1:58:43:cf:0f:3b:50:34:c0:2a:0d:ba: 94:d7:6f:f1:0e:f0:41:4a:30:b6:fa:93:e0:55:c5: 2f:1b:40:8d:b2:38:06:0d:f3:e4:0d:ae:b1:cd:70: cb:40:bc:d7:7b:f7:ac:05:7b:ec:60:77:3d:84:af: 7a:2e:82:27:01:a4:2f:c8:f0:76:f3:3f:56:20:d0: ba:cb:85:8b:8b:a9:cb:00:3d:e0:95:bb:13:b9:55: 72:df:08:06:0e:e7:66:e6:48:7a:b0:0c:41:46:e0: be:b4:61:5e:14:c1:3c:b5:bc:e7:47:24:93:98:be: a7:f3:e8:f0:48:29:2f:05:8f:b8:b4:08:38:77:20: bb:56:22:f3:6f:ec:ab:a7:3c:67:f5:c1:dc:21:81: 75:a3:e5:b5:37:7d:bb:39:48:ee:a3:cc:38:05:70: 2c:52:6e:bd:dc:67:52:b8:d1:8f:86:6e:19:e3:c9: 51:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:A1:7C:F5:B3:C6:3D:33:60:E9:3E:C2:A3:C8:D1:B9:ED:EA:EE:94 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/IKF89bPGPTNg6T7Co8jRue3q7pQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.97.106.0/24 Signature Algorithm: sha256WithRSAEncryption ab:fe:7a:36:c0:ff:fd:a6:91:0a:b0:ec:84:5b:b9:be:f7:4a: 0e:ae:06:73:5d:da:d4:fd:69:74:8d:e3:d3:63:bf:cc:37:6b: 7b:e5:b8:5a:c6:5c:dd:7f:19:48:ee:21:b8:f5:a5:d8:6d:8a: 07:30:36:20:b1:7b:f3:5b:dd:7e:20:a2:3c:34:ba:0e:f3:ff: 69:b0:13:e7:e3:09:c5:3d:de:5e:51:41:5d:94:4a:4d:11:ae: f4:a9:1a:c2:eb:61:b5:8b:28:ac:6f:98:23:38:1b:af:3a:0e: ec:78:7c:96:b2:be:20:e4:99:a4:b4:e7:8d:e7:80:a2:5a:ed: a9:09:92:f3:e4:01:0e:48:e1:c7:e5:49:0a:61:6a:b8:c4:5c: 11:a4:91:4c:9b:94:9b:7f:21:68:76:d1:a1:46:ef:6b:80:0c: d1:28:51:61:f9:5a:c9:09:b2:88:a1:cf:ad:f5:2e:19:2d:32: 73:e6:fa:cc:d1:fe:95:f2:84:65:73:60:9a:b6:fd:ba:1e:83: d5:e7:28:87:16:e0:2f:0d:f3:a0:97:e3:df:62:58:cb:e7:b0: 51:04:ac:f4:f1:8c:c9:cd:46:34:5b:cf:c8:d7:33:79:c1:4f: fa:77:17:af:44:30:03:88:0f:3b:cb:4b:07:47:d8:87:37:b1: 1f:24:c2:e0 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBdowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDAyMjkw MTMyMTdaFw0yNTAyMTQwMTMwMDNaMDMxMTAvBgNVBAMTKDIwQTE3Q0Y1QjNDNjNE MzM2MEU5M0VDMkEzQzhEMUI5RURFQUVFOTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQClDmOMiJbkkmv6NdQA9nO+zoRFHdHpBpFlESGl8vfXKsQxE5zz 757erWua6FkIZMFEBoSxbJUggpLw+3QylHJvjO31uBWURUxSEj6tRdFYQ88PO1A0 wCoNupTXb/EO8EFKMLb6k+BVxS8bQI2yOAYN8+QNrrHNcMtAvNd796wFe+xgdz2E r3ougicBpC/I8HbzP1Yg0LrLhYuLqcsAPeCVuxO5VXLfCAYO52bmSHqwDEFG4L60 YV4UwTy1vOdHJJOYvqfz6PBIKS8Fj7i0CDh3ILtWIvNv7KunPGf1wdwhgXWj5bU3 fbs5SO6jzDgFcCxSbr3cZ1K40Y+GbhnjyVH/AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUIKF89bPGPTNg6T7Co8jRue3q7pQwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0lLRjg5YlBHUFROZzZUN0NvOGpSdWUzcTdwUS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAxYWowDQYJKoZIhvcNAQELBQADggEBAKv+ejbA//2mkQqw7IRbub73Sg6u BnNd2tT9aXSN49Njv8w3a3vluFrGXN1/GUjuIbj1pdhtigcwNiCxe/Nb3X4gojw0 ug7z/2mwE+fjCcU93l5RQV2USk0RrvSpGsLrYbWLKKxvmCM4G686Dux4fJayviDk maS0543ngKJa7akJkvPkAQ5I4cflSQpharjEXBGkkUyblJt/IWh20aFG72uADNEo UWH5WskJsoihz631LhktMnPm+szR/pXyhGVzYJq2/boeg9XnKIcW4C8N86CX499i WMvnsFEErPTxjMnNRjRbz8jXM3nBT/p3F69EMAOIDzvLSwdH2Ic3sR8kwuA= -----END CERTIFICATE-----Generated at Sat Jun 1 15:54:30 2024 by rpki-client on console-ams.rpki-client.org