$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/IOKNExoAMDb9EeM9FQfe8wNmwqw.roa File: IOKNExoAMDb9EeM9FQfe8wNmwqw.roa (raw, json) Hash identifier: /ykADMZD8/6Bud3PRfYkRikngQWG1GbmHY94gcklf+w= Subject key identifier: 20:E2:8D:13:1A:00:30:36:FD:11:E3:3D:15:07:DE:F3:03:66:C2:AC Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0290 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/IOKNExoAMDb9EeM9FQfe8wNmwqw.roa Signing time: Tue 30 May 2023 16:36:28 +0000 ROA not before: Tue 30 May 2023 16:36:28 +0000 ROA not after: Tue 14 May 2024 01:30:02 +0000 asID: 9605 IP address blocks: 49.103.18.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 May 2024 13:36:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 656 (0x290) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: May 30 16:36:28 2023 GMT Not After : May 14 01:30:02 2024 GMT Subject: CN=20E28D131A003036FD11E33D1507DEF30366C2AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:b4:73:0b:d6:fc:65:8a:e2:28:2f:df:fb:4e: 73:6e:e1:79:7f:65:47:fb:af:66:29:ee:ef:4d:e2: c1:2c:8f:7e:f4:2f:31:8b:4d:20:78:3b:f9:64:82: 89:3d:e8:41:3a:6d:07:9f:c6:bd:df:91:c5:ba:91: 3d:7c:e7:3c:10:f0:a9:0a:60:da:62:b4:9d:cf:0a: e1:63:95:e6:7c:9b:90:e7:60:35:82:f2:64:41:9e: f7:b4:65:6e:63:1c:48:ae:6d:e6:c8:d6:dc:5f:37: ac:96:99:73:4b:2a:67:f3:92:0c:38:3c:4c:d7:9f: 5b:79:17:e4:b1:47:49:d1:03:79:63:d9:3e:51:1c: e1:6b:63:9b:1d:a5:0b:34:6f:52:5f:d9:15:40:ef: f6:85:19:85:e2:8b:0f:96:b4:99:f5:1c:d1:bc:2a: fa:08:b0:e1:bd:d1:5d:ad:89:f3:25:be:3e:9b:28: 09:1a:08:c4:b4:62:9d:c4:1a:d2:85:84:44:34:43: f2:4b:06:ee:b6:27:ee:ba:a0:7e:56:4b:e7:68:5e: 9c:32:de:3e:19:01:18:ae:66:c0:c9:d3:05:8b:4f: b4:ff:29:fd:2c:f4:3a:17:74:6d:b9:90:31:63:59: 7b:92:ed:d2:a2:85:ac:28:cf:b5:56:85:b9:f5:7c: f5:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:E2:8D:13:1A:00:30:36:FD:11:E3:3D:15:07:DE:F3:03:66:C2:AC X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/IOKNExoAMDb9EeM9FQfe8wNmwqw.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.103.18.0/23 Signature Algorithm: sha256WithRSAEncryption 30:0c:56:ec:f6:b9:7a:2a:85:89:b5:2d:9b:99:17:b4:b9:43: 77:36:af:45:6c:90:af:2c:59:c0:c8:b3:41:f9:42:9e:c8:8e: 77:d2:bb:48:65:17:56:0a:f8:04:b1:d9:6b:64:de:9e:7a:a2: bb:d4:f4:25:c7:a5:10:21:09:67:c7:fe:61:2c:88:23:24:78: ab:cd:ec:d3:c9:c5:5a:14:93:80:f9:bc:d0:79:73:eb:88:70: b9:3f:8d:df:e8:e9:b9:03:9a:f1:e8:c2:8b:69:0a:bf:62:5e: 02:d0:7d:ca:88:90:10:95:1c:fa:1e:17:dd:7a:c6:90:6a:4a: 12:db:29:9f:9e:d2:35:40:b8:40:d1:ef:a2:6c:1c:a7:6b:60: 5b:dc:55:4e:00:55:7e:79:0f:4f:0c:b9:32:16:3a:ef:d4:4c: 03:c5:65:c7:96:23:b9:d7:a3:0e:68:a1:4d:fa:44:29:e4:13: 2c:cd:7d:6c:64:1e:d9:da:d2:fb:1d:f4:06:21:65:26:86:1b: 34:84:27:3b:9a:bc:99:e4:c3:99:2e:fc:01:63:f5:e2:1a:1d: d0:cb:2e:51:b3:dd:53:04:05:ac:af:50:6c:67:14:ae:f0:d4: 2e:57:96:28:b4:11:a6:24:d6:92:fd:41:e5:c4:e7:be:eb:3e: 48:11:92:be -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICApAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA1MzAx NjM2MjhaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDIwRTI4RDEzMUEwMDMw MzZGRDExRTMzRDE1MDdERUYzMDM2NkMyQUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDotHML1vxliuIoL9/7TnNu4Xl/ZUf7r2Yp7u9N4sEsj370LzGL TSB4O/lkgok96EE6bQefxr3fkcW6kT185zwQ8KkKYNpitJ3PCuFjleZ8m5DnYDWC 8mRBnve0ZW5jHEiubebI1txfN6yWmXNLKmfzkgw4PEzXn1t5F+SxR0nRA3lj2T5R HOFrY5sdpQs0b1Jf2RVA7/aFGYXiiw+WtJn1HNG8KvoIsOG90V2tifMlvj6bKAka CMS0Yp3EGtKFhEQ0Q/JLBu62J+66oH5WS+doXpwy3j4ZARiuZsDJ0wWLT7T/Kf0s 9DoXdG25kDFjWXuS7dKihawoz7VWhbn1fPXfAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUIOKNExoAMDb9EeM9FQfe8wNmwqwwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0lPS05FeG9BTURiOUVlTTlGUWZlOHdObXdxdy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExZxIwDQYJKoZIhvcNAQELBQADggEBADAMVuz2uXoqhYm1LZuZF7S5Q3c2 r0VskK8sWcDIs0H5Qp7IjnfSu0hlF1YK+ASx2Wtk3p56orvU9CXHpRAhCWfH/mEs iCMkeKvN7NPJxVoUk4D5vNB5c+uIcLk/jd/o6bkDmvHowotpCr9iXgLQfcqIkBCV HPoeF916xpBqShLbKZ+e0jVAuEDR76JsHKdrYFvcVU4AVX55D08MuTIWOu/UTAPF ZceWI7nXow5ooU36RCnkEyzNfWxkHtna0vsd9AYhZSaGGzSEJzuavJnkw5ku/AFj 9eIaHdDLLlGz3VMEBayvUGxnFK7w1C5Xlii0EaYk1pL9QeXE577rPkgRkr4= -----END CERTIFICATE-----Generated at Sat Apr 27 10:15:56 2024 by rpki-client on console-ams.rpki-client.org