$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/IVbkMOpLJiuJt-3tQ6OzNTT0bxc.roa File: IVbkMOpLJiuJt-3tQ6OzNTT0bxc.roa (raw, json) Hash identifier: F4kVw4afsxhp1cQItr2x5zGZar+EHvB5aoauRviL214= Subject key identifier: 21:56:E4:30:EA:4B:26:2B:89:B7:ED:ED:43:A3:B3:35:34:F4:6F:17 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 06AB Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/IVbkMOpLJiuJt-3tQ6OzNTT0bxc.roa Signing time: Tue 30 Apr 2024 01:43:19 +0000 ROA not before: Tue 30 Apr 2024 01:43:19 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 49.98.192.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 23 Jun 2024 14:09:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1707 (0x6ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 30 01:43:19 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=2156E430EA4B262B89B7EDED43A3B33534F46F17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:32:17:15:13:bb:ef:10:9e:f4:2b:47:63:b5: da:49:36:45:2c:ee:b0:f4:2e:2a:f1:c6:38:c5:28: 8a:d8:42:88:db:d7:82:a8:7b:b1:5f:6d:11:e0:69: 08:c6:11:0c:f0:23:19:15:e1:ad:ba:ed:0a:25:0b: 8a:93:59:1d:75:fc:72:03:81:43:48:a8:10:1c:27: 46:e0:93:55:a0:a1:b0:76:7e:2b:14:dd:3f:6c:2b: 6b:bb:6f:41:8a:9f:c9:18:e6:2e:ca:13:5e:1c:e5: 21:31:a4:8c:c4:bf:a6:7e:d8:37:f7:9b:e2:9f:c9: bd:f5:5f:44:ab:40:07:d6:e3:f3:30:d6:3c:dd:01: af:c2:7a:40:83:00:18:45:2c:af:21:30:1a:fc:10: b4:a9:b8:5b:28:30:98:cf:62:84:f5:9e:ca:28:23: 4d:46:b9:66:26:6e:fe:55:da:66:15:d8:81:b9:4e: 8a:a2:03:67:5c:da:91:36:e5:c4:3d:7d:49:59:a4: e4:1d:c4:0f:a7:b9:44:d5:b6:ae:be:49:92:e5:16: 1b:b4:cd:77:14:bf:61:4a:3c:08:01:fd:ab:f5:56: 33:d6:ec:d8:01:82:b2:b6:fc:e7:34:40:fd:65:de: 6b:40:8c:0a:49:7c:ef:aa:c3:71:1f:7f:4a:0b:eb: f6:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:56:E4:30:EA:4B:26:2B:89:B7:ED:ED:43:A3:B3:35:34:F4:6F:17 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/IVbkMOpLJiuJt-3tQ6OzNTT0bxc.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.98.192.0/22 Signature Algorithm: sha256WithRSAEncryption 10:ce:5d:6c:b9:8b:0c:6e:69:56:ba:22:39:8c:d7:6c:b8:cc: 0b:13:de:8d:a4:47:e5:51:22:de:60:0f:26:17:76:1a:68:35: 17:4b:18:47:9d:f0:41:b1:11:93:64:16:c5:97:da:54:23:c9: 30:bd:31:da:98:24:5d:75:bb:6b:6b:cd:25:a8:ae:19:1c:1d: 84:e0:77:8c:f0:fc:1e:8e:79:e6:2e:57:db:13:23:2a:46:50: 76:e0:d4:9e:04:c2:3b:cc:5b:e5:1d:c7:06:c0:be:ea:ce:7b: 65:8a:81:01:1a:f2:41:dc:4c:13:ea:ab:8e:4d:08:cd:1c:07: 1e:42:65:85:92:57:24:09:a9:b5:1f:e4:ed:db:67:40:b0:9b: 93:65:79:51:4a:07:de:78:52:4f:84:f5:e8:01:9a:aa:90:26: 67:31:19:0b:81:bc:4a:86:a5:6d:65:32:60:e5:23:54:8e:71: d9:b3:65:62:af:e4:1f:56:77:2b:66:d2:76:a0:de:a6:43:f3: 8c:3f:95:88:6b:2f:1b:dd:73:ef:6e:d4:2f:19:eb:52:aa:6b: ad:a6:84:5c:dd:f2:f2:17:a2:09:aa:55:50:93:14:e7:35:7f: cc:55:17:a8:27:47:a6:84:bf:de:b6:a8:50:26:8a:63:74:ff: 93:fb:11:9c -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBqswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw MTQzMTlaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDIxNTZFNDMwRUE0QjI2 MkI4OUI3RURFRDQzQTNCMzM1MzRGNDZGMTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDmMhcVE7vvEJ70K0djtdpJNkUs7rD0LirxxjjFKIrYQojb14Ko e7FfbRHgaQjGEQzwIxkV4a267QolC4qTWR11/HIDgUNIqBAcJ0bgk1WgobB2fisU 3T9sK2u7b0GKn8kY5i7KE14c5SExpIzEv6Z+2Df3m+Kfyb31X0SrQAfW4/Mw1jzd Aa/CekCDABhFLK8hMBr8ELSpuFsoMJjPYoT1nsooI01GuWYmbv5V2mYV2IG5Toqi A2dc2pE25cQ9fUlZpOQdxA+nuUTVtq6+SZLlFhu0zXcUv2FKPAgB/av1VjPW7NgB grK2/Oc0QP1l3mtAjApJfO+qw3Eff0oL6/YXAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUIVbkMOpLJiuJt+3tQ6OzNTT0bxcwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0lWYmtNT3BMSml1SnQtM3RRNk96TlRUMGJ4Yy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIxYsAwDQYJKoZIhvcNAQELBQADggEBABDOXWy5iwxuaVa6IjmM12y4zAsT 3o2kR+VRIt5gDyYXdhpoNRdLGEed8EGxEZNkFsWX2lQjyTC9MdqYJF11u2trzSWo rhkcHYTgd4zw/B6OeeYuV9sTIypGUHbg1J4EwjvMW+UdxwbAvurOe2WKgQEa8kHc TBPqq45NCM0cBx5CZYWSVyQJqbUf5O3bZ0Cwm5NleVFKB954Uk+E9egBmqqQJmcx GQuBvEqGpW1lMmDlI1SOcdmzZWKv5B9Wdytm0nag3qZD84w/lYhrLxvdc+9u1C8Z 61Kqa62mhFzd8vIXogmqVVCTFOc1f8xVF6gnR6aEv962qFAmimN0/5P7EZw= -----END CERTIFICATE-----Generated at Mon Jun 17 11:39:11 2024 by rpki-client on console-fra.rpki-client.org