$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/J0bastBoVX2OfDpg5AaFT_-9t04.roa File: J0bastBoVX2OfDpg5AaFT_-9t04.roa (raw, json) Hash identifier: tbrJQ/aNcwDKoLziQmoDbeekTWYHM9oJa+IeYxo6yaQ= Subject key identifier: 27:46:DA:B2:D0:68:55:7D:8E:7C:3A:60:E4:06:85:4F:FF:BD:B7:4E Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0646 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/J0bastBoVX2OfDpg5AaFT_-9t04.roa Signing time: Tue 30 Apr 2024 01:31:30 +0000 ROA not before: Tue 30 Apr 2024 01:31:30 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 49.104.44.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1606 (0x646) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 30 01:31:30 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=2746DAB2D068557D8E7C3A60E406854FFFBDB74E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:cb:e3:0b:c0:05:c5:08:02:59:f8:4f:b7:83: 0b:69:63:36:bb:40:97:1e:1a:5b:5b:6c:a6:6b:73: 1c:45:7f:90:f6:7a:41:c0:cb:f2:c8:03:29:f5:4a: 51:33:11:0f:b4:49:d5:9b:e3:7a:06:05:b8:e2:b1: 6b:9a:98:a7:9d:1d:c4:e2:86:4c:35:87:fd:57:09: 67:43:ec:e0:5d:0d:68:b8:1e:9d:af:dd:e2:91:89: f2:1e:6d:a7:95:3c:6c:a3:c4:ea:1e:d2:7d:cf:4f: ca:84:9a:5a:6b:36:f3:2e:08:52:9f:0e:03:90:f8: 6c:1d:a7:85:39:14:e3:0b:fa:98:a2:14:9b:a3:d4: f2:04:eb:40:fc:7c:d3:a4:b7:97:71:b6:4b:09:a3: fa:75:1e:5a:ae:af:10:dc:14:43:89:88:ef:82:13: bb:33:4d:b3:15:bb:01:91:66:9d:49:bd:bb:7a:aa: a6:39:63:e7:a5:ce:60:5e:49:78:4d:a3:19:d2:75: b3:cc:c9:6f:8f:ea:6b:f4:12:6c:be:79:db:2f:55: 0d:bc:53:72:3c:00:2a:54:30:ef:4f:c4:a6:b8:e4: e1:5a:e3:7a:76:a0:40:5c:2c:dd:9b:76:95:28:60: 67:3c:aa:d3:fb:82:39:62:44:1e:1e:c3:e0:b4:53: 50:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:46:DA:B2:D0:68:55:7D:8E:7C:3A:60:E4:06:85:4F:FF:BD:B7:4E X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/J0bastBoVX2OfDpg5AaFT_-9t04.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.104.44.0/23 Signature Algorithm: sha256WithRSAEncryption 65:35:74:4a:49:52:d4:2d:91:bb:4d:88:1d:fb:7c:d5:8d:97: 56:d4:16:d7:ee:d8:a6:13:a9:d2:bf:2e:ca:88:77:02:cb:3f: 4c:14:51:bd:2e:8c:c2:ce:64:89:ba:ea:48:00:00:cf:e0:f6: 61:f3:16:83:80:ae:3b:c2:f0:d0:e9:6f:e2:b8:59:ed:3d:f8: 27:3b:f8:aa:cd:62:47:6b:68:e5:bc:b0:48:45:5b:a9:95:78: 99:99:15:f5:ff:d8:ae:cd:07:79:11:bb:d0:35:9a:8d:10:38: 51:94:ba:da:b1:c4:da:1f:80:9e:82:c4:65:0d:a8:53:6e:07: 17:e8:0c:79:b4:dd:31:56:2f:2f:c7:8e:b0:86:28:91:0d:7c: 90:02:a7:5a:13:2d:86:be:76:64:62:aa:24:08:cc:99:56:f9: 55:aa:33:ff:06:c8:a4:24:7b:75:5d:52:3f:eb:96:1d:8b:ee: 1f:44:52:63:a6:3a:be:87:cb:53:ac:c5:64:bc:ed:54:fa:a8: 10:e7:2d:99:99:ce:d3:62:b8:ba:4a:e9:61:62:5b:e8:d4:82: a5:8b:c7:ef:26:45:08:c3:bf:40:0e:1a:ad:a8:50:2c:92:d5: ed:32:45:db:94:51:41:e5:b2:64:2d:45:28:c0:9e:24:5f:6b: 5c:b4:20:33 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBkYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw MTMxMzBaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDI3NDZEQUIyRDA2ODU1 N0Q4RTdDM0E2MEU0MDY4NTRGRkZCREI3NEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+y+MLwAXFCAJZ+E+3gwtpYza7QJceGltbbKZrcxxFf5D2ekHA y/LIAyn1SlEzEQ+0SdWb43oGBbjisWuamKedHcTihkw1h/1XCWdD7OBdDWi4Hp2v 3eKRifIebaeVPGyjxOoe0n3PT8qEmlprNvMuCFKfDgOQ+Gwdp4U5FOML+piiFJuj 1PIE60D8fNOkt5dxtksJo/p1HlqurxDcFEOJiO+CE7szTbMVuwGRZp1Jvbt6qqY5 Y+elzmBeSXhNoxnSdbPMyW+P6mv0Emy+edsvVQ28U3I8ACpUMO9PxKa45OFa43p2 oEBcLN2bdpUoYGc8qtP7gjliRB4ew+C0U1AnAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUJ0bastBoVX2OfDpg5AaFT/+9t04wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0owYmFzdEJvVlgyT2ZEcGc1QWFGVF8tOXQwNC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExaCwwDQYJKoZIhvcNAQELBQADggEBAGU1dEpJUtQtkbtNiB37fNWNl1bU Ftfu2KYTqdK/LsqIdwLLP0wUUb0ujMLOZIm66kgAAM/g9mHzFoOArjvC8NDpb+K4 We09+Cc7+KrNYkdraOW8sEhFW6mVeJmZFfX/2K7NB3kRu9A1mo0QOFGUutqxxNof gJ6CxGUNqFNuBxfoDHm03TFWLy/HjrCGKJENfJACp1oTLYa+dmRiqiQIzJlW+VWq M/8GyKQke3VdUj/rlh2L7h9EUmOmOr6Hy1OsxWS87VT6qBDnLZmZztNiuLpK6WFi W+jUgqWLx+8mRQjDv0AOGq2oUCyS1e0yRduUUUHlsmQtRSjAniRfa1y0IDM= -----END CERTIFICATE-----Generated at Sat Jun 1 15:54:30 2024 by rpki-client on console-ams.rpki-client.org