$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/J8R1MgVKbQoiNLBRvG4OcU5EY60.roa File: J8R1MgVKbQoiNLBRvG4OcU5EY60.roa (raw, json) Hash identifier: h4Jb45bADhthFHQpIw+t0BFoXM6q3Vor6Hfkuj8BjK0= Subject key identifier: 27:C4:75:32:05:4A:6D:0A:22:34:B0:51:BC:6E:0E:71:4E:44:63:AD Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 08AA Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/J8R1MgVKbQoiNLBRvG4OcU5EY60.roa Signing time: Tue 30 Apr 2024 02:22:34 +0000 ROA not before: Tue 30 Apr 2024 02:22:34 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 49.104.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2218 (0x8aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 30 02:22:34 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=27C47532054A6D0A2234B051BC6E0E714E4463AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ed:70:00:44:66:d8:35:ca:e0:c9:76:ce:52: f6:74:06:01:ff:2c:86:4c:5d:40:49:85:2b:71:2e: ae:0e:00:11:71:cb:67:a1:6c:c3:3c:7a:c6:bd:e7: 27:02:55:8b:f2:58:a5:7d:a1:6f:c6:dc:cc:bc:83: b4:34:27:2b:70:3c:52:fc:8c:e1:c0:39:1b:b5:a3: a9:db:91:77:ea:e2:3b:22:7a:5e:c9:9d:8e:5c:70: c1:38:f8:27:5b:6c:c7:53:38:fb:d4:04:98:55:68: c0:6c:0c:5b:61:35:21:ea:41:16:0d:0f:8a:80:1d: 7e:69:36:6b:4e:9e:bf:76:54:b4:ce:89:55:e1:93: cc:13:f3:b6:fb:89:2f:44:80:86:41:c1:a1:d4:a9: e1:a8:fd:2e:bd:79:80:df:d3:28:6e:0d:fa:df:6a: 34:b5:de:3e:d8:7a:10:43:80:a4:a7:a8:e8:fd:96: 9e:c1:b4:c5:bc:b0:2e:6f:7b:9c:dd:16:70:61:65: ed:38:ff:d7:36:6b:a0:4a:54:88:0a:c7:33:0a:00: b2:8e:71:07:c7:58:a8:f9:50:d3:fd:4a:91:a1:59: 1d:eb:97:0c:78:b9:32:93:6e:69:00:99:2e:7d:9b: 6f:e8:49:8b:76:ed:90:24:15:86:3b:6c:97:51:7d: 25:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:C4:75:32:05:4A:6D:0A:22:34:B0:51:BC:6E:0E:71:4E:44:63:AD X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/J8R1MgVKbQoiNLBRvG4OcU5EY60.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.104.224.0/20 Signature Algorithm: sha256WithRSAEncryption 34:e3:e9:23:59:e3:cc:18:3c:0d:7c:3f:41:f2:16:7f:09:d5: 88:19:4e:74:68:1e:37:6a:40:66:0b:f7:0f:d5:61:6a:ff:d4: de:2f:a3:ff:8a:cb:6e:a6:7e:51:c7:ec:d3:02:8b:24:05:36: 51:c4:65:01:0d:44:b6:64:cb:60:25:ea:40:ba:ef:7a:84:ee: 82:ef:54:a6:75:10:c7:f0:a1:ee:81:e4:66:d2:b7:a7:3f:f0: 96:85:f1:1c:48:14:94:1c:dd:53:79:e0:26:2d:4e:c8:0d:21: 12:09:d9:2b:ad:13:33:e7:8f:e8:5a:f8:ba:00:a6:f3:a7:29: 16:f9:bd:5d:bb:0b:13:ee:55:e9:f3:dc:42:ce:36:a1:ae:e3: 6d:f1:e5:fb:c7:bf:f3:1f:1d:93:92:10:9f:50:93:8e:1d:18: bc:b9:84:05:8e:10:f7:68:8a:2c:53:90:49:bf:fb:a4:f3:fb: 7d:e7:2e:90:9b:64:15:9e:53:38:52:c2:30:be:fb:96:69:52: 78:0d:ad:bc:27:8a:8b:33:44:d3:68:17:4e:e1:a3:2f:3a:f7: 8a:ac:a3:cc:6d:4b:9d:de:f6:3b:40:3b:76:b5:90:c1:55:8b: e6:dc:68:3c:20:ed:9d:fa:1f:96:df:86:18:7f:e2:f9:51:27: 5d:18:97:b9 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCKowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw MjIyMzRaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDI3QzQ3NTMyMDU0QTZE MEEyMjM0QjA1MUJDNkUwRTcxNEU0NDYzQUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCz7XAARGbYNcrgyXbOUvZ0BgH/LIZMXUBJhStxLq4OABFxy2eh bMM8esa95ycCVYvyWKV9oW/G3My8g7Q0JytwPFL8jOHAORu1o6nbkXfq4jsiel7J nY5ccME4+CdbbMdTOPvUBJhVaMBsDFthNSHqQRYND4qAHX5pNmtOnr92VLTOiVXh k8wT87b7iS9EgIZBwaHUqeGo/S69eYDf0yhuDfrfajS13j7YehBDgKSnqOj9lp7B tMW8sC5ve5zdFnBhZe04/9c2a6BKVIgKxzMKALKOcQfHWKj5UNP9SpGhWR3rlwx4 uTKTbmkAmS59m2/oSYt27ZAkFYY7bJdRfSV5AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUJ8R1MgVKbQoiNLBRvG4OcU5EY60wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0o4UjFNZ1ZLYlFvaU5MQlJ2RzRPY1U1RVk2MC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQxaOAwDQYJKoZIhvcNAQELBQADggEBADTj6SNZ48wYPA18P0HyFn8J1YgZ TnRoHjdqQGYL9w/VYWr/1N4vo/+Ky26mflHH7NMCiyQFNlHEZQENRLZky2Al6kC6 73qE7oLvVKZ1EMfwoe6B5GbSt6c/8JaF8RxIFJQc3VN54CYtTsgNIRIJ2SutEzPn j+ha+LoApvOnKRb5vV27CxPuVenz3ELONqGu423x5fvHv/MfHZOSEJ9Qk44dGLy5 hAWOEPdoiixTkEm/+6Tz+33nLpCbZBWeUzhSwjC++5ZpUngNrbwnioszRNNoF07h oy8694qso8xtS53e9jtAO3a1kMFVi+bcaDwg7Z36H5bfhhh/4vlRJ10Yl7k= -----END CERTIFICATE-----Generated at Sat Jun 1 13:38:47 2024 by rpki-client on console-fra.rpki-client.org