$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/KJN9ze6UlWt3JLNP7ziuLB4o2rI.roa File: KJN9ze6UlWt3JLNP7ziuLB4o2rI.roa (raw, json) Hash identifier: EgO7xmFfUN3oHRYV/rQXRIiqyT4EmSk5td4V4lmP9YY= Subject key identifier: 28:93:7D:CD:EE:94:95:6B:77:24:B3:4F:EF:38:AE:2C:1E:28:DA:B2 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0817 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/KJN9ze6UlWt3JLNP7ziuLB4o2rI.roa Signing time: Tue 30 Apr 2024 02:12:30 +0000 ROA not before: Tue 30 Apr 2024 02:12:30 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 49.98.76.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2071 (0x817) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 30 02:12:30 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=28937DCDEE94956B7724B34FEF38AE2C1E28DAB2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:50:5b:ed:92:1b:b4:e3:41:3a:c6:b1:db:db: 90:62:30:9d:d2:6d:d4:84:bb:69:de:2b:ee:23:96: 8d:f6:a2:78:86:eb:cc:bd:e6:18:1d:77:68:11:4f: 4c:b2:4b:87:dd:7b:3e:0d:c3:7a:80:a5:89:88:6e: 5c:a3:bd:5d:21:67:e3:cf:5b:9e:b6:e9:a5:14:84: ad:c0:d1:e3:08:4e:11:0e:8d:c1:de:f7:ec:39:eb: 6f:d4:c1:41:0b:db:b0:c2:6c:01:f5:f8:38:78:68: ec:62:22:f6:de:3f:d1:fd:0f:2e:b9:28:5c:e7:f6: 36:05:55:cd:f5:85:1e:32:c1:f7:e1:f4:dd:58:0e: fc:b5:60:7d:ad:04:05:62:09:0b:63:bd:56:1b:36: fb:2f:5f:32:e3:d7:e5:71:ce:ba:d4:b2:e0:eb:bf: cb:d7:81:f3:c3:aa:81:11:5d:19:8f:88:a6:9a:df: e0:cd:08:ab:ce:d1:4d:d6:ef:de:be:56:59:28:18: e4:3a:3b:50:f2:5d:88:b6:1f:05:07:2a:3c:0c:09: 8f:d8:cb:b2:e7:12:d7:c3:79:dd:be:b7:b5:37:eb: 15:23:70:64:f3:05:59:45:3c:ab:0c:a9:84:1e:ad: 7c:54:dc:fa:cc:82:ef:f5:a0:74:12:cb:d0:1f:5a: 78:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:93:7D:CD:EE:94:95:6B:77:24:B3:4F:EF:38:AE:2C:1E:28:DA:B2 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/KJN9ze6UlWt3JLNP7ziuLB4o2rI.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.98.76.0/23 Signature Algorithm: sha256WithRSAEncryption 70:e8:72:0d:cc:82:4c:d4:22:0b:99:73:d8:78:4a:da:80:b9: c6:cb:3f:a9:13:2a:1d:d0:97:7e:43:59:de:d9:ad:17:67:68: 32:95:3e:52:45:9e:e0:1a:31:6c:41:fc:18:6d:31:c2:fa:e7: 98:71:e2:89:8e:1d:2e:c7:8b:b0:ea:1c:04:f6:75:30:8c:80: c7:72:1f:06:6e:9b:9d:50:9b:c8:6c:ff:d6:09:ec:56:f0:b6: 06:73:4e:ae:8c:65:a8:a2:9a:96:cb:65:b3:ac:b7:53:5e:e1: 93:68:cb:e1:38:78:d9:e4:77:06:25:35:66:44:1e:8e:16:6c: c7:6b:dd:57:3a:3a:ed:25:97:de:44:28:53:b1:e4:c1:30:4f: e1:ce:fd:ef:b6:af:73:06:34:d0:25:42:c7:22:54:e2:37:2e: c1:ae:a2:2c:28:33:54:04:8c:3c:00:b0:56:82:68:81:55:14: 49:ae:09:a9:7f:f8:47:d8:b8:46:d6:5d:8f:c2:aa:ff:b8:e9: 11:8e:94:9d:5e:1c:5f:c5:3e:14:c9:af:ea:07:ea:16:a0:c7: 3a:a8:10:33:42:83:2f:8d:cb:eb:2e:e3:5b:a9:fd:ea:eb:5c: d0:ed:cd:76:15:4a:de:98:a1:8e:06:1e:f4:17:4a:d2:62:27: e4:49:15:c8 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCBcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw MjEyMzBaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDI4OTM3RENERUU5NDk1 NkI3NzI0QjM0RkVGMzhBRTJDMUUyOERBQjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC6UFvtkhu040E6xrHb25BiMJ3SbdSEu2neK+4jlo32oniG68y9 5hgdd2gRT0yyS4fdez4Nw3qApYmIblyjvV0hZ+PPW5626aUUhK3A0eMIThEOjcHe 9+w562/UwUEL27DCbAH1+Dh4aOxiIvbeP9H9Dy65KFzn9jYFVc31hR4ywffh9N1Y Dvy1YH2tBAViCQtjvVYbNvsvXzLj1+VxzrrUsuDrv8vXgfPDqoERXRmPiKaa3+DN CKvO0U3W796+VlkoGOQ6O1DyXYi2HwUHKjwMCY/Yy7LnEtfDed2+t7U36xUjcGTz BVlFPKsMqYQerXxU3PrMgu/1oHQSy9AfWniHAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUKJN9ze6UlWt3JLNP7ziuLB4o2rIwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0tKTjl6ZTZVbFd0M0pMTlA3eml1TEI0bzJySS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExYkwwDQYJKoZIhvcNAQELBQADggEBAHDocg3MgkzUIguZc9h4StqAucbL P6kTKh3Ql35DWd7ZrRdnaDKVPlJFnuAaMWxB/BhtMcL655hx4omOHS7Hi7DqHAT2 dTCMgMdyHwZum51Qm8hs/9YJ7FbwtgZzTq6MZaiimpbLZbOst1Ne4ZNoy+E4eNnk dwYlNWZEHo4WbMdr3Vc6Ou0ll95EKFOx5MEwT+HO/e+2r3MGNNAlQsciVOI3LsGu oiwoM1QEjDwAsFaCaIFVFEmuCal/+EfYuEbWXY/Cqv+46RGOlJ1eHF/FPhTJr+oH 6hagxzqoEDNCgy+Ny+su41up/errXNDtzXYVSt6YoY4GHvQXStJiJ+RJFcg= -----END CERTIFICATE-----Generated at Sat Jun 1 13:38:47 2024 by rpki-client on console-fra.rpki-client.org