$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/KoFAadb6ipl6KnsNhkUpmwTR-2k.roa File: KoFAadb6ipl6KnsNhkUpmwTR-2k.roa (raw, json) Hash identifier: xiVnXNZxuqYSzJhQwi/Q1Or/qb8OmdUoGJZHtwBRfJg= Subject key identifier: 2A:81:40:69:D6:FA:8A:99:7A:2A:7B:0D:86:45:29:9B:04:D1:FB:69 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 06B8 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/KoFAadb6ipl6KnsNhkUpmwTR-2k.roa Signing time: Tue 30 Apr 2024 01:46:51 +0000 ROA not before: Tue 30 Apr 2024 01:46:51 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 49.106.176.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1720 (0x6b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 30 01:46:51 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=2A814069D6FA8A997A2A7B0D8645299B04D1FB69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:28:bb:b3:96:6b:aa:61:78:fc:62:fb:c5:86: a6:ff:9c:6b:4b:cf:92:46:63:36:5e:13:b5:98:f3: 10:e4:35:26:30:4b:ea:e9:80:ac:72:5c:c2:d5:96: fa:ec:00:b7:10:5c:4e:ce:93:81:4c:a5:2b:e6:df: be:b7:06:dc:4a:c6:3a:e8:e5:52:1c:fb:e5:79:36: 9a:20:ed:66:1e:34:c2:3c:95:da:f0:02:52:e8:62: ce:d6:00:e8:17:1f:16:42:76:47:ae:ee:a8:0f:58: 77:c7:62:f2:e1:16:c6:f1:5a:6d:7a:b3:32:d5:5e: 49:89:40:5f:06:da:7c:8a:6e:6d:33:74:93:da:1d: bf:1e:9a:f2:fe:86:79:b0:53:73:ec:20:29:c9:68: c3:4f:32:4e:d7:75:f4:ff:35:00:25:8b:f0:06:52: cf:d6:6f:77:48:4f:68:9e:b2:98:ff:7e:7d:61:5e: 1b:1e:07:b7:65:30:16:e0:0f:4a:b1:98:41:c6:2a: 75:ae:c1:51:26:44:97:53:ae:59:68:80:58:42:3f: da:3f:f2:4e:ea:fa:9b:20:21:ba:45:e8:f4:d3:4a: e5:39:ca:6d:b6:ea:bd:5d:99:d2:b2:d9:8a:ce:c1: 72:51:1b:2a:66:3d:bd:1c:6a:83:5e:a1:64:ee:49: 7f:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:81:40:69:D6:FA:8A:99:7A:2A:7B:0D:86:45:29:9B:04:D1:FB:69 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/KoFAadb6ipl6KnsNhkUpmwTR-2k.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.106.176.0/21 Signature Algorithm: sha256WithRSAEncryption 5b:db:2e:51:16:46:70:16:64:4d:29:3d:1c:15:2f:5a:65:a9: c3:ae:d7:d6:fb:f8:39:85:80:41:03:83:04:1b:0e:28:a1:78: 1b:8f:c1:2a:46:63:2f:1a:7d:e7:aa:1b:2c:e6:ae:5d:e5:33: 85:fe:5b:73:79:6e:12:14:36:14:4b:d9:0e:14:ec:9f:48:e3: f0:98:8d:ba:6d:be:6c:b6:93:29:3c:fa:8b:58:1c:54:e2:aa: 1c:8b:3b:6d:c2:2f:c6:07:08:4e:ec:7c:a7:ce:e6:3e:31:97: af:2e:e1:9c:4e:ff:aa:bc:2a:ca:d3:73:d0:8f:67:0e:60:82: 07:d5:61:dd:4e:24:fa:02:a7:6b:6f:87:78:f6:e1:78:0a:48: 77:3d:fb:b0:c3:ba:c4:76:57:b4:b0:0f:5a:3d:71:a2:ca:42: ec:0a:85:fd:9d:47:32:71:d2:42:46:df:0b:fa:ce:ee:d7:74: 73:71:48:4f:1b:ad:40:67:0f:be:b6:d6:fe:1a:03:35:8a:3d: 54:15:68:c9:76:eb:28:b1:31:40:3d:e0:13:19:a3:19:dd:fe: 7c:ae:43:81:8b:fa:44:4f:61:29:ae:fb:d7:77:df:59:69:fe: b3:f4:f8:f5:5c:93:82:53:f1:4c:47:10:21:c8:e0:b2:62:56: 6c:04:b9:c9 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBrgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw MTQ2NTFaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDJBODE0MDY5RDZGQThB OTk3QTJBN0IwRDg2NDUyOTlCMDREMUZCNjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDOKLuzlmuqYXj8YvvFhqb/nGtLz5JGYzZeE7WY8xDkNSYwS+rp gKxyXMLVlvrsALcQXE7Ok4FMpSvm3763BtxKxjro5VIc++V5Npog7WYeNMI8ldrw AlLoYs7WAOgXHxZCdkeu7qgPWHfHYvLhFsbxWm16szLVXkmJQF8G2nyKbm0zdJPa Hb8emvL+hnmwU3PsICnJaMNPMk7XdfT/NQAli/AGUs/Wb3dIT2iespj/fn1hXhse B7dlMBbgD0qxmEHGKnWuwVEmRJdTrllogFhCP9o/8k7q+psgIbpF6PTTSuU5ym22 6r1dmdKy2YrOwXJRGypmPb0caoNeoWTuSX/fAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUKoFAadb6ipl6KnsNhkUpmwTR+2kwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0tvRkFhZGI2aXBsNktuc05oa1VwbXdUUi0yay5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMxarAwDQYJKoZIhvcNAQELBQADggEBAFvbLlEWRnAWZE0pPRwVL1plqcOu 19b7+DmFgEEDgwQbDiiheBuPwSpGYy8afeeqGyzmrl3lM4X+W3N5bhIUNhRL2Q4U 7J9I4/CYjbptvmy2kyk8+otYHFTiqhyLO23CL8YHCE7sfKfO5j4xl68u4ZxO/6q8 KsrTc9CPZw5gggfVYd1OJPoCp2tvh3j24XgKSHc9+7DDusR2V7SwD1o9caLKQuwK hf2dRzJx0kJG3wv6zu7XdHNxSE8brUBnD7621v4aAzWKPVQVaMl26yixMUA94BMZ oxnd/nyuQ4GL+kRPYSmu+9d331lp/rP0+PVck4JT8UxHECHI4LJiVmwEuck= -----END CERTIFICATE-----Generated at Sat Jun 1 13:38:47 2024 by rpki-client on console-fra.rpki-client.org