$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/KtZf8wfxXm2YV_F65z4wG1ks9lg.roa File: KtZf8wfxXm2YV_F65z4wG1ks9lg.roa (raw, json) Hash identifier: ts3SjtwW9c2iiFOQWaVA3/17uI4qhb9KSTf1M7KVBTE= Subject key identifier: 2A:D6:5F:F3:07:F1:5E:6D:98:57:F1:7A:E7:3E:30:1B:59:2C:F6:58 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 05D6 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/KtZf8wfxXm2YV_F65z4wG1ks9lg.roa Signing time: Thu 29 Feb 2024 01:32:15 +0000 ROA not before: Thu 29 Feb 2024 01:32:15 +0000 ROA not after: Fri 14 Feb 2025 01:30:03 +0000 asID: 9605 IP address blocks: 49.97.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:22:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1494 (0x5d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Feb 29 01:32:15 2024 GMT Not After : Feb 14 01:30:03 2025 GMT Subject: CN=2AD65FF307F15E6D9857F17AE73E301B592CF658 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:9e:42:fc:05:db:6a:b3:5f:0f:85:a2:b0:04: 07:28:32:78:62:1b:3d:80:ab:d6:db:8b:1f:5e:b3: 33:60:d1:30:2d:0f:37:24:81:5e:a5:a1:3c:d8:ac: 88:ed:01:03:8d:c4:41:4a:ae:78:a6:82:bd:a3:c3: 27:3d:5d:53:40:e8:83:80:d2:b0:0a:52:0b:f3:0f: 12:da:03:78:96:85:fc:ee:c5:34:0d:c8:78:5a:80: 41:74:c9:46:32:ce:da:a4:5b:b8:51:ee:48:21:d3: 8e:38:d5:2c:62:75:de:3d:69:d3:99:e4:3e:7c:87: f5:bf:3f:9f:30:60:d9:6d:0d:ec:3e:d2:4e:10:cd: 59:9c:b0:ca:36:81:96:55:9e:a6:48:1c:5f:c4:0f: a5:36:ed:f6:ac:a1:96:3a:b6:d1:66:55:d1:07:66: 9f:91:5f:9e:0f:25:db:25:3c:30:3d:ba:1d:14:ef: b5:de:e3:24:ff:49:29:8c:3a:39:37:40:08:34:a5: b7:71:90:88:bf:4b:11:ff:9e:e7:f4:ce:b6:59:20: 15:4c:c1:74:48:49:b8:0f:46:08:43:11:ae:19:ca: 05:ac:bb:c2:f3:ba:6c:fb:df:71:61:c8:2a:29:5a: 94:cf:17:83:9e:96:44:1d:b4:58:a6:f3:79:ab:9c: 06:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:D6:5F:F3:07:F1:5E:6D:98:57:F1:7A:E7:3E:30:1B:59:2C:F6:58 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/KtZf8wfxXm2YV_F65z4wG1ks9lg.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.97.97.0/24 Signature Algorithm: sha256WithRSAEncryption 01:19:53:66:ab:a5:e5:15:65:f4:bc:b5:65:85:ab:ba:94:f6: 51:47:f4:90:27:b6:44:f1:ea:89:88:82:93:c1:1c:ab:46:01: b8:9e:8c:68:69:ae:bf:73:62:cc:d2:66:58:6e:f6:ac:bb:92: 1d:8e:47:e0:7b:5c:11:fe:60:1b:2e:c1:58:26:c4:b1:47:26: 4f:05:47:cf:94:ea:60:2b:1d:56:97:97:63:54:67:b7:cd:48: 98:fa:a9:be:c4:2b:13:a8:c3:cd:ec:69:d5:6e:f1:04:28:2f: df:25:1a:4e:14:f5:6c:f9:85:44:7e:cb:58:f3:0c:a4:03:08: ed:d5:a7:12:ec:6c:63:a7:07:ba:74:9e:d5:53:2c:8a:0f:2e: 63:16:3c:b6:4b:b8:dc:4a:f0:c1:ac:15:03:51:7e:65:c9:a1: 86:44:b1:09:e4:e1:42:3a:e2:67:1d:b7:31:8a:c7:0a:43:11: 6c:bc:66:06:ad:bc:36:fb:18:b7:ba:cd:92:71:e2:6f:4d:ce: 24:d1:e2:d5:31:9c:81:b8:7c:ea:f5:64:bd:40:84:43:96:31: a3:49:05:93:9b:d9:9d:17:37:53:19:1f:d2:e1:7d:46:bf:1c: 7f:90:44:2a:00:05:36:b8:79:4a:08:d1:0c:5d:db:7c:bf:e2: 36:c0:2e:63 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBdYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDAyMjkw MTMyMTVaFw0yNTAyMTQwMTMwMDNaMDMxMTAvBgNVBAMTKDJBRDY1RkYzMDdGMTVF NkQ5ODU3RjE3QUU3M0UzMDFCNTkyQ0Y2NTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDGnkL8Bdtqs18PhaKwBAcoMnhiGz2Aq9bbix9eszNg0TAtDzck gV6loTzYrIjtAQONxEFKrnimgr2jwyc9XVNA6IOA0rAKUgvzDxLaA3iWhfzuxTQN yHhagEF0yUYyztqkW7hR7kgh04441Sxidd49adOZ5D58h/W/P58wYNltDew+0k4Q zVmcsMo2gZZVnqZIHF/ED6U27fasoZY6ttFmVdEHZp+RX54PJdslPDA9uh0U77Xe 4yT/SSmMOjk3QAg0pbdxkIi/SxH/nuf0zrZZIBVMwXRISbgPRghDEa4ZygWsu8Lz umz733FhyCopWpTPF4OelkQdtFim83mrnAaTAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUKtZf8wfxXm2YV/F65z4wG1ks9lgwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0t0WmY4d2Z4WG0yWVZfRjY1ejR3RzFrczlsZy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAxYWEwDQYJKoZIhvcNAQELBQADggEBAAEZU2arpeUVZfS8tWWFq7qU9lFH 9JAntkTx6omIgpPBHKtGAbiejGhprr9zYszSZlhu9qy7kh2OR+B7XBH+YBsuwVgm xLFHJk8FR8+U6mArHVaXl2NUZ7fNSJj6qb7EKxOow83sadVu8QQoL98lGk4U9Wz5 hUR+y1jzDKQDCO3VpxLsbGOnB7p0ntVTLIoPLmMWPLZLuNxK8MGsFQNRfmXJoYZE sQnk4UI64mcdtzGKxwpDEWy8ZgatvDb7GLe6zZJx4m9NziTR4tUxnIG4fOr1ZL1A hEOWMaNJBZOb2Z0XN1MZH9LhfUa/HH+QRCoABTa4eUoI0Qxd23y/4jbALmM= -----END CERTIFICATE-----Generated at Fri Nov 22 16:45:40 2024 by rpki-client on console-ams.rpki-client.org