$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/L2sOgkpbLt9EWwfLOPOwf9ZKZRQ.roa File: L2sOgkpbLt9EWwfLOPOwf9ZKZRQ.roa (raw, json) Hash identifier: cAvjWaLPhLqlucnI+svDQsjF3K2+dK19WvwY/rTBZm8= Subject key identifier: 2F:6B:0E:82:4A:5B:2E:DF:44:5B:07:CB:38:F3:B0:7F:D6:4A:65:14 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0685 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/L2sOgkpbLt9EWwfLOPOwf9ZKZRQ.roa Signing time: Tue 30 Apr 2024 01:38:04 +0000 ROA not before: Tue 30 Apr 2024 01:38:04 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 49.104.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:41:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1669 (0x685) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 30 01:38:04 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=2F6B0E824A5B2EDF445B07CB38F3B07FD64A6514 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:22:71:bf:5f:2f:16:b3:cc:c7:35:aa:f2:7e: e7:db:a0:ef:ad:71:54:05:d7:4c:8e:10:6a:50:f1: 1e:d8:9e:8e:04:5a:39:bd:cb:47:c7:2f:f5:f8:5b: c7:d1:ce:48:57:f4:e3:c2:42:cf:1a:5c:2d:1d:ce: 06:ce:0e:f6:f6:4c:98:41:98:8c:3d:0c:c3:ba:19: 0d:0b:e7:d6:84:5f:44:a9:66:fb:3f:ef:7f:4d:99: d9:6d:e0:9d:22:9e:c9:25:52:62:b3:2e:64:2a:5c: d9:18:95:c7:db:9a:50:e8:57:a3:e8:0f:3f:a5:26: 07:92:c7:7f:ef:3d:e3:8e:f9:89:75:a0:8b:23:99: d3:6b:ba:95:20:08:dd:89:72:a5:69:6d:7c:c7:d8: 26:c7:e2:07:40:9f:b7:07:87:67:47:e1:b3:c8:c0: 10:86:78:2e:02:b1:cd:15:49:e6:de:5c:9b:8c:99: f7:09:32:26:15:42:98:2a:6d:98:d1:47:61:5e:ed: 33:e4:1b:88:7b:1f:66:92:fa:ff:0d:40:50:3c:8f: df:3c:f6:29:3d:e5:c2:24:62:db:9f:f3:a2:91:50: 53:91:6c:48:f1:32:eb:52:f2:bb:3f:14:e5:b9:9e: f8:48:1d:1a:01:37:80:db:8e:b0:a6:fd:78:23:de: 26:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:6B:0E:82:4A:5B:2E:DF:44:5B:07:CB:38:F3:B0:7F:D6:4A:65:14 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/L2sOgkpbLt9EWwfLOPOwf9ZKZRQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.104.21.0/24 Signature Algorithm: sha256WithRSAEncryption 7c:1b:3c:7e:0a:f9:78:b3:d6:30:36:cd:47:b9:d3:28:6c:0a: 5c:3f:93:71:fc:17:5f:15:ae:3f:1d:5d:ef:fd:6c:ed:d5:b1: eb:ea:56:7d:ad:c7:4d:65:b2:cf:c7:3b:99:0e:8a:b0:d9:5a: 6b:48:30:d5:76:47:7f:16:31:6c:90:1a:e5:6e:a1:c1:d1:14: be:3e:64:6b:9d:9b:4b:8a:3b:1f:6a:66:ee:ad:ef:d7:b7:ee: 31:5b:fa:1b:68:9b:fc:9f:62:2a:2c:a7:ac:33:8d:f4:11:0c: 5d:b9:40:9e:03:30:35:71:c0:4a:9f:23:98:d6:d6:ed:64:2f: 20:f1:bc:15:bd:84:43:20:92:e7:4f:3f:6b:bb:65:fd:ac:41: 03:35:e1:4e:32:f1:70:fe:1f:4c:1b:b3:b8:05:ec:5e:12:f0: 22:09:78:07:02:76:e8:a7:4c:a4:d8:29:9f:7e:ab:98:84:7f: 19:48:78:98:8c:80:0b:a0:7c:cc:cd:b2:f5:f5:d5:8b:84:55: 60:e4:b8:d9:60:1f:93:01:b2:d0:37:16:71:c9:e8:34:5a:d0: 11:84:d2:cc:2e:bc:a1:05:a8:60:80:d6:0f:72:d0:ee:42:63: 82:4b:9a:c7:00:9f:98:03:c7:94:8c:80:a5:74:98:fa:ac:92: 85:a7:35:e0 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBoUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw MTM4MDRaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDJGNkIwRTgyNEE1QjJF REY0NDVCMDdDQjM4RjNCMDdGRDY0QTY1MTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDoInG/Xy8Ws8zHNaryfufboO+tcVQF10yOEGpQ8R7Yno4EWjm9 y0fHL/X4W8fRzkhX9OPCQs8aXC0dzgbODvb2TJhBmIw9DMO6GQ0L59aEX0SpZvs/ 739Nmdlt4J0insklUmKzLmQqXNkYlcfbmlDoV6PoDz+lJgeSx3/vPeOO+Yl1oIsj mdNrupUgCN2JcqVpbXzH2CbH4gdAn7cHh2dH4bPIwBCGeC4Csc0VSebeXJuMmfcJ MiYVQpgqbZjRR2Fe7TPkG4h7H2aS+v8NQFA8j9889ik95cIkYtuf86KRUFORbEjx MutS8rs/FOW5nvhIHRoBN4DbjrCm/Xgj3ibvAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUL2sOgkpbLt9EWwfLOPOwf9ZKZRQwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0wyc09na3BiTHQ5RVd3ZkxPUE93ZjlaS1pSUS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAxaBUwDQYJKoZIhvcNAQELBQADggEBAHwbPH4K+Xiz1jA2zUe50yhsClw/ k3H8F18Vrj8dXe/9bO3VsevqVn2tx01lss/HO5kOirDZWmtIMNV2R38WMWyQGuVu ocHRFL4+ZGudm0uKOx9qZu6t79e37jFb+htom/yfYiosp6wzjfQRDF25QJ4DMDVx wEqfI5jW1u1kLyDxvBW9hEMgkudPP2u7Zf2sQQM14U4y8XD+H0wbs7gF7F4S8CIJ eAcCduinTKTYKZ9+q5iEfxlIeJiMgAugfMzNsvX11YuEVWDkuNlgH5MBstA3FnHJ 6DRa0BGE0swuvKEFqGCA1g9y0O5CY4JLmscAn5gDx5SMgKV0mPqskoWnNeA= -----END CERTIFICATE-----Generated at Fri Nov 22 15:24:00 2024 by rpki-client on console-fra.rpki-client.org