$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/LbhFuL5rGI88x4Nwgc8R0muf8JE.roa File: LbhFuL5rGI88x4Nwgc8R0muf8JE.roa (raw, json) Hash identifier: /VcKdZjzKUPsJnUklcGiilkOjHFlbWMJaloYz+ajwVA= Subject key identifier: 2D:B8:45:B8:BE:6B:18:8F:3C:C7:83:70:81:CF:11:D2:6B:9F:F0:91 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0900 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/LbhFuL5rGI88x4Nwgc8R0muf8JE.roa Signing time: Tue 30 Apr 2024 02:26:39 +0000 ROA not before: Tue 30 Apr 2024 02:26:39 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 49.104.18.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2304 (0x900) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 30 02:26:39 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=2DB845B8BE6B188F3CC7837081CF11D26B9FF091 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:4d:3d:c4:de:09:53:e8:d5:27:68:3b:f6:fb: ca:46:15:42:08:a8:d8:98:46:83:68:65:26:7e:ea: b9:3c:c9:69:eb:03:f2:65:0d:9f:b9:28:61:66:6a: ca:78:ca:43:2d:74:37:67:6d:cb:53:e3:66:a5:ff: bf:f2:d3:23:b3:1c:d2:9d:6e:da:56:70:25:7b:f1: ef:6e:b3:8a:42:4d:49:c7:0e:17:24:67:cc:53:8b: 17:c9:b7:62:d5:87:3f:2c:1f:bc:19:39:b8:77:4d: ec:1f:96:ae:e2:58:8e:09:53:63:65:2f:04:84:62: a0:65:17:6a:85:21:61:11:e3:9b:7c:09:cb:7a:8e: 69:67:e7:19:89:29:04:c0:b3:49:36:33:3d:e7:b0: 94:6a:99:d1:88:41:ad:cf:c4:13:5c:15:e7:7e:28: 54:e3:03:61:e3:53:73:a9:49:5f:58:19:d0:ec:5f: 53:ab:48:ec:99:08:f0:87:b6:1e:bf:ba:79:99:94: c3:c3:a0:8e:51:e1:e3:8a:6b:21:3b:cf:09:2a:28: ba:99:d7:0f:77:96:83:ca:9b:76:95:3c:ff:0c:f7: 93:89:8d:d9:b7:67:aa:1b:72:0a:2e:7e:fd:ab:17: 79:a7:38:c3:1b:be:b6:b0:7a:57:0c:43:4b:f8:6f: a7:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:B8:45:B8:BE:6B:18:8F:3C:C7:83:70:81:CF:11:D2:6B:9F:F0:91 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/LbhFuL5rGI88x4Nwgc8R0muf8JE.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.104.18.0/23 Signature Algorithm: sha256WithRSAEncryption 97:26:5a:ee:2a:18:db:1c:09:b6:c4:18:a0:97:14:8a:fd:d9: 77:1b:22:a1:10:fa:55:52:9e:52:b1:11:65:8e:7f:2d:07:cc: 64:4d:76:9b:09:70:ca:b9:52:5a:6c:16:17:6f:e0:1a:65:79: 1f:75:5b:ef:cd:fc:79:91:76:f5:ed:84:55:c9:e6:e5:f3:68: da:7f:1a:76:df:90:40:40:94:f5:6b:9f:6e:ce:03:b5:32:40: 1b:19:86:9c:86:75:af:82:cf:a3:83:ef:10:da:70:af:e6:20: b3:cb:49:83:96:1c:8d:fd:bd:8b:79:b7:21:2a:9e:f6:29:2e: 36:31:05:7b:f2:14:f7:5b:a8:b7:2b:44:aa:8b:54:30:6d:b4: fb:98:72:c5:57:d4:de:f4:a6:40:f9:5f:49:d0:06:8e:4b:7e: ce:e8:27:e9:45:1f:13:0b:52:7b:dd:55:6b:9c:15:ce:46:bb: 26:6a:48:1e:e9:fa:bd:33:60:ef:a9:f2:85:22:25:31:9f:59: 4d:43:c3:c0:53:44:34:f1:6c:4d:01:d3:c8:9c:7e:ae:f9:bc: a4:c1:4a:fb:ed:98:a9:6d:64:71:de:f6:f5:84:4a:37:84:73: c6:97:c8:3d:84:f5:1a:06:2d:03:93:06:fb:81:0e:80:30:fc: 8e:ea:75:f7 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCQAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw MjI2MzlaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDJEQjg0NUI4QkU2QjE4 OEYzQ0M3ODM3MDgxQ0YxMUQyNkI5RkYwOTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDcTT3E3glT6NUnaDv2+8pGFUIIqNiYRoNoZSZ+6rk8yWnrA/Jl DZ+5KGFmasp4ykMtdDdnbctT42al/7/y0yOzHNKdbtpWcCV78e9us4pCTUnHDhck Z8xTixfJt2LVhz8sH7wZObh3Tewflq7iWI4JU2NlLwSEYqBlF2qFIWER45t8Cct6 jmln5xmJKQTAs0k2Mz3nsJRqmdGIQa3PxBNcFed+KFTjA2HjU3OpSV9YGdDsX1Or SOyZCPCHth6/unmZlMPDoI5R4eOKayE7zwkqKLqZ1w93loPKm3aVPP8M95OJjdm3 Z6obcgoufv2rF3mnOMMbvrawelcMQ0v4b6dnAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQULbhFuL5rGI88x4Nwgc8R0muf8JEwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0xiaEZ1TDVyR0k4OHg0TndnYzhSMG11ZjhKRS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExaBIwDQYJKoZIhvcNAQELBQADggEBAJcmWu4qGNscCbbEGKCXFIr92Xcb IqEQ+lVSnlKxEWWOfy0HzGRNdpsJcMq5UlpsFhdv4BpleR91W+/N/HmRdvXthFXJ 5uXzaNp/GnbfkEBAlPVrn27OA7UyQBsZhpyGda+Cz6OD7xDacK/mILPLSYOWHI39 vYt5tyEqnvYpLjYxBXvyFPdbqLcrRKqLVDBttPuYcsVX1N70pkD5X0nQBo5Lfs7o J+lFHxMLUnvdVWucFc5GuyZqSB7p+r0zYO+p8oUiJTGfWU1Dw8BTRDTxbE0B08ic fq75vKTBSvvtmKltZHHe9vWESjeEc8aXyD2E9RoGLQOTBvuBDoAw/I7qdfc= -----END CERTIFICATE-----Generated at Sat Jun 1 15:54:30 2024 by rpki-client on console-ams.rpki-client.org