$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/LcBecaEDplq8HRW9--dxrQZJ6QI.roa File: LcBecaEDplq8HRW9--dxrQZJ6QI.roa (raw, json) Hash identifier: PYsnbjISjnkgPMHMwLlK6HEQxJv0ilZxyxHG60bWoOw= Subject key identifier: 2D:C0:5E:71:A1:03:A6:5A:BC:1D:15:BD:FB:E7:71:AD:06:49:E9:02 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 063F Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/LcBecaEDplq8HRW9--dxrQZJ6QI.roa Signing time: Tue 30 Apr 2024 01:31:27 +0000 ROA not before: Tue 30 Apr 2024 01:31:27 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 49.100.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1599 (0x63f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 30 01:31:27 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=2DC05E71A103A65ABC1D15BDFBE771AD0649E902 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:36:e8:0f:eb:06:c2:94:93:16:dc:2e:6a:a4: a2:ce:f9:9a:2a:b7:8a:88:dc:66:d0:02:86:0f:f8: 44:41:b0:68:1b:37:71:f1:93:e3:24:92:85:80:e9: f3:14:38:f7:be:f3:61:ec:95:4c:77:74:28:ef:51: 08:15:b6:54:b7:1a:f3:e0:36:0d:6f:9a:ac:df:31: 12:82:39:00:b1:9b:73:44:ae:1e:1f:a6:e0:7d:d3: 67:c3:e9:ea:76:17:09:ba:92:c5:de:8d:4d:65:ca: b0:69:31:ef:16:8e:89:28:48:c0:e6:ad:4a:d4:ae: 6b:d4:56:c5:1b:34:a6:f5:0d:c2:86:0a:54:fd:ff: 23:e1:4f:04:30:3f:31:39:74:03:6e:2a:b0:10:5e: c5:a2:10:c4:b4:97:25:91:3a:38:99:56:b7:b6:c2: ea:81:d9:66:60:be:93:1b:6a:e3:2b:f9:f9:62:a6: c6:c4:83:1a:c3:6b:33:ff:ea:0e:ca:cb:f2:7f:a7: be:e5:ae:1c:93:6e:db:df:23:c0:02:ce:9c:57:2e: c1:37:c6:74:5a:14:a4:36:b4:30:2a:3c:6d:21:54: a0:67:39:a7:fd:40:eb:18:87:e0:84:65:dd:5e:32: 15:33:4e:1e:ff:97:1c:d0:13:f4:de:5f:c0:60:1c: 14:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:C0:5E:71:A1:03:A6:5A:BC:1D:15:BD:FB:E7:71:AD:06:49:E9:02 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/LcBecaEDplq8HRW9--dxrQZJ6QI.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.100.0.0/17 Signature Algorithm: sha256WithRSAEncryption 3c:e3:73:af:d4:83:a7:18:88:2a:d8:2e:6c:aa:69:54:07:b9: aa:91:f7:04:55:41:0d:c3:6a:fb:6b:5c:8a:08:26:bb:1b:2f: 75:dc:66:e0:71:f1:8f:ea:48:4e:26:8c:40:fa:65:c7:bf:33: 7b:0d:23:96:1a:4a:b2:72:b5:03:80:33:86:0e:29:71:8b:db: 5c:f3:e9:3f:07:5a:54:44:b4:b2:7a:df:f7:da:76:e3:79:4e: 4c:b8:88:58:e8:4d:76:91:be:a6:8c:5d:e3:57:a1:14:b1:11: 3e:be:4b:4a:6f:57:7a:dd:f0:e3:25:50:8e:69:fc:5c:09:32: 45:4a:da:36:90:52:73:8a:55:15:db:9e:06:eb:31:39:cb:98: ac:67:47:2d:bb:45:59:dd:4c:d6:51:0f:48:49:88:f6:67:b8: 3f:51:33:09:4a:d3:9b:c3:ac:63:6d:b6:9f:d8:5e:cf:ae:fa: 77:e1:b1:46:54:9e:a7:68:49:0a:bd:9e:ed:7e:03:0f:f5:30: 54:9e:8d:1a:88:ff:d8:98:0e:d0:97:49:3c:e8:9f:d5:3d:cc: 25:d0:1e:6b:61:bd:1b:2a:8a:6e:14:f9:a6:69:1e:68:2d:03: a9:e6:23:a8:91:8f:93:e7:f5:fa:2e:79:13:38:fa:9d:19:14: f7:e1:a2:dc -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBj8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw MTMxMjdaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDJEQzA1RTcxQTEwM0E2 NUFCQzFEMTVCREZCRTc3MUFEMDY0OUU5MDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDKNugP6wbClJMW3C5qpKLO+Zoqt4qI3GbQAoYP+ERBsGgbN3Hx k+MkkoWA6fMUOPe+82HslUx3dCjvUQgVtlS3GvPgNg1vmqzfMRKCOQCxm3NErh4f puB902fD6ep2Fwm6ksXejU1lyrBpMe8WjokoSMDmrUrUrmvUVsUbNKb1DcKGClT9 /yPhTwQwPzE5dANuKrAQXsWiEMS0lyWROjiZVre2wuqB2WZgvpMbauMr+flipsbE gxrDazP/6g7Ky/J/p77lrhyTbtvfI8ACzpxXLsE3xnRaFKQ2tDAqPG0hVKBnOaf9 QOsYh+CEZd1eMhUzTh7/lxzQE/TeX8BgHBSzAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQULcBecaEDplq8HRW9++dxrQZJ6QIwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0xjQmVjYUVEcGxxOEhSVzktLWR4clFaSjZRSS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAcxZAAwDQYJKoZIhvcNAQELBQADggEBADzjc6/Ug6cYiCrYLmyqaVQHuaqR 9wRVQQ3DavtrXIoIJrsbL3XcZuBx8Y/qSE4mjED6Zce/M3sNI5YaSrJytQOAM4YO KXGL21zz6T8HWlREtLJ63/faduN5Tky4iFjoTXaRvqaMXeNXoRSxET6+S0pvV3rd 8OMlUI5p/FwJMkVK2jaQUnOKVRXbngbrMTnLmKxnRy27RVndTNZRD0hJiPZnuD9R MwlK05vDrGNttp/YXs+u+nfhsUZUnqdoSQq9nu1+Aw/1MFSejRqI/9iYDtCXSTzo n9U9zCXQHmthvRsqim4U+aZpHmgtA6nmI6iRj5Pn9foueRM4+p0ZFPfhotw= -----END CERTIFICATE-----Generated at Sat Jun 1 15:54:30 2024 by rpki-client on console-ams.rpki-client.org