$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/N0jGuKQGwvpLSh9aogNPTZcNr4M.roa File: N0jGuKQGwvpLSh9aogNPTZcNr4M.roa (raw, json) Hash identifier: neJ22qAzwVz0FSrgTs9DlJ/VIfs8JLd6UaSCc8l0BLA= Subject key identifier: 37:48:C6:B8:A4:06:C2:FA:4B:4A:1F:5A:A2:03:4F:4D:97:0D:AF:83 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 014D Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/N0jGuKQGwvpLSh9aogNPTZcNr4M.roa Signing time: Wed 24 May 2023 16:31:16 +0000 ROA not before: Wed 24 May 2023 16:31:16 +0000 ROA not after: Tue 14 May 2024 01:30:02 +0000 asID: 9605 IP address blocks: 49.105.112.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 May 2024 13:36:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 333 (0x14d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: May 24 16:31:16 2023 GMT Not After : May 14 01:30:02 2024 GMT Subject: CN=3748C6B8A406C2FA4B4A1F5AA2034F4D970DAF83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ae:54:2c:8b:dd:b7:12:db:a7:f6:0d:dd:dc: 16:14:e4:e0:85:e9:b6:30:6b:b0:0d:c4:17:58:ea: d8:de:31:28:f3:67:ec:45:db:25:24:50:2c:b8:36: ab:f7:f3:d1:ed:3c:66:85:44:2d:16:04:9e:3c:cb: d3:bb:a0:c2:27:dc:f7:2b:36:01:11:64:72:98:33: 91:78:22:2b:c0:f9:48:ec:e2:18:47:45:49:20:ab: fb:5e:d4:4f:54:3b:f4:78:fa:22:54:4d:f5:1e:d4: 16:80:52:ef:5a:d4:67:04:e6:9a:83:91:7e:eb:11: 7c:8a:70:46:b0:23:9b:f3:2d:7e:02:5a:60:14:4c: f3:5b:f0:1c:56:5c:ac:3c:c7:0a:80:86:93:3d:70: 4d:e3:c0:35:68:2b:49:c8:72:8e:5c:2a:39:23:15: 66:de:af:fc:0c:38:1a:e3:11:f0:d4:09:a0:e2:55: 85:53:ac:06:69:8c:a9:28:3a:c4:7c:b4:f1:43:64: 6c:9a:36:36:7d:19:b5:9d:44:d3:2f:88:72:87:a0: cb:59:1f:3b:f8:8e:01:9f:54:24:f1:4d:33:99:ba: 35:fc:65:72:04:32:ab:75:67:57:1e:77:6c:2b:ec: 68:37:b2:86:b3:e0:a6:16:92:f8:46:5f:7b:5c:eb: 7b:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:48:C6:B8:A4:06:C2:FA:4B:4A:1F:5A:A2:03:4F:4D:97:0D:AF:83 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/N0jGuKQGwvpLSh9aogNPTZcNr4M.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.105.112.0/23 Signature Algorithm: sha256WithRSAEncryption c2:37:82:17:73:af:ff:72:54:5a:9b:58:e7:48:2f:b3:49:27: d0:32:2e:67:94:6c:24:1f:62:0d:0e:1f:ed:70:ad:44:2c:7c: 9b:17:d7:95:ce:fc:cd:4e:05:ad:34:29:e5:71:b9:ab:6d:2e: 05:da:a1:0b:29:88:29:95:76:52:37:37:90:2f:dc:dc:70:3a: b7:5e:76:b0:af:73:44:a1:ce:df:d0:5f:e5:35:04:c7:84:9f: 8c:f1:65:97:30:76:0e:8d:39:c3:eb:45:76:d7:49:64:c9:03: eb:a5:b6:87:16:bf:76:b0:ec:be:48:67:ed:9c:79:27:b1:d5: b3:df:ea:ba:ae:c4:d6:29:21:20:17:39:fb:1c:3c:e6:b7:80: da:fa:4a:39:ff:75:a1:c8:f2:64:5c:28:9d:67:99:ec:8f:d0: 30:33:65:f6:fd:d0:02:c5:6d:8b:5a:b6:2e:c0:5f:6a:c3:bb: 99:76:cc:47:c3:42:0e:ef:8b:2b:18:2c:6e:14:f7:a6:9c:f1: 7b:d1:1a:02:d0:69:70:f2:00:ae:d7:f8:8f:38:e7:5c:f3:d9: 59:db:c4:a4:3d:2a:da:db:28:62:c4:27:94:e3:ae:4e:9d:d1: 88:da:8c:01:a6:3f:02:cc:17:be:b5:43:54:2a:57:fb:01:65: 3a:d4:ce:4e -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAU0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA1MjQx NjMxMTZaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDM3NDhDNkI4QTQwNkMy RkE0QjRBMUY1QUEyMDM0RjREOTcwREFGODMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCjrlQsi923Etun9g3d3BYU5OCF6bYwa7ANxBdY6tjeMSjzZ+xF 2yUkUCy4Nqv389HtPGaFRC0WBJ48y9O7oMIn3PcrNgERZHKYM5F4IivA+Ujs4hhH RUkgq/te1E9UO/R4+iJUTfUe1BaAUu9a1GcE5pqDkX7rEXyKcEawI5vzLX4CWmAU TPNb8BxWXKw8xwqAhpM9cE3jwDVoK0nIco5cKjkjFWber/wMOBrjEfDUCaDiVYVT rAZpjKkoOsR8tPFDZGyaNjZ9GbWdRNMviHKHoMtZHzv4jgGfVCTxTTOZujX8ZXIE Mqt1Z1ced2wr7Gg3soaz4KYWkvhGX3tc63tZAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUN0jGuKQGwvpLSh9aogNPTZcNr4MwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L04wakd1S1FHd3ZwTFNoOWFvZ05QVFpjTnI0TS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExaXAwDQYJKoZIhvcNAQELBQADggEBAMI3ghdzr/9yVFqbWOdIL7NJJ9Ay LmeUbCQfYg0OH+1wrUQsfJsX15XO/M1OBa00KeVxuattLgXaoQspiCmVdlI3N5Av 3NxwOrdedrCvc0Shzt/QX+U1BMeEn4zxZZcwdg6NOcPrRXbXSWTJA+ultocWv3aw 7L5IZ+2ceSex1bPf6rquxNYpISAXOfscPOa3gNr6Sjn/daHI8mRcKJ1nmeyP0DAz Zfb90ALFbYtati7AX2rDu5l2zEfDQg7viysYLG4U96ac8XvRGgLQaXDyAK7X+I84 51zz2VnbxKQ9KtrbKGLEJ5Tjrk6d0YjajAGmPwLMF761Q1QqV/sBZTrUzk4= -----END CERTIFICATE-----Generated at Sat Apr 27 10:15:56 2024 by rpki-client on console-ams.rpki-client.org