$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/N41zZcdSy2El6Xdr-Iy-AgEGBMI.roa File: N41zZcdSy2El6Xdr-Iy-AgEGBMI.roa (raw, json) Hash identifier: ozZFucMqEo4Deqqk5L7+3nX4HQ2WAaRW3x4W8qy1HSk= Subject key identifier: 37:8D:73:65:C7:52:CB:61:25:E9:77:6B:F8:8C:BE:02:01:06:04:C2 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 07DA Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/N41zZcdSy2El6Xdr-Iy-AgEGBMI.roa Signing time: Tue 30 Apr 2024 02:10:26 +0000 ROA not before: Tue 30 Apr 2024 02:10:26 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 49.96.16.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:22:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2010 (0x7da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 30 02:10:26 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=378D7365C752CB6125E9776BF88CBE02010604C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f7:45:06:1b:34:5c:70:f2:86:70:bf:97:2a: b9:a0:c6:eb:e1:a9:28:cb:49:7b:a3:ef:aa:99:11: e6:77:45:92:e9:21:05:b6:ec:d4:a7:4d:ff:66:19: ef:b3:8b:3c:64:cb:cc:d8:a1:60:4b:a6:06:8e:59: 6a:f5:fc:c9:6e:d4:f9:5c:ea:93:67:18:70:cc:88: 5f:78:4e:c3:fb:54:11:c3:f7:6c:48:4b:28:21:e3: db:a7:5d:c1:79:14:65:4a:d0:9d:17:77:ad:30:3e: b4:44:a0:52:f2:a7:ac:d2:4c:f8:cc:40:4e:3f:31: 2d:23:18:b2:55:77:7a:64:be:ad:e9:36:81:92:29: 69:bd:07:27:78:cb:ff:48:76:3d:d6:c8:5c:8e:02: 67:62:9e:47:2b:c7:cb:6d:97:89:5d:ad:00:14:43: 76:3c:de:dc:da:bd:e5:5c:ef:0e:84:60:26:85:7b: 6b:2d:57:d5:c7:96:13:1a:71:38:b7:e6:24:be:97: 72:f8:13:83:bc:9d:5d:6a:5e:c2:78:3d:1e:6e:28: 09:57:36:2e:f3:92:ed:be:cb:12:68:15:83:d3:a8: 08:5d:ef:61:93:f6:f8:78:37:ec:ab:50:91:18:50: e7:50:f7:12:ad:f4:0f:e5:01:c0:78:b9:3f:ff:5f: c4:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:8D:73:65:C7:52:CB:61:25:E9:77:6B:F8:8C:BE:02:01:06:04:C2 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/N41zZcdSy2El6Xdr-Iy-AgEGBMI.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.96.16.0/23 Signature Algorithm: sha256WithRSAEncryption a5:85:07:8b:2e:02:19:e9:33:0f:eb:37:5a:7f:50:53:95:6c: 4d:26:23:b0:1e:98:b3:e3:83:3c:fa:93:03:b2:98:ba:4a:02: 57:a3:ec:03:7d:fe:62:e9:3d:df:c2:fd:ea:f3:9d:37:ca:f5: 59:e6:ed:8b:63:ca:bc:f5:47:8c:ae:29:8e:36:f7:4e:ed:0f: 99:a0:8d:97:70:db:95:d4:ae:c3:d6:81:2c:b4:34:d1:f1:43: 6b:6c:f9:34:3d:1a:0a:04:a1:03:98:cf:26:8b:32:5d:38:f3: 7a:59:d1:89:a1:68:16:af:36:fc:fe:04:55:26:6b:36:3d:80: 21:29:f3:e6:c1:90:ae:3b:44:07:c0:c4:4d:98:32:8b:dd:13: a9:66:1b:68:5d:29:16:5f:e9:80:7b:1f:1d:ae:09:3c:0f:8b: 11:3c:a4:c4:37:7e:d6:f9:37:2d:9d:f4:3e:77:18:2b:08:6a: 17:5e:ab:90:96:34:bc:46:5f:17:f4:dd:47:a4:66:07:75:ec: d9:6f:6d:6d:9d:37:da:2f:1e:fa:20:0b:e2:09:25:4a:57:f7: dc:ad:9e:92:9b:57:d6:a3:6c:f5:e8:62:c0:4e:80:04:23:82: 5e:2e:85:63:ef:79:f4:7f:b3:f4:57:40:82:40:e2:30:96:54: 44:90:7c:f8 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICB9owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw MjEwMjZaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDM3OEQ3MzY1Qzc1MkNC NjEyNUU5Nzc2QkY4OENCRTAyMDEwNjA0QzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCk90UGGzRccPKGcL+XKrmgxuvhqSjLSXuj76qZEeZ3RZLpIQW2 7NSnTf9mGe+zizxky8zYoWBLpgaOWWr1/Mlu1Plc6pNnGHDMiF94TsP7VBHD92xI Sygh49unXcF5FGVK0J0Xd60wPrREoFLyp6zSTPjMQE4/MS0jGLJVd3pkvq3pNoGS KWm9Byd4y/9Idj3WyFyOAmdinkcrx8ttl4ldrQAUQ3Y83tzaveVc7w6EYCaFe2st V9XHlhMacTi35iS+l3L4E4O8nV1qXsJ4PR5uKAlXNi7zku2+yxJoFYPTqAhd72GT 9vh4N+yrUJEYUOdQ9xKt9A/lAcB4uT//X8QzAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUN41zZcdSy2El6Xdr+Iy+AgEGBMIwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L040MXpaY2RTeTJFbDZYZHItSXktQWdFR0JNSS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExYBAwDQYJKoZIhvcNAQELBQADggEBAKWFB4suAhnpMw/rN1p/UFOVbE0m I7AemLPjgzz6kwOymLpKAlej7AN9/mLpPd/C/erznTfK9Vnm7Ytjyrz1R4yuKY42 907tD5mgjZdw25XUrsPWgSy0NNHxQ2ts+TQ9GgoEoQOYzyaLMl0483pZ0YmhaBav Nvz+BFUmazY9gCEp8+bBkK47RAfAxE2YMovdE6lmG2hdKRZf6YB7Hx2uCTwPixE8 pMQ3ftb5Ny2d9D53GCsIahdeq5CWNLxGXxf03UekZgd17NlvbW2dN9ovHvogC+IJ JUpX99ytnpKbV9ajbPXoYsBOgAQjgl4uhWPvefR/s/RXQIJA4jCWVESQfPg= -----END CERTIFICATE-----Generated at Fri Nov 22 16:45:40 2024 by rpki-client on console-ams.rpki-client.org