$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/OOj3eMNH7fLKGva0CPTFTQbDUA8.roa File: OOj3eMNH7fLKGva0CPTFTQbDUA8.roa (raw, json) Hash identifier: rtDBW05cg/vih16uWr9JP7FZLlY8YGksW8NuuLM6nUA= Subject key identifier: 38:E8:F7:78:C3:47:ED:F2:CA:1A:F6:B4:08:F4:C5:4D:06:C3:50:0F Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 080C Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/OOj3eMNH7fLKGva0CPTFTQbDUA8.roa Signing time: Tue 30 Apr 2024 02:12:25 +0000 ROA not before: Tue 30 Apr 2024 02:12:25 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 49.104.38.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 23 Jun 2024 11:53:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2060 (0x80c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 30 02:12:25 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=38E8F778C347EDF2CA1AF6B408F4C54D06C3500F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:d5:bf:50:89:18:c3:96:7e:61:6d:13:28:0b: fe:66:fe:cd:4f:7a:87:3f:ac:53:1a:0b:98:20:bf: 55:26:fb:e9:d8:95:87:aa:3b:02:f9:88:16:ab:e2: 56:74:5f:da:c4:1a:e1:e4:8c:dd:cd:8b:5e:ab:d6: ac:c2:2d:63:77:b6:62:13:ce:98:4e:ba:6d:04:b8: 62:d1:8f:2f:21:d0:13:97:72:8e:31:10:e2:70:e7: 2e:cc:7c:62:17:c8:18:3d:7d:0c:81:2c:96:0b:06: 53:9d:fb:22:aa:af:ae:eb:d4:3b:34:20:e1:90:df: 95:7a:4c:3e:bf:3a:e8:1b:41:cc:bc:60:fa:63:e1: 9a:37:3c:98:d3:9f:95:02:1f:6d:ea:17:83:db:43: 9a:40:ee:53:73:ad:af:92:8e:40:29:e2:ba:4d:b1: e7:ef:73:df:86:43:a6:78:39:72:4a:e9:85:3e:48: 6f:c0:6f:57:31:2e:05:30:65:ba:d1:dd:61:0f:13: 57:52:60:28:1f:7a:36:29:0f:c0:8b:51:c4:fc:94: 26:da:74:67:fd:0d:0e:71:72:e8:27:6d:56:0e:d3: 5d:2e:65:71:31:62:c1:cb:bd:62:38:a5:21:b9:78: 37:19:24:1b:ba:40:13:d0:c1:61:26:ef:7a:68:bb: 50:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:E8:F7:78:C3:47:ED:F2:CA:1A:F6:B4:08:F4:C5:4D:06:C3:50:0F X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/OOj3eMNH7fLKGva0CPTFTQbDUA8.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.104.38.0/23 Signature Algorithm: sha256WithRSAEncryption a7:6f:60:21:41:b4:65:e3:56:c5:d1:ee:79:d9:5f:cb:75:50: b5:87:30:24:02:34:d6:a8:52:41:96:3f:6d:eb:50:09:6c:39: 60:6d:19:49:37:f5:ff:db:6d:bb:4a:d7:f7:35:8a:7e:75:64: b8:fe:14:46:40:d7:e5:8f:ef:95:23:96:0a:fa:cf:dd:27:d5: 89:8c:8d:43:00:f6:f2:03:e1:83:10:c8:17:a7:e2:8c:6b:4e: d3:66:6e:df:4c:d5:82:b1:3a:7b:54:9f:9e:ca:5b:12:e8:04: 00:bd:b5:58:c1:b3:0b:52:6e:b3:da:87:45:7b:bf:83:cf:15: c7:c6:dc:68:9f:36:46:e4:dd:2a:95:23:fa:d8:9d:e6:8b:6d: 2a:b8:b6:14:f6:c4:49:79:16:69:e6:f5:98:65:30:3f:32:2f: 65:f9:34:96:c8:5e:6b:32:fb:4a:06:d5:53:bf:ef:e5:4c:22: 00:db:13:6c:e9:95:65:68:7d:c6:1f:1e:0b:d0:c1:11:a3:af: 28:51:fd:4b:45:a5:1a:d6:eb:ac:e4:46:e1:61:bd:55:b9:49: aa:9c:90:67:66:bc:d1:41:87:a9:78:d1:f5:08:8b:30:74:3f: b5:b4:4f:d0:5e:43:de:10:e4:1e:73:57:16:c0:c7:fb:17:3d: 0e:29:90:88 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCAwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw MjEyMjVaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDM4RThGNzc4QzM0N0VE RjJDQTFBRjZCNDA4RjRDNTREMDZDMzUwMEYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDW1b9QiRjDln5hbRMoC/5m/s1Peoc/rFMaC5ggv1Um++nYlYeq OwL5iBar4lZ0X9rEGuHkjN3Ni16r1qzCLWN3tmITzphOum0EuGLRjy8h0BOXco4x EOJw5y7MfGIXyBg9fQyBLJYLBlOd+yKqr67r1Ds0IOGQ35V6TD6/OugbQcy8YPpj 4Zo3PJjTn5UCH23qF4PbQ5pA7lNzra+SjkAp4rpNsefvc9+GQ6Z4OXJK6YU+SG/A b1cxLgUwZbrR3WEPE1dSYCgfejYpD8CLUcT8lCbadGf9DQ5xcugnbVYO010uZXEx YsHLvWI4pSG5eDcZJBu6QBPQwWEm73pou1D9AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUOOj3eMNH7fLKGva0CPTFTQbDUA8wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L09PajNlTU5IN2ZMS0d2YTBDUFRGVFFiRFVBOC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExaCYwDQYJKoZIhvcNAQELBQADggEBAKdvYCFBtGXjVsXR7nnZX8t1ULWH MCQCNNaoUkGWP23rUAlsOWBtGUk39f/bbbtK1/c1in51ZLj+FEZA1+WP75Ujlgr6 z90n1YmMjUMA9vID4YMQyBen4oxrTtNmbt9M1YKxOntUn57KWxLoBAC9tVjBswtS brPah0V7v4PPFcfG3GifNkbk3SqVI/rYneaLbSq4thT2xEl5Fmnm9ZhlMD8yL2X5 NJbIXmsy+0oG1VO/7+VMIgDbE2zplWVofcYfHgvQwRGjryhR/UtFpRrW66zkRuFh vVW5SaqckGdmvNFBh6l40fUIizB0P7W0T9BeQ94Q5B5zVxbAx/sXPQ4pkIg= -----END CERTIFICATE-----Generated at Sun Jun 16 12:57:21 2024 by rpki-client on console-fra.rpki-client.org