$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/OSD_iGTIi5LXQ9aHBvyEw3H5bDU.roa File: OSD_iGTIi5LXQ9aHBvyEw3H5bDU.roa (raw, json) Hash identifier: PgYrhXWAejiUzVnzdZs1vGINRZXSjYXEZCAge5cGqPE= Subject key identifier: 39:20:FF:88:64:C8:8B:92:D7:43:D6:87:06:FC:84:C3:71:F9:6C:35 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0431 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/OSD_iGTIi5LXQ9aHBvyEw3H5bDU.roa Signing time: Tue 06 Jun 2023 16:09:11 +0000 ROA not before: Tue 06 Jun 2023 16:09:11 +0000 ROA not after: Tue 14 May 2024 01:30:02 +0000 asID: 9605 IP address blocks: 49.104.34.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 May 2024 13:36:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1073 (0x431) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 6 16:09:11 2023 GMT Not After : May 14 01:30:02 2024 GMT Subject: CN=3920FF8864C88B92D743D68706FC84C371F96C35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:fd:b4:09:92:3e:76:ac:b8:a4:06:7b:ed:ac: cf:48:73:4f:1c:4c:cb:5d:40:77:db:9a:34:6f:7a: 20:2d:f6:0e:95:65:fa:f3:76:14:89:28:77:c0:8b: b7:55:20:bc:9c:85:2a:62:8b:0b:33:66:e3:7f:44: 1a:91:f7:85:1a:0f:ef:62:db:6b:59:35:c9:0f:61: 92:ce:ea:42:3b:f9:ff:73:85:2f:1c:8b:0a:0d:aa: 49:04:90:1b:f5:f8:c9:cb:30:63:d6:8e:f6:bd:73: 6e:79:85:5b:8d:d2:c7:71:a4:85:16:2c:f7:fe:45: 02:95:91:fe:fc:24:63:ab:08:13:97:cd:cb:1c:40: 8b:8d:75:fa:3e:85:b6:2d:5b:c1:24:9d:f1:c5:b5: ee:81:78:41:cf:62:b4:b7:d2:86:16:d3:d6:5c:c0: 54:d3:25:72:6f:a3:50:a2:a0:31:a8:d4:49:a2:55: b5:ba:32:c8:50:61:e4:24:1b:70:3a:27:4a:21:c0: 26:ee:70:4d:00:08:a9:50:cd:f6:ca:8a:2e:43:4a: 56:f3:ce:b3:8a:2e:7b:df:88:05:c5:06:78:c3:61: 3e:ba:da:96:57:ac:f2:c8:32:c9:6b:6d:ba:c8:53: 6c:12:17:f6:17:ed:55:83:76:9a:fd:61:89:7b:03: f0:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:20:FF:88:64:C8:8B:92:D7:43:D6:87:06:FC:84:C3:71:F9:6C:35 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/OSD_iGTIi5LXQ9aHBvyEw3H5bDU.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.104.34.0/23 Signature Algorithm: sha256WithRSAEncryption 9c:95:dc:57:b1:93:f7:7e:1c:46:ec:60:b1:4b:e3:38:b6:fe: 40:42:75:a4:f9:d0:d0:ad:b7:0e:98:f0:40:b4:70:f9:c7:82: 8e:67:3b:b6:29:7b:d4:32:6a:70:ee:38:76:f4:c4:ef:4f:d2: 83:71:a6:7c:8c:d5:0b:67:05:6b:a0:30:0f:d0:76:52:2b:46: b8:aa:d8:5a:6f:4f:e1:c9:02:a2:d0:ab:47:25:d7:fb:0b:df: 0a:79:6d:64:33:67:84:26:2f:e0:09:60:d3:02:30:28:e7:9b: 1b:3a:b1:e7:04:3b:5f:46:c8:0a:c0:0e:d1:33:75:92:9f:05: 89:37:f1:d9:fa:4d:02:61:d9:c7:10:7e:c3:35:35:0c:5d:10: 62:9b:a5:13:e7:eb:42:f5:38:4a:d6:bb:d1:6c:66:a9:87:f4: 76:53:f0:93:83:06:ca:62:4f:25:d0:ef:a2:f6:2a:72:ca:cf: 7b:74:c4:e1:5b:84:3d:6c:31:6e:5a:93:72:8b:a2:79:41:10: 12:b5:74:de:14:05:d1:d4:6a:67:16:4e:9d:a1:7e:30:84:df: 51:dd:4e:05:ce:71:06:73:f1:48:85:60:ad:b2:66:36:67:6f: 50:40:f5:92:4a:84:0b:fe:33:e2:e0:af:d4:67:99:af:57:20: 6e:45:10:c4 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBDEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA2MDYx NjA5MTFaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDM5MjBGRjg4NjRDODhC OTJENzQzRDY4NzA2RkM4NEMzNzFGOTZDMzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCo/bQJkj52rLikBnvtrM9Ic08cTMtdQHfbmjRveiAt9g6VZfrz dhSJKHfAi7dVILychSpiiwszZuN/RBqR94UaD+9i22tZNckPYZLO6kI7+f9zhS8c iwoNqkkEkBv1+MnLMGPWjva9c255hVuN0sdxpIUWLPf+RQKVkf78JGOrCBOXzcsc QIuNdfo+hbYtW8EknfHFte6BeEHPYrS30oYW09ZcwFTTJXJvo1CioDGo1EmiVbW6 MshQYeQkG3A6J0ohwCbucE0ACKlQzfbKii5DSlbzzrOKLnvfiAXFBnjDYT662pZX rPLIMslrbbrIU2wSF/YX7VWDdpr9YYl7A/A/AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUOSD/iGTIi5LXQ9aHBvyEw3H5bDUwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L09TRF9pR1RJaTVMWFE5YUhCdnlFdzNINWJEVS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExaCIwDQYJKoZIhvcNAQELBQADggEBAJyV3Fexk/d+HEbsYLFL4zi2/kBC daT50NCttw6Y8EC0cPnHgo5nO7Ype9QyanDuOHb0xO9P0oNxpnyM1QtnBWugMA/Q dlIrRriq2FpvT+HJAqLQq0cl1/sL3wp5bWQzZ4QmL+AJYNMCMCjnmxs6secEO19G yArADtEzdZKfBYk38dn6TQJh2ccQfsM1NQxdEGKbpRPn60L1OErWu9FsZqmH9HZT 8JODBspiTyXQ76L2KnLKz3t0xOFbhD1sMW5ak3KLonlBEBK1dN4UBdHUamcWTp2h fjCE31HdTgXOcQZz8UiFYK2yZjZnb1BA9ZJKhAv+M+Lgr9Rnma9XIG5FEMQ= -----END CERTIFICATE-----Generated at Sat Apr 27 10:15:56 2024 by rpki-client on console-ams.rpki-client.org