$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/PxvduCfbv1LudPcyTTqkVsoXH7g.roa File: PxvduCfbv1LudPcyTTqkVsoXH7g.roa (raw, json) Hash identifier: 587x+YnVOlnkQJR+XTnz+h6PKoyLDjo4mcanhBEle1I= Subject key identifier: 3F:1B:DD:B8:27:DB:BF:52:EE:74:F7:32:4D:3A:A4:56:CA:17:1F:B8 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 06E6 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/PxvduCfbv1LudPcyTTqkVsoXH7g.roa Signing time: Tue 30 Apr 2024 01:49:40 +0000 ROA not before: Tue 30 Apr 2024 01:49:40 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 49.98.148.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 23 Jun 2024 11:53:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1766 (0x6e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 30 01:49:40 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=3F1BDDB827DBBF52EE74F7324D3AA456CA171FB8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b4:6a:ba:d7:c7:a8:50:89:fe:fe:26:f7:c8: 0c:c0:48:44:e9:e0:c2:c2:c8:12:ae:b9:f5:84:be: 5d:76:20:8d:36:1e:94:4b:9a:40:a1:b2:6d:41:67: 52:b4:07:88:61:08:2a:04:1e:5c:12:e1:5f:8d:86: d9:5e:e2:c1:f3:fc:8c:97:0b:0d:cc:d9:ac:97:6b: 6b:c4:cf:38:6a:c6:fd:dd:62:b0:bd:f7:7c:f7:24: 68:25:8e:e7:e0:84:c0:61:d0:5d:ac:99:30:07:d3: 2d:fb:db:48:37:c1:4b:b2:4a:15:3a:3a:d5:8e:39: 5e:c7:c8:a8:6c:e0:b6:9f:44:76:d7:70:03:92:ac: 32:5c:f9:35:84:94:33:71:b9:02:27:01:f9:59:98: a9:8d:f4:f4:03:79:2c:94:84:9e:58:86:ac:be:5a: e1:79:f5:89:5b:09:83:29:29:56:ee:3f:c1:ef:ec: 98:72:e3:fc:78:6a:41:1c:e2:2b:1e:4a:b1:4e:70: ec:76:d6:ef:3d:c3:c9:a6:9e:eb:11:38:d7:0d:79: 23:87:57:dc:ea:ca:a8:81:64:68:eb:6a:32:de:5f: 94:95:7c:f1:5e:ca:01:fa:96:5e:42:b0:37:e9:93: 01:dc:c8:aa:17:c3:77:c7:d1:20:f2:c5:32:0c:29: 7d:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:1B:DD:B8:27:DB:BF:52:EE:74:F7:32:4D:3A:A4:56:CA:17:1F:B8 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/PxvduCfbv1LudPcyTTqkVsoXH7g.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.98.148.0/23 Signature Algorithm: sha256WithRSAEncryption b4:2c:70:83:04:9b:10:96:42:e3:32:1b:0c:dd:51:82:d1:4b: b7:82:f1:20:15:48:92:88:7b:c9:de:52:97:d6:9b:b9:df:dd: 37:06:12:f6:23:d8:36:9c:f4:95:17:01:35:f0:26:fe:a5:5d: f5:44:4d:aa:2f:b4:d2:f6:67:d5:04:78:e0:43:9e:d5:4f:65: 33:ff:73:4d:75:2e:5e:ff:2a:45:22:e8:af:f5:6f:d7:b4:8d: 88:40:69:05:2a:0f:0f:49:57:2d:b5:9a:21:5d:56:8e:02:a3: 6b:da:5a:60:cf:5d:e8:2d:ce:7d:89:4e:dc:5f:ad:8d:80:55: 5d:b8:4f:8c:22:a0:f6:31:76:e9:cd:81:0a:60:a0:eb:19:51: cd:dc:3f:91:44:d1:80:7f:aa:4b:c3:b2:7d:ac:4f:bf:48:82: 42:5a:c3:98:f7:7a:79:ad:20:04:1f:03:c5:d3:3c:36:e4:8f: d1:e3:85:4d:65:ff:a3:ee:b6:95:f6:98:66:e1:2f:0e:80:b9: d7:ca:cc:ea:9f:3e:d1:d3:91:1f:68:37:c3:2d:19:c3:d7:d9: a1:df:c0:af:bf:cd:b3:13:a5:c2:ea:9c:28:5c:5e:f4:2a:2f: 0f:f8:7d:b1:ba:9b:6d:5f:23:68:17:8f:d0:8b:71:1d:1e:9e: 65:3d:d9:f6 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBuYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw MTQ5NDBaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDNGMUJEREI4MjdEQkJG NTJFRTc0RjczMjREM0FBNDU2Q0ExNzFGQjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCitGq618eoUIn+/ib3yAzASETp4MLCyBKuufWEvl12II02HpRL mkChsm1BZ1K0B4hhCCoEHlwS4V+Nhtle4sHz/IyXCw3M2ayXa2vEzzhqxv3dYrC9 93z3JGgljufghMBh0F2smTAH0y3720g3wUuyShU6OtWOOV7HyKhs4LafRHbXcAOS rDJc+TWElDNxuQInAflZmKmN9PQDeSyUhJ5Yhqy+WuF59YlbCYMpKVbuP8Hv7Jhy 4/x4akEc4iseSrFOcOx21u89w8mmnusRONcNeSOHV9zqyqiBZGjrajLeX5SVfPFe ygH6ll5CsDfpkwHcyKoXw3fH0SDyxTIMKX3RAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUPxvduCfbv1LudPcyTTqkVsoXH7gwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1B4dmR1Q2ZidjFMdWRQY3lUVHFrVnNvWEg3Zy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExYpQwDQYJKoZIhvcNAQELBQADggEBALQscIMEmxCWQuMyGwzdUYLRS7eC 8SAVSJKIe8neUpfWm7nf3TcGEvYj2Dac9JUXATXwJv6lXfVETaovtNL2Z9UEeOBD ntVPZTP/c011Ll7/KkUi6K/1b9e0jYhAaQUqDw9JVy21miFdVo4Co2vaWmDPXegt zn2JTtxfrY2AVV24T4wioPYxdunNgQpgoOsZUc3cP5FE0YB/qkvDsn2sT79IgkJa w5j3enmtIAQfA8XTPDbkj9HjhU1l/6PutpX2mGbhLw6AudfKzOqfPtHTkR9oN8Mt GcPX2aHfwK+/zbMTpcLqnChcXvQqLw/4fbG6m21fI2gXj9CLcR0enmU92fY= -----END CERTIFICATE-----Generated at Sun Jun 16 12:57:21 2024 by rpki-client on console-fra.rpki-client.org