$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/RaB1eagrHEYYR8yEYjyzTIwFuok.roa File: RaB1eagrHEYYR8yEYjyzTIwFuok.roa (raw, json) Hash identifier: hYUbQZD7Q8u+PkJwaI50BCNRbDpzMX7DBozZOs3FYuQ= Subject key identifier: 45:A0:75:79:A8:2B:1C:46:18:47:CC:84:62:3C:B3:4C:8C:05:BA:89 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 08D2 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/RaB1eagrHEYYR8yEYjyzTIwFuok.roa Signing time: Tue 30 Apr 2024 02:24:41 +0000 ROA not before: Tue 30 Apr 2024 02:24:41 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 49.104.64.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2258 (0x8d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 30 02:24:41 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=45A07579A82B1C461847CC84623CB34C8C05BA89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:dc:be:9b:07:e2:ec:fb:4a:17:c2:cd:1e:27: 37:c4:1a:1d:f2:33:44:f4:d8:5a:cb:aa:2b:38:33: 85:40:9f:5b:8b:46:0f:b4:e1:f3:bb:1d:a7:0f:5d: 51:56:e4:c4:a7:d4:b7:54:1c:54:28:33:87:04:77: 85:b1:f2:47:e5:55:81:c5:95:fd:c4:8b:74:0f:ea: 6d:dc:5e:c8:8f:5e:6d:b1:b9:e4:64:d3:9b:34:31: 94:31:28:3f:30:09:b9:c5:2a:35:f1:c8:a9:e5:5c: 19:ac:b3:b0:7f:6a:8f:61:76:2f:43:d8:a0:a1:09: 70:60:dd:ce:7f:0f:82:94:81:93:92:2c:95:74:95: 44:f4:01:80:41:d3:75:5b:b1:40:ba:77:9e:48:a0: 84:bd:e8:57:37:c1:00:c4:19:08:62:76:33:2b:4b: 9a:ff:8a:7d:68:7c:67:46:b0:94:31:92:b1:01:c5: f2:c6:71:13:c2:8f:07:9b:fa:92:82:78:16:00:26: 77:9a:4d:3f:07:a0:d6:47:70:3b:51:74:ae:2e:61: d0:fc:e5:a2:07:04:f9:17:71:9a:27:c0:01:4a:93: 10:f3:fd:f4:7e:75:e5:ef:22:b2:6e:75:93:51:34: f1:39:b9:0c:54:a9:88:89:32:f1:dd:19:9f:2c:ea: 25:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:A0:75:79:A8:2B:1C:46:18:47:CC:84:62:3C:B3:4C:8C:05:BA:89 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/RaB1eagrHEYYR8yEYjyzTIwFuok.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.104.64.0/21 Signature Algorithm: sha256WithRSAEncryption 4f:ee:04:b7:49:10:7a:f1:99:96:4c:a0:78:74:69:06:47:bc: 39:4b:6d:0c:7a:8f:fe:c4:f4:8a:76:9f:a2:14:c8:e3:3e:76: 8e:a2:8b:19:90:51:d9:3f:ec:51:a5:5e:fc:8a:f4:18:21:e7: 8e:49:2e:72:e4:92:d0:ff:ed:64:e4:36:9b:80:38:2f:2d:d0: d7:36:88:47:f4:c4:d5:c1:db:1d:f6:40:ce:11:a9:f8:43:1c: 02:a0:92:62:47:bd:bd:df:39:c3:99:95:2e:5c:26:5a:d7:2e: da:a2:b6:36:fa:50:54:6e:6f:5e:27:18:0d:42:07:7f:1b:ed: cf:97:fd:dd:ba:3b:95:a9:d8:8b:bd:86:58:a1:8f:78:ed:2d: 06:9d:7c:2d:19:bc:36:49:60:da:a7:34:2c:7b:a6:c3:3d:11: ea:b2:aa:28:74:ee:7f:62:0e:20:ad:8a:c4:17:0d:df:5d:97: bf:d2:64:f6:05:1e:17:61:fe:df:49:73:d9:14:f2:74:74:9e: 65:6e:44:18:21:a3:fd:39:6b:05:ac:84:39:6a:4a:fe:8d:3a: 4e:95:e5:ee:a4:f1:1a:7b:e6:da:82:40:5b:fb:b8:0b:69:23: 17:a7:75:45:fc:2b:01:7d:c1:9c:43:5f:02:6c:9f:6f:79:1e: bf:56:7c:44 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCNIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw MjI0NDFaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDQ1QTA3NTc5QTgyQjFD NDYxODQ3Q0M4NDYyM0NCMzRDOEMwNUJBODkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCc3L6bB+Ls+0oXws0eJzfEGh3yM0T02FrLqis4M4VAn1uLRg+0 4fO7HacPXVFW5MSn1LdUHFQoM4cEd4Wx8kflVYHFlf3Ei3QP6m3cXsiPXm2xueRk 05s0MZQxKD8wCbnFKjXxyKnlXBmss7B/ao9hdi9D2KChCXBg3c5/D4KUgZOSLJV0 lUT0AYBB03VbsUC6d55IoIS96Fc3wQDEGQhidjMrS5r/in1ofGdGsJQxkrEBxfLG cRPCjweb+pKCeBYAJneaTT8HoNZHcDtRdK4uYdD85aIHBPkXcZonwAFKkxDz/fR+ deXvIrJudZNRNPE5uQxUqYiJMvHdGZ8s6iXZAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQURaB1eagrHEYYR8yEYjyzTIwFuokwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1JhQjFlYWdySEVZWVI4eUVZanl6VEl3RnVvay5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMxaEAwDQYJKoZIhvcNAQELBQADggEBAE/uBLdJEHrxmZZMoHh0aQZHvDlL bQx6j/7E9Ip2n6IUyOM+do6iixmQUdk/7FGlXvyK9Bgh545JLnLkktD/7WTkNpuA OC8t0Nc2iEf0xNXB2x32QM4RqfhDHAKgkmJHvb3fOcOZlS5cJlrXLtqitjb6UFRu b14nGA1CB38b7c+X/d26O5Wp2Iu9hlihj3jtLQadfC0ZvDZJYNqnNCx7psM9Eeqy qih07n9iDiCtisQXDd9dl7/SZPYFHhdh/t9Jc9kU8nR0nmVuRBgho/05awWshDlq Sv6NOk6V5e6k8Rp75tqCQFv7uAtpIxendUX8KwF9wZxDXwJsn295Hr9WfEQ= -----END CERTIFICATE-----Generated at Sat Jun 1 15:54:30 2024 by rpki-client on console-ams.rpki-client.org