$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Sb5pzVb5qwMgsL9Nh63Ha7LZyrY.roa File: Sb5pzVb5qwMgsL9Nh63Ha7LZyrY.roa (raw, json) Hash identifier: cNhKHWOyCMK3SbrMwEMS5a5Gx+1+nSe5AtcKfQGJ/tE= Subject key identifier: 49:BE:69:CD:56:F9:AB:03:20:B0:BF:4D:87:AD:C7:6B:B2:D9:CA:B6 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0834 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Sb5pzVb5qwMgsL9Nh63Ha7LZyrY.roa Signing time: Tue 30 Apr 2024 02:14:28 +0000 ROA not before: Tue 30 Apr 2024 02:14:28 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 49.104.16.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2100 (0x834) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 30 02:14:28 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=49BE69CD56F9AB0320B0BF4D87ADC76BB2D9CAB6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:83:e3:95:11:86:6a:6b:b7:39:ec:5f:6e:16: b4:7d:a5:e4:42:1b:b8:99:30:85:ec:66:07:35:66: b5:af:a8:96:7b:bb:ca:4d:9e:08:ed:44:1b:43:42: 13:cf:d1:22:94:c5:5a:21:3e:60:64:39:9e:b6:30: 2e:90:de:0e:be:af:2b:2c:3c:35:65:dc:8a:a6:c3: 19:f9:9b:a6:7c:7d:f3:1b:7c:f8:35:cd:69:2b:63: 6d:cd:9d:81:4c:16:0b:33:0d:74:de:f2:27:52:b7: be:d6:11:46:61:ab:dd:53:a6:6e:ca:ea:fb:5c:96: a8:a0:71:12:a5:c0:43:00:87:a8:9b:1e:2a:70:17: b5:8f:1a:4e:8b:eb:24:5a:25:a0:48:3d:12:5e:a0: cb:42:18:b5:7f:f3:77:ea:95:20:8e:7e:33:ee:e7: 65:cf:e0:81:c0:45:1a:ce:31:93:d8:b6:e4:3e:31: ca:15:9e:ea:ec:d9:5c:34:e2:c9:38:93:f1:1d:26: 97:c0:25:4e:44:72:d7:da:a7:d1:c8:93:58:ad:b8: 73:b4:80:49:1b:ea:1a:fb:e7:2f:fd:3d:13:4d:e9: 05:29:7e:7d:8c:85:83:6a:17:b6:c0:01:5c:a9:76: 3c:3d:a2:50:01:57:96:66:40:48:cc:29:fa:60:60: e9:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:BE:69:CD:56:F9:AB:03:20:B0:BF:4D:87:AD:C7:6B:B2:D9:CA:B6 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Sb5pzVb5qwMgsL9Nh63Ha7LZyrY.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.104.16.0/23 Signature Algorithm: sha256WithRSAEncryption 39:a7:6f:62:62:50:37:c3:10:7f:bd:97:28:32:66:24:77:84: 9f:db:42:4d:b9:a2:cd:80:40:86:f5:66:3d:28:4b:04:c4:d2: 03:92:c7:af:2a:41:e8:c6:e0:b3:c1:34:1c:f0:cf:7a:63:48: 85:95:c5:29:ec:6a:2d:ba:ef:07:9b:93:bd:5d:81:3f:3a:51: b0:61:b2:ac:79:38:f2:e9:fe:59:2f:8e:4d:4f:e7:b2:d0:43: 75:26:a3:bf:42:63:2b:a9:20:62:e9:d3:aa:b5:0c:ce:4f:9c: de:3a:db:a9:ac:2c:4b:d5:c1:bf:5c:15:37:5a:5f:64:61:3d: 69:e8:af:fb:4d:62:e6:0b:38:14:89:ad:1b:e2:4c:44:df:f4: 38:fb:d6:39:92:38:5d:01:55:98:a9:fa:51:3c:4f:16:39:0a: 18:f2:3a:46:20:dc:56:19:a2:15:8e:e1:28:8b:09:54:39:df: fb:86:61:bc:52:97:e7:a7:08:95:b1:2b:bc:96:f8:83:34:4e: a7:7e:ab:6e:25:3e:0d:e0:b4:54:4d:02:fa:9e:54:3c:00:3b: 44:29:64:9c:9c:c5:41:77:cf:3b:f7:60:3d:c5:19:b2:36:9e: a5:aa:c4:f2:fe:6d:6b:11:c4:0d:0b:93:ee:17:01:db:d0:b0: d2:a2:2b:12 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCDQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw MjE0MjhaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDQ5QkU2OUNENTZGOUFC MDMyMEIwQkY0RDg3QURDNzZCQjJEOUNBQjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDLg+OVEYZqa7c57F9uFrR9peRCG7iZMIXsZgc1ZrWvqJZ7u8pN ngjtRBtDQhPP0SKUxVohPmBkOZ62MC6Q3g6+ryssPDVl3Iqmwxn5m6Z8ffMbfPg1 zWkrY23NnYFMFgszDXTe8idSt77WEUZhq91Tpm7K6vtclqigcRKlwEMAh6ibHipw F7WPGk6L6yRaJaBIPRJeoMtCGLV/83fqlSCOfjPu52XP4IHARRrOMZPYtuQ+McoV nurs2Vw04sk4k/EdJpfAJU5Ectfap9HIk1ituHO0gEkb6hr75y/9PRNN6QUpfn2M hYNqF7bAAVypdjw9olABV5ZmQEjMKfpgYOm9AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUSb5pzVb5qwMgsL9Nh63Ha7LZyrYwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1NiNXB6VmI1cXdNZ3NMOU5oNjNIYTdMWnlyWS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExaBAwDQYJKoZIhvcNAQELBQADggEBADmnb2JiUDfDEH+9lygyZiR3hJ/b Qk25os2AQIb1Zj0oSwTE0gOSx68qQejG4LPBNBzwz3pjSIWVxSnsai267webk71d gT86UbBhsqx5OPLp/lkvjk1P57LQQ3Umo79CYyupIGLp06q1DM5PnN4626msLEvV wb9cFTdaX2RhPWnor/tNYuYLOBSJrRviTETf9Dj71jmSOF0BVZip+lE8TxY5Chjy OkYg3FYZohWO4SiLCVQ53/uGYbxSl+enCJWxK7yW+IM0Tqd+q24lPg3gtFRNAvqe VDwAO0QpZJycxUF3zzv3YD3FGbI2nqWqxPL+bWsRxA0Lk+4XAdvQsNKiKxI= -----END CERTIFICATE-----Generated at Sat Jun 1 13:38:47 2024 by rpki-client on console-fra.rpki-client.org