$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/TS1k3PaeOLPYY7-tsoRsLMcESOc.roa File: TS1k3PaeOLPYY7-tsoRsLMcESOc.roa (raw, json) Hash identifier: gld0ILSGwNE8F4cUZRnW/jTdxL0RZtFSI1yGUYHqZR8= Subject key identifier: 4D:2D:64:DC:F6:9E:38:B3:D8:63:BF:AD:B2:84:6C:2C:C7:04:48:E7 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 05D9 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/TS1k3PaeOLPYY7-tsoRsLMcESOc.roa Signing time: Thu 29 Feb 2024 01:32:17 +0000 ROA not before: Thu 29 Feb 2024 01:32:17 +0000 ROA not after: Fri 14 Feb 2025 01:30:03 +0000 asID: 9605 IP address blocks: 49.96.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1497 (0x5d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Feb 29 01:32:17 2024 GMT Not After : Feb 14 01:30:03 2025 GMT Subject: CN=4D2D64DCF69E38B3D863BFADB2846C2CC70448E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:a0:70:5a:48:78:3d:43:e8:80:1c:33:c8:58: 5f:77:01:25:4d:20:d4:c6:35:7c:80:f1:3d:50:aa: d3:9d:b7:82:46:f3:a8:ee:fe:03:3f:7e:ed:bc:a2: 21:6f:34:81:39:e8:92:51:93:dd:08:a6:2e:f3:56: 9a:6b:3d:7a:ea:4d:fc:51:92:23:db:c2:c6:61:26: a6:ea:67:7d:f3:28:14:1a:14:e7:af:aa:a1:5a:fa: d5:22:09:b7:69:5b:6b:82:17:a6:8a:3d:c6:31:c5: 72:75:bf:19:03:65:b8:05:d3:74:8d:2f:23:3e:a3: 98:a2:06:ca:38:e1:f5:74:b3:95:f2:7f:70:e2:7a: 71:3b:9c:68:dd:ac:29:94:14:9b:69:e7:15:e5:e0: bd:8a:5a:4a:5c:8f:d1:d3:aa:c8:c1:a1:8c:b8:9a: d3:a6:b2:00:60:83:71:47:80:e8:80:1c:9c:d0:d0: ac:da:fc:64:28:6d:42:b0:2d:9f:1c:8a:c0:4e:06: b6:19:83:5f:b6:06:23:4a:3c:78:79:61:83:1d:d0: ce:c8:47:2e:74:f6:99:7d:97:14:a4:ff:02:11:92: 28:e3:ee:ed:e2:61:e3:2f:5a:f5:94:66:7f:4d:d4: 1d:85:d4:56:be:18:7f:f8:56:ca:11:b8:27:5b:1c: ff:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:2D:64:DC:F6:9E:38:B3:D8:63:BF:AD:B2:84:6C:2C:C7:04:48:E7 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/TS1k3PaeOLPYY7-tsoRsLMcESOc.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.96.25.0/24 Signature Algorithm: sha256WithRSAEncryption 45:be:81:a8:34:6d:cf:1e:40:82:83:95:26:48:2a:df:2d:3f: d5:72:e8:29:f3:a9:9e:8f:22:29:0e:c1:a1:c1:51:d8:09:b6: 89:ce:b9:e6:74:15:c0:cd:f6:ae:8c:25:9c:0d:8a:42:1b:77: d8:4c:aa:b4:55:fe:23:7d:2d:47:dd:d9:5d:1f:2e:c7:a9:ec: 03:50:2d:d5:0d:cb:d9:b5:2f:74:c2:6f:2b:3f:c3:80:4a:a7: 74:55:28:a4:76:3d:46:22:46:ae:9f:c0:0b:a4:8e:53:56:b7: 45:67:ae:89:ed:83:8a:14:c8:c6:bc:10:94:e4:d6:12:de:b5: a3:0b:27:63:f5:07:60:01:cf:60:c3:d5:f0:b9:5b:67:db:fb: 02:3c:0c:27:35:16:8d:06:4f:a6:00:71:48:b2:fd:6b:e7:a6: 3f:fe:38:2d:10:d7:a5:8f:76:d1:98:e3:8e:38:69:04:9e:1e: 6c:ce:eb:6b:15:28:f2:57:5a:9b:cb:ee:8f:02:23:69:af:65: 45:00:b3:b1:a6:bb:63:15:17:99:32:2a:7e:01:28:98:4c:79: 10:7e:5d:f4:06:dd:c4:2d:a1:76:d3:15:76:a0:67:bd:43:b0: 03:53:01:6e:3e:a2:9b:5a:23:d1:af:35:34:bf:df:83:bf:b3: 29:fe:13:2d -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBdkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDAyMjkw MTMyMTdaFw0yNTAyMTQwMTMwMDNaMDMxMTAvBgNVBAMTKDREMkQ2NERDRjY5RTM4 QjNEODYzQkZBREIyODQ2QzJDQzcwNDQ4RTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDloHBaSHg9Q+iAHDPIWF93ASVNINTGNXyA8T1QqtOdt4JG86ju /gM/fu28oiFvNIE56JJRk90Ipi7zVpprPXrqTfxRkiPbwsZhJqbqZ33zKBQaFOev qqFa+tUiCbdpW2uCF6aKPcYxxXJ1vxkDZbgF03SNLyM+o5iiBso44fV0s5Xyf3Di enE7nGjdrCmUFJtp5xXl4L2KWkpcj9HTqsjBoYy4mtOmsgBgg3FHgOiAHJzQ0Kza /GQobUKwLZ8cisBOBrYZg1+2BiNKPHh5YYMd0M7IRy509pl9lxSk/wIRkijj7u3i YeMvWvWUZn9N1B2F1Fa+GH/4VsoRuCdbHP8XAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUTS1k3PaeOLPYY7+tsoRsLMcESOcwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1RTMWszUGFlT0xQWVk3LXRzb1JzTE1jRVNPYy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAxYBkwDQYJKoZIhvcNAQELBQADggEBAEW+gag0bc8eQIKDlSZIKt8tP9Vy 6CnzqZ6PIikOwaHBUdgJtonOueZ0FcDN9q6MJZwNikIbd9hMqrRV/iN9LUfd2V0f Lsep7ANQLdUNy9m1L3TCbys/w4BKp3RVKKR2PUYiRq6fwAukjlNWt0Vnrontg4oU yMa8EJTk1hLetaMLJ2P1B2ABz2DD1fC5W2fb+wI8DCc1Fo0GT6YAcUiy/Wvnpj/+ OC0Q16WPdtGY4444aQSeHmzO62sVKPJXWpvL7o8CI2mvZUUAs7Gmu2MVF5kyKn4B KJhMeRB+XfQG3cQtoXbTFXagZ71DsANTAW4+optaI9GvNTS/34O/syn+Ey0= -----END CERTIFICATE-----Generated at Sat Jun 1 13:38:47 2024 by rpki-client on console-fra.rpki-client.org