$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Ts3hLuZgk7l0GfWJeY9kAEnIqwM.roa File: Ts3hLuZgk7l0GfWJeY9kAEnIqwM.roa (raw, json) Hash identifier: wvlgJKOhOCtyTY3w81WJ+t9jIBuQNDrB+ps3TcMthOY= Subject key identifier: 4E:CD:E1:2E:E6:60:93:B9:74:19:F5:89:79:8F:64:00:49:C8:AB:03 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 08D9 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Ts3hLuZgk7l0GfWJeY9kAEnIqwM.roa Signing time: Tue 30 Apr 2024 02:24:45 +0000 ROA not before: Tue 30 Apr 2024 02:24:45 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 49.98.152.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2265 (0x8d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 30 02:24:45 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=4ECDE12EE66093B97419F589798F640049C8AB03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:35:80:06:08:50:fe:54:bf:59:90:7c:ee:7f: ba:b4:d7:1d:7f:3c:8c:31:2e:f2:a3:21:62:65:47: ef:22:75:63:43:5b:c8:51:37:a1:ef:e7:2f:d7:18: cb:7d:85:7c:5b:85:15:c2:ec:49:2e:bb:87:0e:93: a6:0a:6f:d4:15:ab:7c:5f:06:49:4c:75:6d:78:4f: 1a:8b:fe:6b:09:03:63:c6:db:5c:35:8f:f2:e9:f0: 79:34:f3:95:a6:a9:3a:34:e6:21:51:f1:0d:cc:50: b5:96:59:32:c2:17:65:55:5d:b1:f6:e5:11:f0:ae: fa:b2:9b:4b:2c:b9:ce:18:3f:5d:40:b8:1d:ee:3f: af:c8:c1:2f:14:dd:39:4d:a8:6c:75:de:e6:83:53: a3:8b:6a:38:84:86:ef:92:41:cf:4c:db:4e:25:7b: 3f:20:06:96:ca:b1:df:55:e8:3b:02:bd:f2:6e:9e: a2:d9:49:90:a3:f6:17:2e:68:b2:e1:f0:c0:c9:89: 36:3f:16:b7:a5:01:5a:7f:63:7b:0a:7f:b2:95:a8: 2b:f0:6b:6c:10:11:38:e6:0c:6c:52:10:fb:c5:73: 36:62:d8:53:c2:60:6d:75:7c:c3:a4:43:72:08:33: 1e:19:9c:7e:1f:e4:ea:91:a8:c0:9b:3f:54:35:14: b7:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:CD:E1:2E:E6:60:93:B9:74:19:F5:89:79:8F:64:00:49:C8:AB:03 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Ts3hLuZgk7l0GfWJeY9kAEnIqwM.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.98.152.0/23 Signature Algorithm: sha256WithRSAEncryption b6:b2:b4:08:47:48:ee:d8:c9:7d:98:a5:65:e3:bc:b1:8d:24: f2:ab:5b:75:40:e3:77:a1:b8:dc:b0:84:27:71:56:12:d2:92: 06:47:4c:f0:98:2f:51:ef:cb:b7:c1:70:68:14:25:b9:f4:06: 10:dd:73:88:ee:b5:a5:42:23:70:00:cf:2b:c5:3f:f0:e6:7a: ec:4d:d2:8f:05:2b:bc:0f:4b:56:41:df:c7:47:f2:e5:e4:33: 70:dc:a5:26:2e:f7:62:7e:27:03:9b:c0:6c:dd:26:1f:96:ff: 8c:62:9b:b4:8a:2b:78:a2:62:72:66:f5:6d:a3:0c:ea:70:5f: 01:2f:bc:43:bf:7d:a4:68:1f:26:b1:e4:13:3e:93:d3:b6:c7: 17:bf:0f:34:4e:00:72:c0:91:10:dd:9b:71:c8:ce:42:fa:06: 08:3c:8e:4d:03:97:15:0f:b7:5a:e1:01:59:08:90:90:2a:09: 31:68:00:ed:a2:77:89:d1:58:99:1d:0f:51:5e:f9:ae:0a:60: 29:78:33:d3:43:f1:55:05:8c:3e:1e:28:08:41:2a:45:8b:c4: 20:01:ee:a1:0b:7d:f2:bd:d5:e6:59:95:28:c0:1c:e4:d7:dd: e2:ed:e3:55:28:7c:f0:5b:23:67:e9:5d:e2:6f:79:18:f4:d5: a4:e9:b3:97 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCNkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw MjI0NDVaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDRFQ0RFMTJFRTY2MDkz Qjk3NDE5RjU4OTc5OEY2NDAwNDlDOEFCMDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCtNYAGCFD+VL9ZkHzuf7q01x1/PIwxLvKjIWJlR+8idWNDW8hR N6Hv5y/XGMt9hXxbhRXC7Ekuu4cOk6YKb9QVq3xfBklMdW14TxqL/msJA2PG21w1 j/Lp8Hk085WmqTo05iFR8Q3MULWWWTLCF2VVXbH25RHwrvqym0ssuc4YP11AuB3u P6/IwS8U3TlNqGx13uaDU6OLajiEhu+SQc9M204lez8gBpbKsd9V6DsCvfJunqLZ SZCj9hcuaLLh8MDJiTY/FrelAVp/Y3sKf7KVqCvwa2wQETjmDGxSEPvFczZi2FPC YG11fMOkQ3IIMx4ZnH4f5OqRqMCbP1Q1FLdnAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUTs3hLuZgk7l0GfWJeY9kAEnIqwMwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1RzM2hMdVpnazdsMEdmV0plWTlrQUVuSXF3TS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExYpgwDQYJKoZIhvcNAQELBQADggEBALaytAhHSO7YyX2YpWXjvLGNJPKr W3VA43ehuNywhCdxVhLSkgZHTPCYL1Hvy7fBcGgUJbn0BhDdc4jutaVCI3AAzyvF P/DmeuxN0o8FK7wPS1ZB38dH8uXkM3DcpSYu92J+JwObwGzdJh+W/4xim7SKK3ii YnJm9W2jDOpwXwEvvEO/faRoHyax5BM+k9O2xxe/DzROAHLAkRDdm3HIzkL6Bgg8 jk0DlxUPt1rhAVkIkJAqCTFoAO2id4nRWJkdD1Fe+a4KYCl4M9ND8VUFjD4eKAhB KkWLxCAB7qELffK91eZZlSjAHOTX3eLt41UofPBbI2fpXeJveRj01aTps5c= -----END CERTIFICATE-----Generated at Sun Feb 16 22:10:45 2025 by rpki-client