$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/UA4hXmK3n5ZJ4ENKnNNdpxHAu6Y.roa File: UA4hXmK3n5ZJ4ENKnNNdpxHAu6Y.roa (raw, json) Hash identifier: uYxgj1NOH6n4FCHPZCwpGiz//TASf9qgjoyQ+fNNFNc= Subject key identifier: 50:0E:21:5E:62:B7:9F:96:49:E0:43:4A:9C:D3:5D:A7:11:C0:BB:A6 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 083B Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/UA4hXmK3n5ZJ4ENKnNNdpxHAu6Y.roa Signing time: Tue 30 Apr 2024 02:14:31 +0000 ROA not before: Tue 30 Apr 2024 02:14:31 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 49.106.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 22:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2107 (0x83b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 30 02:14:31 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=500E215E62B79F9649E0434A9CD35DA711C0BBA6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:f8:58:16:64:d0:d1:e6:90:86:37:c3:dc:63: 0b:0b:ba:ca:09:e5:57:61:5c:6b:19:2e:9e:0a:59: b1:cf:99:60:00:d9:83:bf:61:9d:43:93:9e:e4:95: 2b:2e:b5:96:60:cd:54:d7:c3:89:46:0d:f4:cc:af: 00:a0:ce:e0:83:6b:ad:26:60:7e:1b:ea:f0:79:eb: 77:7d:74:c1:23:af:41:9c:3e:24:80:00:74:26:ce: 39:cb:6d:50:92:63:74:62:31:c9:94:3c:25:87:ba: a1:8e:11:38:b6:5c:04:b9:ed:88:50:a2:48:b7:22: ef:a1:59:e6:03:2b:7d:33:e5:c8:e9:67:6c:ef:11: 58:a9:49:7c:80:8f:7f:6d:dd:c7:47:ae:4c:4a:45: 8d:d8:22:39:ce:98:0a:15:c9:61:6d:18:d1:81:6f: 69:d6:46:b5:af:20:18:6f:dc:5f:ed:11:cb:07:0e: 21:bd:18:4f:c8:ed:9a:a0:86:86:ea:cf:1c:97:7e: b3:b5:3a:c3:a6:6c:18:29:1c:48:c1:20:43:72:68: b8:2b:2d:d7:7c:6c:d4:8b:54:d4:cb:b5:69:a9:0d: 07:11:e3:33:26:f4:5a:5f:eb:8d:09:fe:6a:d2:c2: 8e:52:5f:1c:59:3e:a4:5e:9c:d7:4e:00:90:29:c4: 69:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:0E:21:5E:62:B7:9F:96:49:E0:43:4A:9C:D3:5D:A7:11:C0:BB:A6 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/UA4hXmK3n5ZJ4ENKnNNdpxHAu6Y.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.106.100.0/24 Signature Algorithm: sha256WithRSAEncryption 84:1b:f8:8a:9f:c3:34:b6:37:7a:cd:8b:f5:55:57:21:c2:b6: e4:40:15:e4:22:9e:5b:1d:d2:85:91:63:4e:c8:86:34:0a:f3: f8:8d:f3:45:68:3f:c7:f2:d8:8d:13:d0:76:29:4e:41:7a:76: a6:3f:fc:f9:0c:ea:c4:8b:d4:3f:19:1f:dc:b8:15:b4:b0:bf: 2b:7b:4d:96:4b:23:1f:7c:0c:04:f9:c1:14:3d:27:70:0c:1f: f4:1b:04:1e:7f:40:f5:1f:82:86:71:71:8c:5b:ff:ad:83:1b: 38:4b:c6:74:52:2c:82:72:c5:ff:c2:63:c8:fb:1c:e7:8b:c7: 07:2c:09:86:94:78:5b:ee:6e:b8:04:ff:ef:d0:98:24:be:31: 0f:b6:84:a9:9d:99:06:a8:09:0b:83:5d:0e:65:72:c2:ff:14: be:7a:2d:1c:5d:c0:b5:e4:ac:87:1f:66:e0:86:ec:7f:77:3d: 72:65:47:bb:f2:91:fe:44:10:14:d7:42:31:e1:f1:69:d8:c3: eb:f3:1c:ea:4a:81:56:b4:38:e2:b7:d5:fc:e1:42:5a:56:39: a6:54:a1:0a:1d:cf:9b:a2:09:9b:99:04:1b:4d:9c:a6:60:89: 50:cf:f5:56:a3:2d:76:cb:4f:2d:f5:79:69:24:0a:70:e7:fe: c1:9f:a5:6a -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCDswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw MjE0MzFaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDUwMEUyMTVFNjJCNzlG OTY0OUUwNDM0QTlDRDM1REE3MTFDMEJCQTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDV+FgWZNDR5pCGN8PcYwsLusoJ5VdhXGsZLp4KWbHPmWAA2YO/ YZ1Dk57klSsutZZgzVTXw4lGDfTMrwCgzuCDa60mYH4b6vB563d9dMEjr0GcPiSA AHQmzjnLbVCSY3RiMcmUPCWHuqGOETi2XAS57YhQoki3Iu+hWeYDK30z5cjpZ2zv EVipSXyAj39t3cdHrkxKRY3YIjnOmAoVyWFtGNGBb2nWRrWvIBhv3F/tEcsHDiG9 GE/I7ZqghobqzxyXfrO1OsOmbBgpHEjBIENyaLgrLdd8bNSLVNTLtWmpDQcR4zMm 9Fpf640J/mrSwo5SXxxZPqRenNdOAJApxGmhAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUUA4hXmK3n5ZJ4ENKnNNdpxHAu6YwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1VBNGhYbUszbjVaSjRFTktuTk5kcHhIQXU2WS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAxamQwDQYJKoZIhvcNAQELBQADggEBAIQb+IqfwzS2N3rNi/VVVyHCtuRA FeQinlsd0oWRY07IhjQK8/iN80VoP8fy2I0T0HYpTkF6dqY//PkM6sSL1D8ZH9y4 FbSwvyt7TZZLIx98DAT5wRQ9J3AMH/QbBB5/QPUfgoZxcYxb/62DGzhLxnRSLIJy xf/CY8j7HOeLxwcsCYaUeFvubrgE/+/QmCS+MQ+2hKmdmQaoCQuDXQ5lcsL/FL56 LRxdwLXkrIcfZuCG7H93PXJlR7vykf5EEBTXQjHh8WnYw+vzHOpKgVa0OOK31fzh QlpWOaZUoQodz5uiCZuZBBtNnKZgiVDP9VajLXbLTy31eWkkCnDn/sGfpWo= -----END CERTIFICATE-----Generated at Mon Nov 25 23:59:10 2024 by rpki-client on console-fra.rpki-client.org