$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/XBxbNqpBQlE8gAwyrZXfaQYM4wY.roa File: XBxbNqpBQlE8gAwyrZXfaQYM4wY.roa (raw, json) Hash identifier: AAAyFvYK/JhX22+u2/atXuWDD9yQP/CFQFh7+PWZaVE= Subject key identifier: 5C:1C:5B:36:AA:41:42:51:3C:80:0C:32:AD:95:DF:69:06:0C:E3:06 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0951 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/XBxbNqpBQlE8gAwyrZXfaQYM4wY.roa Signing time: Sun 30 Jun 2024 01:29:37 +0000 ROA not before: Sun 30 Jun 2024 01:29:37 +0000 ROA not after: Tue 24 Jun 2025 10:46:45 +0000 asID: 9605 IP address blocks: 49.106.194.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:41:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2385 (0x951) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 30 01:29:37 2024 GMT Not After : Jun 24 10:46:45 2025 GMT Subject: CN=5C1C5B36AA4142513C800C32AD95DF69060CE306 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:7d:c8:64:12:2b:76:5f:35:16:66:5d:13:07: 24:c6:ee:ed:06:e1:15:13:5a:3f:a5:26:c6:28:5a: c2:03:6f:e8:e3:c7:5a:bf:23:16:3b:86:3f:75:4c: 06:35:06:a5:b1:14:dd:0c:04:cc:75:0e:58:5c:9f: b7:d4:64:2a:ec:20:73:94:5e:9d:02:a3:8b:15:bb: ca:8b:07:87:35:5a:2f:3a:d9:1d:24:19:e9:0b:88: 42:d2:77:71:24:87:31:c9:d4:79:88:80:c4:f3:57: e6:89:cb:df:72:89:a7:24:00:01:f9:37:4e:11:70: 18:bb:6b:50:7d:7d:10:48:7d:07:3d:c6:b9:ad:d4: 1f:07:2b:bf:7d:14:66:fa:8e:f9:2c:b0:71:a4:d8: 6f:94:3b:3d:44:a4:0f:7b:f9:07:a6:6f:96:95:e8: 87:f5:30:99:29:7f:9d:46:08:37:65:c1:99:d0:cf: c3:2b:c7:1b:39:0d:30:13:e8:36:f3:35:b6:d0:7a: 56:32:5d:41:76:73:16:7a:97:f1:90:37:dc:de:bc: e0:b0:44:04:ba:4e:03:10:7e:bb:87:8f:0d:c7:4c: 4a:26:93:fb:8d:f9:8c:fe:e6:39:93:ce:90:8e:31: dc:aa:91:cf:09:12:bc:8b:5f:c3:de:89:df:b3:45: af:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:1C:5B:36:AA:41:42:51:3C:80:0C:32:AD:95:DF:69:06:0C:E3:06 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/XBxbNqpBQlE8gAwyrZXfaQYM4wY.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.106.194.0/23 Signature Algorithm: sha256WithRSAEncryption 03:1c:d5:e5:d3:cd:85:09:57:09:a0:51:18:b2:02:2a:53:0a: b4:36:a6:b6:15:4d:f1:9a:f2:58:38:2a:c5:27:0a:d4:d1:88: ee:0e:e7:8f:b6:68:c6:ec:1e:34:1f:be:3b:75:70:11:2f:8e: a1:16:34:f3:93:55:70:10:cc:21:28:74:35:fd:cb:a3:45:9a: 66:a1:33:d0:e8:30:1b:91:07:2d:7b:14:5a:68:95:e6:29:01: fc:20:81:ea:3f:57:22:bd:9e:5d:da:e6:e1:18:a9:1e:63:7a: 74:de:b8:24:7c:80:16:46:6b:d8:00:20:68:82:01:5f:f4:7d: 53:64:67:01:e8:c2:8f:21:4e:bb:d3:5d:2c:12:60:32:cb:0e: 94:8f:43:6e:22:d0:90:cc:aa:c5:92:2f:d0:a9:e4:cf:eb:19: 4a:09:99:5d:d2:e5:a9:b0:c3:af:c6:e5:50:59:23:77:c5:55: f9:33:82:87:73:74:4d:22:eb:64:6b:c0:df:8b:1a:5b:e7:1c: ab:6c:95:86:ae:d4:7c:cb:8a:95:78:4d:62:07:68:b5:71:d4: 54:16:d8:9e:85:71:ac:22:97:b5:82:4a:75:3c:fc:d0:f7:25: 4a:90:ee:4d:8b:18:1a:2b:39:c2:b8:44:f7:c6:6a:68:e9:56: 6c:c8:69:8e -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCVEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA2MzAw MTI5MzdaFw0yNTA2MjQxMDQ2NDVaMDMxMTAvBgNVBAMTKDVDMUM1QjM2QUE0MTQy NTEzQzgwMEMzMkFEOTVERjY5MDYwQ0UzMDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDJfchkEit2XzUWZl0TByTG7u0G4RUTWj+lJsYoWsIDb+jjx1q/ IxY7hj91TAY1BqWxFN0MBMx1Dlhcn7fUZCrsIHOUXp0Co4sVu8qLB4c1Wi862R0k GekLiELSd3EkhzHJ1HmIgMTzV+aJy99yiackAAH5N04RcBi7a1B9fRBIfQc9xrmt 1B8HK799FGb6jvkssHGk2G+UOz1EpA97+Qemb5aV6If1MJkpf51GCDdlwZnQz8Mr xxs5DTAT6DbzNbbQelYyXUF2cxZ6l/GQN9zevOCwRAS6TgMQfruHjw3HTEomk/uN +Yz+5jmTzpCOMdyqkc8JEryLX8Peid+zRa9BAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUXBxbNqpBQlE8gAwyrZXfaQYM4wYwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1hCeGJOcXBCUWxFOGdBd3lyWlhmYVFZTTR3WS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExasIwDQYJKoZIhvcNAQELBQADggEBAAMc1eXTzYUJVwmgURiyAipTCrQ2 prYVTfGa8lg4KsUnCtTRiO4O54+2aMbsHjQfvjt1cBEvjqEWNPOTVXAQzCEodDX9 y6NFmmahM9DoMBuRBy17FFpoleYpAfwggeo/VyK9nl3a5uEYqR5jenTeuCR8gBZG a9gAIGiCAV/0fVNkZwHowo8hTrvTXSwSYDLLDpSPQ24i0JDMqsWSL9Cp5M/rGUoJ mV3S5amww6/G5VBZI3fFVfkzgodzdE0i62RrwN+LGlvnHKtslYau1HzLipV4TWIH aLVx1FQW2J6Fcawil7WCSnU8/ND3JUqQ7k2LGBorOcK4RPfGamjpVmzIaY4= -----END CERTIFICATE-----Generated at Fri Nov 22 15:24:01 2024 by rpki-client on console-fra.rpki-client.org