$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/XNjKyLDJXgtb2XEf077ZZ622Mok.roa File: XNjKyLDJXgtb2XEf077ZZ622Mok.roa (raw, json) Hash identifier: ozVUqY1VkJxCwz2eNLXdHsKp4FGDLseDzkBhxgLQcWg= Subject key identifier: 5C:D8:CA:C8:B0:C9:5E:0B:5B:D9:71:1F:D3:BE:D9:67:AD:B6:32:89 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 08E8 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/XNjKyLDJXgtb2XEf077ZZ622Mok.roa Signing time: Tue 30 Apr 2024 02:26:29 +0000 ROA not before: Tue 30 Apr 2024 02:26:29 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 49.98.90.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2280 (0x8e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 30 02:26:29 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=5CD8CAC8B0C95E0B5BD9711FD3BED967ADB63289 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:2d:0d:65:d2:86:d8:56:90:58:4f:41:ba:da: 0d:c0:bc:83:e6:b6:b8:48:5a:c5:bc:d4:e4:fe:fa: 20:dc:fe:eb:f8:3f:99:51:e6:80:b9:fa:81:fb:a1: 27:86:06:21:09:b5:69:29:68:a2:7e:20:b4:ad:30: 51:d9:60:46:49:d6:2e:fb:90:ed:a8:9d:40:43:83: ad:a4:07:49:aa:ed:22:5b:ca:ac:5d:88:90:25:99: 12:75:eb:1f:5c:be:4d:8d:8c:ba:e6:bc:6a:21:60: 2d:ea:f9:45:c9:a8:09:3b:2e:03:06:d0:9e:6f:e3: 13:73:f7:39:c3:b3:6b:d1:6a:47:6c:8a:fd:57:c0: 12:af:c6:72:37:88:76:c6:d8:e7:18:47:43:30:58: 94:b7:13:dd:c2:5b:d0:b0:2a:6c:76:03:29:fe:e7: 78:7d:bf:38:bd:3c:ad:85:52:24:a1:30:a5:a8:93: bb:cd:f8:fd:d3:16:b0:ce:15:18:0f:63:fa:73:67: e9:06:aa:c3:00:98:ec:24:32:be:d8:f6:8e:66:b1: 7d:df:42:c6:0d:50:c2:99:f1:55:ab:27:52:f7:98: ac:f8:d1:4d:a2:ac:7c:23:39:b5:8b:59:de:5a:70: 7d:51:da:df:40:f4:68:19:8c:ed:d7:1c:f0:03:10: b4:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:D8:CA:C8:B0:C9:5E:0B:5B:D9:71:1F:D3:BE:D9:67:AD:B6:32:89 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/XNjKyLDJXgtb2XEf077ZZ622Mok.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.98.90.0/23 Signature Algorithm: sha256WithRSAEncryption 91:fd:c4:c7:fe:3d:6e:0b:db:13:e3:50:29:5c:5c:be:15:27: fd:2d:e6:39:67:95:fa:a1:6f:75:0e:00:5f:27:72:fd:6d:e5: 1f:d6:4d:92:aa:80:a6:82:40:71:cc:35:5a:35:29:b9:e4:e5: 0f:5b:17:30:84:f3:98:ce:70:d4:a7:f1:7d:89:4e:ee:a2:39: de:0e:4c:d5:40:33:1a:78:c6:cd:bb:f6:d2:95:b9:5b:fb:9c: ff:11:13:c8:f8:3a:16:60:2a:a8:cd:36:a6:ae:89:b6:5e:30: 26:af:e0:82:04:c7:6d:32:dc:b0:39:0a:7d:a4:2a:b8:31:ee: 14:f2:65:b7:ab:8a:41:5a:3e:4d:ff:24:d6:da:9e:b7:66:28: 63:78:33:1a:be:e8:d8:9f:b6:9e:64:fd:a4:08:c3:dc:35:cc: 68:a3:e8:06:b6:3e:16:e0:ce:c7:65:a7:7f:88:61:3f:ac:1e: 79:86:bc:67:34:98:4e:b6:f4:be:02:97:eb:94:a3:b1:fc:b0: dd:99:55:45:4f:60:35:d0:21:00:7e:bd:e5:dd:02:c4:c2:d8: 72:1f:58:9f:f0:15:2c:2c:5d:e2:62:04:96:95:da:df:63:2e: ea:1d:26:72:69:51:69:6b:11:69:3b:7b:e4:d2:5e:4f:bd:65: 5b:c4:87:c1 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCOgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw MjI2MjlaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDVDRDhDQUM4QjBDOTVF MEI1QkQ5NzExRkQzQkVEOTY3QURCNjMyODkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCrLQ1l0obYVpBYT0G62g3AvIPmtrhIWsW81OT++iDc/uv4P5lR 5oC5+oH7oSeGBiEJtWkpaKJ+ILStMFHZYEZJ1i77kO2onUBDg62kB0mq7SJbyqxd iJAlmRJ16x9cvk2NjLrmvGohYC3q+UXJqAk7LgMG0J5v4xNz9znDs2vRakdsiv1X wBKvxnI3iHbG2OcYR0MwWJS3E93CW9CwKmx2Ayn+53h9vzi9PK2FUiShMKWok7vN +P3TFrDOFRgPY/pzZ+kGqsMAmOwkMr7Y9o5msX3fQsYNUMKZ8VWrJ1L3mKz40U2i rHwjObWLWd5acH1R2t9A9GgZjO3XHPADELQFAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUXNjKyLDJXgtb2XEf077ZZ622MokwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1hOakt5TERKWGd0YjJYRWYwNzdaWjYyMk1vay5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExYlowDQYJKoZIhvcNAQELBQADggEBAJH9xMf+PW4L2xPjUClcXL4VJ/0t 5jlnlfqhb3UOAF8ncv1t5R/WTZKqgKaCQHHMNVo1Kbnk5Q9bFzCE85jOcNSn8X2J Tu6iOd4OTNVAMxp4xs279tKVuVv7nP8RE8j4OhZgKqjNNqauibZeMCav4IIEx20y 3LA5Cn2kKrgx7hTyZberikFaPk3/JNbanrdmKGN4Mxq+6Niftp5k/aQIw9w1zGij 6Aa2Phbgzsdlp3+IYT+sHnmGvGc0mE629L4Cl+uUo7H8sN2ZVUVPYDXQIQB+veXd AsTC2HIfWJ/wFSwsXeJiBJaV2t9jLuodJnJpUWlrEWk7e+TSXk+9ZVvEh8E= -----END CERTIFICATE-----Generated at Sat Jun 1 15:54:31 2024 by rpki-client on console-ams.rpki-client.org