$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Yks8g9taIa3NG4IiJJmVMnHdddA.roa File: Yks8g9taIa3NG4IiJJmVMnHdddA.roa (raw, json) Hash identifier: mPusTy8G2zTEYPA02tNgCC61F1P6VoWxUEA7KrOEVg8= Subject key identifier: 62:4B:3C:83:DB:5A:21:AD:CD:1B:82:22:24:99:95:32:71:DD:75:D0 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 05F6 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Yks8g9taIa3NG4IiJJmVMnHdddA.roa Signing time: Thu 29 Feb 2024 01:35:42 +0000 ROA not before: Thu 29 Feb 2024 01:35:42 +0000 ROA not after: Fri 14 Feb 2025 01:30:03 +0000 asID: 9605 IP address blocks: 49.97.102.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:22:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1526 (0x5f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Feb 29 01:35:42 2024 GMT Not After : Feb 14 01:30:03 2025 GMT Subject: CN=624B3C83DB5A21ADCD1B82222499953271DD75D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:ea:da:70:85:d4:81:ae:bd:a7:98:43:b3:2e: ee:8f:11:cc:7b:86:fa:0e:d6:80:9f:23:b4:a7:66: e5:f8:68:47:cb:6e:fe:f6:27:8e:a5:e5:8e:1a:c9: d8:c1:ad:e1:16:7c:59:c8:72:06:76:b1:1b:fb:ec: f0:d3:06:93:91:7e:ff:aa:13:95:68:ce:6e:c0:a2: 36:b3:e6:2b:cd:86:4c:03:7d:c9:e7:82:94:fc:e5: 48:3a:26:c9:04:d3:db:f4:10:f4:51:aa:0e:5a:1d: c0:63:ab:07:fd:69:a0:39:c1:9e:d2:28:2e:0a:b3: f1:d9:bf:2e:bc:56:63:9c:e1:f1:1a:b1:b2:71:23: 85:f1:23:9b:08:19:9b:8c:43:a8:62:5c:89:ee:56: 37:b3:5e:33:02:53:8a:4c:8d:00:04:1f:9d:60:6f: 4c:99:98:59:d8:14:be:86:fd:d8:13:f9:74:b0:cd: 1b:f9:f6:72:62:88:aa:f5:be:66:0b:69:d0:45:55: 39:9b:7a:2e:31:7d:b0:fe:5c:2e:1f:86:94:e9:9d: 43:8c:b9:9a:65:e2:f1:65:b9:2a:ec:2e:01:2a:ab: d1:f7:dc:50:e7:30:01:c2:a9:3e:90:04:9c:06:fb: de:e3:3c:c8:e9:97:bc:07:20:be:26:2e:fb:7d:21: d3:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:4B:3C:83:DB:5A:21:AD:CD:1B:82:22:24:99:95:32:71:DD:75:D0 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Yks8g9taIa3NG4IiJJmVMnHdddA.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.97.102.0/23 Signature Algorithm: sha256WithRSAEncryption 43:db:a3:76:4f:b0:c5:cd:76:8c:9a:59:20:1c:19:a4:ec:a2: dd:cb:6b:61:2f:94:a5:3a:d0:7f:4f:87:11:c0:2a:ed:8d:1d: 5a:76:83:59:be:8d:be:f6:d1:ae:eb:87:62:cb:26:54:3a:18: 8e:19:9a:3b:cb:10:d5:12:53:44:33:ef:c7:04:1b:6e:27:8a: cc:f2:36:ea:d2:db:82:4c:17:73:43:94:10:d6:24:7c:84:f6: ac:75:0d:44:a2:8d:68:26:b4:91:a2:f4:ce:76:b8:92:b0:75: 7c:92:07:f2:87:c3:c8:c6:91:3d:eb:7e:9c:98:00:99:d7:2b: a6:5b:ef:44:9d:fa:ea:b7:97:5c:58:37:59:a6:cd:ab:71:8f: bc:ef:ac:1e:f2:dc:01:22:e0:91:3e:2d:31:7a:ae:7d:30:71: 21:e9:e0:d4:a2:9c:19:ef:94:65:13:25:87:e7:dd:24:c3:3c: d7:2a:24:7d:a9:07:1f:7c:b8:1c:29:81:b5:72:95:dc:17:66: ef:9f:e8:2b:77:43:1a:bf:99:22:f7:d2:71:e5:e6:8d:99:04: 96:78:61:29:f4:dc:97:0c:e1:3f:5f:b4:8d:8c:02:fe:23:ac: bf:3d:76:5e:e5:c2:74:cf:3c:a6:c2:a1:c6:4e:76:77:33:d4: bb:8c:27:c7 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBfYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDAyMjkw MTM1NDJaFw0yNTAyMTQwMTMwMDNaMDMxMTAvBgNVBAMTKDYyNEIzQzgzREI1QTIx QURDRDFCODIyMjI0OTk5NTMyNzFERDc1RDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCW6tpwhdSBrr2nmEOzLu6PEcx7hvoO1oCfI7SnZuX4aEfLbv72 J46l5Y4aydjBreEWfFnIcgZ2sRv77PDTBpORfv+qE5Vozm7Aojaz5ivNhkwDfcnn gpT85Ug6JskE09v0EPRRqg5aHcBjqwf9aaA5wZ7SKC4Ks/HZvy68VmOc4fEasbJx I4XxI5sIGZuMQ6hiXInuVjezXjMCU4pMjQAEH51gb0yZmFnYFL6G/dgT+XSwzRv5 9nJiiKr1vmYLadBFVTmbei4xfbD+XC4fhpTpnUOMuZpl4vFluSrsLgEqq9H33FDn MAHCqT6QBJwG+97jPMjpl7wHIL4mLvt9IdO5AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUYks8g9taIa3NG4IiJJmVMnHdddAwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1lrczhnOXRhSWEzTkc0SWlKSm1WTW5IZGRkQS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExYWYwDQYJKoZIhvcNAQELBQADggEBAEPbo3ZPsMXNdoyaWSAcGaTsot3L a2EvlKU60H9PhxHAKu2NHVp2g1m+jb720a7rh2LLJlQ6GI4ZmjvLENUSU0Qz78cE G24niszyNurS24JMF3NDlBDWJHyE9qx1DUSijWgmtJGi9M52uJKwdXySB/KHw8jG kT3rfpyYAJnXK6Zb70Sd+uq3l1xYN1mmzatxj7zvrB7y3AEi4JE+LTF6rn0wcSHp 4NSinBnvlGUTJYfn3STDPNcqJH2pBx98uBwpgbVyldwXZu+f6Ct3Qxq/mSL30nHl 5o2ZBJZ4YSn03JcM4T9ftI2MAv4jrL89dl7lwnTPPKbCocZOdncz1LuMJ8c= -----END CERTIFICATE-----Generated at Fri Nov 22 16:45:40 2024 by rpki-client on console-ams.rpki-client.org