$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZVJeRPEgTL1vSZHx-hi4NJ5LKhs.roa File: ZVJeRPEgTL1vSZHx-hi4NJ5LKhs.roa (raw, json) Hash identifier: zXI/HPbo5ZvoQtE8WrA9aMFMYYEKe9hcOJR5rUCAi8g= Subject key identifier: 65:52:5E:44:F1:20:4C:BD:6F:49:91:F1:FA:18:B8:34:9E:4B:2A:1B Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0404 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZVJeRPEgTL1vSZHx-hi4NJ5LKhs.roa Signing time: Tue 06 Jun 2023 16:05:49 +0000 ROA not before: Tue 06 Jun 2023 16:05:49 +0000 ROA not after: Tue 14 May 2024 01:30:02 +0000 asID: 9605 IP address blocks: 49.104.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 May 2024 13:36:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1028 (0x404) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 6 16:05:49 2023 GMT Not After : May 14 01:30:02 2024 GMT Subject: CN=65525E44F1204CBD6F4991F1FA18B8349E4B2A1B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:18:39:7b:a4:26:fa:60:e4:2c:95:1c:96:bb: b5:31:bf:3d:fc:79:d8:57:70:45:4e:15:de:77:ef: 80:d7:ff:1c:33:5d:a1:11:5d:b9:d2:86:72:49:7f: 1c:de:e0:45:c5:79:7f:bc:2c:73:9a:79:e0:d0:f9: 38:d9:80:8f:2d:0e:0d:74:fa:11:58:73:10:35:75: c0:7e:f4:55:70:46:0e:be:25:31:3e:31:ff:1d:e8: 74:7c:33:88:04:ed:f7:24:f7:6b:53:02:d1:dd:61: f2:e5:42:3e:6d:11:97:c3:5b:a8:1f:5f:b6:33:77: df:e3:b0:63:18:e2:b4:06:6f:3a:ce:30:73:3c:10: d5:0d:15:49:4e:64:31:11:a9:70:cf:b1:0f:21:58: 05:39:d3:42:6c:91:83:7b:b7:dc:ad:4e:97:eb:5e: be:c4:b1:21:21:61:c3:f4:de:5a:99:dd:9f:fa:3d: a0:10:75:2e:33:f2:5e:1d:ab:4f:e1:ce:a0:6a:1f: df:1c:e9:6c:47:f9:42:e3:e2:88:90:07:32:97:8c: 05:d5:90:04:6a:c1:c6:68:f5:7f:7b:81:08:38:4a: 42:28:17:c5:66:57:5e:7e:36:84:85:a7:11:92:cb: 37:3c:be:99:ae:d9:95:3d:13:64:8d:64:fe:5b:61: 3d:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:52:5E:44:F1:20:4C:BD:6F:49:91:F1:FA:18:B8:34:9E:4B:2A:1B X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZVJeRPEgTL1vSZHx-hi4NJ5LKhs.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.104.35.0/24 Signature Algorithm: sha256WithRSAEncryption 60:83:4a:e0:cc:f1:d2:78:73:17:d5:7f:4a:aa:b0:21:a7:80: 54:18:79:ef:ea:da:08:93:73:78:e5:3e:da:d4:36:15:88:68: 79:73:38:46:05:6e:fe:7c:0c:1b:d5:65:b1:f0:e9:00:2c:7f: 43:96:3b:54:e2:4f:44:d8:9d:85:b3:27:4b:b6:c5:0b:42:e0: 9c:73:8f:72:5c:d4:af:ce:15:ce:be:67:e6:e7:f6:34:8b:7a: f7:bb:81:29:13:bd:92:7d:8c:a6:d9:60:f6:ac:65:62:50:ee: 66:d9:4c:1a:1f:fe:03:95:74:25:4b:83:28:de:13:e9:67:8d: 4c:f5:a3:ec:68:a1:eb:54:2f:fb:d5:d8:40:af:71:7c:17:87: a2:b5:76:b4:a7:e1:1b:7c:d0:f6:7b:c0:b1:16:53:e2:3e:28: f7:da:fa:67:88:4d:c6:63:d2:43:a6:03:27:33:4e:b1:4e:41: 0d:33:47:3d:a1:72:d0:e4:e6:bf:99:c1:44:d6:0e:1d:77:ca: 1e:22:0a:48:d5:fe:81:0e:7e:db:be:f3:1a:12:d5:63:dd:e1: bb:cc:b7:3a:90:6f:86:2d:cf:f8:95:bc:49:f6:c9:1e:bf:36: c0:b8:3e:ce:b4:96:db:b5:15:44:6b:56:1a:2d:62:c5:8b:ca: 48:c7:cd:50 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBAQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA2MDYx NjA1NDlaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDY1NTI1RTQ0RjEyMDRD QkQ2RjQ5OTFGMUZBMThCODM0OUU0QjJBMUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD2GDl7pCb6YOQslRyWu7Uxvz38edhXcEVOFd5374DX/xwzXaER XbnShnJJfxze4EXFeX+8LHOaeeDQ+TjZgI8tDg10+hFYcxA1dcB+9FVwRg6+JTE+ Mf8d6HR8M4gE7fck92tTAtHdYfLlQj5tEZfDW6gfX7Yzd9/jsGMY4rQGbzrOMHM8 ENUNFUlOZDERqXDPsQ8hWAU500JskYN7t9ytTpfrXr7EsSEhYcP03lqZ3Z/6PaAQ dS4z8l4dq0/hzqBqH98c6WxH+ULj4oiQBzKXjAXVkARqwcZo9X97gQg4SkIoF8Vm V15+NoSFpxGSyzc8vpmu2ZU9E2SNZP5bYT2nAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUZVJeRPEgTL1vSZHx+hi4NJ5LKhswHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1pWSmVSUEVnVEwxdlNaSHgtaGk0Tko1TEtocy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAxaCMwDQYJKoZIhvcNAQELBQADggEBAGCDSuDM8dJ4cxfVf0qqsCGngFQY ee/q2giTc3jlPtrUNhWIaHlzOEYFbv58DBvVZbHw6QAsf0OWO1TiT0TYnYWzJ0u2 xQtC4Jxzj3Jc1K/OFc6+Z+bn9jSLeve7gSkTvZJ9jKbZYPasZWJQ7mbZTBof/gOV dCVLgyjeE+lnjUz1o+xooetUL/vV2ECvcXwXh6K1drSn4Rt80PZ7wLEWU+I+KPfa +meITcZj0kOmAyczTrFOQQ0zRz2hctDk5r+ZwUTWDh13yh4iCkjV/oEOftu+8xoS 1WPd4bvMtzqQb4Ytz/iVvEn2yR6/NsC4Ps60ltu1FURrVhotYsWLykjHzVA= -----END CERTIFICATE-----Generated at Sat Apr 27 10:15:57 2024 by rpki-client on console-ams.rpki-client.org