$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZZ0Oy7dscBIzPLIDumSBuUaqG40.roa File: ZZ0Oy7dscBIzPLIDumSBuUaqG40.roa (raw, json) Hash identifier: 72BAAm6vV/Snq7esVfroEpI/SShx8g5pyXTFQ8nTYeE= Subject key identifier: 65:9D:0E:CB:B7:6C:70:12:33:3C:B2:03:BA:64:81:B9:46:AA:1B:8D Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0614 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZZ0Oy7dscBIzPLIDumSBuUaqG40.roa Signing time: Thu 29 Feb 2024 01:38:30 +0000 ROA not before: Thu 29 Feb 2024 01:38:30 +0000 ROA not after: Fri 14 Feb 2025 01:30:03 +0000 asID: 9605 IP address blocks: 49.97.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1556 (0x614) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Feb 29 01:38:30 2024 GMT Not After : Feb 14 01:30:03 2025 GMT Subject: CN=659D0ECBB76C7012333CB203BA6481B946AA1B8D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:66:b8:d9:87:40:36:d8:fb:99:5e:10:cd:f7: a8:81:f0:17:67:7e:5f:a4:6b:d8:44:7b:ad:4c:d7: 63:e5:9c:49:a7:ad:97:9c:d3:10:a8:35:d3:03:b2: 3c:9b:8b:87:08:5f:3e:6e:b0:8b:93:81:d5:1c:79: 70:a7:7a:8d:af:4f:f0:37:e2:ff:d2:19:6c:86:63: 9b:8c:83:88:05:46:3d:cd:47:8d:ce:d3:e1:ed:a3: f4:76:5a:05:01:07:0d:03:f5:96:a7:db:79:a3:36: 83:a1:6d:e9:5d:9e:61:07:d7:2a:3a:c5:b5:7f:46: be:e2:a7:26:99:10:72:73:1d:d0:8a:4e:1b:9e:25: cd:2d:a6:26:a4:e0:06:1b:ba:b6:c6:dd:2f:1e:2f: 4f:53:b4:63:8f:fc:2e:12:0d:a2:fa:1a:cb:02:8e: c8:83:f3:3e:fa:ed:f0:3f:55:bb:53:cc:e8:c5:54: 02:d5:6d:b7:2e:d5:6f:e8:66:8e:63:cc:c1:11:8d: d8:c4:5d:56:ff:54:b7:ea:ab:27:e3:1f:1e:a7:cb: 2b:11:ec:90:96:27:e4:08:66:6d:55:4e:22:1f:19: d0:7b:49:8f:6d:b4:6e:f0:51:63:24:a9:36:01:2a: 22:9f:bd:b8:9d:91:9e:24:af:10:48:0a:db:f2:01: 70:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:9D:0E:CB:B7:6C:70:12:33:3C:B2:03:BA:64:81:B9:46:AA:1B:8D X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZZ0Oy7dscBIzPLIDumSBuUaqG40.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.97.105.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:04:cb:16:6c:b0:4b:51:65:f8:a4:99:cd:33:81:99:b0:7a: 9a:11:3d:75:63:2e:6d:a0:4c:b1:d0:f1:93:4e:98:25:be:21: 66:44:ca:c3:29:da:73:9e:d9:71:58:10:33:58:30:10:3b:68: ea:16:db:f9:78:1c:cb:f6:2c:6d:80:53:3d:94:61:ea:9d:e9: c4:51:47:e2:59:a4:1d:53:b4:57:6f:5e:c6:ba:79:cd:e4:e1: 53:cc:c3:dd:0e:0e:d7:a8:3f:c9:1a:e5:25:9b:ff:e7:75:7c: f0:81:17:d6:26:a8:dd:23:06:be:6d:07:37:49:58:75:c4:35: bb:02:d0:d4:c7:f3:a5:de:64:70:53:cb:99:79:f7:fa:f6:9b: e5:78:b2:c0:38:6f:cd:f2:c9:7e:82:30:9e:2f:fc:af:86:e0: d1:92:d7:5d:db:b6:62:af:2d:c0:de:ef:f3:52:67:1f:fc:54: 41:83:10:4c:5f:ff:93:68:2d:97:af:cc:6a:b3:c2:23:7c:06: 47:45:14:a8:1d:df:a1:50:43:55:80:ba:97:5c:24:d2:25:9e: 21:04:0b:f9:99:d0:45:e9:cc:24:b3:51:89:4f:91:d3:62:31: 51:24:34:b1:99:14:01:cc:ae:06:16:24:b5:e1:b7:d2:48:b5: e3:03:64:9f -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBhQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDAyMjkw MTM4MzBaFw0yNTAyMTQwMTMwMDNaMDMxMTAvBgNVBAMTKDY1OUQwRUNCQjc2Qzcw MTIzMzNDQjIwM0JBNjQ4MUI5NDZBQTFCOEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDoZrjZh0A22PuZXhDN96iB8Bdnfl+ka9hEe61M12PlnEmnrZec 0xCoNdMDsjybi4cIXz5usIuTgdUceXCneo2vT/A34v/SGWyGY5uMg4gFRj3NR43O 0+Hto/R2WgUBBw0D9Zan23mjNoOhbeldnmEH1yo6xbV/Rr7ipyaZEHJzHdCKThue Jc0tpiak4AYburbG3S8eL09TtGOP/C4SDaL6GssCjsiD8z767fA/VbtTzOjFVALV bbcu1W/oZo5jzMERjdjEXVb/VLfqqyfjHx6nyysR7JCWJ+QIZm1VTiIfGdB7SY9t tG7wUWMkqTYBKiKfvbidkZ4krxBICtvyAXDbAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUZZ0Oy7dscBIzPLIDumSBuUaqG40wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1paME95N2RzY0JJelBMSUR1bVNCdVVhcUc0MC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAxYWkwDQYJKoZIhvcNAQELBQADggEBAF4EyxZssEtRZfikmc0zgZmwepoR PXVjLm2gTLHQ8ZNOmCW+IWZEysMp2nOe2XFYEDNYMBA7aOoW2/l4HMv2LG2AUz2U Yeqd6cRRR+JZpB1TtFdvXsa6ec3k4VPMw90ODteoP8ka5SWb/+d1fPCBF9YmqN0j Br5tBzdJWHXENbsC0NTH86XeZHBTy5l59/r2m+V4ssA4b83yyX6CMJ4v/K+G4NGS 113btmKvLcDe7/NSZx/8VEGDEExf/5NoLZevzGqzwiN8BkdFFKgd36FQQ1WAupdc JNIlniEEC/mZ0EXpzCSzUYlPkdNiMVEkNLGZFAHMrgYWJLXht9JIteMDZJ8= -----END CERTIFICATE-----Generated at Sat Jun 1 13:38:47 2024 by rpki-client on console-fra.rpki-client.org