$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/aPsRbJeSWMjSLotAvl3wRMVN4zg.roa File: aPsRbJeSWMjSLotAvl3wRMVN4zg.roa (raw, json) Hash identifier: S0T7kJzbmgWd6KVSnnO16OxFG8ho348BEDnoZ/eazf8= Subject key identifier: 68:FB:11:6C:97:92:58:C8:D2:2E:8B:40:BE:5D:F0:44:C5:4D:E3:38 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 043C Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aPsRbJeSWMjSLotAvl3wRMVN4zg.roa Signing time: Thu 27 Jul 2023 16:03:10 +0000 ROA not before: Thu 27 Jul 2023 16:03:10 +0000 ROA not after: Sun 14 Jul 2024 01:30:03 +0000 asID: 9605 IP address blocks: 49.98.20.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1084 (0x43c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jul 27 16:03:10 2023 GMT Not After : Jul 14 01:30:03 2024 GMT Subject: CN=68FB116C979258C8D22E8B40BE5DF044C54DE338 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c5:85:38:d2:56:21:4d:8d:cd:ae:36:dd:3e: 37:38:22:98:7c:b5:b7:06:ef:ca:65:1f:6e:66:17: 25:69:73:ec:26:27:4b:7d:d4:18:30:08:9d:fb:b4: c2:8d:36:20:bc:2c:c9:67:0a:48:9d:6e:34:8f:98: c2:d6:54:13:a2:9a:46:b6:42:0e:fe:4d:fc:c3:7f: dc:3d:aa:7f:3e:30:12:99:be:11:13:d6:49:de:b3: 95:ce:c2:94:a9:f1:c9:f5:f7:c6:1e:ae:cd:06:d0: 5e:df:0a:cd:fb:69:be:93:37:96:e7:30:cc:6f:c4: 2e:1d:0f:89:5c:79:46:0d:33:de:89:99:f6:83:52: 4d:81:68:a2:1f:ca:cf:fb:f2:0e:26:54:04:d6:99: 79:90:7f:0e:49:df:62:97:94:05:f8:22:1a:3b:04: 16:b2:29:37:78:ee:16:60:5b:3d:bf:2d:f7:e5:c2: fe:13:7e:be:40:6f:ed:1e:35:5e:d9:a8:29:1d:6f: 5e:a9:d0:9b:75:8b:a5:32:e2:b0:dc:05:08:f7:01: b9:62:00:1a:73:4c:79:73:06:fe:f9:6e:f4:39:41: 72:f3:41:9d:e4:cf:01:43:a0:1e:fe:33:78:8d:e4: e6:a5:29:09:1d:9b:35:79:18:b0:38:4f:ea:bb:35: 57:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:FB:11:6C:97:92:58:C8:D2:2E:8B:40:BE:5D:F0:44:C5:4D:E3:38 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aPsRbJeSWMjSLotAvl3wRMVN4zg.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.98.20.0/23 Signature Algorithm: sha256WithRSAEncryption 8f:24:eb:05:1b:11:ff:f4:ee:69:f5:3c:6a:39:ae:9a:91:59: 18:a1:d6:fb:90:a9:a6:c6:30:31:88:7c:b1:9c:27:67:5c:ec: ce:4e:6e:9a:bc:ef:e8:c4:d0:d8:2a:b1:17:1a:6f:3a:01:c7: 7f:40:1a:e0:10:dc:ac:d7:4e:45:51:a1:8c:39:82:bf:eb:fc: 0b:73:c9:21:01:6c:98:b8:84:5e:9d:ef:f3:c3:da:5a:93:a3: d0:bb:0e:fa:e6:f4:34:95:51:80:90:7c:d4:64:c2:3f:ac:ab: be:bc:d6:2b:e7:1d:09:bc:c2:c6:22:87:2a:1e:ed:ac:80:93: b3:84:f0:27:e9:2c:53:37:49:62:93:e9:ed:c1:50:df:14:15: 7e:ff:0b:fb:86:7c:5f:d6:45:89:c1:33:5f:85:a3:d9:85:91: 8a:6c:70:9a:44:6b:ee:ff:4a:fa:ce:40:c9:92:be:c8:23:74: 71:03:33:ed:8a:a4:15:60:27:16:94:6f:21:33:43:f4:bf:9a: 23:27:d3:06:71:c9:e1:f5:d1:87:6f:62:3e:51:ef:bb:c6:2c: bc:a3:8b:63:35:2e:e0:9d:98:65:83:e9:1b:07:b2:e6:8d:28: 11:3f:92:c1:32:69:dd:91:5d:2e:81:87:9a:b0:b6:72:7f:f9: 7d:cb:a2:85 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBDwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA3Mjcx NjAzMTBaFw0yNDA3MTQwMTMwMDNaMDMxMTAvBgNVBAMTKDY4RkIxMTZDOTc5MjU4 QzhEMjJFOEI0MEJFNURGMDQ0QzU0REUzMzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQClxYU40lYhTY3NrjbdPjc4Iph8tbcG78plH25mFyVpc+wmJ0t9 1BgwCJ37tMKNNiC8LMlnCkidbjSPmMLWVBOimka2Qg7+TfzDf9w9qn8+MBKZvhET 1knes5XOwpSp8cn198Yers0G0F7fCs37ab6TN5bnMMxvxC4dD4lceUYNM96JmfaD Uk2BaKIfys/78g4mVATWmXmQfw5J32KXlAX4Iho7BBayKTd47hZgWz2/Lfflwv4T fr5Ab+0eNV7ZqCkdb16p0Jt1i6Uy4rDcBQj3AbliABpzTHlzBv75bvQ5QXLzQZ3k zwFDoB7+M3iN5OalKQkdmzV5GLA4T+q7NVeZAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUaPsRbJeSWMjSLotAvl3wRMVN4zgwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2FQc1JiSmVTV01qU0xvdEF2bDN3Uk1WTjR6Zy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExYhQwDQYJKoZIhvcNAQELBQADggEBAI8k6wUbEf/07mn1PGo5rpqRWRih 1vuQqabGMDGIfLGcJ2dc7M5Obpq87+jE0NgqsRcabzoBx39AGuAQ3KzXTkVRoYw5 gr/r/AtzySEBbJi4hF6d7/PD2lqTo9C7Dvrm9DSVUYCQfNRkwj+sq7681ivnHQm8 wsYihyoe7ayAk7OE8CfpLFM3SWKT6e3BUN8UFX7/C/uGfF/WRYnBM1+Fo9mFkYps cJpEa+7/SvrOQMmSvsgjdHEDM+2KpBVgJxaUbyEzQ/S/miMn0wZxyeH10YdvYj5R 77vGLLyji2M1LuCdmGWD6RsHsuaNKBE/ksEyad2RXS6Bh5qwtnJ/+X3LooU= -----END CERTIFICATE-----Generated at Sat Jun 1 13:38:48 2024 by rpki-client on console-fra.rpki-client.org