$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ap4r47eBYiNwG-WvwsmfmP9vEZM.roa File: ap4r47eBYiNwG-WvwsmfmP9vEZM.roa (raw, json) Hash identifier: C+StLewmy59UjE2Dfq0vS6hmUeXEMAi6XqDD+GD9y70= Subject key identifier: 6A:9E:2B:E3:B7:81:62:23:70:1B:E5:AF:C2:C9:9F:98:FF:6F:11:93 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0704 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ap4r47eBYiNwG-WvwsmfmP9vEZM.roa Signing time: Tue 30 Apr 2024 01:52:52 +0000 ROA not before: Tue 30 Apr 2024 01:52:52 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 49.98.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1796 (0x704) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 30 01:52:52 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=6A9E2BE3B7816223701BE5AFC2C99F98FF6F1193 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:c9:23:45:58:e0:14:99:3d:74:9a:4f:94:80: 87:b4:b9:bc:78:8f:a8:eb:f8:48:c0:79:44:e0:4b: 99:ee:af:e0:ed:8a:11:78:2a:56:bf:fc:4d:ea:2a: b8:4b:6d:7a:f6:1a:a7:c8:e8:ee:1a:46:31:50:85: c3:6a:47:f3:57:ec:92:a6:69:34:a5:c0:c0:33:87: e6:0e:c8:77:e0:59:fb:07:55:23:02:46:55:05:25: 37:e0:1d:a0:2d:a4:bc:a5:59:71:eb:8a:89:ee:0f: 5a:ba:14:fb:47:05:e7:54:d8:41:cf:87:1c:a5:5b: 7e:44:f2:20:02:eb:ae:63:4b:ea:11:98:50:78:da: cb:8e:44:f0:92:b2:3d:1b:93:9d:fc:76:4a:6a:03: d8:d0:cb:63:ef:27:19:9b:49:de:27:60:8e:68:c0: dc:d5:af:85:3f:03:ad:08:54:ee:25:cd:27:0f:67: 77:57:87:b4:40:ad:b1:59:9c:e6:76:08:49:cc:cb: 72:c1:bb:96:c6:05:b4:f9:56:89:16:d3:16:7f:8d: 75:89:1c:f9:a5:d4:59:de:d0:57:b3:bb:a6:e0:42: 77:50:92:ec:f4:0e:96:a9:2a:d1:23:2d:8b:ed:4e: cb:98:a1:fd:54:23:a7:1e:4e:5e:f4:7d:66:7f:3f: ba:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:9E:2B:E3:B7:81:62:23:70:1B:E5:AF:C2:C9:9F:98:FF:6F:11:93 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ap4r47eBYiNwG-WvwsmfmP9vEZM.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.98.204.0/22 Signature Algorithm: sha256WithRSAEncryption e1:3e:1f:dc:01:11:6c:3c:3e:6f:c8:ba:69:51:d5:17:5b:89: ef:14:c7:53:68:d1:c9:13:94:29:9e:9a:35:a0:2c:f0:6b:8a: 49:87:55:3a:95:b8:ea:50:ed:0a:a0:50:9d:1d:65:73:a8:77: 81:14:ac:b1:8a:16:b3:bd:2f:2b:c2:76:f0:a1:d2:82:52:20: eb:ff:1a:20:c4:75:aa:d1:1e:a7:4b:87:aa:38:0d:41:0a:77: 70:7a:9d:5d:1e:0b:67:82:b0:3f:e2:02:b9:34:e4:c2:d2:86: 16:1b:c8:33:2d:6b:b6:b5:51:12:ce:d2:80:52:9a:e7:91:f9: c6:59:8c:2b:fd:d5:32:64:66:a5:32:c2:c2:94:2a:c4:f1:ab: 02:66:9f:18:9f:35:32:b4:6c:80:b8:8c:85:c0:bd:cd:f0:4c: 00:4a:0b:b6:c0:5c:e4:f7:c0:81:74:18:32:ec:bc:01:7e:8b: c3:ba:62:fd:44:dd:7f:eb:2f:f0:9e:ee:10:5b:e1:b1:b7:31: 2a:83:ff:08:db:cc:83:ca:a8:67:87:0e:8d:26:b5:d8:6b:ad: f9:c8:e3:01:e8:72:37:93:f3:dd:ac:30:97:65:65:64:0e:40: 3f:cc:17:2d:ba:31:08:5e:5a:9d:b3:f0:19:c8:9d:0b:31:35: 0e:30:14:4f -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBwQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw MTUyNTJaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDZBOUUyQkUzQjc4MTYy MjM3MDFCRTVBRkMyQzk5Rjk4RkY2RjExOTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCgySNFWOAUmT10mk+UgIe0ubx4j6jr+EjAeUTgS5nur+DtihF4 Kla//E3qKrhLbXr2GqfI6O4aRjFQhcNqR/NX7JKmaTSlwMAzh+YOyHfgWfsHVSMC RlUFJTfgHaAtpLylWXHrionuD1q6FPtHBedU2EHPhxylW35E8iAC665jS+oRmFB4 2suORPCSsj0bk538dkpqA9jQy2PvJxmbSd4nYI5owNzVr4U/A60IVO4lzScPZ3dX h7RArbFZnOZ2CEnMy3LBu5bGBbT5VokW0xZ/jXWJHPml1Fne0Fezu6bgQndQkuz0 DpapKtEjLYvtTsuYof1UI6ceTl70fWZ/P7ohAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUap4r47eBYiNwG+WvwsmfmP9vEZMwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2FwNHI0N2VCWWlOd0ctV3Z3c21mbVA5dkVaTS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIxYswwDQYJKoZIhvcNAQELBQADggEBAOE+H9wBEWw8Pm/IumlR1Rdbie8U x1No0ckTlCmemjWgLPBrikmHVTqVuOpQ7QqgUJ0dZXOod4EUrLGKFrO9LyvCdvCh 0oJSIOv/GiDEdarRHqdLh6o4DUEKd3B6nV0eC2eCsD/iArk05MLShhYbyDMta7a1 URLO0oBSmueR+cZZjCv91TJkZqUywsKUKsTxqwJmnxifNTK0bIC4jIXAvc3wTABK C7bAXOT3wIF0GDLsvAF+i8O6Yv1E3X/rL/Ce7hBb4bG3MSqD/wjbzIPKqGeHDo0m tdhrrfnI4wHocjeT892sMJdlZWQOQD/MFy26MQheWp2z8BnInQsxNQ4wFE8= -----END CERTIFICATE-----Generated at Sat Jun 1 15:54:31 2024 by rpki-client on console-ams.rpki-client.org