$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/bQHB8sphIZWS8axGz_da6cuuxcs.roa File: bQHB8sphIZWS8axGz_da6cuuxcs.roa (raw, json) Hash identifier: cLY2wm/2Gb1DkmaLVdc3Q9R38RvwNl2tvGYGsHUqhO0= Subject key identifier: 6D:01:C1:F2:CA:61:21:95:92:F1:AC:46:CF:F7:5A:E9:CB:AE:C5:CB Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 06D9 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/bQHB8sphIZWS8axGz_da6cuuxcs.roa Signing time: Tue 30 Apr 2024 01:49:35 +0000 ROA not before: Tue 30 Apr 2024 01:49:35 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 49.104.26.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1753 (0x6d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 30 01:49:35 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=6D01C1F2CA61219592F1AC46CFF75AE9CBAEC5CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:0d:69:6e:5b:98:a7:73:4c:9e:7f:9a:9a:b1: 6b:1a:9b:2f:24:9d:cc:8c:d8:99:11:75:4b:48:1e: 9c:c0:75:ad:da:96:cd:e9:e8:75:1e:bb:a3:1e:6e: e9:ff:23:bd:a7:14:40:30:51:08:ea:a8:eb:41:73: 8d:6a:35:f9:09:ba:33:84:68:90:2f:df:61:af:f0: 14:5c:83:5a:2e:5d:58:5f:6a:c1:79:85:2e:b7:9f: d1:03:79:ea:ca:4d:2a:8c:f1:f8:ae:bc:52:30:48: 77:bc:f7:b5:77:c2:f0:a1:80:e2:1e:fb:dc:11:ff: 22:c2:90:3c:de:33:89:88:1a:3c:45:d5:a4:b8:6f: 5b:13:df:e6:04:01:3b:3f:8d:e7:74:47:70:db:2f: 7d:c5:af:c4:7c:42:d1:9a:4d:27:76:38:9f:d8:bd: 60:6d:4e:6d:0e:e7:09:fd:91:3b:d2:ab:9d:e3:99: c2:ea:86:7f:52:1e:ca:2a:30:e6:06:d4:f7:65:ad: 2e:0d:25:ae:3d:ac:40:24:0e:8e:72:06:50:e2:8c: c4:5a:9e:77:98:a2:9b:d2:15:33:2b:6f:8c:d0:d2: 3b:14:43:5b:63:c2:d5:ef:1d:45:00:13:f0:10:81: ae:5e:ec:ad:d6:5f:8d:75:bb:8d:89:e1:1c:cb:9e: 79:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:01:C1:F2:CA:61:21:95:92:F1:AC:46:CF:F7:5A:E9:CB:AE:C5:CB X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/bQHB8sphIZWS8axGz_da6cuuxcs.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.104.26.0/23 Signature Algorithm: sha256WithRSAEncryption 1e:83:42:a3:9b:42:dc:12:e7:a5:a9:fd:c4:1d:ef:53:04:74: 2d:06:43:dd:29:8f:72:c0:c5:f3:ae:3b:f9:63:10:f5:31:08: 4a:8d:f6:d9:ab:35:6d:f9:a7:f4:4f:78:18:00:de:11:82:c7: 9b:a8:2d:6c:21:b7:b2:bc:36:98:7a:7b:5a:a8:1c:46:54:9e: f2:6c:80:d1:57:db:d1:3f:8a:61:56:4a:52:d8:19:3f:a4:87: ac:a9:06:fe:24:3f:c6:0c:47:a3:aa:07:15:3a:9b:0a:05:13: e6:2b:07:f7:9a:55:8e:68:9f:25:ad:d6:d8:04:b9:b7:13:f6: 73:0c:95:4a:61:fe:ce:c4:84:c8:de:07:ce:4c:f8:29:c0:25: 55:f4:42:a0:f7:85:42:9e:e7:5f:27:aa:c8:14:15:c6:c8:d8: c8:25:71:91:52:d1:25:6e:a7:5b:42:2d:44:38:57:be:60:fc: cd:17:40:d5:93:77:a9:97:34:4c:4e:4e:c7:80:53:e3:79:f0: 37:a6:06:91:c8:fe:6a:80:1d:ca:32:b1:1e:86:1b:ab:71:18: df:4b:5e:6a:18:5e:ba:fb:82:65:33:4e:42:49:bd:32:3a:9a: f9:a9:a5:ce:f8:48:98:26:74:62:a1:ab:ac:64:de:bb:ca:59: 84:f4:9b:67 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBtkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw MTQ5MzVaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDZEMDFDMUYyQ0E2MTIx OTU5MkYxQUM0NkNGRjc1QUU5Q0JBRUM1Q0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC3DWluW5inc0yef5qasWsamy8kncyM2JkRdUtIHpzAda3als3p 6HUeu6Mebun/I72nFEAwUQjqqOtBc41qNfkJujOEaJAv32Gv8BRcg1ouXVhfasF5 hS63n9EDeerKTSqM8fiuvFIwSHe897V3wvChgOIe+9wR/yLCkDzeM4mIGjxF1aS4 b1sT3+YEATs/jed0R3DbL33Fr8R8QtGaTSd2OJ/YvWBtTm0O5wn9kTvSq53jmcLq hn9SHsoqMOYG1PdlrS4NJa49rEAkDo5yBlDijMRanneYopvSFTMrb4zQ0jsUQ1tj wtXvHUUAE/AQga5e7K3WX411u42J4RzLnnnJAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUbQHB8sphIZWS8axGz/da6cuuxcswHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2JRSEI4c3BoSVpXUzhheEd6X2RhNmN1dXhjcy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExaBowDQYJKoZIhvcNAQELBQADggEBAB6DQqObQtwS56Wp/cQd71MEdC0G Q90pj3LAxfOuO/ljEPUxCEqN9tmrNW35p/RPeBgA3hGCx5uoLWwht7K8Nph6e1qo HEZUnvJsgNFX29E/imFWSlLYGT+kh6ypBv4kP8YMR6OqBxU6mwoFE+YrB/eaVY5o nyWt1tgEubcT9nMMlUph/s7EhMjeB85M+CnAJVX0QqD3hUKe518nqsgUFcbI2Mgl cZFS0SVup1tCLUQ4V75g/M0XQNWTd6mXNExOTseAU+N58DemBpHI/mqAHcoysR6G G6txGN9LXmoYXrr7gmUzTkJJvTI6mvmppc74SJgmdGKhq6xk3rvKWYT0m2c= -----END CERTIFICATE-----Generated at Sat Jun 1 13:38:48 2024 by rpki-client on console-fra.rpki-client.org