$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/bfvSbERHJ2QU03SH3PVRQD0FDNE.roa File: bfvSbERHJ2QU03SH3PVRQD0FDNE.roa (raw, json) Hash identifier: 2TuVi1Oi0JFDFRtP6dLxhhNEosmzMs7vx8FWrNTsdEM= Subject key identifier: 6D:FB:D2:6C:44:47:27:64:14:D3:74:87:DC:F5:51:40:3D:05:0C:D1 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0711 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/bfvSbERHJ2QU03SH3PVRQD0FDNE.roa Signing time: Tue 30 Apr 2024 01:52:58 +0000 ROA not before: Tue 30 Apr 2024 01:52:58 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 49.105.112.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 23 Jun 2024 11:53:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1809 (0x711) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 30 01:52:58 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=6DFBD26C4447276414D37487DCF551403D050CD1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e8:65:8f:0d:36:ee:2d:e3:6c:a4:dd:5e:e7: bd:59:81:6b:3d:ba:29:90:c7:fc:d1:a2:9f:09:46: fc:5a:e6:d9:ff:20:3f:28:5d:0e:ad:90:24:ad:79: ff:89:a7:a3:89:06:49:1b:b5:1f:a0:11:62:7f:bf: c4:2e:1e:83:ee:98:d7:66:92:0f:b1:f1:57:f4:26: e2:d6:80:67:ce:fa:21:f7:90:23:4f:df:3f:5a:c8: c5:2e:6a:60:72:a5:1b:80:ca:d5:51:6a:64:9d:b6: 84:fa:9a:ba:6d:fd:79:b3:17:29:ce:4b:9c:d7:ca: ef:0f:9a:cf:a6:08:af:84:5d:9b:90:b2:60:0b:81: 97:6a:df:2a:c4:4e:e0:a5:a5:7a:be:e1:4a:63:74: 60:80:5a:04:91:ed:8a:d7:ae:3f:60:51:b8:ef:11: 80:ae:d0:e5:dd:75:b4:e3:1f:b1:36:2d:9d:27:ab: 2a:55:e1:0b:0a:57:14:4f:5a:34:11:a2:aa:d2:b8: 91:fd:c5:29:e2:d2:b3:be:da:4a:32:36:af:e2:08: 2f:84:b4:a1:4c:37:8f:25:92:66:2c:8b:a4:16:7d: 76:a6:36:b4:dd:69:94:0a:4f:8a:a1:e4:57:41:c8: a3:48:a6:68:0d:ce:ae:ca:56:55:90:ee:95:b4:40: 24:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:FB:D2:6C:44:47:27:64:14:D3:74:87:DC:F5:51:40:3D:05:0C:D1 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/bfvSbERHJ2QU03SH3PVRQD0FDNE.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.105.112.0/23 Signature Algorithm: sha256WithRSAEncryption 05:2a:6e:1c:04:8c:58:dd:6e:7d:2b:50:18:a8:a4:9f:01:56: 83:81:ad:e3:83:11:38:7d:52:8d:ee:ce:80:b7:af:a5:21:8a: 2a:44:41:2c:f5:5a:b3:2a:ff:4d:f7:8b:ee:27:0d:6d:45:dd: 7a:55:77:37:fc:93:bd:12:4d:b0:a0:8c:d2:c0:8f:e7:d1:00: 79:a0:e2:2f:79:d1:0a:b7:29:2b:08:c8:14:4c:ac:ee:e1:f8: 25:c3:59:7c:ef:95:80:f6:65:f6:ec:74:9b:31:87:d1:e4:54: d7:28:a1:81:7a:88:d1:3d:73:91:e1:45:00:87:df:45:7c:b3: 87:e6:20:36:2c:ab:10:63:2c:26:30:a0:f1:01:fd:f3:8e:0a: 91:21:7e:48:52:5d:22:01:e9:d5:9c:aa:ab:6c:89:15:f1:63: 13:45:61:32:aa:c9:9c:04:53:2f:d9:78:df:58:f3:63:97:ee: 3b:a9:59:e0:54:b0:4a:2b:dc:90:16:b8:d1:52:4d:ac:95:4f: 24:6f:75:28:90:33:79:6c:fa:0c:36:02:24:87:a0:16:e3:97: d7:38:d8:fd:a7:ac:4f:ca:e7:74:ff:fd:05:ce:9e:31:ca:a9: c1:17:05:f3:9b:8e:4f:51:d8:4e:0a:eb:81:48:4a:36:c0:40: d9:32:e0:8c -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBxEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw MTUyNThaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDZERkJEMjZDNDQ0NzI3 NjQxNEQzNzQ4N0RDRjU1MTQwM0QwNTBDRDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCu6GWPDTbuLeNspN1e571ZgWs9uimQx/zRop8JRvxa5tn/ID8o XQ6tkCStef+Jp6OJBkkbtR+gEWJ/v8QuHoPumNdmkg+x8Vf0JuLWgGfO+iH3kCNP 3z9ayMUuamBypRuAytVRamSdtoT6mrpt/XmzFynOS5zXyu8Pms+mCK+EXZuQsmAL gZdq3yrETuClpXq+4UpjdGCAWgSR7YrXrj9gUbjvEYCu0OXddbTjH7E2LZ0nqypV 4QsKVxRPWjQRoqrSuJH9xSni0rO+2koyNq/iCC+EtKFMN48lkmYsi6QWfXamNrTd aZQKT4qh5FdByKNIpmgNzq7KVlWQ7pW0QCSjAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUbfvSbERHJ2QU03SH3PVRQD0FDNEwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2JmdlNiRVJISjJRVTAzU0gzUFZSUUQwRkRORS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExaXAwDQYJKoZIhvcNAQELBQADggEBAAUqbhwEjFjdbn0rUBiopJ8BVoOB reODETh9Uo3uzoC3r6UhiipEQSz1WrMq/033i+4nDW1F3XpVdzf8k70STbCgjNLA j+fRAHmg4i950Qq3KSsIyBRMrO7h+CXDWXzvlYD2ZfbsdJsxh9HkVNcooYF6iNE9 c5HhRQCH30V8s4fmIDYsqxBjLCYwoPEB/fOOCpEhfkhSXSIB6dWcqqtsiRXxYxNF YTKqyZwEUy/ZeN9Y82OX7jupWeBUsEor3JAWuNFSTayVTyRvdSiQM3ls+gw2AiSH oBbjl9c42P2nrE/K53T//QXOnjHKqcEXBfObjk9R2E4K64FISjbAQNky4Iw= -----END CERTIFICATE-----Generated at Sun Jun 16 12:57:22 2024 by rpki-client on console-fra.rpki-client.org