$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/chQqADOKi2ZGfiLGWxnf9dEiBR0.roa File: chQqADOKi2ZGfiLGWxnf9dEiBR0.roa (raw, json) Hash identifier: 5sNzS8A5uCFgpFl5nYU0P5tCk5ZZ3xX2S02NUyTGzK0= Subject key identifier: 72:14:2A:00:33:8A:8B:66:46:7E:22:C6:5B:19:DF:F5:D1:22:05:1D Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 096A Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/chQqADOKi2ZGfiLGWxnf9dEiBR0.roa Signing time: Sun 30 Jun 2024 01:33:37 +0000 ROA not before: Sun 30 Jun 2024 01:33:37 +0000 ROA not after: Tue 24 Jun 2025 10:46:45 +0000 asID: 9605 IP address blocks: 49.105.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 12:58:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2410 (0x96a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 30 01:33:37 2024 GMT Not After : Jun 24 10:46:45 2025 GMT Subject: CN=72142A00338A8B66467E22C65B19DFF5D122051D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:11:b7:18:97:09:d3:28:34:d1:24:7d:d7:b3: 06:96:60:0a:52:e2:93:be:f8:5d:56:f1:6e:c5:cd: 32:0b:4f:2f:8e:29:b4:4a:95:60:f0:51:9d:42:df: fb:e0:17:65:4f:db:23:2e:b9:24:7f:13:0d:47:c8: 04:0f:d3:9f:57:da:fa:42:e9:9b:42:cf:33:bd:78: 77:d4:79:fa:96:53:c4:82:4c:f4:1f:0c:71:6c:5b: d2:8c:06:0b:3e:46:63:11:fe:90:61:c1:e0:04:69: fb:38:c9:0e:7b:11:20:ef:ab:9b:12:32:7c:82:63: 1b:ba:6e:f1:58:d3:09:b7:7f:5f:64:cf:40:a2:bd: 59:89:5c:b1:0f:b2:83:37:e9:0f:f0:85:0a:ad:e8: 1f:fe:6f:43:2c:50:3b:17:37:98:e0:9e:83:0e:77: 54:f0:3c:61:2b:9e:7c:df:36:bb:6f:e3:61:f8:9d: 5e:4b:60:49:f9:5d:8f:c4:7b:6d:4a:9f:46:f8:66: 54:de:c2:cd:50:03:55:fe:b4:1b:fe:99:68:65:ba: 7a:88:f3:9a:6f:b4:0b:56:a4:5a:73:9c:3b:64:ea: 92:55:0a:eb:ef:92:13:d3:70:f1:3e:c2:90:7c:33: 44:a7:27:c5:23:18:fb:55:e3:8f:03:94:df:3f:8e: 72:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:14:2A:00:33:8A:8B:66:46:7E:22:C6:5B:19:DF:F5:D1:22:05:1D X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/chQqADOKi2ZGfiLGWxnf9dEiBR0.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.105.78.0/24 Signature Algorithm: sha256WithRSAEncryption a8:d3:d1:b8:4c:b9:ab:6f:a0:63:b7:6e:a6:c5:46:06:b1:3c: b2:6e:89:b4:03:05:5e:c0:3f:82:8f:bd:e1:3f:aa:ef:b5:37: 0e:3a:0d:30:0b:69:10:bf:10:79:4c:09:53:8a:d9:fa:b7:a2: 03:9f:02:9f:a8:45:92:54:22:35:63:18:ad:c4:cd:46:bc:db: 0a:6b:af:8a:4f:1a:01:36:06:1b:4c:cf:b8:cc:46:62:fc:5c: 0f:4b:7e:e4:60:45:22:af:7f:e3:82:69:29:06:d0:6a:6e:f7: d0:f9:68:96:a1:7e:94:0e:12:d6:5e:e6:c3:f2:ea:fe:6b:24: 15:78:93:c1:bc:96:4b:68:13:69:eb:0a:a1:89:db:14:a7:f6: f7:dc:e5:4d:75:bd:b7:b7:72:6e:5d:88:38:6d:9f:25:95:0c: 1f:ef:e5:83:18:e3:05:a9:79:0a:5a:69:61:31:80:d0:4c:d4: ab:e0:86:20:7f:66:1a:f5:fd:30:3f:f1:94:a6:11:d0:80:1f: 32:ab:20:76:f6:8e:15:f9:a6:3c:60:36:19:ae:46:68:e7:21: ff:0a:37:1b:33:cd:68:c1:51:a0:a0:f4:d1:e3:58:fe:5b:67: 23:32:cb:36:ee:ff:b8:2b:d9:f1:2d:be:1e:e7:19:5f:65:b6: 23:3e:d9:0a -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCWowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA2MzAw MTMzMzdaFw0yNTA2MjQxMDQ2NDVaMDMxMTAvBgNVBAMTKDcyMTQyQTAwMzM4QThC NjY0NjdFMjJDNjVCMTlERkY1RDEyMjA1MUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCfEbcYlwnTKDTRJH3XswaWYApS4pO++F1W8W7FzTILTy+OKbRK lWDwUZ1C3/vgF2VP2yMuuSR/Ew1HyAQP059X2vpC6ZtCzzO9eHfUefqWU8SCTPQf DHFsW9KMBgs+RmMR/pBhweAEafs4yQ57ESDvq5sSMnyCYxu6bvFY0wm3f19kz0Ci vVmJXLEPsoM36Q/whQqt6B/+b0MsUDsXN5jgnoMOd1TwPGErnnzfNrtv42H4nV5L YEn5XY/Ee21Kn0b4ZlTews1QA1X+tBv+mWhlunqI85pvtAtWpFpznDtk6pJVCuvv khPTcPE+wpB8M0SnJ8UjGPtV448DlN8/jnLTAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUchQqADOKi2ZGfiLGWxnf9dEiBR0wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2NoUXFBRE9LaTJaR2ZpTEdXeG5mOWRFaUJSMC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAxaU4wDQYJKoZIhvcNAQELBQADggEBAKjT0bhMuatvoGO3bqbFRgaxPLJu ibQDBV7AP4KPveE/qu+1Nw46DTALaRC/EHlMCVOK2fq3ogOfAp+oRZJUIjVjGK3E zUa82wprr4pPGgE2BhtMz7jMRmL8XA9LfuRgRSKvf+OCaSkG0Gpu99D5aJahfpQO EtZe5sPy6v5rJBV4k8G8lktoE2nrCqGJ2xSn9vfc5U11vbe3cm5diDhtnyWVDB/v 5YMY4wWpeQpaaWExgNBM1KvghiB/Zhr1/TA/8ZSmEdCAHzKrIHb2jhX5pjxgNhmu RmjnIf8KNxszzWjBUaCg9NHjWP5bZyMyyzbu/7gr2fEtvh7nGV9ltiM+2Qo= -----END CERTIFICATE-----Generated at Fri Nov 22 14:21:24 2024 by rpki-client on console-ams.rpki-client.org