$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/dFfZR5jbYwrlZcAX-qYXU4s5In4.roa File: dFfZR5jbYwrlZcAX-qYXU4s5In4.roa (raw, json) Hash identifier: w5XXF4ZFBMbIz/4jbvmvBIeKyABbBTPktRGwBH299Nk= Subject key identifier: 74:57:D9:47:98:DB:63:0A:E5:65:C0:17:FA:A6:17:53:8B:39:22:7E Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0458 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/dFfZR5jbYwrlZcAX-qYXU4s5In4.roa Signing time: Thu 27 Jul 2023 16:43:17 +0000 ROA not before: Thu 27 Jul 2023 16:43:17 +0000 ROA not after: Sun 14 Jul 2024 01:30:03 +0000 asID: 9605 IP address blocks: 49.106.94.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1112 (0x458) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jul 27 16:43:17 2023 GMT Not After : Jul 14 01:30:03 2024 GMT Subject: CN=7457D94798DB630AE565C017FAA617538B39227E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:89:70:bc:42:b7:72:31:e6:e5:36:ec:c1:ce: b9:3a:11:84:08:46:3d:cd:10:30:f2:d3:60:0e:a2: 43:82:91:3a:d3:ad:bf:6f:d3:ea:0b:04:fa:ae:59: 13:62:bb:d1:49:5c:42:d2:b2:8e:1b:dd:48:22:8c: 7b:82:8c:9b:e5:d2:ad:a3:eb:08:9b:68:6b:f1:f1: ad:33:0d:23:84:d1:53:3a:6a:61:25:60:c2:54:38: 8d:37:74:28:57:68:3e:be:06:34:95:9a:7e:9f:4b: 86:7f:9a:2b:86:34:bf:c3:ff:17:8d:55:1f:f1:3d: 7d:7a:77:32:3e:01:25:33:eb:6b:3c:ad:4e:e5:5b: 24:6d:8d:d0:ff:94:4b:c3:72:fd:53:cf:66:d5:f1: af:83:6d:7d:47:69:09:f8:6a:c0:57:93:a6:86:77: 2b:5c:75:39:cf:27:e4:79:ff:be:30:1d:04:b4:75: 8b:11:6e:c0:08:5d:64:8e:31:50:c4:60:19:cd:59: f9:b7:e5:51:b1:cb:0c:2c:29:6d:53:74:b1:92:5c: b1:00:56:3f:8d:94:53:7f:11:ce:03:57:56:66:de: 1f:74:55:00:aa:52:44:04:03:d8:a8:e9:13:e4:cb: a3:38:b7:82:36:f8:71:c6:a3:8d:f2:09:f8:8d:99: 87:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:57:D9:47:98:DB:63:0A:E5:65:C0:17:FA:A6:17:53:8B:39:22:7E X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/dFfZR5jbYwrlZcAX-qYXU4s5In4.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.106.94.0/23 Signature Algorithm: sha256WithRSAEncryption 49:cb:5d:bd:29:04:2a:fc:f4:26:e0:0f:17:f4:1c:02:20:11: d3:6f:89:02:db:5d:5e:d5:cf:99:ec:69:e8:68:a0:12:a2:68: 6c:90:4b:cc:6a:0b:34:b4:70:28:53:f3:ca:5d:55:79:c9:c7: 38:30:69:9b:17:82:a9:56:47:7d:e2:e2:bb:08:ea:e5:da:d3: 16:74:5c:08:01:3c:c5:3a:3f:ba:f9:fe:d3:10:0e:31:2e:58: a7:fb:51:e8:04:64:08:aa:79:64:c2:3b:ac:9c:ae:bb:59:ce: 01:c3:c1:98:90:44:de:3d:3b:2e:fc:ce:52:dc:75:32:df:1b: 84:59:2e:9e:d1:4e:6b:e3:5e:90:d9:07:96:d2:94:ba:a9:0b: 10:7f:43:12:e1:32:44:b6:b6:72:82:9e:c0:f0:4b:7d:d5:3b: 22:99:3c:41:0f:47:a7:df:1d:0d:68:c0:d1:24:a2:41:fb:3a: 5f:5a:47:fd:75:7f:dc:c6:ac:e7:13:c9:50:ce:1c:f2:a6:71: af:ad:e8:a5:04:3a:01:d5:2f:72:0a:5e:fb:7e:ff:07:00:b0: b2:d8:84:68:b7:19:fd:1e:5a:42:3e:a7:7d:6b:92:6d:60:e2: cf:6c:49:e6:cd:ed:7b:92:29:1b:1d:1d:c5:c7:3c:c9:e7:03: de:a4:1c:b1 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBFgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA3Mjcx NjQzMTdaFw0yNDA3MTQwMTMwMDNaMDMxMTAvBgNVBAMTKDc0NTdEOTQ3OThEQjYz MEFFNTY1QzAxN0ZBQTYxNzUzOEIzOTIyN0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDAiXC8QrdyMeblNuzBzrk6EYQIRj3NEDDy02AOokOCkTrTrb9v 0+oLBPquWRNiu9FJXELSso4b3UgijHuCjJvl0q2j6wibaGvx8a0zDSOE0VM6amEl YMJUOI03dChXaD6+BjSVmn6fS4Z/miuGNL/D/xeNVR/xPX16dzI+ASUz62s8rU7l WyRtjdD/lEvDcv1Tz2bV8a+DbX1HaQn4asBXk6aGdytcdTnPJ+R5/74wHQS0dYsR bsAIXWSOMVDEYBnNWfm35VGxywwsKW1TdLGSXLEAVj+NlFN/Ec4DV1Zm3h90VQCq UkQEA9io6RPky6M4t4I2+HHGo43yCfiNmYcRAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUdFfZR5jbYwrlZcAX+qYXU4s5In4wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2RGZlpSNWpiWXdybFpjQVgtcVlYVTRzNUluNC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExal4wDQYJKoZIhvcNAQELBQADggEBAEnLXb0pBCr89CbgDxf0HAIgEdNv iQLbXV7Vz5nsaehooBKiaGyQS8xqCzS0cChT88pdVXnJxzgwaZsXgqlWR33i4rsI 6uXa0xZ0XAgBPMU6P7r5/tMQDjEuWKf7UegEZAiqeWTCO6ycrrtZzgHDwZiQRN49 Oy78zlLcdTLfG4RZLp7RTmvjXpDZB5bSlLqpCxB/QxLhMkS2tnKCnsDwS33VOyKZ PEEPR6ffHQ1owNEkokH7Ol9aR/11f9zGrOcTyVDOHPKmca+t6KUEOgHVL3IKXvt+ /wcAsLLYhGi3Gf0eWkI+p31rkm1g4s9sSebN7XuSKRsdHcXHPMnnA96kHLE= -----END CERTIFICATE-----Generated at Sat Jun 1 13:38:48 2024 by rpki-client on console-fra.rpki-client.org