$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/dHDi9lflLJU_6N-4g0h1_yqHJ6M.roa File: dHDi9lflLJU_6N-4g0h1_yqHJ6M.roa (raw, json) Hash identifier: /cYF+WmXZ9MQgiJsARegQNXG8ajqunrN3TLlHKNNtJw= Subject key identifier: 74:70:E2:F6:57:E5:2C:95:3F:E8:DF:B8:83:48:75:FF:2A:87:27:A3 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0699 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/dHDi9lflLJU_6N-4g0h1_yqHJ6M.roa Signing time: Tue 30 Apr 2024 01:43:10 +0000 ROA not before: Tue 30 Apr 2024 01:43:10 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 49.96.12.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1689 (0x699) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 30 01:43:10 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=7470E2F657E52C953FE8DFB8834875FF2A8727A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:19:ce:8b:a6:9c:7e:44:e9:f3:18:4d:4b:e8: 27:39:7e:f4:06:f7:3e:9c:eb:1d:29:aa:48:75:68: b8:e7:8d:af:30:a8:1a:d0:b8:0c:84:ca:96:2c:25: cb:17:64:d6:12:fc:a6:15:09:e0:e4:be:bd:d2:83: 50:b1:c5:b6:ec:5a:30:22:10:2a:58:6c:ba:31:d7: b7:c6:65:78:73:f4:7e:40:88:c5:48:1a:a1:48:b4: 6c:f1:57:41:a6:63:22:45:48:a1:9d:09:d2:4d:0e: e7:19:28:f0:05:44:5d:c7:d7:1b:4f:bf:c7:f2:b1: 5b:00:fc:00:98:15:96:de:2c:07:0e:2d:81:e2:83: 89:1c:f4:85:4b:d7:58:17:27:90:ca:72:05:e3:81: d2:2f:46:e5:44:e0:ac:c2:96:98:18:b0:c7:53:92: 2d:46:3a:e7:40:47:b8:42:de:27:a5:f2:7b:d4:f2: 6d:fe:64:9e:ed:92:5f:f2:a9:01:46:48:71:e6:b7: 58:bc:d6:c6:38:7d:c7:90:f7:3d:d2:b6:93:09:bb: 81:05:4a:b6:bb:63:90:57:df:14:20:38:26:a8:2e: b0:e1:16:ee:f8:48:58:c8:89:4b:9b:07:50:df:62: c4:02:c7:88:46:91:4f:51:4d:a1:6d:59:56:b1:ce: df:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:70:E2:F6:57:E5:2C:95:3F:E8:DF:B8:83:48:75:FF:2A:87:27:A3 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/dHDi9lflLJU_6N-4g0h1_yqHJ6M.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.96.12.0/22 Signature Algorithm: sha256WithRSAEncryption 5a:79:1a:38:45:fd:5a:a7:b2:a4:36:c2:7e:3c:17:6e:13:16: 5f:f7:06:4d:2c:78:02:13:6e:3f:c7:4d:00:9f:d8:63:74:43: 0a:f5:b1:27:e1:1e:76:c1:dc:8f:77:a9:3f:0b:c1:6e:77:b6: b7:3a:ab:78:cf:39:b8:3e:43:fa:04:10:da:a2:e0:73:36:eb: 2f:58:85:1c:a6:40:16:b8:9a:71:46:cc:ca:3a:65:63:f9:d5: 34:d0:81:b4:a0:5c:78:e1:e7:41:1e:fa:3b:5f:af:31:30:2a: 98:ab:e4:90:17:c9:1e:76:b7:6b:a6:52:80:8c:ab:b1:75:44: ec:43:ec:a2:1f:59:81:ec:35:e8:e8:33:85:68:5e:fa:3a:d5: 1d:5e:0c:da:13:1f:5d:d8:55:d2:e7:2a:63:96:f7:d6:f4:d4: 76:f2:1e:59:b7:42:05:6b:1e:0e:7f:62:89:59:b5:4c:d2:57: 14:4d:4f:a7:25:03:f3:e1:54:e9:f6:74:51:e4:23:06:a6:59: aa:02:a3:8b:fa:b4:ed:d4:16:e3:f1:a6:cb:36:2a:b8:18:fb: 68:81:5f:1a:e4:96:f0:03:43:f2:39:05:da:c2:70:38:77:ee: 7e:2a:1f:af:7b:5b:5e:fa:5d:b0:e2:47:97:27:e2:b9:4e:8e: ee:b8:65:5a -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBpkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw MTQzMTBaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDc0NzBFMkY2NTdFNTJD OTUzRkU4REZCODgzNDg3NUZGMkE4NzI3QTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDIGc6Lppx+ROnzGE1L6Cc5fvQG9z6c6x0pqkh1aLjnja8wqBrQ uAyEypYsJcsXZNYS/KYVCeDkvr3Sg1CxxbbsWjAiECpYbLox17fGZXhz9H5AiMVI GqFItGzxV0GmYyJFSKGdCdJNDucZKPAFRF3H1xtPv8fysVsA/ACYFZbeLAcOLYHi g4kc9IVL11gXJ5DKcgXjgdIvRuVE4KzClpgYsMdTki1GOudAR7hC3iel8nvU8m3+ ZJ7tkl/yqQFGSHHmt1i81sY4fceQ9z3StpMJu4EFSra7Y5BX3xQgOCaoLrDhFu74 SFjIiUubB1DfYsQCx4hGkU9RTaFtWVaxzt8lAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUdHDi9lflLJU/6N+4g0h1/yqHJ6MwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2RIRGk5bGZsTEpVXzZOLTRnMGgxX3lxSEo2TS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIxYAwwDQYJKoZIhvcNAQELBQADggEBAFp5GjhF/VqnsqQ2wn48F24TFl/3 Bk0seAITbj/HTQCf2GN0Qwr1sSfhHnbB3I93qT8LwW53trc6q3jPObg+Q/oEENqi 4HM26y9YhRymQBa4mnFGzMo6ZWP51TTQgbSgXHjh50Ee+jtfrzEwKpir5JAXyR52 t2umUoCMq7F1ROxD7KIfWYHsNejoM4VoXvo61R1eDNoTH13YVdLnKmOW99b01Hby Hlm3QgVrHg5/YolZtUzSVxRNT6clA/PhVOn2dFHkIwamWaoCo4v6tO3UFuPxpss2 KrgY+2iBXxrklvADQ/I5BdrCcDh37n4qH697W176XbDiR5cn4rlOju64ZVo= -----END CERTIFICATE-----Generated at Sat Jun 1 15:54:31 2024 by rpki-client on console-ams.rpki-client.org