$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/h5ijCxBehoM-Okn0GC6YXLzdTzg.roa File: h5ijCxBehoM-Okn0GC6YXLzdTzg.roa (raw, json) Hash identifier: qXkIPZviB2xwBYPrKkAB+gMLxbgJBB3tKXj9IOTa1QA= Subject key identifier: 87:98:A3:0B:10:5E:86:83:3E:3A:49:F4:18:2E:98:5C:BC:DD:4F:38 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0772 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/h5ijCxBehoM-Okn0GC6YXLzdTzg.roa Signing time: Tue 30 Apr 2024 02:01:47 +0000 ROA not before: Tue 30 Apr 2024 02:01:47 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 49.98.164.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1906 (0x772) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 30 02:01:47 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=8798A30B105E86833E3A49F4182E985CBCDD4F38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:d2:67:22:9f:ce:1a:e7:e0:7f:60:22:5f:6d: fc:c5:ab:c1:03:a7:47:92:b4:24:cd:e1:d0:06:da: 67:e9:6d:9a:e5:d1:9f:95:3d:4e:72:e3:e5:c1:6e: c4:38:f7:97:63:db:f6:36:8e:7d:27:04:4d:62:9d: b2:33:17:7a:6b:1a:cc:1c:65:e4:56:5d:8e:41:bb: 20:83:cb:71:b2:12:e0:82:f5:8a:04:1c:62:1b:ce: 6d:d0:b5:7c:ca:9b:31:3f:f9:8f:68:ca:84:ba:02: a2:08:67:8b:cc:9c:7f:06:c5:14:fa:04:2a:f3:fa: 7f:cc:d0:af:bc:55:61:76:0b:8a:e4:37:9a:d7:f0: f8:e8:b7:92:d1:24:a9:fd:2e:03:ff:4d:63:16:f4: 85:bf:82:6f:2a:73:03:3b:fa:86:fa:01:f9:21:2a: 4f:b4:57:87:86:5d:b0:1a:91:51:1b:72:8d:d0:56: ee:79:de:20:4a:84:83:c9:f9:1a:29:21:4f:97:28: 5d:ee:76:91:86:8d:df:f4:13:d2:08:74:8a:2c:6c: 49:a5:96:23:bd:bb:8e:21:84:25:7d:38:3a:2a:5e: c4:d5:e0:43:94:cf:53:4c:bd:4d:16:06:09:f2:fd: c4:9f:ee:e7:72:12:46:07:80:b3:2c:f7:c3:52:ed: cb:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:98:A3:0B:10:5E:86:83:3E:3A:49:F4:18:2E:98:5C:BC:DD:4F:38 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/h5ijCxBehoM-Okn0GC6YXLzdTzg.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.98.164.0/23 Signature Algorithm: sha256WithRSAEncryption 00:cf:15:74:bf:b2:24:61:6b:2a:9b:43:93:6b:c3:67:db:ca: b7:93:3a:0e:de:6d:5f:ec:12:d1:bd:48:53:87:3b:11:35:74: a3:91:0d:67:88:61:6f:6f:e9:d5:c8:df:00:5b:f4:c2:ae:00: c4:49:08:51:01:d3:9d:2a:38:42:83:e0:7f:d8:45:d6:85:68: 02:4d:09:43:de:45:9e:4c:fb:1a:0c:86:ed:09:b3:9b:26:87: 07:68:2d:57:c6:45:5a:8b:73:9b:13:6e:6d:28:52:34:92:da: 84:76:08:8e:04:f7:d0:14:08:e5:ea:32:4d:17:42:63:b0:5c: 37:ae:ff:2a:db:aa:70:e5:07:d6:1f:fb:ac:b0:d2:38:80:5b: 60:20:8c:d3:a4:e7:87:65:f6:45:63:c8:80:b1:8c:66:b6:9f: cd:34:6f:1f:77:fd:e0:cd:5e:75:74:43:c8:d6:c0:38:1e:f5: 9a:f8:dc:c8:d4:e9:50:b8:8f:b0:5e:a6:58:59:41:88:ba:c4: 39:4b:dc:77:65:ac:62:18:88:76:5a:c3:fb:81:e4:c6:cd:2a: 09:9c:2d:67:2a:8b:80:11:52:78:d1:9f:c2:d6:5d:bd:5e:69: d9:01:2e:31:dd:9f:30:b8:29:b0:33:2a:8d:d9:b3:b1:23:54: 6f:2f:74:80 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICB3IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw MjAxNDdaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDg3OThBMzBCMTA1RTg2 ODMzRTNBNDlGNDE4MkU5ODVDQkNERDRGMzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCe0mcin84a5+B/YCJfbfzFq8EDp0eStCTN4dAG2mfpbZrl0Z+V PU5y4+XBbsQ495dj2/Y2jn0nBE1inbIzF3prGswcZeRWXY5BuyCDy3GyEuCC9YoE HGIbzm3QtXzKmzE/+Y9oyoS6AqIIZ4vMnH8GxRT6BCrz+n/M0K+8VWF2C4rkN5rX 8Pjot5LRJKn9LgP/TWMW9IW/gm8qcwM7+ob6AfkhKk+0V4eGXbAakVEbco3QVu55 3iBKhIPJ+RopIU+XKF3udpGGjd/0E9IIdIosbEmlliO9u44hhCV9ODoqXsTV4EOU z1NMvU0WBgny/cSf7udyEkYHgLMs98NS7cszAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUh5ijCxBehoM+Okn0GC6YXLzdTzgwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2g1aWpDeEJlaG9NLU9rbjBHQzZZWEx6ZFR6Zy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExYqQwDQYJKoZIhvcNAQELBQADggEBAADPFXS/siRhayqbQ5Nrw2fbyreT Og7ebV/sEtG9SFOHOxE1dKORDWeIYW9v6dXI3wBb9MKuAMRJCFEB050qOEKD4H/Y RdaFaAJNCUPeRZ5M+xoMhu0Js5smhwdoLVfGRVqLc5sTbm0oUjSS2oR2CI4E99AU COXqMk0XQmOwXDeu/yrbqnDlB9Yf+6yw0jiAW2AgjNOk54dl9kVjyICxjGa2n800 bx93/eDNXnV0Q8jWwDge9Zr43MjU6VC4j7BeplhZQYi6xDlL3HdlrGIYiHZaw/uB 5MbNKgmcLWcqi4ARUnjRn8LWXb1eadkBLjHdnzC4KbAzKo3Zs7EjVG8vdIA= -----END CERTIFICATE-----Generated at Sat Jun 1 15:54:31 2024 by rpki-client on console-ams.rpki-client.org