$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/hFFpcqRnixFCKk01qQAT9wwPUqo.roa File: hFFpcqRnixFCKk01qQAT9wwPUqo.roa (raw, json) Hash identifier: GeMIZVpsuDAg7TRo24Z7MdoJf6pBjGsNuBP4dpQYIr0= Subject key identifier: 84:51:69:72:A4:67:8B:11:42:2A:4D:35:A9:00:13:F7:0C:0F:52:AA Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 06FF Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/hFFpcqRnixFCKk01qQAT9wwPUqo.roa Signing time: Tue 30 Apr 2024 01:52:50 +0000 ROA not before: Tue 30 Apr 2024 01:52:50 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 49.98.138.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1791 (0x6ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 30 01:52:50 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=84516972A4678B11422A4D35A90013F70C0F52AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:7b:49:70:22:01:fb:84:9a:2d:dc:5e:8d:e4: 2c:ab:98:8e:d7:62:a7:6b:10:0f:53:21:db:99:84: 28:70:79:ea:f0:a1:ac:10:cc:37:da:14:26:30:7f: 9e:73:77:6e:60:fe:f2:0f:0c:27:8d:60:24:bb:d0: a7:70:95:6d:a0:70:3e:0c:92:95:51:34:df:7c:b2: e9:62:a1:41:c3:d7:49:12:f7:12:79:1f:dc:4e:e6: 45:9a:d4:a1:53:cb:c7:ab:eb:ee:d0:75:c8:e6:44: 2e:92:f1:d1:5d:33:8e:11:72:f6:82:d9:df:06:6c: a2:7b:0f:9e:5d:38:af:2c:21:cf:25:ef:df:d1:d5: 0f:7b:67:40:57:2a:07:05:04:18:89:6e:b3:22:56: d3:68:ed:28:b2:dc:92:a1:12:e2:1e:93:e5:c3:d7: 12:0a:1e:77:83:23:ac:cf:6d:9d:2e:c2:ac:75:d6: 4b:ec:ce:b9:de:56:c7:fd:9d:ec:74:b4:51:3a:14: a6:3d:00:b7:48:c6:7e:0e:e9:95:19:b4:b1:73:1c: aa:c5:6c:5e:0c:2e:06:23:bb:58:6e:59:b0:a2:9c: e2:6c:e2:dc:8f:34:01:07:92:6a:61:7d:ed:e2:18: 7d:f4:49:c6:2a:0d:33:7e:16:c7:06:27:c3:82:36: 8c:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:51:69:72:A4:67:8B:11:42:2A:4D:35:A9:00:13:F7:0C:0F:52:AA X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/hFFpcqRnixFCKk01qQAT9wwPUqo.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.98.138.0/23 Signature Algorithm: sha256WithRSAEncryption 2f:36:e9:ab:d4:11:62:25:05:59:4b:85:cd:67:05:90:d6:cc: cb:fc:f9:c8:be:1e:92:76:c3:c3:31:b0:3a:e0:3a:1a:9c:9e: 2a:e1:6f:34:2c:77:7d:8b:54:8d:70:d9:a3:46:57:7c:1d:cb: 3b:91:0b:3e:8a:23:57:59:02:01:dd:39:d6:c6:e4:85:81:17: ba:34:6d:a5:c7:f9:d9:51:88:61:12:e9:88:99:fa:b3:c6:e3: 3d:73:6c:b4:e5:06:1c:96:e5:64:7f:80:bd:18:07:43:4e:41: fe:74:5b:17:83:b4:a4:df:dd:da:23:a8:a4:6e:4d:04:76:b2: 2e:c1:9a:fb:44:04:dd:85:4b:9e:2b:0d:41:6d:52:44:4b:97: e9:5f:29:4e:25:6c:ae:c2:e8:3c:c3:38:bd:2f:b9:48:0f:d6: 8f:4a:50:df:b3:d7:bf:12:14:1c:fe:d5:7b:0e:a0:6c:fe:51: ad:73:07:d9:dc:6e:8a:40:d9:3b:ea:42:a7:2b:21:b7:ad:a7: fc:0e:cf:2a:54:2f:0f:7b:6d:84:22:08:5c:12:f6:f3:35:2a: 8f:5f:90:ff:d3:aa:50:b9:ef:40:9f:7b:9b:82:a2:7a:61:0a: 66:e7:c1:22:91:02:36:2e:ce:cd:18:c6:10:af:ec:82:09:d5: 65:05:a7:82 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBv8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw MTUyNTBaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDg0NTE2OTcyQTQ2NzhC MTE0MjJBNEQzNUE5MDAxM0Y3MEMwRjUyQUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDle0lwIgH7hJot3F6N5CyrmI7XYqdrEA9TIduZhChweerwoawQ zDfaFCYwf55zd25g/vIPDCeNYCS70KdwlW2gcD4MkpVRNN98sulioUHD10kS9xJ5 H9xO5kWa1KFTy8er6+7QdcjmRC6S8dFdM44RcvaC2d8GbKJ7D55dOK8sIc8l79/R 1Q97Z0BXKgcFBBiJbrMiVtNo7Siy3JKhEuIek+XD1xIKHneDI6zPbZ0uwqx11kvs zrneVsf9nex0tFE6FKY9ALdIxn4O6ZUZtLFzHKrFbF4MLgYju1huWbCinOJs4tyP NAEHkmphfe3iGH30ScYqDTN+FscGJ8OCNozVAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUhFFpcqRnixFCKk01qQAT9wwPUqowHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2hGRnBjcVJuaXhGQ0trMDFxUUFUOXd3UFVxby5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExYoowDQYJKoZIhvcNAQELBQADggEBAC826avUEWIlBVlLhc1nBZDWzMv8 +ci+HpJ2w8MxsDrgOhqcnirhbzQsd32LVI1w2aNGV3wdyzuRCz6KI1dZAgHdOdbG 5IWBF7o0baXH+dlRiGES6YiZ+rPG4z1zbLTlBhyW5WR/gL0YB0NOQf50WxeDtKTf 3dojqKRuTQR2si7BmvtEBN2FS54rDUFtUkRLl+lfKU4lbK7C6DzDOL0vuUgP1o9K UN+z178SFBz+1XsOoGz+Ua1zB9ncbopA2TvqQqcrIbetp/wOzypULw97bYQiCFwS 9vM1Ko9fkP/TqlC570Cfe5uConphCmbnwSKRAjYuzs0YxhCv7IIJ1WUFp4I= -----END CERTIFICATE-----Generated at Sat Jun 1 13:38:48 2024 by rpki-client on console-fra.rpki-client.org