$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/hFlHo6MgED0kG-PUBTN3pEjIzN0.roa File: hFlHo6MgED0kG-PUBTN3pEjIzN0.roa (raw, json) Hash identifier: /e24ywqAR0OlrSsrBC3XW97DwMof77zrgdejouY3KFg= Subject key identifier: 84:59:47:A3:A3:20:10:3D:24:1B:E3:D4:05:33:77:A4:48:C8:CC:DD Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 05BC Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/hFlHo6MgED0kG-PUBTN3pEjIzN0.roa Signing time: Tue 22 Aug 2023 05:31:51 +0000 ROA not before: Tue 22 Aug 2023 05:31:51 +0000 ROA not after: Wed 14 Aug 2024 01:30:02 +0000 asID: 9605 IP address blocks: 49.109.64.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1468 (0x5bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Aug 22 05:31:51 2023 GMT Not After : Aug 14 01:30:02 2024 GMT Subject: CN=845947A3A320103D241BE3D4053377A448C8CCDD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a1:93:c3:3c:9b:88:b3:01:ef:65:2a:1b:9a: 85:2b:72:cd:8c:db:9c:2a:a5:ed:72:88:69:a4:03: 60:22:48:18:f3:a5:c6:bc:b4:60:28:fe:c9:de:f7: 28:79:0e:58:e3:a7:34:9a:89:6c:6d:ff:93:e0:d8: d9:34:b2:cf:14:4e:2f:0e:cd:53:f7:ae:89:34:a3: 2e:f0:31:17:e4:24:d3:ab:64:eb:cf:da:33:37:05: e9:c2:c3:4e:c9:71:42:e6:86:38:c7:25:01:b4:85: d9:fc:db:b1:ad:f8:3c:47:39:3b:b9:47:45:01:1a: 24:30:08:8f:15:e4:3b:b2:fe:16:44:58:eb:49:52: c4:a4:9a:ee:3c:df:af:57:23:74:d4:48:cf:a5:9b: eb:e5:a8:4d:a0:b2:f6:24:ce:7d:12:b2:e5:89:90: c1:84:f1:0e:19:a6:6e:4c:ef:76:6c:13:11:67:99: 0e:e0:12:74:2b:3f:7d:22:b0:fa:ca:bc:eb:62:67: eb:2e:90:2e:b3:75:9d:3e:3e:48:b4:77:79:7d:03: 54:1c:04:8e:a6:e1:f1:68:33:62:2e:67:ee:1b:9a: ee:02:e0:19:79:5c:71:8d:58:3f:46:9d:67:57:31: 32:22:50:0d:50:b7:d0:5b:d0:e2:c3:7f:a7:92:aa: 25:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:59:47:A3:A3:20:10:3D:24:1B:E3:D4:05:33:77:A4:48:C8:CC:DD X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/hFlHo6MgED0kG-PUBTN3pEjIzN0.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.109.64.0/22 Signature Algorithm: sha256WithRSAEncryption 01:9e:99:28:f3:0b:b9:6e:e4:fb:6d:18:9b:ba:c4:be:20:ed: 11:75:c0:72:86:de:59:1e:5e:f6:07:a3:14:32:4e:8d:bb:7c: 18:42:f5:96:95:6e:62:d8:75:24:f1:bb:0e:de:e3:f7:b5:cd: a1:37:fc:cc:8f:b7:21:3c:f7:83:00:5b:b1:4a:a6:26:ff:34: ea:20:3a:d2:87:fa:62:78:8b:bd:6f:c8:f2:1e:a4:3f:3d:be: 1f:8b:4e:b2:2d:19:d5:05:20:5c:a0:cc:c3:57:98:96:ea:5c: 6a:a5:44:ae:b5:48:33:c0:9a:dc:01:3d:89:2b:bc:6a:52:16: 4e:7d:0b:8a:18:63:28:a0:17:20:be:b5:62:1f:04:ad:0b:a2: 55:8e:6a:35:18:fa:86:b6:82:00:e2:35:a7:31:76:d8:79:95: 87:01:fc:f7:b7:01:77:97:c2:6d:a3:68:07:3e:ab:9a:99:70: 25:82:2c:d0:3a:33:e7:60:45:a1:91:9a:f8:60:2c:28:ee:f0: 11:6d:ee:97:8e:23:f0:ba:dd:f0:59:0f:f6:78:ea:3f:fb:06: 5a:9b:3f:60:f5:4c:12:08:69:d5:f5:a6:d6:ff:be:de:65:47: 3d:09:a6:14:f7:fe:ba:46:6c:79:f7:9a:df:ce:85:f6:1a:2f: 11:27:e5:85 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBbwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA4MjIw NTMxNTFaFw0yNDA4MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDg0NTk0N0EzQTMyMDEw M0QyNDFCRTNENDA1MzM3N0E0NDhDOENDREQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC9oZPDPJuIswHvZSobmoUrcs2M25wqpe1yiGmkA2AiSBjzpca8 tGAo/sne9yh5DljjpzSaiWxt/5Pg2Nk0ss8UTi8OzVP3rok0oy7wMRfkJNOrZOvP 2jM3BenCw07JcULmhjjHJQG0hdn827Gt+DxHOTu5R0UBGiQwCI8V5Duy/hZEWOtJ UsSkmu48369XI3TUSM+lm+vlqE2gsvYkzn0SsuWJkMGE8Q4Zpm5M73ZsExFnmQ7g EnQrP30isPrKvOtiZ+sukC6zdZ0+Pki0d3l9A1QcBI6m4fFoM2IuZ+4bmu4C4Bl5 XHGNWD9GnWdXMTIiUA1Qt9Bb0OLDf6eSqiVLAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUhFlHo6MgED0kG+PUBTN3pEjIzN0wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2hGbEhvNk1nRUQwa0ctUFVCVE4zcEVqSXpOMC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIxbUAwDQYJKoZIhvcNAQELBQADggEBAAGemSjzC7lu5PttGJu6xL4g7RF1 wHKG3lkeXvYHoxQyTo27fBhC9ZaVbmLYdSTxuw7e4/e1zaE3/MyPtyE894MAW7FK pib/NOogOtKH+mJ4i71vyPIepD89vh+LTrItGdUFIFygzMNXmJbqXGqlRK61SDPA mtwBPYkrvGpSFk59C4oYYyigFyC+tWIfBK0LolWOajUY+oa2ggDiNacxdth5lYcB /Pe3AXeXwm2jaAc+q5qZcCWCLNA6M+dgRaGRmvhgLCju8BFt7peOI/C63fBZD/Z4 6j/7BlqbP2D1TBIIadX1ptb/vt5lRz0JphT3/rpGbHn3mt/OhfYaLxEn5YU= -----END CERTIFICATE-----Generated at Sat Jun 1 15:54:31 2024 by rpki-client on console-ams.rpki-client.org