$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/hQXQiwMLAXptYvWeMZUuhGFya40.roa File: hQXQiwMLAXptYvWeMZUuhGFya40.roa (raw, json) Hash identifier: PXZbqOfAVFo1H3nevyn60WtOYkhCyV8f8xMT8Y6Ih+g= Subject key identifier: 85:05:D0:8B:03:0B:01:7A:6D:62:F5:9E:31:95:2E:84:61:72:6B:8D Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 068C Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/hQXQiwMLAXptYvWeMZUuhGFya40.roa Signing time: Tue 30 Apr 2024 01:38:07 +0000 ROA not before: Tue 30 Apr 2024 01:38:07 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 49.106.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1676 (0x68c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 30 01:38:07 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=8505D08B030B017A6D62F59E31952E8461726B8D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:89:b3:56:ec:0c:00:64:c4:a0:4f:ab:99:e9: 75:7a:6f:ab:44:54:e2:d0:c5:a5:19:30:5a:9d:99: 4f:0e:d4:7b:31:f5:4a:58:d8:82:17:d0:e9:77:d3: a6:91:5b:25:0b:81:8f:66:75:27:21:9b:6f:bd:45: 3e:72:94:6f:90:6b:01:49:a5:bc:d8:2d:53:3b:7c: 89:32:f7:0b:52:67:b6:68:17:92:20:ac:55:62:7f: 0f:3d:45:2c:23:39:e1:b4:7c:15:cd:12:7c:c7:4e: d3:ec:ae:ea:8b:b0:25:c0:2a:e9:a1:1a:ba:e6:7a: c7:bd:9b:ef:0a:36:9d:a3:d9:cd:62:62:9c:03:c7: 08:d2:86:c9:c8:26:f7:94:4a:e4:6b:c8:24:c8:a9: 8a:b0:0f:c5:50:33:e3:46:b5:57:b2:56:f7:71:48: 88:4c:d8:b6:60:41:f6:45:0d:3a:08:5b:f4:fc:da: ac:78:f4:b8:c9:a4:50:95:78:eb:cf:0e:18:90:11: 74:4c:e0:57:b6:0a:ba:54:98:34:0d:98:ce:c8:ea: 50:de:1e:88:9c:61:ee:de:42:7a:fe:78:7b:33:0e: 4c:0b:a8:61:16:a7:21:5f:57:cc:a1:1a:0d:fb:c8: 44:7e:cd:4b:5e:b8:57:01:2f:61:82:85:5b:2d:15: 51:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:05:D0:8B:03:0B:01:7A:6D:62:F5:9E:31:95:2E:84:61:72:6B:8D X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/hQXQiwMLAXptYvWeMZUuhGFya40.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.106.217.0/24 Signature Algorithm: sha256WithRSAEncryption a6:96:f0:87:89:96:1a:83:c1:39:52:20:24:32:b2:71:7f:b3: 45:4f:7c:70:1a:b9:4f:2a:01:58:3b:90:99:0a:32:4c:77:f9: 70:66:25:df:7e:30:95:b3:2f:7b:ba:a9:5e:90:4f:76:6b:e9: 35:45:b0:a2:a9:fc:93:03:17:60:ca:92:63:f1:60:0a:99:5e: f6:d9:5e:db:54:44:7f:e1:c4:1b:f9:fd:81:20:b7:c9:cc:5e: 9d:91:60:94:ac:6b:df:4c:0e:60:b2:d4:3c:8a:f3:c9:43:6e: 33:ed:10:39:8f:85:ab:58:3b:f8:36:8c:a9:c4:a5:1d:77:2c: 77:18:08:bf:0f:44:d7:51:60:f9:35:35:52:6a:a1:fe:90:d4: bd:1d:af:92:2f:33:88:67:13:70:fd:30:47:a6:1f:1c:47:5f: b7:8f:7a:e7:62:9e:94:a1:30:fc:49:3f:5c:da:9c:a6:76:06: 19:d4:29:65:53:e0:b5:82:15:df:71:d2:1a:35:45:65:45:df: 3c:9d:66:ae:f6:a3:7e:fb:f3:20:92:4b:e1:ec:e2:fb:eb:ee: eb:cb:93:48:c0:a1:76:4c:68:c3:ef:25:86:96:a8:e1:6b:37: f4:72:1f:41:fd:0c:0a:ce:4e:2d:b3:18:2e:27:40:e5:11:34: 51:df:42:ca -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBowwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw MTM4MDdaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDg1MDVEMDhCMDMwQjAx N0E2RDYyRjU5RTMxOTUyRTg0NjE3MjZCOEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC7ibNW7AwAZMSgT6uZ6XV6b6tEVOLQxaUZMFqdmU8O1Hsx9UpY 2IIX0Ol306aRWyULgY9mdSchm2+9RT5ylG+QawFJpbzYLVM7fIky9wtSZ7ZoF5Ig rFVifw89RSwjOeG0fBXNEnzHTtPsruqLsCXAKumhGrrmese9m+8KNp2j2c1iYpwD xwjShsnIJveUSuRryCTIqYqwD8VQM+NGtVeyVvdxSIhM2LZgQfZFDToIW/T82qx4 9LjJpFCVeOvPDhiQEXRM4Fe2CrpUmDQNmM7I6lDeHoicYe7eQnr+eHszDkwLqGEW pyFfV8yhGg37yER+zUteuFcBL2GChVstFVEtAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUhQXQiwMLAXptYvWeMZUuhGFya40wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2hRWFFpd01MQVhwdFl2V2VNWlV1aEdGeWE0MC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAxatkwDQYJKoZIhvcNAQELBQADggEBAKaW8IeJlhqDwTlSICQysnF/s0VP fHAauU8qAVg7kJkKMkx3+XBmJd9+MJWzL3u6qV6QT3Zr6TVFsKKp/JMDF2DKkmPx YAqZXvbZXttURH/hxBv5/YEgt8nMXp2RYJSsa99MDmCy1DyK88lDbjPtEDmPhatY O/g2jKnEpR13LHcYCL8PRNdRYPk1NVJqof6Q1L0dr5IvM4hnE3D9MEemHxxHX7eP eudinpShMPxJP1zanKZ2BhnUKWVT4LWCFd9x0ho1RWVF3zydZq72o3778yCSS+Hs 4vvr7uvLk0jAoXZMaMPvJYaWqOFrN/RyH0H9DArOTi2zGC4nQOURNFHfQso= -----END CERTIFICATE-----Generated at Sat Jun 1 13:38:48 2024 by rpki-client on console-fra.rpki-client.org