$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/icwliCG2Yz_ixWtGpV3Bkw6HVfo.roa File: icwliCG2Yz_ixWtGpV3Bkw6HVfo.roa (raw, json) Hash identifier: PHfClROF8bbvpgMhq5agtnTbJGdnTFs+jugp0wmP1ow= Subject key identifier: 89:CC:25:88:21:B6:63:3F:E2:C5:6B:46:A5:5D:C1:93:0E:87:55:FA Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 05FE Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/icwliCG2Yz_ixWtGpV3Bkw6HVfo.roa Signing time: Thu 29 Feb 2024 01:35:46 +0000 ROA not before: Thu 29 Feb 2024 01:35:46 +0000 ROA not after: Fri 14 Feb 2025 01:30:03 +0000 asID: 9605 IP address blocks: 49.97.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Dec 2024 00:11:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1534 (0x5fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Feb 29 01:35:46 2024 GMT Not After : Feb 14 01:30:03 2025 GMT Subject: CN=89CC258821B6633FE2C56B46A55DC1930E8755FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:0e:1f:6b:9d:49:21:65:35:e6:9d:26:09:b7: fc:35:8e:d4:4a:79:b0:b6:2b:dd:a0:64:73:0a:be: 77:bf:0d:b9:c4:59:e4:de:78:35:09:0f:f8:0f:9f: 8a:ed:51:27:36:b7:77:4a:b4:61:2a:99:7b:2a:d2: 16:87:66:af:32:cd:13:4d:f9:06:96:bf:5c:24:e7: 66:51:0f:fc:d9:d7:c3:d4:d8:3b:aa:1d:47:d1:94: da:50:c6:da:5f:73:48:68:fd:91:93:b9:4b:bd:02: 79:d9:27:44:db:36:f3:cd:6d:ca:1a:88:b0:ad:d2: a2:ad:fa:f7:63:85:56:86:c4:3a:0c:76:f1:66:05: 3c:bb:dc:e8:f7:e2:d9:c7:32:62:81:51:fe:a5:e1: 5d:7b:3e:37:7f:12:6f:fb:58:74:59:04:91:de:08: ae:91:f2:de:a5:95:4f:a9:16:66:40:3c:7c:a1:43: e8:ee:47:18:7f:b6:97:7a:78:9b:91:2b:81:58:f1: 35:fd:e1:bc:24:cd:fd:f6:ea:a9:70:c5:53:3c:b1: a4:ec:b3:d8:88:5e:79:2f:0e:e8:e2:3e:80:53:1e: dc:7d:9a:00:0c:5e:c4:4b:cb:b6:33:f9:ab:40:03: 43:07:5a:44:00:5f:24:0e:a2:09:6e:c0:ec:a1:36: 57:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:CC:25:88:21:B6:63:3F:E2:C5:6B:46:A5:5D:C1:93:0E:87:55:FA X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/icwliCG2Yz_ixWtGpV3Bkw6HVfo.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.97.109.0/24 Signature Algorithm: sha256WithRSAEncryption 62:f1:3c:81:ee:4c:03:61:8b:9c:45:92:3f:6a:85:eb:0e:b7: 27:b0:9e:e8:03:1b:85:43:4a:2d:70:31:86:d5:42:8d:2a:89: dc:ee:2c:13:8c:30:b4:c2:e5:65:a3:44:7f:5c:d7:59:a7:72: b4:31:6d:0a:45:9b:8f:d0:d3:0d:15:06:86:49:9e:a3:8a:ce: c1:54:d9:ff:59:10:04:86:0e:04:a1:d8:eb:55:35:02:ef:4a: 6b:83:92:48:d4:45:8b:8c:a2:68:47:b8:50:54:e9:16:cd:1d: d1:d5:b5:a5:28:af:1d:41:c2:4f:7f:de:39:88:23:d2:32:44: 4e:76:6e:3e:50:94:a0:21:32:6f:73:82:a2:dc:02:0c:93:7b: fc:39:7b:22:75:61:c7:9b:56:08:61:9a:5d:8a:db:41:ae:23: 0d:ab:85:e3:53:54:6d:76:b7:a6:a8:39:9e:05:f9:64:39:6f: da:91:6e:4e:3f:3f:31:6b:27:bd:b8:3b:54:22:9e:f4:ce:e9: cf:7e:37:38:48:48:f8:78:b3:96:77:57:c9:65:f7:37:a8:7f: e4:7e:82:cb:a1:e5:a0:5b:64:aa:c2:0c:91:09:80:49:24:11: 4a:df:b4:a6:65:95:50:41:c9:66:35:7a:cb:25:80:b7:f7:ac: b0:c9:c2:fc -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBf4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDAyMjkw MTM1NDZaFw0yNTAyMTQwMTMwMDNaMDMxMTAvBgNVBAMTKDg5Q0MyNTg4MjFCNjYz M0ZFMkM1NkI0NkE1NURDMTkzMEU4NzU1RkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCnDh9rnUkhZTXmnSYJt/w1jtRKebC2K92gZHMKvne/DbnEWeTe eDUJD/gPn4rtUSc2t3dKtGEqmXsq0haHZq8yzRNN+QaWv1wk52ZRD/zZ18PU2Duq HUfRlNpQxtpfc0ho/ZGTuUu9AnnZJ0TbNvPNbcoaiLCt0qKt+vdjhVaGxDoMdvFm BTy73Oj34tnHMmKBUf6l4V17Pjd/Em/7WHRZBJHeCK6R8t6llU+pFmZAPHyhQ+ju Rxh/tpd6eJuRK4FY8TX94bwkzf326qlwxVM8saTss9iIXnkvDujiPoBTHtx9mgAM XsRLy7Yz+atAA0MHWkQAXyQOogluwOyhNlfbAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUicwliCG2Yz/ixWtGpV3Bkw6HVfowHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2ljd2xpQ0cyWXpfaXhXdEdwVjNCa3c2SFZmby5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAxYW0wDQYJKoZIhvcNAQELBQADggEBAGLxPIHuTANhi5xFkj9qhesOtyew nugDG4VDSi1wMYbVQo0qidzuLBOMMLTC5WWjRH9c11mncrQxbQpFm4/Q0w0VBoZJ nqOKzsFU2f9ZEASGDgSh2OtVNQLvSmuDkkjURYuMomhHuFBU6RbNHdHVtaUorx1B wk9/3jmII9IyRE52bj5QlKAhMm9zgqLcAgyTe/w5eyJ1YcebVghhml2K20GuIw2r heNTVG12t6aoOZ4F+WQ5b9qRbk4/PzFrJ724O1QinvTO6c9+NzhISPh4s5Z3V8ll 9zeof+R+gsuh5aBbZKrCDJEJgEkkEUrftKZllVBByWY1esslgLf3rLDJwvw= -----END CERTIFICATE-----Generated at Tue Nov 26 02:27:15 2024 by rpki-client on console-ams.rpki-client.org