$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ikIbG_L8bVSfQQRXKFZOPFpgLnM.roa File: ikIbG_L8bVSfQQRXKFZOPFpgLnM.roa (raw, json) Hash identifier: WMLllI0Rqr+j+48pwakp1GRVJdgprB/6IBuZ6loqRNI= Subject key identifier: 8A:42:1B:1B:F2:FC:6D:54:9F:41:04:57:28:56:4E:3C:5A:60:2E:73 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0A00 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ikIbG_L8bVSfQQRXKFZOPFpgLnM.roa Signing time: Sun 30 Jun 2024 01:42:30 +0000 ROA not before: Sun 30 Jun 2024 01:42:30 +0000 ROA not after: Tue 24 Jun 2025 10:46:45 +0000 asID: 9605 IP address blocks: 49.105.80.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:22:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2560 (0xa00) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 30 01:42:30 2024 GMT Not After : Jun 24 10:46:45 2025 GMT Subject: CN=8A421B1BF2FC6D549F41045728564E3C5A602E73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:23:ad:2c:71:28:1f:b2:66:4f:50:69:65:8a: 30:28:c1:d7:a2:b6:77:e5:71:8b:a7:1a:4e:70:f2: 6c:11:20:78:94:15:c6:2b:05:50:6c:2c:f7:6a:32: 37:c5:28:b3:b5:fb:b4:ae:4f:ba:e7:ef:cc:b9:4e: db:bd:ca:71:6f:70:b5:56:47:83:c5:cf:41:ef:7a: c7:b5:91:49:cd:53:c8:97:29:07:bf:99:18:36:38: af:ee:5b:35:63:bd:38:a1:2e:dc:1c:3c:a1:e5:01: 59:ab:80:cf:f7:04:97:9a:c0:65:03:a6:8b:d1:36: bc:40:d0:20:d2:e0:47:43:36:2e:1b:7c:95:6e:47: ac:60:a5:d1:00:2d:58:b6:48:69:16:7a:c1:20:74: d3:01:e9:a3:5d:47:c5:45:ef:41:e9:17:d1:81:58: a6:98:06:6b:d9:fa:92:95:f3:1a:9a:f2:b3:b8:e7: 32:2b:92:a9:7f:0c:13:99:4c:e6:75:bb:81:85:35: cb:bf:b2:f4:8e:b8:3c:32:a8:af:7a:ff:8e:13:7c: 14:c2:e1:6b:24:67:37:3b:68:c9:f5:65:c8:7d:56: cf:21:d7:80:84:e1:15:fc:14:fc:fa:71:0a:03:03: 8c:71:15:bf:30:0f:88:d8:0b:4e:ca:e2:71:95:e9: e8:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:42:1B:1B:F2:FC:6D:54:9F:41:04:57:28:56:4E:3C:5A:60:2E:73 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ikIbG_L8bVSfQQRXKFZOPFpgLnM.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.105.80.0/24 Signature Algorithm: sha256WithRSAEncryption bd:20:85:58:8e:30:a8:8d:6d:e5:33:60:07:20:d4:a5:92:18: d1:2a:13:f3:40:18:c1:0a:05:34:f5:b2:c7:47:8f:35:1b:85: c3:9f:1b:6f:13:7a:2c:82:93:cf:40:fc:d5:a6:70:d6:9c:e9: 73:ce:1c:b4:f6:dd:9c:de:68:2c:7f:48:fa:db:d4:da:5b:4b: 92:19:ef:b6:b0:53:78:11:92:e9:a3:0f:46:6d:cd:9a:51:4b: 45:62:eb:77:80:94:1e:d8:79:f8:e6:e6:5d:86:f3:3a:9e:e3: c2:dc:0f:3c:8a:94:76:1f:31:81:49:26:46:fb:31:4b:06:a4: f6:c9:4e:60:2d:aa:af:0e:22:77:37:8d:b7:70:cc:56:e2:ab: cf:2c:2c:44:d5:d4:85:82:e6:b7:c0:36:e7:98:34:49:ab:d7: 9b:41:af:ec:83:48:2f:0e:03:9b:af:25:8c:42:60:5d:2a:d5: f3:46:23:88:92:4c:0f:35:fa:7a:62:e0:7f:4e:d5:dc:71:64: c1:4d:22:fe:42:a0:bc:15:1a:50:be:dd:00:f2:81:72:ff:33: 9a:0f:35:51:23:44:39:2b:b7:39:a5:f4:ed:30:34:df:59:a6: 22:35:31:fd:b7:d2:15:14:75:e1:ed:03:5d:fb:5d:4c:08:4c: 5a:68:4a:c2 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCgAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA2MzAw MTQyMzBaFw0yNTA2MjQxMDQ2NDVaMDMxMTAvBgNVBAMTKDhBNDIxQjFCRjJGQzZE NTQ5RjQxMDQ1NzI4NTY0RTNDNUE2MDJFNzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCZI60scSgfsmZPUGllijAowdeitnflcYunGk5w8mwRIHiUFcYr BVBsLPdqMjfFKLO1+7SuT7rn78y5Ttu9ynFvcLVWR4PFz0Hvese1kUnNU8iXKQe/ mRg2OK/uWzVjvTihLtwcPKHlAVmrgM/3BJeawGUDpovRNrxA0CDS4EdDNi4bfJVu R6xgpdEALVi2SGkWesEgdNMB6aNdR8VF70HpF9GBWKaYBmvZ+pKV8xqa8rO45zIr kql/DBOZTOZ1u4GFNcu/svSOuDwyqK96/44TfBTC4WskZzc7aMn1Zch9Vs8h14CE 4RX8FPz6cQoDA4xxFb8wD4jYC07K4nGV6eitAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUikIbG/L8bVSfQQRXKFZOPFpgLnMwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2lrSWJHX0w4YlZTZlFRUlhLRlpPUEZwZ0xuTS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAxaVAwDQYJKoZIhvcNAQELBQADggEBAL0ghViOMKiNbeUzYAcg1KWSGNEq E/NAGMEKBTT1ssdHjzUbhcOfG28TeiyCk89A/NWmcNac6XPOHLT23ZzeaCx/SPrb 1NpbS5IZ77awU3gRkumjD0ZtzZpRS0Vi63eAlB7Yefjm5l2G8zqe48LcDzyKlHYf MYFJJkb7MUsGpPbJTmAtqq8OInc3jbdwzFbiq88sLETV1IWC5rfANueYNEmr15tB r+yDSC8OA5uvJYxCYF0q1fNGI4iSTA81+npi4H9O1dxxZMFNIv5CoLwVGlC+3QDy gXL/M5oPNVEjRDkrtzml9O0wNN9ZpiI1Mf230hUUdeHtA137XUwITFpoSsI= -----END CERTIFICATE-----Generated at Fri Nov 22 16:45:41 2024 by rpki-client on console-ams.rpki-client.org