$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/jLGC7nnrxvJX_bLV5-oSpxV43jI.roa File: jLGC7nnrxvJX_bLV5-oSpxV43jI.roa (raw, json) Hash identifier: Ax9mGaef2W5ey8WMfTkcEE5YwdKTs6xwglOckDj0ENU= Subject key identifier: 8C:B1:82:EE:79:EB:C6:F2:57:FD:B2:D5:E7:EA:12:A7:15:78:DE:32 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0665 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/jLGC7nnrxvJX_bLV5-oSpxV43jI.roa Signing time: Tue 30 Apr 2024 01:34:52 +0000 ROA not before: Tue 30 Apr 2024 01:34:52 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 49.98.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1637 (0x665) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 30 01:34:52 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=8CB182EE79EBC6F257FDB2D5E7EA12A71578DE32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:4d:fd:8c:12:c8:c3:15:3b:c8:f6:22:cf:17: 4d:6c:60:91:7b:fd:2b:bd:7d:ed:78:ea:68:ee:fd: d9:92:f4:56:30:9e:ff:29:13:37:f6:c5:c4:32:d1: 93:91:79:b7:d1:c8:89:ed:f7:00:70:a3:6a:02:08: 31:67:9b:11:06:fb:de:f0:cd:04:ed:c2:97:ff:fa: 46:f3:44:05:07:8b:0e:48:2d:5c:a0:c4:06:df:cf: 31:66:7d:f9:92:b6:2a:e6:91:68:59:cc:85:15:15: 68:a4:a2:8c:50:35:a8:f8:e7:38:68:c1:ce:47:ec: 95:af:56:48:af:08:21:ce:e6:77:65:44:5e:6a:be: 58:95:33:83:d4:73:ee:4b:97:69:ce:78:fa:d0:f5: 8e:35:6d:c3:bb:ab:9c:9b:7d:f5:d0:b9:b4:5d:c5: 95:70:2f:30:88:0c:32:97:92:6c:79:8f:d8:57:39: 9f:44:6a:5c:b8:d2:55:c8:a4:70:81:6a:72:b6:94: e5:bd:25:59:fa:b3:aa:ad:da:32:34:1a:92:87:f3: 1f:0c:5e:85:af:1a:14:1d:f2:1a:a2:fd:45:ad:e0: c1:47:9e:0e:79:7d:a9:8f:91:4f:2c:fe:98:33:4f: 9c:93:4b:e4:cd:fe:5d:86:2f:f6:a6:39:7e:04:87: 2a:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:B1:82:EE:79:EB:C6:F2:57:FD:B2:D5:E7:EA:12:A7:15:78:DE:32 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/jLGC7nnrxvJX_bLV5-oSpxV43jI.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.98.0.0/22 Signature Algorithm: sha256WithRSAEncryption c2:50:c7:0c:0d:29:9b:bc:2a:1a:81:89:94:9d:9a:9a:ff:ae: b3:7f:c5:a9:8f:fd:d3:22:70:ff:b6:2f:a2:9f:0d:9d:b8:0c: 12:55:5b:82:30:18:1a:9d:4e:cf:48:26:b1:9a:ec:01:07:65: ea:f1:4a:f0:87:7b:dc:48:55:11:37:d7:16:f4:d5:bb:c1:6b: d1:b9:15:31:33:41:23:9f:b8:f8:9d:8a:15:b4:01:1e:bf:73: b0:a9:3e:7b:a2:3f:7b:5e:d4:39:7e:b0:bf:9c:34:0a:90:1c: f4:4a:1f:36:83:e5:82:5b:b6:f2:df:59:e4:e5:c6:8f:ce:10: 72:2e:b7:63:4c:93:b4:ae:c0:43:28:4e:c9:4a:7c:04:75:f2: 12:8e:97:77:f2:0d:a7:99:a6:eb:81:8e:98:59:e6:a4:67:58: 28:84:c5:b3:59:1d:e7:6b:a0:33:09:87:47:fb:d8:32:16:56: 81:d1:66:6a:a3:02:9a:f8:37:2a:b7:04:7a:cd:37:f0:af:70: 25:f7:91:d6:0e:64:80:d9:2c:eb:a4:73:14:1e:ac:dd:bd:31: 32:52:13:ab:e5:e9:d5:02:f2:69:49:89:e7:7e:6d:76:03:99: 12:0f:a2:96:ec:d7:82:a6:b8:49:79:b2:2d:b3:df:09:e9:30: c7:23:9d:2d -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBmUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw MTM0NTJaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDhDQjE4MkVFNzlFQkM2 RjI1N0ZEQjJENUU3RUExMkE3MTU3OERFMzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCkTf2MEsjDFTvI9iLPF01sYJF7/Su9fe146mju/dmS9FYwnv8p Ezf2xcQy0ZORebfRyInt9wBwo2oCCDFnmxEG+97wzQTtwpf/+kbzRAUHiw5ILVyg xAbfzzFmffmStirmkWhZzIUVFWikooxQNaj45zhowc5H7JWvVkivCCHO5ndlRF5q vliVM4PUc+5Ll2nOePrQ9Y41bcO7q5ybffXQubRdxZVwLzCIDDKXkmx5j9hXOZ9E aly40lXIpHCBanK2lOW9JVn6s6qt2jI0GpKH8x8MXoWvGhQd8hqi/UWt4MFHng55 famPkU8s/pgzT5yTS+TN/l2GL/amOX4EhyojAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUjLGC7nnrxvJX/bLV5+oSpxV43jIwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2pMR0M3bm5yeHZKWF9iTFY1LW9TcHhWNDNqSS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIxYgAwDQYJKoZIhvcNAQELBQADggEBAMJQxwwNKZu8KhqBiZSdmpr/rrN/ xamP/dMicP+2L6KfDZ24DBJVW4IwGBqdTs9IJrGa7AEHZerxSvCHe9xIVRE31xb0 1bvBa9G5FTEzQSOfuPidihW0AR6/c7CpPnuiP3te1Dl+sL+cNAqQHPRKHzaD5YJb tvLfWeTlxo/OEHIut2NMk7SuwEMoTslKfAR18hKOl3fyDaeZpuuBjphZ5qRnWCiE xbNZHedroDMJh0f72DIWVoHRZmqjApr4Nyq3BHrNN/CvcCX3kdYOZIDZLOukcxQe rN29MTJSE6vl6dUC8mlJied+bXYDmRIPopbs14KmuEl5si2z3wnpMMcjnS0= -----END CERTIFICATE-----Generated at Sat Jun 1 13:38:48 2024 by rpki-client on console-fra.rpki-client.org