$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/k27auSG7m3mCyPU3SzFDmlxqGsk.roa File: k27auSG7m3mCyPU3SzFDmlxqGsk.roa (raw, json) Hash identifier: Ptyj4bV8Y0lDnRk1ht5bPPCkFDFOmfNAbI2RgfZeKrg= Subject key identifier: 93:6E:DA:B9:21:BB:9B:79:82:C8:F5:37:4B:31:43:9A:5C:6A:1A:C9 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0A64 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/k27auSG7m3mCyPU3SzFDmlxqGsk.roa Signing time: Sun 30 Jun 2024 01:50:24 +0000 ROA not before: Sun 30 Jun 2024 01:50:24 +0000 ROA not after: Tue 24 Jun 2025 10:46:45 +0000 asID: 9605 IP address blocks: 49.103.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:41:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2660 (0xa64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 30 01:50:24 2024 GMT Not After : Jun 24 10:46:45 2025 GMT Subject: CN=936EDAB921BB9B7982C8F5374B31439A5C6A1AC9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:4b:e6:e2:ab:e7:29:45:5a:3e:9f:9f:94:7d: 07:96:61:fd:bd:8e:78:38:41:26:7f:e1:e5:f6:e4: f6:a2:d7:92:fd:2c:c1:8a:be:e2:f4:17:1f:4e:0e: b1:88:73:78:85:7f:9c:7b:0a:3a:13:e2:d7:88:31: 5e:79:b9:44:c7:1b:2e:9e:8b:9f:d7:7b:b0:8c:1a: 33:b6:57:c5:21:0c:39:3d:50:39:13:07:c3:f5:a5: 52:e2:c5:bc:45:c4:9f:e2:72:03:b0:c8:0e:d0:f0: 36:21:84:72:6e:a5:a8:dc:24:a4:07:bf:77:ff:2e: d2:cf:27:32:95:45:53:a9:f8:a9:cd:41:c7:6f:f3: 28:83:c2:8a:64:3a:00:26:01:87:c7:1b:df:ea:58: 8e:eb:d3:38:42:59:95:93:de:df:e2:6c:0e:d5:0f: 81:bb:f5:0f:c3:fc:42:04:0d:5e:84:49:22:68:cf: 49:74:83:60:9a:31:3f:57:88:a7:da:9b:51:7d:a1: 4d:55:94:af:15:2a:e6:72:63:2c:12:35:36:ad:f8: 90:a8:ae:33:fe:f8:b5:eb:3f:c1:49:a4:c8:0c:a4: 1f:e7:b3:73:20:5c:99:5b:6e:b9:ba:c4:49:f9:27: 54:f5:f3:ec:cf:0e:bb:bd:e7:19:77:b9:42:ca:a5: b1:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:6E:DA:B9:21:BB:9B:79:82:C8:F5:37:4B:31:43:9A:5C:6A:1A:C9 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/k27auSG7m3mCyPU3SzFDmlxqGsk.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.103.17.0/24 Signature Algorithm: sha256WithRSAEncryption 76:b9:65:c0:67:8c:11:43:72:04:ca:5f:97:81:a2:c5:4a:6c: b5:d8:62:f0:59:aa:cb:bb:e4:b4:ab:a3:c5:1c:82:67:20:53: 52:06:05:f2:55:e7:fa:f9:d5:0d:11:57:a1:97:5a:38:0c:d4: 10:46:8b:70:35:3d:0f:46:f5:bd:2c:b9:b8:f9:16:67:85:2a: 2f:18:00:de:a8:35:20:be:c0:32:21:25:8a:47:fe:41:44:6a: 53:56:37:63:cf:ea:93:5e:c1:8b:8d:83:ea:d8:c0:5b:8c:62: 68:ac:b5:ef:25:db:06:00:59:31:89:f9:e6:88:6c:52:7e:47: 71:44:d1:e3:ef:be:2b:47:01:3b:6b:1e:02:52:a5:e4:e0:e7: 2e:22:87:e8:64:c0:d3:20:09:71:36:4c:3f:d5:f8:36:16:be: d3:d9:8a:85:0b:a5:ef:ce:b9:f8:4e:6a:c8:0c:12:cc:16:fc: f6:69:b4:8f:1a:5b:27:91:85:2e:6c:fd:5b:da:58:7c:40:89: 41:48:ec:9a:65:65:17:d8:07:44:63:35:bc:e3:92:71:db:2a: cb:87:d5:d4:02:53:0a:11:86:89:41:08:ac:09:b7:1a:22:4f: d5:fa:74:75:1e:c1:da:d5:29:36:fe:3f:ac:d2:f1:b4:54:dd: 6e:fb:02:be -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCmQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA2MzAw MTUwMjRaFw0yNTA2MjQxMDQ2NDVaMDMxMTAvBgNVBAMTKDkzNkVEQUI5MjFCQjlC Nzk4MkM4RjUzNzRCMzE0MzlBNUM2QTFBQzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC5S+biq+cpRVo+n5+UfQeWYf29jng4QSZ/4eX25Pai15L9LMGK vuL0Fx9ODrGIc3iFf5x7CjoT4teIMV55uUTHGy6ei5/Xe7CMGjO2V8UhDDk9UDkT B8P1pVLixbxFxJ/icgOwyA7Q8DYhhHJupajcJKQHv3f/LtLPJzKVRVOp+KnNQcdv 8yiDwopkOgAmAYfHG9/qWI7r0zhCWZWT3t/ibA7VD4G79Q/D/EIEDV6ESSJoz0l0 g2CaMT9XiKfam1F9oU1VlK8VKuZyYywSNTat+JCorjP++LXrP8FJpMgMpB/ns3Mg XJlbbrm6xEn5J1T18+zPDru95xl3uULKpbFxAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUk27auSG7m3mCyPU3SzFDmlxqGskwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2syN2F1U0c3bTNtQ3lQVTNTekZEbWx4cUdzay5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAxZxEwDQYJKoZIhvcNAQELBQADggEBAHa5ZcBnjBFDcgTKX5eBosVKbLXY YvBZqsu75LSro8UcgmcgU1IGBfJV5/r51Q0RV6GXWjgM1BBGi3A1PQ9G9b0subj5 FmeFKi8YAN6oNSC+wDIhJYpH/kFEalNWN2PP6pNewYuNg+rYwFuMYmiste8l2wYA WTGJ+eaIbFJ+R3FE0ePvvitHATtrHgJSpeTg5y4ih+hkwNMgCXE2TD/V+DYWvtPZ ioULpe/OufhOasgMEswW/PZptI8aWyeRhS5s/VvaWHxAiUFI7JplZRfYB0RjNbzj knHbKsuH1dQCUwoRholBCKwJtxoiT9X6dHUewdrVKTb+P6zS8bRU3W77Ar4= -----END CERTIFICATE-----Generated at Fri Nov 22 15:24:02 2024 by rpki-client on console-fra.rpki-client.org