$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/kpGfr3tPWhM_oyWtR-xPDgY_SVQ.roa File: kpGfr3tPWhM_oyWtR-xPDgY_SVQ.roa (raw, json) Hash identifier: zep6GBfPP40rdhvLSn29RnHi0unEmHTRGA4J02R+n/g= Subject key identifier: 92:91:9F:AF:7B:4F:5A:13:3F:A3:25:AD:47:EC:4F:0E:06:3F:49:54 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0784 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/kpGfr3tPWhM_oyWtR-xPDgY_SVQ.roa Signing time: Tue 30 Apr 2024 02:04:42 +0000 ROA not before: Tue 30 Apr 2024 02:04:42 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 49.98.92.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1924 (0x784) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 30 02:04:42 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=92919FAF7B4F5A133FA325AD47EC4F0E063F4954 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:6a:3d:70:77:ff:04:34:95:64:e5:19:62:77: 29:ef:99:a6:f2:c2:b8:75:82:9f:ff:4d:ee:37:a4: 8c:15:e7:fe:8d:54:0b:75:1e:e2:af:ac:d0:51:ac: fa:cd:ef:4a:de:00:d6:aa:9f:63:d3:a6:21:88:c7: 06:27:9a:1f:50:5b:ff:67:33:73:70:18:b5:03:73: 8f:57:4a:e7:49:c5:ee:79:50:67:9e:43:9a:62:25: 1c:02:41:95:4e:77:ff:2f:f0:eb:68:43:b4:1d:26: b3:5c:5a:0c:f5:94:26:d4:f5:8d:fe:ec:6d:ad:29: f8:4f:73:ef:67:e8:b5:e1:6d:3a:da:83:31:23:ea: 41:1f:bf:3d:e5:63:33:a1:c2:a0:0d:d0:e4:3e:d9: ba:d2:f7:7c:d2:f7:33:9c:f7:2f:56:d4:9d:25:bf: bc:df:25:09:a3:73:b6:52:29:96:67:85:83:c6:c4: d1:12:d3:0a:8e:1c:00:c7:18:db:3b:92:63:3f:d1: d0:60:af:b6:fc:fc:2b:d8:86:e1:57:3e:38:97:21: 50:f5:9f:8b:48:b0:bc:3a:8c:61:9d:71:14:22:cd: 3e:57:0c:f1:f0:4f:6a:37:a1:48:59:3f:02:ec:d1: 49:4f:39:59:53:dc:82:54:4a:ba:79:13:45:f4:1b: 29:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:91:9F:AF:7B:4F:5A:13:3F:A3:25:AD:47:EC:4F:0E:06:3F:49:54 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/kpGfr3tPWhM_oyWtR-xPDgY_SVQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.98.92.0/22 Signature Algorithm: sha256WithRSAEncryption 72:a6:a6:9f:97:af:12:3b:b8:aa:bb:f8:29:56:88:9f:3c:3c: 06:40:b6:3b:11:a9:45:93:dd:42:39:4f:f4:e2:22:01:08:c1: e7:72:0d:97:fc:19:d4:98:4b:a2:d2:4d:5f:9c:cb:d4:17:d8: f3:92:7b:cb:9b:77:6f:1c:d4:f9:57:51:3a:e7:1f:5c:83:09: f7:da:e8:16:1d:50:7a:b8:b4:39:0d:e6:c5:e8:7d:20:f1:32: 1b:4a:51:59:89:b5:5a:21:32:1a:3b:93:3c:d8:c4:55:98:22: 55:f5:e8:a6:ab:15:92:e6:de:d0:e0:16:ad:57:e7:b8:fa:50: 33:4f:0e:68:c4:a4:69:b9:1a:d1:cb:b0:38:ae:a2:99:bb:1b: 86:6f:66:09:8c:62:1f:0b:6f:21:7f:82:7b:56:b1:a6:88:c4: 5a:80:5e:9f:83:04:02:2f:45:2b:d3:77:71:61:8e:b3:25:92: 96:99:b1:5e:56:f8:d7:aa:d5:96:c5:1a:ac:6d:7c:ec:f0:0f: 48:50:75:e5:45:d3:c3:b7:02:ba:09:e0:7c:13:e0:7b:43:7a: 2e:e1:c8:52:17:db:68:8c:45:d2:21:69:89:69:9b:ef:dd:46: a1:31:0b:3a:cf:62:c9:5f:c0:c8:d6:82:a0:cb:72:6c:f3:39: df:7a:04:b3 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICB4QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw MjA0NDJaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDkyOTE5RkFGN0I0RjVB MTMzRkEzMjVBRDQ3RUM0RjBFMDYzRjQ5NTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDVaj1wd/8ENJVk5Rlidynvmabywrh1gp//Te43pIwV5/6NVAt1 HuKvrNBRrPrN70reANaqn2PTpiGIxwYnmh9QW/9nM3NwGLUDc49XSudJxe55UGee Q5piJRwCQZVOd/8v8OtoQ7QdJrNcWgz1lCbU9Y3+7G2tKfhPc+9n6LXhbTragzEj 6kEfvz3lYzOhwqAN0OQ+2brS93zS9zOc9y9W1J0lv7zfJQmjc7ZSKZZnhYPGxNES 0wqOHADHGNs7kmM/0dBgr7b8/CvYhuFXPjiXIVD1n4tIsLw6jGGdcRQizT5XDPHw T2o3oUhZPwLs0UlPOVlT3IJUSrp5E0X0GynVAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUkpGfr3tPWhM/oyWtR+xPDgY/SVQwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2twR2ZyM3RQV2hNX295V3RSLXhQRGdZX1NWUS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIxYlwwDQYJKoZIhvcNAQELBQADggEBAHKmpp+XrxI7uKq7+ClWiJ88PAZA tjsRqUWT3UI5T/TiIgEIwedyDZf8GdSYS6LSTV+cy9QX2POSe8ubd28c1PlXUTrn H1yDCffa6BYdUHq4tDkN5sXofSDxMhtKUVmJtVohMho7kzzYxFWYIlX16KarFZLm 3tDgFq1X57j6UDNPDmjEpGm5GtHLsDiuopm7G4ZvZgmMYh8LbyF/gntWsaaIxFqA Xp+DBAIvRSvTd3FhjrMlkpaZsV5W+Neq1ZbFGqxtfOzwD0hQdeVF08O3AroJ4HwT 4HtDei7hyFIX22iMRdIhaYlpm+/dRqExCzrPYslfwMjWgqDLcmzzOd96BLM= -----END CERTIFICATE-----Generated at Sat Jun 1 13:38:48 2024 by rpki-client on console-fra.rpki-client.org