$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/lxNeZDfjeKFXKoRra_vrIqMmh6k.roa File: lxNeZDfjeKFXKoRra_vrIqMmh6k.roa (raw, json) Hash identifier: 1bC8nnZ1ayVjYOdDnJCJqB8asKPAzE7K5TMXe6Q4hH0= Subject key identifier: 97:13:5E:64:37:E3:78:A1:57:2A:84:6B:6B:FB:EB:22:A3:26:87:A9 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 05F4 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/lxNeZDfjeKFXKoRra_vrIqMmh6k.roa Signing time: Thu 29 Feb 2024 01:35:42 +0000 ROA not before: Thu 29 Feb 2024 01:35:42 +0000 ROA not after: Fri 14 Feb 2025 01:30:03 +0000 asID: 9605 IP address blocks: 49.97.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1524 (0x5f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Feb 29 01:35:42 2024 GMT Not After : Feb 14 01:30:03 2025 GMT Subject: CN=97135E6437E378A1572A846B6BFBEB22A32687A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:9d:7f:06:b2:72:e2:23:e7:43:57:5c:7d:96: 54:54:6b:61:1c:bf:f4:b9:1a:7b:c4:f9:87:a5:cc: 6a:b2:e6:25:7f:22:ff:30:c8:08:f5:66:d7:6d:d6: 31:d1:32:73:d3:c6:b0:d3:fc:cf:b9:b7:31:57:bd: 80:b5:2c:a5:a7:56:a6:ab:f2:8b:e0:a1:91:9c:66: 42:e0:d2:08:8c:b4:26:d8:e5:1b:8e:09:65:88:ed: e0:74:f8:d6:58:cd:18:e3:4f:6b:95:9b:1c:7c:cc: fd:24:66:4b:56:e1:71:ee:b9:b1:c2:17:28:3a:11: 0b:5c:2e:92:84:36:f5:31:71:eb:c9:dd:93:05:2e: c9:a6:c8:e1:c2:77:dc:92:9c:1c:f7:6d:dd:40:d7: a9:d0:e9:84:f4:4a:c4:6e:5c:c8:17:a3:7a:ca:b6: 4d:de:7a:54:5d:e6:ac:e3:a5:b6:cc:40:ad:9a:56: c2:e2:c6:55:42:15:80:ce:f7:de:72:0e:aa:21:72: cc:98:76:fc:a6:8e:cc:6d:08:b6:77:20:b2:c3:37: 88:e9:a3:3b:38:6c:95:69:27:a4:e6:2c:30:e6:ec: 51:a0:e2:a6:6e:7c:5c:a9:b0:6b:e6:6b:94:6b:5a: 34:c7:a3:ae:0c:0b:1a:ff:c6:5a:38:77:1e:61:6d: e3:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:13:5E:64:37:E3:78:A1:57:2A:84:6B:6B:FB:EB:22:A3:26:87:A9 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/lxNeZDfjeKFXKoRra_vrIqMmh6k.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.97.0.0/24 Signature Algorithm: sha256WithRSAEncryption c9:fa:75:97:26:1b:31:70:1c:15:dd:83:2b:4c:eb:07:9f:bd: 96:90:2a:80:87:54:74:2a:ba:69:e6:10:16:9f:78:c1:6c:1e: dc:ee:8a:13:94:86:39:0c:80:d6:49:60:c7:3d:a4:48:64:26: 54:69:1b:69:21:ee:02:f8:24:3e:2a:ba:09:6c:00:b3:c6:7b: ab:b3:65:83:41:0a:ba:d7:be:5c:52:d0:78:84:40:20:84:84: da:7f:9b:9d:00:76:bc:e2:6c:e5:11:1c:e6:9f:ba:1d:29:ea: 40:69:a4:58:df:62:f5:7c:c9:55:85:f9:62:ee:79:11:dd:54: 3f:d7:ff:f8:88:cc:72:ff:6f:b8:a1:c9:a1:57:5b:a9:a9:8a: 31:4c:0d:55:54:4f:07:e8:b0:06:60:a9:90:81:ed:6b:2d:dc: 17:6c:ed:9c:38:f0:ec:1a:d8:e3:69:04:b6:ba:da:32:06:f1: d3:5a:3e:c4:bd:00:ed:10:50:fd:03:18:02:f4:bc:79:e4:7e: c9:6a:34:de:f8:5a:f4:50:14:e2:4e:a3:c4:b6:e9:a3:88:d9: 34:99:9e:8c:de:ce:cf:61:08:03:90:98:c1:42:26:8e:02:26: a0:9a:22:d9:d6:04:be:1b:b7:e6:2f:8b:8e:59:a8:5d:da:a9: 1a:dd:1c:27 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBfQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDAyMjkw MTM1NDJaFw0yNTAyMTQwMTMwMDNaMDMxMTAvBgNVBAMTKDk3MTM1RTY0MzdFMzc4 QTE1NzJBODQ2QjZCRkJFQjIyQTMyNjg3QTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDWnX8GsnLiI+dDV1x9llRUa2Ecv/S5GnvE+YelzGqy5iV/Iv8w yAj1Ztdt1jHRMnPTxrDT/M+5tzFXvYC1LKWnVqar8ovgoZGcZkLg0giMtCbY5RuO CWWI7eB0+NZYzRjjT2uVmxx8zP0kZktW4XHuubHCFyg6EQtcLpKENvUxcevJ3ZMF LsmmyOHCd9ySnBz3bd1A16nQ6YT0SsRuXMgXo3rKtk3eelRd5qzjpbbMQK2aVsLi xlVCFYDO995yDqohcsyYdvymjsxtCLZ3ILLDN4jpozs4bJVpJ6TmLDDm7FGg4qZu fFypsGvma5RrWjTHo64MCxr/xlo4dx5hbeO3AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUlxNeZDfjeKFXKoRra/vrIqMmh6kwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2x4TmVaRGZqZUtGWEtvUnJhX3ZySXFNbWg2ay5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAxYQAwDQYJKoZIhvcNAQELBQADggEBAMn6dZcmGzFwHBXdgytM6wefvZaQ KoCHVHQqumnmEBafeMFsHtzuihOUhjkMgNZJYMc9pEhkJlRpG2kh7gL4JD4qugls ALPGe6uzZYNBCrrXvlxS0HiEQCCEhNp/m50AdrzibOURHOafuh0p6kBppFjfYvV8 yVWF+WLueRHdVD/X//iIzHL/b7ihyaFXW6mpijFMDVVUTwfosAZgqZCB7Wst3Bds 7Zw48Owa2ONpBLa62jIG8dNaPsS9AO0QUP0DGAL0vHnkfslqNN74WvRQFOJOo8S2 6aOI2TSZnozezs9hCAOQmMFCJo4CJqCaItnWBL4bt+Yvi45ZqF3aqRrdHCc= -----END CERTIFICATE-----Generated at Sat Jun 1 13:38:48 2024 by rpki-client on console-fra.rpki-client.org