$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/maNyz4MUjtwDG_EJHGG8G99yTEk.roa File: maNyz4MUjtwDG_EJHGG8G99yTEk.roa (raw, json) Hash identifier: B/hvGZRT76A47506jiNkbGDUJNzD3O2ELAaxAjGP9ws= Subject key identifier: 99:A3:72:CF:83:14:8E:DC:03:1B:F1:09:1C:61:BC:1B:DF:72:4C:49 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0883 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/maNyz4MUjtwDG_EJHGG8G99yTEk.roa Signing time: Tue 30 Apr 2024 02:20:30 +0000 ROA not before: Tue 30 Apr 2024 02:20:30 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 49.98.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 22:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2179 (0x883) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 30 02:20:30 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=99A372CF83148EDC031BF1091C61BC1BDF724C49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:04:38:87:d8:40:58:0f:32:92:3b:fd:e1:13: de:22:4b:78:b4:c5:d2:c2:e0:af:4e:e4:0d:ea:c4: 90:9a:5d:31:b0:c7:40:9d:76:1d:b9:38:44:01:20: 3d:0c:9c:d7:eb:2f:1d:1c:bc:8c:75:18:9e:31:65: 3c:2f:ca:67:03:c2:5d:48:fc:97:00:d0:08:b1:6c: af:ed:83:9a:7d:77:56:7a:12:b4:dd:da:64:9d:b2: 0c:d4:7e:04:9b:71:3f:49:ba:31:79:01:6a:dd:f7: 34:84:b2:80:b3:a6:7d:09:a0:e6:48:7d:9b:34:b9: 9a:ca:28:e8:8b:9a:1a:d1:85:36:d4:b2:fa:72:79: ca:f4:00:a3:36:06:7d:81:9a:05:cb:43:bc:32:ef: eb:3c:da:47:26:ba:96:9c:60:09:2b:79:de:1a:55: 30:ab:93:50:e1:dc:c7:29:4d:31:a6:28:f3:81:43: 5a:91:a5:6b:52:b4:f7:a9:ec:4c:99:de:af:9b:a0: 5f:87:c8:37:7e:01:0d:98:7e:0c:85:6c:49:3e:e4: 73:02:83:b4:e3:e3:0c:b8:ae:68:82:3a:45:0d:99: ec:e6:71:bc:4a:c3:58:f6:a7:ec:c1:78:3a:de:e1: a3:58:21:6f:87:9f:c8:cf:95:cf:6d:fd:f1:0c:1b: dc:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:A3:72:CF:83:14:8E:DC:03:1B:F1:09:1C:61:BC:1B:DF:72:4C:49 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/maNyz4MUjtwDG_EJHGG8G99yTEk.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.98.212.0/22 Signature Algorithm: sha256WithRSAEncryption 33:39:87:13:16:97:68:e5:f6:77:a0:92:e3:72:98:df:5b:24: 55:a4:56:ef:e6:57:e4:1e:4b:34:85:a8:53:a4:ba:52:cc:70: a8:c6:c1:f7:b7:78:9a:d4:6c:c5:17:e2:f0:6a:1d:8e:89:f0: a1:8b:5f:39:50:1f:6e:ba:0b:1d:1d:b7:6e:30:4b:0a:cb:64: cf:4c:5f:00:df:fb:9d:8f:85:96:71:f5:c2:7b:b5:ec:71:82: cc:3c:0e:c5:5d:e0:4d:f1:dc:7f:f3:82:fd:79:53:6d:5a:3b: 03:a8:3b:ef:66:93:08:3e:b1:50:61:0f:62:fc:8e:16:f6:02: 17:7f:84:ac:e8:90:81:77:cb:85:a6:67:dd:b7:9e:9a:2d:ba: 41:80:b9:7d:48:2a:28:d2:4c:43:18:1f:1b:ae:bf:2d:09:3d: 7b:7e:55:9a:54:cc:91:d5:7f:97:28:30:4d:c3:64:7a:a6:ab: 04:bc:e8:00:85:8f:d4:ef:6c:97:a4:ea:fe:3a:55:39:2f:4f: dd:7a:f8:6f:31:33:bb:4c:f0:b3:e5:ed:65:3e:32:24:1d:32: ec:15:a3:05:a9:16:b3:84:34:d7:b4:e9:16:22:f3:69:22:92: 89:bb:fb:91:16:8b:e4:df:9c:3b:65:a5:ec:dc:30:57:d1:86: a2:ee:38:42 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCIMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw MjIwMzBaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDk5QTM3MkNGODMxNDhF REMwMzFCRjEwOTFDNjFCQzFCREY3MjRDNDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC7BDiH2EBYDzKSO/3hE94iS3i0xdLC4K9O5A3qxJCaXTGwx0Cd dh25OEQBID0MnNfrLx0cvIx1GJ4xZTwvymcDwl1I/JcA0AixbK/tg5p9d1Z6ErTd 2mSdsgzUfgSbcT9JujF5AWrd9zSEsoCzpn0JoOZIfZs0uZrKKOiLmhrRhTbUsvpy ecr0AKM2Bn2BmgXLQ7wy7+s82kcmupacYAkred4aVTCrk1Dh3McpTTGmKPOBQ1qR pWtStPep7EyZ3q+boF+HyDd+AQ2YfgyFbEk+5HMCg7Tj4wy4rmiCOkUNmezmcbxK w1j2p+zBeDre4aNYIW+Hn8jPlc9t/fEMG9w3AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUmaNyz4MUjtwDG/EJHGG8G99yTEkwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L21hTnl6NE1VanR3REdfRUpIR0c4Rzk5eVRFay5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIxYtQwDQYJKoZIhvcNAQELBQADggEBADM5hxMWl2jl9negkuNymN9bJFWk Vu/mV+QeSzSFqFOkulLMcKjGwfe3eJrUbMUX4vBqHY6J8KGLXzlQH266Cx0dt24w SwrLZM9MXwDf+52PhZZx9cJ7texxgsw8DsVd4E3x3H/zgv15U21aOwOoO+9mkwg+ sVBhD2L8jhb2Ahd/hKzokIF3y4WmZ923npotukGAuX1IKijSTEMYHxuuvy0JPXt+ VZpUzJHVf5coME3DZHqmqwS86ACFj9TvbJek6v46VTkvT916+G8xM7tM8LPl7WU+ MiQdMuwVowWpFrOENNe06RYi82kikom7+5EWi+TfnDtlpezcMFfRhqLuOEI= -----END CERTIFICATE-----Generated at Mon Nov 25 23:54:42 2024 by rpki-client on console-ams.rpki-client.org