$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/mdMHlPdaWYQ2N12DsXf-Yg3kSno.roa File: mdMHlPdaWYQ2N12DsXf-Yg3kSno.roa (raw, json) Hash identifier: 11j+Sx8jmCGyl9WKGmD2w8pW4c3wyuHPPlP2kY1+Mdg= Subject key identifier: 99:D3:07:94:F7:5A:59:84:36:37:5D:83:B1:77:FE:62:0D:E4:4A:7A Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 090D Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/mdMHlPdaWYQ2N12DsXf-Yg3kSno.roa Signing time: Tue 30 Apr 2024 02:28:42 +0000 ROA not before: Tue 30 Apr 2024 02:28:42 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 49.96.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2317 (0x90d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 30 02:28:42 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=99D30794F75A598436375D83B177FE620DE44A7A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:48:11:cf:87:7f:77:8d:2c:cd:f7:e3:4d:7e: 87:e9:16:36:20:72:b9:b0:e2:36:71:66:f5:c4:d7: e1:52:33:ef:b6:3b:e7:52:e8:bf:3f:29:96:71:45: 17:90:63:d8:04:33:9c:c6:7e:0e:0d:1e:14:1a:0f: 16:f3:6b:4e:c5:b5:40:61:be:0e:68:c5:c3:8f:28: 83:1a:eb:1c:46:5a:9f:3b:06:69:14:06:3f:84:1d: c4:fa:32:9f:11:a7:73:e3:b4:5c:97:0c:a6:f0:5d: 6f:ff:79:b8:4c:30:f2:49:e4:f2:23:d2:0b:0f:68: a9:d2:a6:af:6f:7a:92:c4:40:6e:56:b4:4c:21:9d: 26:40:f8:c3:dd:a7:d0:34:6c:b3:db:04:05:17:c2: 16:19:98:4f:81:8a:0c:a9:68:39:93:05:6f:f7:5f: 94:ed:d2:53:dc:81:12:b6:fe:30:86:ba:1e:ad:f7: b3:dd:b0:82:ac:12:a9:08:fe:8b:52:5e:6d:e1:7a: 05:9c:10:9a:11:51:d2:b6:98:cc:00:de:f3:87:b5: 84:03:f6:52:93:0f:98:ad:9c:bd:29:19:c2:8c:c8: e7:e2:9a:70:77:70:d9:c7:55:5d:1a:59:2c:40:cb: 53:08:61:b6:d7:4f:ae:6a:de:d6:ae:35:e1:0d:c8: 4f:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:D3:07:94:F7:5A:59:84:36:37:5D:83:B1:77:FE:62:0D:E4:4A:7A X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/mdMHlPdaWYQ2N12DsXf-Yg3kSno.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.96.19.0/24 Signature Algorithm: sha256WithRSAEncryption db:d5:45:35:c4:33:8d:90:b2:b5:1f:9d:06:fb:25:23:b0:fd: 07:42:45:02:26:e5:b5:6f:d6:5c:b7:8e:71:4c:b8:76:03:0c: df:58:cb:92:b4:a3:fe:2c:3e:25:3f:ee:c6:b5:e7:5f:8c:14: 01:ce:c3:3b:c2:86:b3:fb:51:6c:8e:e6:3a:d0:21:6b:15:95: aa:bb:7c:de:62:30:05:33:8f:e3:79:01:3d:a7:ef:6c:95:a5: ba:49:57:95:87:e7:01:16:2e:73:d0:75:28:00:2d:d4:a6:fd: 29:65:26:82:28:8d:85:a4:34:24:f7:03:54:2c:c9:45:4b:ad: 14:df:5c:bb:8e:67:33:ee:bf:0a:bd:bc:4f:6e:53:e5:44:da: 37:fb:10:35:33:a9:85:35:4e:18:cf:07:c2:c8:a7:1f:f1:ad: 67:1e:13:f8:7c:9a:fe:3e:83:68:4d:50:5a:ba:f8:62:4a:bc: e4:cc:7e:c1:81:4d:5b:6d:49:3a:38:88:15:cb:90:db:a9:53: c3:9b:46:21:97:4b:e0:a2:29:84:21:94:0d:e9:75:68:42:95: 57:ba:90:6b:8c:1c:2d:79:1c:30:77:8f:b8:b8:59:a6:84:47: aa:d8:94:ca:37:2c:bd:24:4f:f8:c8:5e:65:75:43:cd:1a:7d: 6a:1a:e0:75 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCQ0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw MjI4NDJaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDk5RDMwNzk0Rjc1QTU5 ODQzNjM3NUQ4M0IxNzdGRTYyMERFNDRBN0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC8SBHPh393jSzN9+NNfofpFjYgcrmw4jZxZvXE1+FSM++2O+dS 6L8/KZZxRReQY9gEM5zGfg4NHhQaDxbza07FtUBhvg5oxcOPKIMa6xxGWp87BmkU Bj+EHcT6Mp8Rp3PjtFyXDKbwXW//ebhMMPJJ5PIj0gsPaKnSpq9vepLEQG5WtEwh nSZA+MPdp9A0bLPbBAUXwhYZmE+BigypaDmTBW/3X5Tt0lPcgRK2/jCGuh6t97Pd sIKsEqkI/otSXm3hegWcEJoRUdK2mMwA3vOHtYQD9lKTD5itnL0pGcKMyOfimnB3 cNnHVV0aWSxAy1MIYbbXT65q3tauNeENyE9VAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUmdMHlPdaWYQ2N12DsXf+Yg3kSnowHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L21kTUhsUGRhV1lRMk4xMkRzWGYtWWcza1Nuby5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAxYBMwDQYJKoZIhvcNAQELBQADggEBANvVRTXEM42QsrUfnQb7JSOw/QdC RQIm5bVv1ly3jnFMuHYDDN9Yy5K0o/4sPiU/7sa151+MFAHOwzvChrP7UWyO5jrQ IWsVlaq7fN5iMAUzj+N5AT2n72yVpbpJV5WH5wEWLnPQdSgALdSm/SllJoIojYWk NCT3A1QsyUVLrRTfXLuOZzPuvwq9vE9uU+VE2jf7EDUzqYU1ThjPB8LIpx/xrWce E/h8mv4+g2hNUFq6+GJKvOTMfsGBTVttSTo4iBXLkNupU8ObRiGXS+CiKYQhlA3p dWhClVe6kGuMHC15HDB3j7i4WaaER6rYlMo3LL0kT/jIXmV1Q80afWoa4HU= -----END CERTIFICATE-----Generated at Sat Jun 1 15:54:32 2024 by rpki-client on console-ams.rpki-client.org