$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/nHiuYYgDfTjiyTMOCPK2cPIhbKM.roa File: nHiuYYgDfTjiyTMOCPK2cPIhbKM.roa (raw, json) Hash identifier: YGRLvRjcpTL2p5waFLo1MOUX0LyTrWD/prZ3rWr2mIY= Subject key identifier: 9C:78:AE:61:88:03:7D:38:E2:C9:33:0E:08:F2:B6:70:F2:21:6C:A3 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0644 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/nHiuYYgDfTjiyTMOCPK2cPIhbKM.roa Signing time: Tue 30 Apr 2024 01:31:29 +0000 ROA not before: Tue 30 Apr 2024 01:31:29 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 49.98.44.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1604 (0x644) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 30 01:31:29 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=9C78AE6188037D38E2C9330E08F2B670F2216CA3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:18:02:32:db:39:39:bd:c2:1b:54:b7:21:7b: c1:eb:68:55:61:2e:b2:d4:2e:5c:db:9e:9c:c7:27: 64:9e:9b:2f:a0:49:3d:c7:f0:b9:ef:6d:a1:44:06: 57:ca:0e:30:72:af:ab:7c:f2:94:04:3d:71:d4:0b: 6f:cc:ef:7b:25:00:56:99:c2:2c:00:be:4d:7d:04: 25:12:0b:b1:70:87:a5:f4:e1:b3:39:24:e3:3c:9d: ca:d0:cb:ef:7c:62:b1:bc:a8:94:98:89:78:f5:bd: 50:d5:15:32:74:77:3d:87:1b:ae:4a:e6:95:62:60: 08:0a:45:f7:04:84:37:fa:ef:a0:cc:9f:36:a5:b0: 06:92:a9:10:3c:03:a9:2d:2f:aa:b1:ab:c1:34:88: 15:aa:dc:d3:d8:6b:db:85:ea:78:59:af:17:4e:b1: ef:fd:15:d2:e5:12:25:d8:37:13:a2:bd:2a:a5:df: 6e:af:62:aa:10:14:0f:04:85:f9:39:87:92:6c:27: 0c:b5:ce:be:5b:55:6f:65:3a:4e:ef:f9:42:5f:6a: 69:61:df:5b:fd:b3:41:bf:8e:58:fc:0a:e1:f5:1e: 6b:87:db:73:fc:3d:ec:26:96:be:28:ab:e2:45:d3: d7:eb:0e:95:03:00:87:17:e5:b4:c8:72:72:69:db: 5a:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:78:AE:61:88:03:7D:38:E2:C9:33:0E:08:F2:B6:70:F2:21:6C:A3 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/nHiuYYgDfTjiyTMOCPK2cPIhbKM.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.98.44.0/22 Signature Algorithm: sha256WithRSAEncryption 70:4c:a2:44:dd:cc:8d:f4:47:2c:83:9f:31:83:e5:bf:20:77: eb:a2:68:48:f2:d9:fc:97:f6:91:d2:ba:31:1b:10:37:54:b4: c6:04:dd:76:fe:83:89:e2:82:b1:29:f8:cb:1f:cb:eb:4d:5d: 07:24:22:a1:e1:3c:f4:73:64:82:53:5d:49:1d:68:5e:05:a3: 57:e1:de:e0:6a:94:72:66:2a:84:5c:1d:22:39:01:2b:68:39: 9e:68:88:a7:ea:a8:54:9d:c5:e8:16:f2:90:cd:83:c5:3a:03: b9:95:23:fe:11:d5:ac:f1:80:4c:c8:60:56:05:5b:b5:30:8f: 18:dd:aa:6b:ae:f0:6a:38:95:9d:dd:22:80:e1:52:64:b6:61: d7:a5:37:24:fa:4e:a4:e8:f2:e0:c6:0a:43:1a:c7:83:d8:59: d9:77:8c:3a:2d:cf:f2:1d:11:74:e4:5d:cc:c2:fd:21:97:42: 72:7a:51:fa:01:7c:5f:8a:41:d2:80:60:34:1d:de:05:ac:28: 65:d7:12:0b:e4:9c:eb:25:c8:92:d8:13:f9:4a:83:ba:a9:75: 73:a1:46:43:18:1b:d7:63:b7:d6:00:74:fa:5b:8b:2b:cc:70: ba:fe:26:90:2a:e0:b3:f0:ba:f3:c8:71:91:38:86:67:6a:12: 30:fc:a6:d7 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBkQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw MTMxMjlaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDlDNzhBRTYxODgwMzdE MzhFMkM5MzMwRTA4RjJCNjcwRjIyMTZDQTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDXGAIy2zk5vcIbVLche8HraFVhLrLULlzbnpzHJ2Semy+gST3H 8LnvbaFEBlfKDjByr6t88pQEPXHUC2/M73slAFaZwiwAvk19BCUSC7Fwh6X04bM5 JOM8ncrQy+98YrG8qJSYiXj1vVDVFTJ0dz2HG65K5pViYAgKRfcEhDf676DMnzal sAaSqRA8A6ktL6qxq8E0iBWq3NPYa9uF6nhZrxdOse/9FdLlEiXYNxOivSql326v YqoQFA8Ehfk5h5JsJwy1zr5bVW9lOk7v+UJfamlh31v9s0G/jlj8CuH1HmuH23P8 Pewmlr4oq+JF09frDpUDAIcX5bTIcnJp21qLAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUnHiuYYgDfTjiyTMOCPK2cPIhbKMwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L25IaXVZWWdEZlRqaXlUTU9DUEsyY1BJaGJLTS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIxYiwwDQYJKoZIhvcNAQELBQADggEBAHBMokTdzI30RyyDnzGD5b8gd+ui aEjy2fyX9pHSujEbEDdUtMYE3Xb+g4nigrEp+Msfy+tNXQckIqHhPPRzZIJTXUkd aF4Fo1fh3uBqlHJmKoRcHSI5AStoOZ5oiKfqqFSdxegW8pDNg8U6A7mVI/4R1azx gEzIYFYFW7Uwjxjdqmuu8Go4lZ3dIoDhUmS2YdelNyT6TqTo8uDGCkMax4PYWdl3 jDotz/IdEXTkXczC/SGXQnJ6UfoBfF+KQdKAYDQd3gWsKGXXEgvknOslyJLYE/lK g7qpdXOhRkMYG9djt9YAdPpbiyvMcLr+JpAq4LPwuvPIcZE4hmdqEjD8ptc= -----END CERTIFICATE-----Generated at Sat Jun 1 15:54:32 2024 by rpki-client on console-ams.rpki-client.org