$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/nQsY1wybvJ3tKbQ9EGVT5A-DcSM.roa File: nQsY1wybvJ3tKbQ9EGVT5A-DcSM.roa (raw, json) Hash identifier: OP2MwqeSofoeHu29sv5wajxt7sqReVQNYgK/x9dwt9w= Subject key identifier: 9D:0B:18:D7:0C:9B:BC:9D:ED:29:B4:3D:10:65:53:E4:0F:83:71:23 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0795 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/nQsY1wybvJ3tKbQ9EGVT5A-DcSM.roa Signing time: Tue 30 Apr 2024 02:04:49 +0000 ROA not before: Tue 30 Apr 2024 02:04:49 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 49.103.16.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:41:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1941 (0x795) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 30 02:04:49 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=9D0B18D70C9BBC9DED29B43D106553E40F837123 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:64:d0:ea:46:6a:4a:0a:97:95:60:6b:97:54: 89:ae:ee:06:1d:26:bb:51:c0:0f:84:53:c0:f0:97: bc:a2:ea:e1:e4:e8:dc:1f:5d:01:1e:00:c5:76:81: 7c:33:2c:80:23:61:7f:67:65:05:84:d2:39:1d:7a: cd:ae:8a:59:b2:00:03:18:46:1a:6e:af:c7:7c:36: 85:06:69:70:c2:59:cd:89:0d:f5:39:e7:50:7d:64: ae:2d:66:0f:55:18:b8:7c:77:21:f3:6b:43:97:b5: b9:cd:a0:7b:ed:f3:1a:0f:dc:57:c7:d4:d0:81:ad: eb:52:98:0a:d5:4a:3f:43:00:5c:f9:d3:57:99:c6: 4b:34:1d:2e:6d:a3:04:c8:7e:3c:68:2a:a4:9d:88: 98:58:25:f7:aa:06:e8:46:86:1f:6f:c0:b0:e4:8f: 07:bf:64:48:a4:37:8e:ec:72:dc:aa:7b:77:69:e5: 54:99:73:99:af:d7:b4:db:07:02:86:5a:16:96:6e: ff:73:ca:7f:02:ff:dc:68:ab:b5:ed:91:93:3c:9e: 1c:e8:be:5f:2f:cd:ee:1e:b6:b1:7b:35:ca:ba:05: 15:56:c2:d5:a7:46:4c:af:60:e9:fb:04:79:7d:e9: 3b:72:f9:26:99:21:b0:ed:25:18:54:4b:7b:ac:09: 3e:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:0B:18:D7:0C:9B:BC:9D:ED:29:B4:3D:10:65:53:E4:0F:83:71:23 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/nQsY1wybvJ3tKbQ9EGVT5A-DcSM.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.103.16.0/23 Signature Algorithm: sha256WithRSAEncryption 50:d0:af:c3:06:d5:99:ed:64:0f:19:38:d8:46:c8:5f:4d:1b: f4:e6:71:39:c9:72:75:f1:96:3d:b5:10:a7:1a:e3:8d:e4:a8: 60:d1:cd:ff:93:95:12:82:c0:df:e7:2e:49:20:1f:8b:2f:f8: 52:ed:5a:95:4c:e8:b9:85:ae:4e:b5:fd:ab:50:a2:a3:4a:eb: 18:ba:7f:e7:d4:6a:6b:df:32:02:09:0e:4c:74:75:6e:f1:6c: cb:86:18:ad:7c:7f:30:db:58:67:8c:42:d8:fb:01:c0:7b:bb: 41:fc:7f:9b:d5:2b:4a:ba:2d:97:e7:d6:40:13:3a:80:83:ea: 43:80:34:3a:da:f8:ea:12:90:70:4d:e1:c5:23:70:13:bd:92: e1:ae:c5:12:32:4e:35:f7:ef:e0:9e:c8:ad:93:20:9d:7c:2a: 21:c6:fb:d6:97:d2:8d:ba:34:81:88:12:05:cc:81:ad:f5:07: b0:55:ff:54:b4:ad:0c:1f:ff:78:ff:49:ab:57:a9:45:88:53: 92:71:c7:41:40:46:ee:9a:4b:18:9a:59:e4:44:9d:8a:0a:8a: 9c:41:de:95:f1:2b:41:8e:c0:2e:da:f7:b6:aa:f5:4e:a7:dc: 10:fa:75:eb:2d:96:cc:f0:e6:c4:34:0a:4a:9b:74:c1:7e:b0: 19:22:08:09 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICB5UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw MjA0NDlaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDlEMEIxOEQ3MEM5QkJD OURFRDI5QjQzRDEwNjU1M0U0MEY4MzcxMjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDRZNDqRmpKCpeVYGuXVImu7gYdJrtRwA+EU8Dwl7yi6uHk6Nwf XQEeAMV2gXwzLIAjYX9nZQWE0jkdes2uilmyAAMYRhpur8d8NoUGaXDCWc2JDfU5 51B9ZK4tZg9VGLh8dyHza0OXtbnNoHvt8xoP3FfH1NCBretSmArVSj9DAFz501eZ xks0HS5towTIfjxoKqSdiJhYJfeqBuhGhh9vwLDkjwe/ZEikN47sctyqe3dp5VSZ c5mv17TbBwKGWhaWbv9zyn8C/9xoq7XtkZM8nhzovl8vze4etrF7Ncq6BRVWwtWn RkyvYOn7BHl96Tty+SaZIbDtJRhUS3usCT4JAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUnQsY1wybvJ3tKbQ9EGVT5A+DcSMwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L25Rc1kxd3lidkozdEtiUTlFR1ZUNUEtRGNTTS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExZxAwDQYJKoZIhvcNAQELBQADggEBAFDQr8MG1ZntZA8ZONhGyF9NG/Tm cTnJcnXxlj21EKca443kqGDRzf+TlRKCwN/nLkkgH4sv+FLtWpVM6LmFrk61/atQ oqNK6xi6f+fUamvfMgIJDkx0dW7xbMuGGK18fzDbWGeMQtj7AcB7u0H8f5vVK0q6 LZfn1kATOoCD6kOANDra+OoSkHBN4cUjcBO9kuGuxRIyTjX37+CeyK2TIJ18KiHG +9aX0o26NIGIEgXMga31B7BV/1S0rQwf/3j/SatXqUWIU5Jxx0FARu6aSxiaWeRE nYoKipxB3pXxK0GOwC7a97aq9U6n3BD6destlszw5sQ0CkqbdMF+sBkiCAk= -----END CERTIFICATE-----Generated at Fri Nov 22 15:24:02 2024 by rpki-client on console-fra.rpki-client.org