$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ng0ssjvHROAnTetURD7v8KRCuOM.roa File: ng0ssjvHROAnTetURD7v8KRCuOM.roa (raw, json) Hash identifier: HXC60Qpx5zmspsq9/GB5Q+aTWSEDuabChNLZFJBalJk= Subject key identifier: 9E:0D:2C:B2:3B:C7:44:E0:27:4D:EB:54:44:3E:EF:F0:A4:42:B8:E3 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 060F Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ng0ssjvHROAnTetURD7v8KRCuOM.roa Signing time: Thu 29 Feb 2024 01:38:28 +0000 ROA not before: Thu 29 Feb 2024 01:38:28 +0000 ROA not after: Fri 14 Feb 2025 01:30:03 +0000 asID: 9605 IP address blocks: 49.102.168.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 23 Jun 2024 14:09:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1551 (0x60f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Feb 29 01:38:28 2024 GMT Not After : Feb 14 01:30:03 2025 GMT Subject: CN=9E0D2CB23BC744E0274DEB54443EEFF0A442B8E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ef:8d:24:df:ea:ab:89:d7:1b:0e:ff:ad:74: cc:3d:4f:d0:eb:2a:bd:58:c4:7a:be:52:81:4a:bd: 23:c9:f6:85:f5:95:b1:39:8b:1d:c3:7e:d7:f2:81: 4c:ee:cb:a6:5e:e5:43:63:78:be:9a:b4:43:59:9b: 87:4a:f5:61:58:f2:f7:48:a3:b3:05:36:8a:36:8d: 34:9b:10:17:ac:89:53:c6:f3:63:78:4d:70:c6:81: 51:0a:7f:90:a3:45:06:36:0d:30:d3:fe:56:c5:71: b9:60:22:86:6b:ee:38:b2:a8:1e:59:db:a0:9f:e4: ef:79:34:df:0f:04:a7:89:76:ee:b6:ad:c5:c0:1b: 5f:cd:aa:9f:20:12:d8:25:ab:83:69:56:6b:64:fc: bc:d9:b7:a1:94:26:e0:46:4f:ed:67:18:f9:85:a4: 59:33:ce:a0:e6:1a:c0:3e:86:95:dc:6b:57:30:50: 93:5f:49:8e:94:0b:b7:45:e8:70:14:e4:a8:86:15: aa:45:d9:c9:65:23:5e:3b:c2:97:bd:73:48:c4:4b: 1e:3e:80:1d:af:68:c8:cc:41:8d:24:3a:a8:f1:c7: 65:ed:15:e1:01:68:cf:25:b2:66:11:7c:be:d0:d4: eb:c1:8e:c5:b7:3a:7c:e3:5b:f7:6f:bc:a6:cf:6d: bf:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:0D:2C:B2:3B:C7:44:E0:27:4D:EB:54:44:3E:EF:F0:A4:42:B8:E3 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ng0ssjvHROAnTetURD7v8KRCuOM.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.102.168.0/21 Signature Algorithm: sha256WithRSAEncryption 47:72:16:d4:33:c7:b8:27:9b:fc:6d:3e:3a:49:7a:7d:ee:f2: 87:34:2f:18:55:78:1b:e1:13:62:49:6e:eb:e6:29:fd:ce:43: a1:ad:3b:70:54:48:84:b7:4f:c9:f8:b5:f7:dd:29:42:a5:fe: b4:f9:cc:77:6a:33:a8:eb:18:a7:ae:ee:4f:15:1b:3c:02:17: 3b:03:22:81:dd:a3:41:c7:4b:27:59:07:d7:e9:19:74:2f:9e: 52:58:32:eb:38:d1:cc:9b:85:61:98:74:58:e8:b2:cd:05:ae: 86:ec:83:64:7f:da:ae:e6:03:8f:e2:56:39:20:a6:7d:5b:d2: a2:70:6e:a6:f7:bf:5a:78:6d:2c:29:03:1e:20:ac:3f:a5:22: 46:cf:f4:aa:21:a0:77:38:0c:d1:60:73:24:a5:81:18:8a:15: 66:a3:f3:79:55:b5:2b:c4:22:ca:38:65:13:4e:78:55:bd:05: 6d:24:48:d3:63:09:7e:92:45:69:26:35:17:96:9f:87:64:bd: 84:38:4c:f3:59:33:19:df:32:0e:33:96:f6:34:48:ae:ab:26: a3:0b:0b:91:05:04:b1:e6:c2:82:f7:66:7b:7a:90:03:9c:ed: c9:dd:33:90:dc:1d:06:b6:1e:ba:b9:52:50:2f:10:a2:20:42: a8:e2:a7:88 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBg8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDAyMjkw MTM4MjhaFw0yNTAyMTQwMTMwMDNaMDMxMTAvBgNVBAMTKDlFMEQyQ0IyM0JDNzQ0 RTAyNzRERUI1NDQ0M0VFRkYwQTQ0MkI4RTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDP740k3+qridcbDv+tdMw9T9DrKr1YxHq+UoFKvSPJ9oX1lbE5 ix3DftfygUzuy6Ze5UNjeL6atENZm4dK9WFY8vdIo7MFNoo2jTSbEBesiVPG82N4 TXDGgVEKf5CjRQY2DTDT/lbFcblgIoZr7jiyqB5Z26Cf5O95NN8PBKeJdu62rcXA G1/Nqp8gEtglq4NpVmtk/LzZt6GUJuBGT+1nGPmFpFkzzqDmGsA+hpXca1cwUJNf SY6UC7dF6HAU5KiGFapF2cllI147wpe9c0jESx4+gB2vaMjMQY0kOqjxx2XtFeEB aM8lsmYRfL7Q1OvBjsW3OnzjW/dvvKbPbb9pAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUng0ssjvHROAnTetURD7v8KRCuOMwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L25nMHNzanZIUk9BblRldFVSRDd2OEtSQ3VPTS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMxZqgwDQYJKoZIhvcNAQELBQADggEBAEdyFtQzx7gnm/xtPjpJen3u8oc0 LxhVeBvhE2JJbuvmKf3OQ6GtO3BUSIS3T8n4tffdKUKl/rT5zHdqM6jrGKeu7k8V GzwCFzsDIoHdo0HHSydZB9fpGXQvnlJYMus40cybhWGYdFjoss0Frobsg2R/2q7m A4/iVjkgpn1b0qJwbqb3v1p4bSwpAx4grD+lIkbP9KohoHc4DNFgcySlgRiKFWaj 83lVtSvEIso4ZRNOeFW9BW0kSNNjCX6SRWkmNReWn4dkvYQ4TPNZMxnfMg4zlvY0 SK6rJqMLC5EFBLHmwoL3Znt6kAOc7cndM5DcHQa2Hrq5UlAvEKIgQqjip4g= -----END CERTIFICATE-----Generated at Mon Jun 17 14:52:14 2024 by rpki-client on console-ams.rpki-client.org