$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/nuqY7Kiq7UguN4WQG4e9EJxDxVE.roa File: nuqY7Kiq7UguN4WQG4e9EJxDxVE.roa (raw, json) Hash identifier: fAIfIgC8Nr31rW5aJffD6E9f1epF7lQJ1IB1MxgfUPE= Subject key identifier: 9E:EA:98:EC:A8:AA:ED:48:2E:37:85:90:1B:87:BD:10:9C:43:C5:51 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 07CF Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/nuqY7Kiq7UguN4WQG4e9EJxDxVE.roa Signing time: Tue 30 Apr 2024 02:08:52 +0000 ROA not before: Tue 30 Apr 2024 02:08:52 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 49.105.80.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1999 (0x7cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 30 02:08:52 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=9EEA98ECA8AAED482E3785901B87BD109C43C551 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:fb:ff:93:26:21:42:a8:45:5b:7a:1f:da:2f: a7:96:f6:2f:f9:e9:a6:46:cf:08:03:bf:e8:1d:de: 89:7e:90:39:de:71:41:78:2a:6c:90:b9:29:ad:4f: 47:d5:1a:c4:2e:ea:30:35:17:1d:44:d1:8f:49:e1: d8:34:63:b2:1e:a8:5d:28:f2:fd:42:1e:4f:1b:01: a7:34:04:80:96:d8:d7:4f:55:d0:d1:e2:e8:31:10: b3:11:4f:08:e0:cb:23:dc:d6:87:6f:3e:3f:25:66: 8c:21:18:68:e1:43:60:0a:54:75:a1:f1:2c:bb:13: 00:0e:25:15:76:25:92:75:4f:16:04:34:1b:36:a5: 00:07:27:f6:74:88:17:39:52:b4:27:4b:ee:a6:c0: e5:aa:61:d7:e3:3d:04:6a:40:61:f4:3b:09:44:b7: 04:30:f8:4d:74:e2:4c:48:c5:6e:a1:a8:5f:db:78: b5:da:a2:29:35:6a:a5:01:bf:9d:42:ba:83:5c:ef: 7f:bb:65:f8:e1:36:25:73:3c:8e:f5:0a:fd:25:99: 22:1f:fe:19:98:85:40:2c:3c:5f:ab:78:3d:8c:cd: e2:86:81:0d:36:92:90:11:6b:7b:3a:32:0a:ec:d8: ac:76:29:fd:19:94:b1:f0:0f:a2:5f:2d:79:93:db: 7d:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:EA:98:EC:A8:AA:ED:48:2E:37:85:90:1B:87:BD:10:9C:43:C5:51 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/nuqY7Kiq7UguN4WQG4e9EJxDxVE.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.105.80.0/23 Signature Algorithm: sha256WithRSAEncryption 49:2c:d4:fe:16:f8:c3:fb:99:49:fe:1f:71:7d:17:41:b9:ed: 01:a0:17:97:b5:77:eb:c1:2e:17:dd:a1:1e:69:59:a9:72:5a: d3:2e:d1:47:e4:c8:b4:b3:4a:ce:05:18:6f:3e:8a:10:8d:c2: d8:f2:19:6e:46:a5:cd:a9:7e:a0:3d:7a:5e:11:45:d0:a1:f7: 70:44:22:a5:79:21:09:51:a4:62:5a:42:ed:b0:3d:35:86:9e: 90:d5:d0:a0:1c:92:fa:f2:55:38:7c:e3:df:79:5a:5d:48:51: 3c:4e:68:44:58:75:2d:e1:2f:d1:27:f7:39:94:e3:7f:d2:ce: 77:cf:c9:c7:97:fa:c0:f0:b9:5a:6d:43:c3:1e:88:b3:04:1d: 10:e0:19:3c:b4:8a:c2:f0:07:7b:32:32:3a:56:44:2b:af:e0: 37:2f:3e:19:ed:7a:30:0b:3e:fb:79:e9:ef:37:e8:23:25:6f: c6:c0:d5:58:37:10:f1:cb:f0:c9:fe:c3:dc:11:c9:6c:73:29: 76:4e:8e:5b:e3:60:ce:21:b0:62:7a:ce:a2:b5:9a:1b:1d:1e: db:c7:fc:a4:25:5c:65:c7:28:84:5c:b4:3a:10:e9:73:87:13: ba:d3:97:9f:be:89:30:90:50:79:9f:62:99:33:e3:96:95:b1: cc:5c:cd:fe -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICB88wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw MjA4NTJaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDlFRUE5OEVDQThBQUVE NDgyRTM3ODU5MDFCODdCRDEwOUM0M0M1NTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDO+/+TJiFCqEVbeh/aL6eW9i/56aZGzwgDv+gd3ol+kDnecUF4 KmyQuSmtT0fVGsQu6jA1Fx1E0Y9J4dg0Y7IeqF0o8v1CHk8bAac0BICW2NdPVdDR 4ugxELMRTwjgyyPc1odvPj8lZowhGGjhQ2AKVHWh8Sy7EwAOJRV2JZJ1TxYENBs2 pQAHJ/Z0iBc5UrQnS+6mwOWqYdfjPQRqQGH0OwlEtwQw+E104kxIxW6hqF/beLXa oik1aqUBv51CuoNc73+7ZfjhNiVzPI71Cv0lmSIf/hmYhUAsPF+reD2MzeKGgQ02 kpARa3s6Mgrs2Kx2Kf0ZlLHwD6JfLXmT231zAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUnuqY7Kiq7UguN4WQG4e9EJxDxVEwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L251cVk3S2lxN1VndU40V1FHNGU5RUp4RHhWRS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExaVAwDQYJKoZIhvcNAQELBQADggEBAEks1P4W+MP7mUn+H3F9F0G57QGg F5e1d+vBLhfdoR5pWalyWtMu0UfkyLSzSs4FGG8+ihCNwtjyGW5Gpc2pfqA9el4R RdCh93BEIqV5IQlRpGJaQu2wPTWGnpDV0KAckvryVTh84995Wl1IUTxOaERYdS3h L9En9zmU43/SznfPyceX+sDwuVptQ8MeiLMEHRDgGTy0isLwB3syMjpWRCuv4Dcv PhntejALPvt56e836CMlb8bA1Vg3EPHL8Mn+w9wRyWxzKXZOjlvjYM4hsGJ6zqK1 mhsdHtvH/KQlXGXHKIRctDoQ6XOHE7rTl5++iTCQUHmfYpkz45aVscxczf4= -----END CERTIFICATE-----Generated at Sat Jun 1 13:38:48 2024 by rpki-client on console-fra.rpki-client.org