$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/oCAc1d3YgxSyZQCyRBfReX5SixE.roa File: oCAc1d3YgxSyZQCyRBfReX5SixE.roa (raw, json) Hash identifier: lZJKTSJ8nmoZaa8FRuRZOEDIueHKuicabW5lfMfPDGg= Subject key identifier: A0:20:1C:D5:DD:D8:83:14:B2:65:00:B2:44:17:D1:79:7E:52:8B:11 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0863 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/oCAc1d3YgxSyZQCyRBfReX5SixE.roa Signing time: Tue 30 Apr 2024 02:18:23 +0000 ROA not before: Tue 30 Apr 2024 02:18:23 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 49.98.142.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2147 (0x863) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 30 02:18:23 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=A0201CD5DDD88314B26500B24417D1797E528B11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:e2:c3:0c:15:8a:f6:52:36:b9:62:16:94:a0: 89:ad:47:d9:2e:3e:89:3c:a3:d9:99:dc:4d:af:f3: c2:3b:73:e4:08:c1:25:5e:1a:39:27:ea:f3:e8:d1: 65:a8:97:2f:cb:f9:32:9e:af:20:19:5d:51:58:85: 4c:6b:7f:f6:7a:46:bc:52:39:c8:53:42:7a:2e:c7: 9a:45:ed:2d:a8:f0:d1:a7:25:36:40:dc:57:4b:7b: 68:95:67:aa:35:70:fe:0f:dd:6c:65:85:95:c0:ca: 5e:66:ba:8b:18:65:31:e0:e9:2a:fb:a4:ff:29:94: 87:90:f5:dd:2c:8b:45:13:99:b6:42:7c:4a:2f:ac: 34:60:76:2c:ee:b1:b5:58:a2:34:06:ff:6b:13:f4: 2f:27:12:50:d7:9c:7f:56:6d:49:2e:b7:ad:53:e7: b2:ae:df:84:ff:95:76:56:30:0f:89:36:54:22:8e: 1f:86:7f:0b:97:04:1f:4c:5e:7e:57:75:c9:35:42: 6c:58:c2:94:46:23:73:92:21:45:c7:02:1b:08:f6: cc:8d:e8:95:12:7e:01:22:68:9f:f9:5c:f5:37:d2: 5d:d8:a8:6e:72:e6:ce:df:64:56:2b:43:3d:bc:06: 86:8e:5f:06:84:91:64:55:bb:80:74:05:36:8e:a4: 22:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:20:1C:D5:DD:D8:83:14:B2:65:00:B2:44:17:D1:79:7E:52:8B:11 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/oCAc1d3YgxSyZQCyRBfReX5SixE.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.98.142.0/23 Signature Algorithm: sha256WithRSAEncryption 19:9e:2a:e5:f8:65:32:44:c9:55:bd:d1:47:11:80:60:e0:e1: 74:02:04:46:1a:16:3f:e9:60:91:be:57:ef:dc:c1:53:8f:87: 1e:21:d9:bc:be:29:3b:03:77:97:07:65:50:ec:39:61:97:c8: 6e:1b:63:c2:18:c3:fd:e4:d8:b4:20:4c:87:ff:77:2b:59:c8: 7f:60:05:d6:a0:b9:76:19:0e:65:38:b0:72:83:7a:a7:12:d8: 01:d4:48:ea:2b:a2:48:7e:f3:95:1a:17:c2:f9:94:11:fd:37: 49:f1:6b:24:2f:e7:a9:82:a5:52:41:02:35:97:fb:fa:4f:99: 81:33:17:6d:02:89:42:68:9b:d5:79:40:c8:52:07:97:e0:22: 19:05:0c:cc:30:b4:ab:85:1e:ee:3d:b8:ec:1c:bf:65:7d:60: 45:7e:62:af:36:f3:53:78:12:f5:44:8b:61:4e:11:28:e3:5c: 7e:55:80:08:0b:47:02:c1:4a:5d:12:55:fd:a1:6e:38:fc:69: 19:1c:97:3c:e8:32:01:12:0e:28:a0:fd:0a:dd:26:60:4e:bd: 27:ff:93:8e:f3:02:b9:9c:29:dd:09:24:57:dd:3a:af:98:32: 60:3b:c1:8e:a6:0c:7e:0f:2f:f8:0c:62:d6:db:39:2d:fe:52: 46:f6:1a:a8 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCGMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw MjE4MjNaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEEwMjAxQ0Q1REREODgz MTRCMjY1MDBCMjQ0MTdEMTc5N0U1MjhCMTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCY4sMMFYr2Uja5YhaUoImtR9kuPok8o9mZ3E2v88I7c+QIwSVe Gjkn6vPo0WWoly/L+TKeryAZXVFYhUxrf/Z6RrxSOchTQnoux5pF7S2o8NGnJTZA 3FdLe2iVZ6o1cP4P3WxlhZXAyl5muosYZTHg6Sr7pP8plIeQ9d0si0UTmbZCfEov rDRgdizusbVYojQG/2sT9C8nElDXnH9WbUkut61T57Ku34T/lXZWMA+JNlQijh+G fwuXBB9MXn5Xdck1QmxYwpRGI3OSIUXHAhsI9syN6JUSfgEiaJ/5XPU30l3YqG5y 5s7fZFYrQz28BoaOXwaEkWRVu4B0BTaOpCLHAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUoCAc1d3YgxSyZQCyRBfReX5SixEwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L29DQWMxZDNZZ3hTeVpRQ3lSQmZSZVg1U2l4RS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExYo4wDQYJKoZIhvcNAQELBQADggEBABmeKuX4ZTJEyVW90UcRgGDg4XQC BEYaFj/pYJG+V+/cwVOPhx4h2by+KTsDd5cHZVDsOWGXyG4bY8IYw/3k2LQgTIf/ dytZyH9gBdaguXYZDmU4sHKDeqcS2AHUSOorokh+85UaF8L5lBH9N0nxayQv56mC pVJBAjWX+/pPmYEzF20CiUJom9V5QMhSB5fgIhkFDMwwtKuFHu49uOwcv2V9YEV+ Yq8281N4EvVEi2FOESjjXH5VgAgLRwLBSl0SVf2hbjj8aRkclzzoMgESDiig/Qrd JmBOvSf/k47zArmcKd0JJFfdOq+YMmA7wY6mDH4PL/gMYtbbOS3+Ukb2Gqg= -----END CERTIFICATE-----Generated at Sat Jun 1 13:38:48 2024 by rpki-client on console-fra.rpki-client.org