$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/qJAMkctotybdWifMWjPf-up2-7c.roa File: qJAMkctotybdWifMWjPf-up2-7c.roa (raw, json) Hash identifier: /K5y+nXk1WKYxEKIGirXg4le6A1MmCOsk0osBZ54f24= Subject key identifier: A8:90:0C:91:CB:68:B7:26:DD:5A:27:CC:5A:33:DF:FA:EA:76:FB:B7 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 06BE Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/qJAMkctotybdWifMWjPf-up2-7c.roa Signing time: Tue 30 Apr 2024 01:46:53 +0000 ROA not before: Tue 30 Apr 2024 01:46:53 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 49.104.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1726 (0x6be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 30 01:46:53 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=A8900C91CB68B726DD5A27CC5A33DFFAEA76FBB7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:3a:94:34:53:32:c1:f5:f0:9d:22:ba:70:b6: 59:1c:08:dc:ef:a5:7c:1f:ff:36:02:7c:39:7b:ef: e3:d1:96:9f:a8:4d:cf:95:1c:52:ee:30:00:23:4a: c0:89:c6:b4:4b:32:af:48:b6:0c:69:af:9c:5a:40: af:f5:91:4b:bc:33:1a:34:fc:76:2e:52:1f:a2:9a: ed:16:75:bb:fa:6f:d4:84:33:f8:60:66:35:23:07: 68:bb:99:86:c6:8b:ba:92:7d:1f:1b:48:d7:e4:bb: eb:c1:38:7f:48:80:8f:e9:e8:28:b1:b0:6b:92:97: 89:95:ab:7b:79:26:35:0b:4d:a2:f5:3b:8c:21:04: ab:c8:7a:51:f9:f7:c0:b8:06:d9:92:0f:41:b8:c7: 15:f7:9b:a3:c9:93:4a:15:da:ab:3b:76:ec:e1:b4: 9e:c2:a0:37:bb:81:58:c8:d7:dc:8b:85:e3:4b:0a: bd:a0:b4:68:02:7e:f0:52:5c:2f:7f:e8:ac:72:a6: e3:4a:75:6a:94:ac:ad:02:fd:22:75:cf:2a:d5:3a: 70:7c:0d:6b:79:73:a5:39:92:22:28:1a:7b:d7:69: 80:9c:fd:30:da:16:24:c3:df:88:44:a8:22:82:68: ec:9b:76:66:e7:89:65:b4:14:a8:20:2a:93:29:56: 16:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:90:0C:91:CB:68:B7:26:DD:5A:27:CC:5A:33:DF:FA:EA:76:FB:B7 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/qJAMkctotybdWifMWjPf-up2-7c.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.104.88.0/21 Signature Algorithm: sha256WithRSAEncryption 40:89:e9:bc:74:35:fb:cf:0f:e8:96:20:26:a2:2c:90:e2:55: a5:39:b8:26:dd:cd:d9:0b:f6:ee:28:22:74:30:b2:bf:0b:96: f8:01:6f:3a:e0:8b:ef:57:b4:16:2a:d4:da:73:b9:47:75:83: 8f:ff:6e:df:7d:b9:83:db:1e:6a:74:9d:4f:10:17:b5:ab:8e: b6:03:c3:3c:6f:38:4b:e5:17:f0:6a:8f:b6:0c:9d:c3:37:ff: bf:41:ec:88:9a:e9:b4:bd:96:9d:17:61:4c:ef:67:f9:19:21: 0b:64:41:b1:97:9d:ed:cb:7f:d1:58:5c:e7:a3:0c:90:18:68: 58:8e:6e:9c:c7:a0:30:b8:0d:e1:21:f4:94:9a:2d:19:3c:62: f4:ee:d6:77:11:34:c1:92:30:c9:67:cc:99:62:cf:90:9f:3c: 32:34:4a:7b:d2:3f:8f:3e:68:45:b8:66:dd:f8:35:08:cf:4a: 51:9a:76:3c:89:43:71:02:e3:d0:d3:6c:b6:ff:0f:e8:80:89: 0a:1b:9a:33:fa:e7:bf:29:5e:f0:be:e0:c3:19:5b:59:19:d5: e4:f6:24:d0:16:2b:cd:a0:2c:cf:d9:eb:c0:4c:18:36:6f:c6: 48:30:f8:63:11:d7:22:f5:b8:75:b1:27:51:89:b1:54:eb:8d: 69:37:9d:4c -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBr4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw MTQ2NTNaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEE4OTAwQzkxQ0I2OEI3 MjZERDVBMjdDQzVBMzNERkZBRUE3NkZCQjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDBOpQ0UzLB9fCdIrpwtlkcCNzvpXwf/zYCfDl77+PRlp+oTc+V HFLuMAAjSsCJxrRLMq9Itgxpr5xaQK/1kUu8Mxo0/HYuUh+imu0Wdbv6b9SEM/hg ZjUjB2i7mYbGi7qSfR8bSNfku+vBOH9IgI/p6CixsGuSl4mVq3t5JjULTaL1O4wh BKvIelH598C4BtmSD0G4xxX3m6PJk0oV2qs7duzhtJ7CoDe7gVjI19yLheNLCr2g tGgCfvBSXC9/6KxypuNKdWqUrK0C/SJ1zyrVOnB8DWt5c6U5kiIoGnvXaYCc/TDa FiTD34hEqCKCaOybdmbniWW0FKggKpMpVhbvAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUqJAMkctotybdWifMWjPf+up2+7cwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3FKQU1rY3RvdHliZFdpZk1XalBmLXVwMi03Yy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMxaFgwDQYJKoZIhvcNAQELBQADggEBAECJ6bx0NfvPD+iWICaiLJDiVaU5 uCbdzdkL9u4oInQwsr8LlvgBbzrgi+9XtBYq1NpzuUd1g4//bt99uYPbHmp0nU8Q F7WrjrYDwzxvOEvlF/Bqj7YMncM3/79B7Iia6bS9lp0XYUzvZ/kZIQtkQbGXne3L f9FYXOejDJAYaFiObpzHoDC4DeEh9JSaLRk8YvTu1ncRNMGSMMlnzJliz5CfPDI0 SnvSP48+aEW4Zt34NQjPSlGadjyJQ3EC49DTbLb/D+iAiQobmjP6578pXvC+4MMZ W1kZ1eT2JNAWK82gLM/Z68BMGDZvxkgw+GMR1yL1uHWxJ1GJsVTrjWk3nUw= -----END CERTIFICATE-----Generated at Sat Jun 1 15:54:32 2024 by rpki-client on console-ams.rpki-client.org