$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/qfBLPOJmqg9HVEHWY-Lwg8EkXp4.roa File: qfBLPOJmqg9HVEHWY-Lwg8EkXp4.roa (raw, json) Hash identifier: gnlOfFxk/iaZtRIwYTDLpRhQg8P1Ss6HUjjnZSqv8wU= Subject key identifier: A9:F0:4B:3C:E2:66:AA:0F:47:54:41:D6:63:E2:F0:83:C1:24:5E:9E Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 08C4 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/qfBLPOJmqg9HVEHWY-Lwg8EkXp4.roa Signing time: Tue 30 Apr 2024 02:24:35 +0000 ROA not before: Tue 30 Apr 2024 02:24:35 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 49.104.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2244 (0x8c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 30 02:24:35 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=A9F04B3CE266AA0F475441D663E2F083C1245E9E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:19:52:3f:4f:26:2f:b6:6b:54:02:07:27:1d: 25:d6:e5:b2:2e:53:c6:78:f8:67:bb:76:35:bf:a9: 5e:84:c3:a3:de:ab:91:64:df:4e:8a:72:73:b3:28: 2b:78:b3:6b:50:94:58:7c:21:fd:9c:dd:b6:73:bb: d0:4b:bb:e9:ec:43:db:21:62:b4:a8:24:ff:7d:5e: 03:e9:94:55:3b:4a:46:3c:2c:0a:60:ef:99:b6:4a: 14:52:d3:57:ec:d6:5b:94:21:bb:1d:6b:2e:82:9c: ef:bc:a4:93:73:95:5b:52:45:08:fa:dc:67:89:93: 48:5f:95:1f:62:7a:94:31:c6:41:a3:d1:ae:11:09: ea:9e:1a:35:06:91:01:7c:db:5f:3d:26:a1:da:8a: d9:4d:a1:e7:97:d5:fb:ce:1e:90:e6:6c:24:bd:db: 87:7f:50:f9:22:3f:44:5a:b9:aa:10:a3:97:36:f0: c8:72:69:36:9e:80:85:ea:6a:48:3d:73:ad:61:cb: b7:dd:7b:88:a2:bd:5e:c2:e7:91:5e:67:59:00:d3: da:56:f1:96:68:5e:2d:16:c6:fe:7e:93:25:19:12: 40:49:df:f6:c7:b8:29:6e:7d:b9:8e:c5:65:25:cb: 16:f1:6e:ce:a5:2c:c7:90:fd:a4:b4:d3:f2:9f:8c: 91:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:F0:4B:3C:E2:66:AA:0F:47:54:41:D6:63:E2:F0:83:C1:24:5E:9E X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/qfBLPOJmqg9HVEHWY-Lwg8EkXp4.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.104.252.0/24 Signature Algorithm: sha256WithRSAEncryption 40:03:1f:4a:65:f6:94:74:e5:fd:e4:67:ee:08:40:59:af:cd: 97:ce:e6:cf:65:0f:83:20:92:36:25:19:7a:0b:72:d2:cf:cb: dc:fc:29:af:36:dd:29:59:b8:cb:4f:53:b6:8b:c2:de:0a:f4: 62:bc:98:fe:59:6d:9d:a5:71:e3:08:66:43:4a:82:06:1f:ce: 07:54:24:4c:b6:d8:08:00:c1:cc:fa:2f:7a:7d:63:b8:a0:c2: 3a:c5:83:6a:43:e9:4e:f9:a2:a5:e5:56:75:3a:c3:37:37:99: 6a:1d:e3:d9:2d:95:e3:11:9f:a9:dc:be:f2:91:19:89:07:82: 71:ba:ae:00:31:c3:f4:c6:a5:a5:66:8c:2b:f2:c6:4c:a9:2c: 35:93:30:8f:bc:bd:d1:9c:54:12:8a:58:94:eb:34:8b:a3:db: 9f:db:e2:d6:24:fe:29:ac:f7:31:b0:e0:cb:7e:3e:a9:03:fd: cd:08:6a:f0:d6:d1:44:d3:1f:a6:1d:11:f7:3b:74:b3:21:04: 91:b7:e2:8f:3d:19:0a:c5:36:e8:e0:c8:7d:ff:59:65:58:e2: a8:c5:f1:82:ff:bc:87:98:7d:f0:b5:19:80:ce:cb:a4:eb:16: f5:74:fe:aa:28:d1:22:66:2b:6b:12:f5:b1:7f:1e:cc:dc:31: ad:75:cc:93 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCMQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw MjI0MzVaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEE5RjA0QjNDRTI2NkFB MEY0NzU0NDFENjYzRTJGMDgzQzEyNDVFOUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCoGVI/TyYvtmtUAgcnHSXW5bIuU8Z4+Ge7djW/qV6Ew6Peq5Fk 306KcnOzKCt4s2tQlFh8If2c3bZzu9BLu+nsQ9shYrSoJP99XgPplFU7SkY8LApg 75m2ShRS01fs1luUIbsday6CnO+8pJNzlVtSRQj63GeJk0hflR9iepQxxkGj0a4R CeqeGjUGkQF82189JqHaitlNoeeX1fvOHpDmbCS924d/UPkiP0RauaoQo5c28Mhy aTaegIXqakg9c61hy7fde4iivV7C55FeZ1kA09pW8ZZoXi0Wxv5+kyUZEkBJ3/bH uClufbmOxWUlyxbxbs6lLMeQ/aS00/KfjJFfAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUqfBLPOJmqg9HVEHWY+Lwg8EkXp4wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3FmQkxQT0ptcWc5SFZFSFdZLUx3ZzhFa1hwNC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAxaPwwDQYJKoZIhvcNAQELBQADggEBAEADH0pl9pR05f3kZ+4IQFmvzZfO 5s9lD4MgkjYlGXoLctLPy9z8Ka823SlZuMtPU7aLwt4K9GK8mP5ZbZ2lceMIZkNK ggYfzgdUJEy22AgAwcz6L3p9Y7igwjrFg2pD6U75oqXlVnU6wzc3mWod49ktleMR n6ncvvKRGYkHgnG6rgAxw/TGpaVmjCvyxkypLDWTMI+8vdGcVBKKWJTrNIuj25/b 4tYk/ims9zGw4Mt+PqkD/c0IavDW0UTTH6YdEfc7dLMhBJG34o89GQrFNujgyH3/ WWVY4qjF8YL/vIeYffC1GYDOy6TrFvV0/qoo0SJmK2sS9bF/HszcMa11zJM= -----END CERTIFICATE-----Generated at Sat Jun 1 13:38:48 2024 by rpki-client on console-fra.rpki-client.org