$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/rTL8nJq5qhio6cAySZNRiOTJ2QE.roa File: rTL8nJq5qhio6cAySZNRiOTJ2QE.roa (raw, json) Hash identifier: jXJEFwmryrSsIHVEjtqYZh72Drc5H2JIAq4JVy6H2tk= Subject key identifier: AD:32:FC:9C:9A:B9:AA:18:A8:E9:C0:32:49:93:51:88:E4:C9:D9:01 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 03CF Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/rTL8nJq5qhio6cAySZNRiOTJ2QE.roa Signing time: Tue 06 Jun 2023 16:03:03 +0000 ROA not before: Tue 06 Jun 2023 16:03:03 +0000 ROA not after: Tue 14 May 2024 01:30:02 +0000 asID: 9605 IP address blocks: 49.106.226.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 May 2024 13:36:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 975 (0x3cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 6 16:03:03 2023 GMT Not After : May 14 01:30:02 2024 GMT Subject: CN=AD32FC9C9AB9AA18A8E9C03249935188E4C9D901 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:fa:a1:52:0c:eb:75:3a:f8:3d:d8:6e:7c:e1: 99:25:1f:3e:9d:23:4d:6a:b5:73:05:f7:c2:6d:df: bf:d9:eb:6e:5a:46:b7:00:ad:3f:d4:25:9f:d6:24: b6:d8:dd:90:ff:ad:35:3c:8b:b6:fe:f2:7c:c4:f2: 13:22:ef:df:81:ac:32:ef:22:97:0e:aa:7e:60:c7: 0d:8a:b0:02:4a:70:b0:ab:e4:9b:df:06:69:9a:4c: 16:b0:54:4d:1f:f3:22:fe:f0:24:fd:71:8b:f0:e4: a9:fb:b0:95:b6:46:a6:38:e2:c6:0b:e1:70:8d:9b: ce:2c:f0:bd:97:24:d2:bb:26:34:4b:11:f5:f5:7d: cb:ae:c1:4e:63:0b:c6:3d:3f:8a:c3:d1:83:29:64: df:e6:32:ae:7e:3c:f9:df:0d:b5:1b:f6:b0:77:48: 10:18:8d:2b:86:a7:b3:36:f3:41:d3:ba:01:70:05: 34:cc:6d:35:67:e1:a8:fc:ce:3f:15:c7:be:39:18: 9b:5c:83:fc:96:ff:44:95:5b:6d:63:51:bc:f2:5b: 32:00:f8:70:08:47:95:75:5d:de:c3:d3:e8:91:e2: 3e:65:be:1e:de:cd:ef:1c:d8:a6:91:7d:dd:41:83: c8:42:63:38:b8:2e:33:fa:99:b9:75:b9:b3:eb:41: c1:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:32:FC:9C:9A:B9:AA:18:A8:E9:C0:32:49:93:51:88:E4:C9:D9:01 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/rTL8nJq5qhio6cAySZNRiOTJ2QE.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.106.226.0/23 Signature Algorithm: sha256WithRSAEncryption 7c:77:7a:8e:11:d5:d0:94:57:fc:7b:cd:e7:a4:df:7c:d1:e9: a0:eb:90:d9:19:45:e2:21:b4:1a:13:e1:94:e1:63:58:bf:79: bb:da:40:f3:38:00:37:77:4e:6d:40:59:0a:b4:ad:47:ef:82: 57:aa:6b:46:81:34:dd:0f:35:2c:25:bc:1a:50:ed:d5:a7:fd: 84:bf:3c:c5:71:e1:31:cd:7f:9b:ac:a3:4e:ac:e7:1d:f3:03: 45:ed:3e:49:28:e2:9a:58:3c:3c:29:c7:d0:de:03:a2:12:47: 0a:82:d0:f9:c8:44:4f:b7:d7:de:ef:13:4f:ae:14:0d:66:cc: d0:4e:ab:02:0a:88:df:4d:9a:35:d5:f8:91:95:37:57:bc:3d: e1:88:d0:f1:e6:90:99:d4:15:b5:fd:7b:06:31:9e:74:33:51: 88:8d:e7:40:76:6d:75:5a:a6:c1:be:63:0c:f6:ef:5f:4a:72: d0:1e:b0:c5:a5:fb:c7:ec:c5:7d:c8:ed:c2:42:94:9d:c2:cc: 59:b5:67:34:3a:e2:39:fa:99:5b:c1:a1:73:74:67:fb:8c:c3: 21:c4:33:cb:63:7e:72:89:94:3f:be:b5:1e:fe:82:f6:24:4c: 81:cd:f6:96:bb:64:93:f1:a7:b1:a9:d4:16:f6:4c:50:8c:46: 59:fb:83:1a -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICA88wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA2MDYx NjAzMDNaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKEFEMzJGQzlDOUFCOUFB MThBOEU5QzAzMjQ5OTM1MTg4RTRDOUQ5MDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCx+qFSDOt1Ovg92G584ZklHz6dI01qtXMF98Jt37/Z625aRrcA rT/UJZ/WJLbY3ZD/rTU8i7b+8nzE8hMi79+BrDLvIpcOqn5gxw2KsAJKcLCr5Jvf BmmaTBawVE0f8yL+8CT9cYvw5Kn7sJW2RqY44sYL4XCNm84s8L2XJNK7JjRLEfX1 fcuuwU5jC8Y9P4rD0YMpZN/mMq5+PPnfDbUb9rB3SBAYjSuGp7M280HTugFwBTTM bTVn4aj8zj8Vx745GJtcg/yW/0SVW21jUbzyWzIA+HAIR5V1Xd7D0+iR4j5lvh7e ze8c2KaRfd1Bg8hCYzi4LjP6mbl1ubPrQcFPAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUrTL8nJq5qhio6cAySZNRiOTJ2QEwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3JUTDhuSnE1cWhpbzZjQXlTWk5SaU9USjJRRS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExauIwDQYJKoZIhvcNAQELBQADggEBAHx3eo4R1dCUV/x7zeek33zR6aDr kNkZReIhtBoT4ZThY1i/ebvaQPM4ADd3Tm1AWQq0rUfvgleqa0aBNN0PNSwlvBpQ 7dWn/YS/PMVx4THNf5uso06s5x3zA0XtPkko4ppYPDwpx9DeA6ISRwqC0PnIRE+3 197vE0+uFA1mzNBOqwIKiN9NmjXV+JGVN1e8PeGI0PHmkJnUFbX9ewYxnnQzUYiN 50B2bXVapsG+Ywz2719KctAesMWl+8fsxX3I7cJClJ3CzFm1ZzQ64jn6mVvBoXN0 Z/uMwyHEM8tjfnKJlD++tR7+gvYkTIHN9pa7ZJPxp7Gp1Bb2TFCMRln7gxo= -----END CERTIFICATE-----Generated at Sat Apr 27 10:15:57 2024 by rpki-client on console-ams.rpki-client.org