$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/sS6FMoaP4SocId8uPx0krZnQHgc.roa File: sS6FMoaP4SocId8uPx0krZnQHgc.roa (raw, json) Hash identifier: DHewuTbtA0bFeogSgOyKHzXQ1l/eyaqoxFv/uuZ4oCw= Subject key identifier: B1:2E:85:32:86:8F:E1:2A:1C:21:DF:2E:3F:1D:24:AD:99:D0:1E:07 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0825 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/sS6FMoaP4SocId8uPx0krZnQHgc.roa Signing time: Tue 30 Apr 2024 02:14:21 +0000 ROA not before: Tue 30 Apr 2024 02:14:21 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 49.96.60.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 22:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2085 (0x825) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 30 02:14:21 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=B12E8532868FE12A1C21DF2E3F1D24AD99D01E07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:4a:7e:14:2f:95:e0:85:e7:51:5f:7a:28:96: 84:15:41:9e:8d:93:82:4a:fa:f9:15:44:80:40:6f: 91:d6:5a:46:ca:fb:b4:e7:6c:07:93:2c:ed:9d:eb: 2a:97:2e:d5:a0:f7:01:01:1e:f9:93:9d:e3:c4:1e: f2:2b:50:77:ab:12:f6:af:c3:d6:73:54:7d:35:8f: b0:51:86:86:a8:0b:70:d4:53:44:53:d1:7e:2d:95: 64:64:8a:d8:48:1b:63:ff:f2:d6:83:dd:14:44:dd: 95:40:25:a7:31:7f:34:5f:1d:c9:43:41:2e:48:eb: 18:9e:c6:0e:b3:b2:75:53:48:62:74:de:03:c2:54: 8c:0f:e0:83:e3:c4:26:00:29:db:4a:ae:1e:db:0d: f4:4f:e7:f9:95:5b:fb:4e:3c:46:65:f3:b3:80:0b: c8:e6:77:f7:b7:87:78:4e:53:8c:8a:3e:d5:56:fd: 2e:3e:c4:08:0e:13:12:fc:ef:6b:c9:6b:04:02:9c: ba:75:0d:ea:a8:b1:6e:0f:c0:63:7e:f9:c4:80:cb: 84:e3:d1:93:75:79:54:d1:6c:a5:b4:78:74:01:e5: a0:b5:dc:55:28:b9:23:24:36:93:37:6c:a5:02:02: 84:2d:e0:89:8c:e0:7c:ce:44:e6:05:64:2d:69:48: 59:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:2E:85:32:86:8F:E1:2A:1C:21:DF:2E:3F:1D:24:AD:99:D0:1E:07 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/sS6FMoaP4SocId8uPx0krZnQHgc.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.96.60.0/22 Signature Algorithm: sha256WithRSAEncryption 08:72:c8:c4:30:23:94:87:6d:ac:96:a7:e9:81:3e:07:b2:6e: d7:32:a6:5a:f6:1e:32:cd:2e:43:b8:1c:52:64:c2:ff:d6:28: b0:a3:e9:ec:a9:22:d3:ca:a5:5b:bb:1b:e1:55:be:2a:16:2a: b0:3c:61:96:f4:42:8a:8e:d2:f2:5d:70:14:39:6b:b8:7d:30: 83:63:9d:87:0c:e2:ad:27:d2:27:08:2f:f3:c1:7d:a1:ca:bc: a3:99:ef:b6:a3:44:43:e7:ec:9e:d1:fb:73:d1:d3:df:82:12: b5:6e:36:61:6d:72:a7:6f:95:57:dc:5e:17:87:57:29:88:c4: cb:b6:f6:ae:44:a8:68:36:2b:a8:04:07:70:9d:16:bb:d2:ca: d6:ed:92:86:cd:74:41:b2:74:57:d9:50:f7:9d:2e:59:6a:28: 7e:36:51:1a:78:fb:65:d6:fb:07:5d:ec:ca:e0:3b:55:cc:b6: 4f:67:ff:b1:bc:fb:70:49:bd:72:52:49:69:9e:c3:93:13:85: 04:af:e4:ca:b0:95:9a:96:8c:e9:60:8c:16:6a:b7:1b:13:a8: f1:40:3c:8e:dd:d5:f9:fa:3c:62:7e:69:80:60:b5:c6:27:5d: bc:5b:13:61:4d:98:5b:90:bc:b7:94:73:43:44:c9:de:13:af: 5c:92:4d:47 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCCUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw MjE0MjFaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEIxMkU4NTMyODY4RkUx MkExQzIxREYyRTNGMUQyNEFEOTlEMDFFMDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDsSn4UL5XghedRX3ooloQVQZ6Nk4JK+vkVRIBAb5HWWkbK+7Tn bAeTLO2d6yqXLtWg9wEBHvmTnePEHvIrUHerEvavw9ZzVH01j7BRhoaoC3DUU0RT 0X4tlWRkithIG2P/8taD3RRE3ZVAJacxfzRfHclDQS5I6xiexg6zsnVTSGJ03gPC VIwP4IPjxCYAKdtKrh7bDfRP5/mVW/tOPEZl87OAC8jmd/e3h3hOU4yKPtVW/S4+ xAgOExL872vJawQCnLp1DeqosW4PwGN++cSAy4Tj0ZN1eVTRbKW0eHQB5aC13FUo uSMkNpM3bKUCAoQt4ImM4HzOROYFZC1pSFnnAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUsS6FMoaP4SocId8uPx0krZnQHgcwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3NTNkZNb2FQNFNvY0lkOHVQeDBrclpuUUhnYy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIxYDwwDQYJKoZIhvcNAQELBQADggEBAAhyyMQwI5SHbayWp+mBPgeybtcy plr2HjLNLkO4HFJkwv/WKLCj6eypItPKpVu7G+FVvioWKrA8YZb0QoqO0vJdcBQ5 a7h9MINjnYcM4q0n0icIL/PBfaHKvKOZ77ajREPn7J7R+3PR09+CErVuNmFtcqdv lVfcXheHVymIxMu29q5EqGg2K6gEB3CdFrvSytbtkobNdEGydFfZUPedLllqKH42 URp4+2XW+wdd7MrgO1XMtk9n/7G8+3BJvXJSSWmew5MThQSv5MqwlZqWjOlgjBZq txsTqPFAPI7d1fn6PGJ+aYBgtcYnXbxbE2FNmFuQvLeUc0NEyd4Tr1ySTUc= -----END CERTIFICATE-----Generated at Mon Nov 25 23:59:12 2024 by rpki-client on console-fra.rpki-client.org