$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/sZI-6A_0aH0TRPS02bMfCYUvBWE.roa File: sZI-6A_0aH0TRPS02bMfCYUvBWE.roa (raw, json) Hash identifier: mkRnoSlj84qvq2FHV3k3+7QYd7B3XMWy3JT2FctVftM= Subject key identifier: B1:92:3E:E8:0F:F4:68:7D:13:44:F4:B4:D9:B3:1F:09:85:2F:05:61 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 064D Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/sZI-6A_0aH0TRPS02bMfCYUvBWE.roa Signing time: Tue 30 Apr 2024 01:31:32 +0000 ROA not before: Tue 30 Apr 2024 01:31:32 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 49.97.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1613 (0x64d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 30 01:31:32 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=B1923EE80FF4687D1344F4B4D9B31F09852F0561 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d9:72:8b:d1:cf:d6:0f:f8:dd:7e:6e:8b:c7: fa:18:09:f1:14:bf:5b:82:c2:82:ee:6c:24:f7:36: 10:34:5f:42:2e:79:f6:e2:6f:3d:b7:ef:2a:b4:28: 22:0b:39:59:c5:69:0f:00:60:17:2b:5c:70:9a:52: d4:e1:00:5c:6a:3b:32:ca:5d:f4:b2:dc:4a:c5:7d: 65:14:84:c9:9c:b4:09:f1:96:78:67:4f:10:41:38: e9:b6:b0:d0:f9:92:6b:e5:c1:fd:e9:c2:a2:5a:75: 2c:bd:52:c8:8b:55:38:4a:d7:d6:96:23:a0:37:7f: 90:0c:19:7f:d5:94:ec:f4:db:cc:5c:cc:7e:cc:39: 99:06:2a:9d:ab:06:cd:7a:89:ca:de:df:1a:d9:ab: 52:43:c4:16:93:9a:ac:a7:eb:31:a3:92:ef:88:a8: a1:2b:55:6b:62:f9:b4:34:b7:91:05:4a:d3:4a:e4: 90:23:48:71:e0:43:e2:ca:9e:44:6f:35:df:a5:5c: 08:48:b3:10:b0:75:71:b7:9a:18:79:ba:5a:d0:57: 69:ba:11:d5:da:4c:87:bb:7a:b4:fc:d5:e9:c1:19: db:3c:f4:40:28:16:32:22:d8:f4:d6:5a:8e:31:73: 37:47:65:c6:58:d7:bb:73:0e:99:f7:ee:3e:a2:4e: 90:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:92:3E:E8:0F:F4:68:7D:13:44:F4:B4:D9:B3:1F:09:85:2F:05:61 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/sZI-6A_0aH0TRPS02bMfCYUvBWE.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.97.38.0/24 Signature Algorithm: sha256WithRSAEncryption 8a:ba:ba:a2:0f:a1:d3:dd:c0:2b:0a:55:a5:f8:0a:41:e9:9d: 57:ca:17:db:f5:30:61:98:a4:c1:80:35:9f:4c:f9:5b:45:bd: 3f:5d:ca:f0:d6:6e:b7:3e:6e:58:6f:2b:0d:5b:f7:93:02:1b: 92:f1:f8:85:fe:d3:4b:9e:6f:71:37:55:b6:6c:2f:7c:05:4a: 15:79:52:19:8b:66:a6:04:1b:8c:7a:c5:d3:5d:7d:1a:c6:77: 26:c9:e0:32:26:14:96:62:d0:1f:75:48:b4:ec:9c:05:c0:f3: 74:90:ce:3b:4b:61:fe:09:2c:d8:70:c0:16:4c:1e:2b:a0:93: a7:c6:9b:fb:ac:95:a8:25:49:c6:73:27:ca:02:28:7f:85:f9: a3:63:65:56:e2:f1:f2:28:47:85:5d:f8:e9:5f:e4:c6:4a:f2: d2:25:eb:05:1b:37:9a:28:11:3f:6d:b3:ab:13:fa:af:8e:22: 7c:4d:f3:31:71:80:d5:c0:2e:22:64:ea:0a:2e:e3:96:05:97: 88:58:fc:86:00:e7:b0:53:1d:16:06:05:42:0b:c0:7f:cb:92: 06:3b:c9:31:e8:cf:ad:9a:25:59:2e:b7:8e:bc:61:06:b0:54: f4:cb:cb:7a:c6:0d:e1:38:97:2c:a4:b4:bc:2b:50:ce:1f:be: 0f:ae:97:a2 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBk0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw MTMxMzJaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEIxOTIzRUU4MEZGNDY4 N0QxMzQ0RjRCNEQ5QjMxRjA5ODUyRjA1NjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCp2XKL0c/WD/jdfm6Lx/oYCfEUv1uCwoLubCT3NhA0X0Iuefbi bz237yq0KCILOVnFaQ8AYBcrXHCaUtThAFxqOzLKXfSy3ErFfWUUhMmctAnxlnhn TxBBOOm2sND5kmvlwf3pwqJadSy9UsiLVThK19aWI6A3f5AMGX/VlOz028xczH7M OZkGKp2rBs16icre3xrZq1JDxBaTmqyn6zGjku+IqKErVWti+bQ0t5EFStNK5JAj SHHgQ+LKnkRvNd+lXAhIsxCwdXG3mhh5ulrQV2m6EdXaTIe7erT81enBGds89EAo FjIi2PTWWo4xczdHZcZY17tzDpn37j6iTpAfAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUsZI+6A/0aH0TRPS02bMfCYUvBWEwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3NaSS02QV8wYUgwVFJQUzAyYk1mQ1lVdkJXRS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAxYSYwDQYJKoZIhvcNAQELBQADggEBAIq6uqIPodPdwCsKVaX4CkHpnVfK F9v1MGGYpMGANZ9M+VtFvT9dyvDWbrc+blhvKw1b95MCG5Lx+IX+00ueb3E3VbZs L3wFShV5UhmLZqYEG4x6xdNdfRrGdybJ4DImFJZi0B91SLTsnAXA83SQzjtLYf4J LNhwwBZMHiugk6fGm/uslaglScZzJ8oCKH+F+aNjZVbi8fIoR4Vd+Olf5MZK8tIl 6wUbN5ooET9ts6sT+q+OInxN8zFxgNXALiJk6gou45YFl4hY/IYA57BTHRYGBUIL wH/LkgY7yTHoz62aJVkut468YQawVPTLy3rGDeE4lyyktLwrUM4fvg+ul6I= -----END CERTIFICATE-----Generated at Sat Jun 1 13:38:48 2024 by rpki-client on console-fra.rpki-client.org