$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/tPksw-VeykuYNOWoqOfoncxi8jQ.roa File: tPksw-VeykuYNOWoqOfoncxi8jQ.roa (raw, json) Hash identifier: NwNcUlUBVLyUjGgtHgHZ9sT/8QsElkfYU+RHDOb9aFY= Subject key identifier: B4:F9:2C:C3:E5:5E:CA:4B:98:34:E5:A8:A8:E7:E8:9D:CC:62:F2:34 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 061C Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/tPksw-VeykuYNOWoqOfoncxi8jQ.roa Signing time: Thu 29 Feb 2024 01:38:34 +0000 ROA not before: Thu 29 Feb 2024 01:38:34 +0000 ROA not after: Fri 14 Feb 2025 01:30:03 +0000 asID: 9605 IP address blocks: 49.97.92.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Jun 2024 06:27:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1564 (0x61c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Feb 29 01:38:34 2024 GMT Not After : Feb 14 01:30:03 2025 GMT Subject: CN=B4F92CC3E55ECA4B9834E5A8A8E7E89DCC62F234 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:5b:e9:fd:7b:70:02:99:7a:4b:8a:29:b4:75: 63:71:49:bc:23:1e:1e:50:27:08:cc:d0:a1:d9:a6: 85:df:f0:24:d7:9b:94:a8:ef:56:bd:bf:3b:a8:61: 47:49:fd:1c:3c:5c:b4:52:9e:b3:fc:0e:aa:5b:07: 65:49:d6:51:9a:cb:68:51:25:4c:21:d8:36:99:d3: 42:52:29:8d:9b:64:e7:63:f9:51:53:57:32:2e:c8: b0:7d:bb:02:33:c5:70:af:77:c5:ff:1c:45:98:e2: 63:6c:8d:0b:61:8d:b1:ca:98:4d:dc:ff:b2:db:7e: 9f:dc:3b:37:91:02:07:b8:fc:db:db:7f:c9:fe:be: ce:f5:b5:c4:aa:b2:1e:ec:27:0a:b9:8f:d1:6b:c7: e5:2d:b7:fb:98:74:07:27:a2:8c:06:72:d5:d0:79: 2a:5c:e8:31:c9:17:d3:9f:b4:49:19:08:ae:a6:b1: e0:32:6b:81:07:55:44:c0:24:e0:52:32:4b:86:13: d2:2e:25:a0:0b:8c:56:33:b4:0a:b9:06:72:41:45: a2:5c:ad:73:eb:83:02:78:fd:84:1f:cf:68:37:90: c2:46:1a:e7:80:f9:a3:c5:b7:b2:13:c9:52:7a:2c: 09:6c:34:d6:07:0b:8b:c8:75:53:db:7a:97:a7:df: 80:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:F9:2C:C3:E5:5E:CA:4B:98:34:E5:A8:A8:E7:E8:9D:CC:62:F2:34 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/tPksw-VeykuYNOWoqOfoncxi8jQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.97.92.0/23 Signature Algorithm: sha256WithRSAEncryption 8f:31:d4:98:94:c3:67:26:69:23:d9:a0:10:44:2f:f3:ee:84: bc:27:41:aa:20:7c:bb:2a:81:9c:1e:8b:38:73:9d:5e:ed:d8: d6:86:2c:b4:4a:3e:fb:88:75:3a:8c:42:d8:33:47:28:d5:c3: 1f:d7:3f:6d:5f:36:51:79:70:fb:d6:79:f0:94:2e:7e:b9:2f: b9:dd:b5:eb:43:8d:ca:0f:21:12:94:c2:ae:42:e2:4a:82:45: de:ea:d1:e4:00:08:36:fc:c6:65:24:91:d1:2b:3f:bc:32:8f: 34:83:f3:15:39:90:51:d3:a1:64:95:25:41:77:1d:9c:c5:d0: c2:f6:a3:85:f3:77:7e:55:05:49:57:29:7a:56:3a:57:68:2e: 45:6e:5e:9d:55:1f:6e:86:10:9c:d9:e3:e7:9c:ea:b0:6e:34: 50:21:36:b5:74:2b:9b:29:a9:42:27:9a:58:10:41:f6:00:ca: a6:60:b1:43:69:50:98:7d:ad:4b:38:63:d2:d0:f5:51:12:6a: f9:a7:88:53:a1:d2:80:f1:f7:be:af:71:eb:0a:6a:0f:43:98: 2a:13:fe:fd:52:73:b3:41:11:51:4e:fc:24:52:10:2c:24:a8: 2f:5e:25:f2:25:90:0f:52:a0:4c:62:2f:d3:a8:03:2a:be:be: 37:a6:80:d6 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBhwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDAyMjkw MTM4MzRaFw0yNTAyMTQwMTMwMDNaMDMxMTAvBgNVBAMTKEI0RjkyQ0MzRTU1RUNB NEI5ODM0RTVBOEE4RTdFODlEQ0M2MkYyMzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC9W+n9e3ACmXpLiim0dWNxSbwjHh5QJwjM0KHZpoXf8CTXm5So 71a9vzuoYUdJ/Rw8XLRSnrP8DqpbB2VJ1lGay2hRJUwh2DaZ00JSKY2bZOdj+VFT VzIuyLB9uwIzxXCvd8X/HEWY4mNsjQthjbHKmE3c/7Lbfp/cOzeRAge4/Nvbf8n+ vs71tcSqsh7sJwq5j9Frx+Utt/uYdAcnoowGctXQeSpc6DHJF9OftEkZCK6mseAy a4EHVUTAJOBSMkuGE9IuJaALjFYztAq5BnJBRaJcrXPrgwJ4/YQfz2g3kMJGGueA +aPFt7ITyVJ6LAlsNNYHC4vIdVPbepen34CRAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUtPksw+VeykuYNOWoqOfoncxi8jQwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3RQa3N3LVZleWt1WU5PV29xT2ZvbmN4aThqUS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExYVwwDQYJKoZIhvcNAQELBQADggEBAI8x1JiUw2cmaSPZoBBEL/PuhLwn QaogfLsqgZweizhznV7t2NaGLLRKPvuIdTqMQtgzRyjVwx/XP21fNlF5cPvWefCU Ln65L7ndtetDjcoPIRKUwq5C4kqCRd7q0eQACDb8xmUkkdErP7wyjzSD8xU5kFHT oWSVJUF3HZzF0ML2o4Xzd35VBUlXKXpWOldoLkVuXp1VH26GEJzZ4+ec6rBuNFAh NrV0K5spqUInmlgQQfYAyqZgsUNpUJh9rUs4Y9LQ9VESavmniFOh0oDx976vcesK ag9DmCoT/v1Sc7NBEVFO/CRSECwkqC9eJfIlkA9SoExiL9OoAyq+vjemgNY= -----END CERTIFICATE-----Generated at Tue Jun 25 00:52:55 2024 by rpki-client on console-ams.rpki-client.org