$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/u8cwsfqoLJwfiQIytyM5Vm7xFxI.roa File: u8cwsfqoLJwfiQIytyM5Vm7xFxI.roa (raw, json) Hash identifier: MwrfUVZcW6HlxDFPTz9mfX87vmXYFx/VLUhBeqLpyjU= Subject key identifier: BB:C7:30:B1:FA:A8:2C:9C:1F:89:02:32:B7:23:39:56:6E:F1:17:12 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0117 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/u8cwsfqoLJwfiQIytyM5Vm7xFxI.roa Signing time: Wed 24 May 2023 16:30:13 +0000 ROA not before: Wed 24 May 2023 16:30:13 +0000 ROA not after: Tue 14 May 2024 01:30:02 +0000 asID: 9605 IP address blocks: 49.106.176.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 May 2024 13:36:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 279 (0x117) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: May 24 16:30:13 2023 GMT Not After : May 14 01:30:02 2024 GMT Subject: CN=BBC730B1FAA82C9C1F890232B72339566EF11712 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:d3:77:a0:4d:2b:3c:5e:c6:e8:de:7f:62:14: 48:4c:ba:36:12:00:1a:0d:9b:a1:0c:71:30:d2:86: 1c:39:2e:a3:f0:39:e6:c2:55:95:59:55:43:38:1f: ff:8e:ad:1a:4a:93:c8:a8:6c:9f:fe:0a:f9:bb:d4: 8f:fa:5a:19:ec:48:41:f3:ce:47:0b:37:9c:27:35: 1f:4a:91:1f:d2:ac:43:3f:1f:d7:14:db:0b:2c:0c: 11:82:67:d5:b0:b2:5f:c1:00:b7:91:48:b8:28:b6: e8:d8:2d:4b:e9:56:72:7d:48:81:8a:ce:e1:bc:8c: 42:9e:b2:02:8e:58:1f:a1:73:c4:cb:c2:79:b4:4d: a1:fa:06:8f:b9:9a:5d:68:87:be:74:01:1d:a6:83: 4b:64:4f:34:3b:8d:a9:39:6f:b9:64:c8:c3:a7:f5: 28:09:08:a0:fe:ac:d3:19:99:57:a9:d0:93:26:01: e3:ae:87:3d:74:81:f6:d2:b2:52:ae:fe:a1:78:11: ce:ac:81:61:51:fb:18:08:80:5d:d2:b3:c1:9b:b7: d6:1c:bb:a6:3d:d8:ad:ce:8e:a3:9c:17:7a:26:c5: 46:8e:79:e3:35:3a:02:bd:b2:7c:0c:bf:2a:05:90: 66:9e:6a:ca:c6:3d:ce:dd:19:52:a7:65:be:7b:0e: 98:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:C7:30:B1:FA:A8:2C:9C:1F:89:02:32:B7:23:39:56:6E:F1:17:12 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/u8cwsfqoLJwfiQIytyM5Vm7xFxI.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.106.176.0/21 Signature Algorithm: sha256WithRSAEncryption 4f:b9:59:45:44:7f:0f:bd:c1:3e:89:f2:e2:01:6a:13:1e:76: a0:b4:d9:08:eb:9f:1a:f1:99:3a:31:23:41:75:95:b4:c5:7f: a7:ba:8a:99:15:e5:03:e9:dc:4b:0e:89:38:27:e0:0f:a9:b2: 8f:de:b2:cc:cc:1b:38:1f:fe:7e:b2:ce:14:08:d6:c5:81:a3: 1f:19:bd:87:7c:4c:20:bd:4a:13:64:20:a4:54:11:d2:3d:cd: e4:73:59:56:9a:56:d5:91:02:4e:a2:f9:e4:ba:82:77:73:6d: 09:93:b5:8a:45:83:db:64:c3:98:ed:6e:82:0e:31:9d:c1:79: 20:f7:49:ac:52:3b:74:e0:01:3e:c2:3b:be:e5:fd:55:a5:80: 43:74:b7:a2:64:53:c0:e7:18:22:69:51:46:16:c7:37:b0:82: 6e:42:26:2e:eb:38:63:32:6e:99:3d:ee:11:6e:6f:d8:7a:58: 90:d2:de:45:7d:86:97:15:bf:3d:60:38:3e:91:d0:f6:1b:8d: f4:aa:c0:04:78:ec:f1:84:0e:0e:97:0d:ca:32:d6:41:4e:1e: 2f:6f:4b:b2:36:bb:ac:70:ab:61:a0:db:97:0d:46:18:bd:92: 49:04:bc:c3:5f:e3:7e:a1:09:b2:74:fc:11:08:7d:29:75:11: da:35:22:1e -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICARcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA1MjQx NjMwMTNaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKEJCQzczMEIxRkFBODJD OUMxRjg5MDIzMkI3MjMzOTU2NkVGMTE3MTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDG03egTSs8Xsbo3n9iFEhMujYSABoNm6EMcTDShhw5LqPwOebC VZVZVUM4H/+OrRpKk8iobJ/+Cvm71I/6WhnsSEHzzkcLN5wnNR9KkR/SrEM/H9cU 2wssDBGCZ9Wwsl/BALeRSLgotujYLUvpVnJ9SIGKzuG8jEKesgKOWB+hc8TLwnm0 TaH6Bo+5ml1oh750AR2mg0tkTzQ7jak5b7lkyMOn9SgJCKD+rNMZmVep0JMmAeOu hz10gfbSslKu/qF4Ec6sgWFR+xgIgF3Ss8Gbt9Ycu6Y92K3OjqOcF3omxUaOeeM1 OgK9snwMvyoFkGaeasrGPc7dGVKnZb57DpjdAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUu8cwsfqoLJwfiQIytyM5Vm7xFxIwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3U4Y3dzZnFvTEp3ZmlRSXl0eU01Vm03eEZ4SS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMxarAwDQYJKoZIhvcNAQELBQADggEBAE+5WUVEfw+9wT6J8uIBahMedqC0 2QjrnxrxmToxI0F1lbTFf6e6ipkV5QPp3EsOiTgn4A+pso/esszMGzgf/n6yzhQI 1sWBox8ZvYd8TCC9ShNkIKRUEdI9zeRzWVaaVtWRAk6i+eS6gndzbQmTtYpFg9tk w5jtboIOMZ3BeSD3SaxSO3TgAT7CO77l/VWlgEN0t6JkU8DnGCJpUUYWxzewgm5C Ji7rOGMybpk97hFub9h6WJDS3kV9hpcVvz1gOD6R0PYbjfSqwAR47PGEDg6XDcoy 1kFOHi9vS7I2u6xwq2Gg25cNRhi9kkkEvMNf436hCbJ0/BEIfSl1Edo1Ih4= -----END CERTIFICATE-----Generated at Sat Apr 27 10:15:58 2024 by rpki-client on console-ams.rpki-client.org