$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/uEVWk5ny6YrwD4g8ry7BbwUHreo.roa File: uEVWk5ny6YrwD4g8ry7BbwUHreo.roa (raw, json) Hash identifier: oJnul0Bck0CxHfSrf54+wk9cFG12uCNq1CoGtjTghGM= Subject key identifier: B8:45:56:93:99:F2:E9:8A:F0:0F:88:3C:AF:2E:C1:6F:05:07:AD:EA Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 05FC Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/uEVWk5ny6YrwD4g8ry7BbwUHreo.roa Signing time: Thu 29 Feb 2024 01:35:45 +0000 ROA not before: Thu 29 Feb 2024 01:35:45 +0000 ROA not after: Fri 14 Feb 2025 01:30:03 +0000 asID: 9605 IP address blocks: 49.97.94.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 23 Jun 2024 11:53:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1532 (0x5fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Feb 29 01:35:45 2024 GMT Not After : Feb 14 01:30:03 2025 GMT Subject: CN=B845569399F2E98AF00F883CAF2EC16F0507ADEA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:10:65:65:d7:f5:cf:6a:a3:af:f2:6d:69:e4: 31:da:7a:58:4b:2e:11:d6:f9:1f:93:cb:49:f2:80: d3:ca:8d:02:22:7f:81:1f:54:e2:3c:e6:e9:24:24: 77:18:cb:a7:3f:68:70:4d:3c:e3:89:38:b4:d7:2b: 8a:67:63:a8:d9:9d:8e:db:b3:82:f7:8e:5e:67:f2: d3:75:f5:3f:d0:59:c2:f0:9b:79:69:51:37:4d:16: 02:6e:98:21:c0:4f:69:57:a0:b1:2f:62:6e:1b:fe: 3c:88:08:e8:4d:a8:51:39:a6:2b:7a:ac:74:25:81: fb:6f:aa:2f:36:40:16:1f:2d:5d:83:f5:a5:b6:5d: b4:64:49:d5:77:ba:28:fb:97:88:e1:15:16:68:64: ca:3f:1c:52:2f:fa:b8:c2:b1:d4:4a:78:3f:16:85: ad:d3:a0:c0:cf:f3:4e:58:42:5c:1e:3c:f2:d1:53: f5:e2:81:a2:45:73:6a:6b:d9:69:a4:78:34:a8:01: 2b:f3:f8:bf:e1:7e:43:70:f8:52:37:70:66:e0:8c: 48:e8:0c:2a:95:76:42:a3:60:ae:66:7f:8d:ec:55: 69:fb:d1:89:63:98:b4:c8:39:9a:87:50:2a:15:1a: 11:2e:3b:b5:f1:6f:b8:02:12:3e:0d:2d:5a:36:ee: f4:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:45:56:93:99:F2:E9:8A:F0:0F:88:3C:AF:2E:C1:6F:05:07:AD:EA X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/uEVWk5ny6YrwD4g8ry7BbwUHreo.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.97.94.0/23 Signature Algorithm: sha256WithRSAEncryption a9:d3:a9:07:5f:3e:a9:b7:05:c9:a4:bd:37:23:a4:b4:18:f8: 43:08:14:2e:26:80:48:57:6a:aa:b0:0b:48:fb:f2:4f:8f:a2: 02:60:d8:55:47:e6:78:78:d5:7a:84:15:3e:a2:7d:86:65:67: 64:6f:fd:fd:2f:af:8c:94:5c:53:09:1c:9b:fa:15:bf:01:bf: 0f:c3:59:37:42:dc:95:ba:32:dc:72:50:41:86:d5:d9:c5:38: db:d4:b8:be:4b:47:e1:2b:1c:91:32:16:91:2e:56:8f:9b:6d: 59:cc:30:30:f7:48:51:db:5e:9f:6a:d0:16:f4:cd:fe:e9:2f: 8f:e2:32:d6:09:0c:a8:22:c8:84:71:4f:e8:67:fc:65:91:04: 02:53:de:13:50:d5:d1:4d:90:f0:8f:4a:ea:33:d4:7b:df:6d: 4b:24:65:61:f4:4c:65:e6:38:c2:3a:5c:b5:57:73:8b:5c:6e: b1:df:49:30:55:f5:25:0e:54:cb:bb:da:53:a6:3a:a5:cb:52: 7c:4f:f2:1b:d2:2d:7d:2c:1b:ea:88:fa:1f:50:6d:49:f4:d1: 15:e5:75:ae:64:37:86:72:33:90:8b:34:78:cd:4c:c8:46:df: d5:b7:4f:59:07:56:7f:7d:be:c2:7d:b4:16:97:d9:64:ed:c8: ef:cc:b8:17 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBfwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDAyMjkw MTM1NDVaFw0yNTAyMTQwMTMwMDNaMDMxMTAvBgNVBAMTKEI4NDU1NjkzOTlGMkU5 OEFGMDBGODgzQ0FGMkVDMTZGMDUwN0FERUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDCEGVl1/XPaqOv8m1p5DHaelhLLhHW+R+Ty0nygNPKjQIif4Ef VOI85ukkJHcYy6c/aHBNPOOJOLTXK4pnY6jZnY7bs4L3jl5n8tN19T/QWcLwm3lp UTdNFgJumCHAT2lXoLEvYm4b/jyICOhNqFE5pit6rHQlgftvqi82QBYfLV2D9aW2 XbRkSdV3uij7l4jhFRZoZMo/HFIv+rjCsdRKeD8Wha3ToMDP805YQlwePPLRU/Xi gaJFc2pr2WmkeDSoASvz+L/hfkNw+FI3cGbgjEjoDCqVdkKjYK5mf43sVWn70Ylj mLTIOZqHUCoVGhEuO7Xxb7gCEj4NLVo27vQ1AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUuEVWk5ny6YrwD4g8ry7BbwUHreowHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3VFVldrNW55Nllyd0Q0ZzhyeTdCYndVSHJlby5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExYV4wDQYJKoZIhvcNAQELBQADggEBAKnTqQdfPqm3BcmkvTcjpLQY+EMI FC4mgEhXaqqwC0j78k+PogJg2FVH5nh41XqEFT6ifYZlZ2Rv/f0vr4yUXFMJHJv6 Fb8Bvw/DWTdC3JW6MtxyUEGG1dnFONvUuL5LR+ErHJEyFpEuVo+bbVnMMDD3SFHb Xp9q0Bb0zf7pL4/iMtYJDKgiyIRxT+hn/GWRBAJT3hNQ1dFNkPCPSuoz1HvfbUsk ZWH0TGXmOMI6XLVXc4tcbrHfSTBV9SUOVMu72lOmOqXLUnxP8hvSLX0sG+qI+h9Q bUn00RXlda5kN4ZyM5CLNHjNTMhG39W3T1kHVn99vsJ9tBaX2WTtyO/MuBc= -----END CERTIFICATE-----Generated at Sun Jun 16 14:31:56 2024 by rpki-client on console-ams.rpki-client.org