$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/umG86HHYYuHh9VCw5NZ3eEnCLxI.roa File: umG86HHYYuHh9VCw5NZ3eEnCLxI.roa (raw, json) Hash identifier: nbE2VcqEeMQiESsOyE0qYpCN4YSZu9ioFlpVbObHW0E= Subject key identifier: BA:61:BC:E8:71:D8:62:E1:E1:F5:50:B0:E4:D6:77:78:49:C2:2F:12 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 07A2 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/umG86HHYYuHh9VCw5NZ3eEnCLxI.roa Signing time: Tue 30 Apr 2024 02:06:30 +0000 ROA not before: Tue 30 Apr 2024 02:06:30 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 49.104.10.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1954 (0x7a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 30 02:06:30 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=BA61BCE871D862E1E1F550B0E4D6777849C22F12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b4:79:64:01:e8:80:f0:2a:b2:f8:d0:30:b3: 10:78:f5:a8:60:56:75:29:78:e9:61:95:3e:ef:6b: b1:58:1f:41:65:0b:74:3e:02:e6:48:66:1c:06:25: 8d:5f:56:3a:59:bd:ce:d8:a5:72:a8:74:5f:51:06: a5:e0:e0:0c:36:71:dc:61:f0:8e:87:8b:24:87:24: ca:36:07:58:a1:3d:e0:b0:f6:4b:ed:a6:32:43:76: 89:8e:24:9a:bc:c5:f2:d1:4b:3e:49:04:c0:11:d5: fb:d3:5d:03:f3:86:f1:5f:59:51:50:1c:1e:2f:61: d9:1e:93:60:bf:67:e0:63:9b:c3:fc:cc:5b:ed:9e: 15:a5:41:f2:96:4d:ce:3e:c3:c2:4d:66:2a:95:2c: 81:1c:01:62:f7:bc:67:cf:a9:0b:c9:8f:ce:6d:8d: 1d:3e:a8:5d:aa:c5:67:96:cd:28:42:27:4d:39:b9: c5:4c:b3:1d:2e:b0:b1:49:10:92:c3:29:42:f9:74: 94:bf:65:14:49:a4:cd:f5:83:79:61:b0:8e:08:3d: 2d:09:82:af:3d:ac:58:9e:d6:ca:ab:98:b7:88:b2: 43:37:23:60:e4:7a:df:84:19:50:3e:8e:e8:0e:c9: f8:1a:66:d0:58:9c:3c:14:d8:8b:60:f2:06:5e:43: 2f:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:61:BC:E8:71:D8:62:E1:E1:F5:50:B0:E4:D6:77:78:49:C2:2F:12 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/umG86HHYYuHh9VCw5NZ3eEnCLxI.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.104.10.0/23 Signature Algorithm: sha256WithRSAEncryption 43:e3:e0:05:2f:34:c3:4c:20:3a:d2:99:21:45:16:e8:60:9a: bf:fa:6f:10:0e:7e:7f:be:98:ae:af:ec:e0:f6:cc:d1:26:b4: 36:23:f2:cb:de:9b:99:f5:5a:c3:a4:4c:31:33:c2:dc:ff:f7: 15:41:f3:d3:32:ea:d2:48:86:a1:46:7d:1a:4f:0f:39:d2:bf: 9d:88:3e:d9:bb:e7:b0:e5:1b:24:4b:ea:20:2f:87:c8:c5:f6: c5:fe:f6:ee:7f:79:3c:e5:c0:da:cf:af:a5:fb:d9:8f:ca:14: 28:32:d2:15:a5:6a:dc:1a:8e:c5:c6:32:5f:de:2e:a8:2c:94: d1:d9:df:ac:ab:0b:d2:e7:50:d3:0e:6a:41:1c:b1:be:1b:31: c0:43:0a:28:29:91:48:a2:73:80:af:18:9b:ee:fe:e9:c9:e6: 18:47:da:b9:6f:92:77:1f:df:3a:8c:37:6e:6a:54:bc:cc:da: d8:b2:e3:e9:05:e3:57:24:15:74:45:26:da:03:9f:ab:ef:fd: 80:4f:58:29:d7:c4:e5:d2:3a:35:82:69:71:80:7d:ff:4e:b1: 5f:19:f9:ca:eb:e9:63:95:9a:e8:73:34:3a:dd:a8:03:cf:4f: cf:22:9f:88:cd:4d:e1:d3:91:5d:99:1d:74:6e:7f:dc:34:85: 49:43:ed:ae -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICB6IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw MjA2MzBaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEJBNjFCQ0U4NzFEODYy RTFFMUY1NTBCMEU0RDY3Nzc4NDlDMjJGMTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDFtHlkAeiA8Cqy+NAwsxB49ahgVnUpeOlhlT7va7FYH0FlC3Q+ AuZIZhwGJY1fVjpZvc7YpXKodF9RBqXg4Aw2cdxh8I6HiySHJMo2B1ihPeCw9kvt pjJDdomOJJq8xfLRSz5JBMAR1fvTXQPzhvFfWVFQHB4vYdkek2C/Z+Bjm8P8zFvt nhWlQfKWTc4+w8JNZiqVLIEcAWL3vGfPqQvJj85tjR0+qF2qxWeWzShCJ005ucVM sx0usLFJEJLDKUL5dJS/ZRRJpM31g3lhsI4IPS0Jgq89rFie1sqrmLeIskM3I2Dk et+EGVA+jugOyfgaZtBYnDwU2Itg8gZeQy/ZAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUumG86HHYYuHh9VCw5NZ3eEnCLxIwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3VtRzg2SEhZWXVIaDlWQ3c1TlozZUVuQ0x4SS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExaAowDQYJKoZIhvcNAQELBQADggEBAEPj4AUvNMNMIDrSmSFFFuhgmr/6 bxAOfn++mK6v7OD2zNEmtDYj8svem5n1WsOkTDEzwtz/9xVB89My6tJIhqFGfRpP DznSv52IPtm757DlGyRL6iAvh8jF9sX+9u5/eTzlwNrPr6X72Y/KFCgy0hWlatwa jsXGMl/eLqgslNHZ36yrC9LnUNMOakEcsb4bMcBDCigpkUiic4CvGJvu/unJ5hhH 2rlvkncf3zqMN25qVLzM2tiy4+kF41ckFXRFJtoDn6vv/YBPWCnXxOXSOjWCaXGA ff9OsV8Z+crr6WOVmuhzNDrdqAPPT88in4jNTeHTkV2ZHXRuf9w0hUlD7a4= -----END CERTIFICATE-----Generated at Sat Jun 1 13:38:48 2024 by rpki-client on console-fra.rpki-client.org