$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/vpuW7yVSuYqonOPOivUcIQX3Lj8.roa File: vpuW7yVSuYqonOPOivUcIQX3Lj8.roa (raw, json) Hash identifier: ZOg1Y/gjfzpQxoX78Sytq5o1h/NGBPDuii34MiYUY4s= Subject key identifier: BE:9B:96:EF:25:52:B9:8A:A8:9C:E3:CE:8A:F5:1C:21:05:F7:2E:3F Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0859 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/vpuW7yVSuYqonOPOivUcIQX3Lj8.roa Signing time: Tue 30 Apr 2024 02:16:31 +0000 ROA not before: Tue 30 Apr 2024 02:16:31 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 49.105.116.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:41:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2137 (0x859) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 30 02:16:31 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=BE9B96EF2552B98AA89CE3CE8AF51C2105F72E3F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:61:48:77:94:e6:fe:5f:0e:0b:6c:88:5d:6f: ab:27:53:e2:8c:f7:ca:0c:37:c3:8d:39:ee:62:2d: 9d:49:fe:1c:e0:4a:90:4b:f3:8e:92:6e:2d:2d:e9: 50:1c:d3:fa:ae:ea:29:f4:c5:27:60:a6:15:ce:33: 74:eb:5b:05:d2:59:d2:81:ee:ac:08:77:e0:7f:b3: c8:61:76:c3:db:36:94:1b:6c:2a:e3:bb:bd:1e:14: ef:7c:d8:54:17:b4:a0:fb:7e:ba:11:ea:23:50:49: 3c:ad:04:25:48:b3:3e:cb:72:09:e3:8a:09:9c:42: e9:fe:07:39:ef:10:47:7b:be:9c:de:2d:7c:51:a1: ee:5b:2e:bf:dc:27:8c:7b:37:87:bc:5f:d5:d7:39: 5e:d6:bd:59:a8:21:27:4c:1c:eb:09:1d:5f:0a:d8: 50:9d:7d:bd:a3:6c:c7:47:4f:e8:48:68:7f:32:d5: 5c:4b:55:5f:33:89:9a:75:04:4e:e2:30:62:0b:04: 92:d6:df:76:af:95:e7:c4:fc:47:0f:cf:90:75:26: 0b:e7:a0:7b:03:a5:dc:ab:d2:a9:1c:3d:19:b0:ba: c6:11:fa:91:a8:7a:1b:be:08:cc:43:3e:21:9c:d4: 2e:2b:ef:f0:8e:9b:a9:99:db:85:df:0f:f2:4c:26: 93:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:9B:96:EF:25:52:B9:8A:A8:9C:E3:CE:8A:F5:1C:21:05:F7:2E:3F X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/vpuW7yVSuYqonOPOivUcIQX3Lj8.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.105.116.0/22 Signature Algorithm: sha256WithRSAEncryption bd:eb:3e:d2:e2:b7:c9:06:22:c2:70:2e:47:97:c7:ef:2b:65: cb:11:b8:84:81:de:e6:f7:ff:1f:8e:b4:b1:30:91:f2:e1:76: 28:89:c5:25:89:1d:6a:cd:e2:63:46:f7:d7:a5:cb:fe:56:15: e6:cc:0d:3a:bc:25:83:55:4f:8f:8d:5a:fd:38:01:29:ce:73: 8b:3e:27:2f:27:b8:a0:e9:7d:b1:01:23:31:44:fa:cc:51:2d: e9:b2:7f:d0:13:6d:5c:02:e1:c2:93:72:bb:26:34:6e:c5:44: e3:22:34:ac:53:e2:8a:3b:f6:e4:bf:56:82:54:a4:28:05:3b: e4:a5:78:ec:dd:7e:33:7f:df:93:6d:b8:dd:b6:b6:1b:5d:ea: c9:cc:fb:ad:c4:db:84:5c:d9:1e:62:1b:12:9a:1b:64:30:c6: ae:08:6f:f2:62:cb:2e:98:6b:67:df:b0:d4:0b:8d:98:ef:e1: 96:c6:da:04:72:66:5c:14:3a:be:84:17:db:68:36:b2:02:12: a5:a6:1c:e5:33:a5:77:d3:a3:da:a9:dd:89:a8:7f:14:d6:63: 54:84:6b:f8:f5:21:4e:ef:32:fe:eb:67:0d:e0:84:60:5f:4e: 44:e6:15:d3:d4:8c:e8:03:20:c8:02:fd:f0:37:0c:3f:a3:fa: 6b:a3:d7:73 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCFkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw MjE2MzFaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEJFOUI5NkVGMjU1MkI5 OEFBODlDRTNDRThBRjUxQzIxMDVGNzJFM0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQClYUh3lOb+Xw4LbIhdb6snU+KM98oMN8ONOe5iLZ1J/hzgSpBL 846Sbi0t6VAc0/qu6in0xSdgphXOM3TrWwXSWdKB7qwId+B/s8hhdsPbNpQbbCrj u70eFO982FQXtKD7froR6iNQSTytBCVIsz7LcgnjigmcQun+BznvEEd7vpzeLXxR oe5bLr/cJ4x7N4e8X9XXOV7WvVmoISdMHOsJHV8K2FCdfb2jbMdHT+hIaH8y1VxL VV8ziZp1BE7iMGILBJLW33avlefE/EcPz5B1JgvnoHsDpdyr0qkcPRmwusYR+pGo ehu+CMxDPiGc1C4r7/COm6mZ24XfD/JMJpPtAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUvpuW7yVSuYqonOPOivUcIQX3Lj8wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3ZwdVc3eVZTdVlxb25PUE9pdlVjSVFYM0xqOC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIxaXQwDQYJKoZIhvcNAQELBQADggEBAL3rPtLit8kGIsJwLkeXx+8rZcsR uISB3ub3/x+OtLEwkfLhdiiJxSWJHWrN4mNG99ely/5WFebMDTq8JYNVT4+NWv04 ASnOc4s+Jy8nuKDpfbEBIzFE+sxRLemyf9ATbVwC4cKTcrsmNG7FROMiNKxT4oo7 9uS/VoJUpCgFO+SleOzdfjN/35NtuN22thtd6snM+63E24Rc2R5iGxKaG2Qwxq4I b/Jiyy6Ya2ffsNQLjZjv4ZbG2gRyZlwUOr6EF9toNrICEqWmHOUzpXfTo9qp3Ymo fxTWY1SEa/j1IU7vMv7rZw3ghGBfTkTmFdPUjOgDIMgC/fA3DD+j+muj13M= -----END CERTIFICATE-----Generated at Fri Nov 22 15:24:03 2024 by rpki-client on console-fra.rpki-client.org