$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/xGhrvzamsM1U_zsoDIdQ5HofRPc.roa File: xGhrvzamsM1U_zsoDIdQ5HofRPc.roa (raw, json) Hash identifier: RCR33P7pC8sB+NQggrubdiaG094W/wAYpWa9EMyRcdU= Subject key identifier: C4:68:6B:BF:36:A6:B0:CD:54:FF:3B:28:0C:87:50:E4:7A:1F:44:F7 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 030F Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/xGhrvzamsM1U_zsoDIdQ5HofRPc.roa Signing time: Thu 01 Jun 2023 16:05:30 +0000 ROA not before: Thu 01 Jun 2023 16:05:30 +0000 ROA not after: Tue 14 May 2024 01:30:02 +0000 asID: 9605 IP address blocks: 49.98.62.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 May 2024 13:36:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 783 (0x30f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 1 16:05:30 2023 GMT Not After : May 14 01:30:02 2024 GMT Subject: CN=C4686BBF36A6B0CD54FF3B280C8750E47A1F44F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:4b:c1:5a:b3:08:58:7c:d6:2a:94:54:78:cf: 0c:c9:2f:39:d7:9d:3c:4b:e2:89:ba:3e:9d:30:92: 2d:a2:1c:58:a4:42:38:ba:ce:71:cb:c3:a8:e9:92: 15:87:7a:a3:ec:f7:4c:28:07:a5:c2:72:4e:bc:e7: bf:d3:91:24:d4:f9:60:c5:06:d1:88:75:71:85:b3: 5f:a2:6b:92:68:d7:b8:5e:59:6b:de:75:99:c9:90: a9:8d:7a:39:e6:13:be:c4:9a:27:92:f0:a3:46:12: 22:bd:39:71:a3:f7:01:56:04:81:3c:89:f8:97:e1: 19:99:7b:3f:06:85:9a:e8:48:ce:54:21:57:3c:9b: 90:dc:d0:28:03:af:89:b2:67:2f:be:7a:36:4f:10: 6c:b3:e5:cc:76:71:3e:f8:28:7f:09:76:b7:d2:ce: 63:6a:14:2d:74:e0:80:27:79:01:d1:c9:49:06:0b: 96:80:6c:bf:72:a1:ae:58:2c:22:77:c2:68:b3:81: e3:f1:61:dd:5f:1b:d5:d8:9a:46:d1:19:92:e6:18: c6:c6:81:14:34:96:eb:ef:90:98:d1:99:7b:d3:06: 4d:df:3e:57:ad:80:00:71:cd:82:e8:96:03:84:a7: 27:ca:09:44:93:a7:1b:fa:77:a2:ab:36:ca:c7:72: c8:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:68:6B:BF:36:A6:B0:CD:54:FF:3B:28:0C:87:50:E4:7A:1F:44:F7 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/xGhrvzamsM1U_zsoDIdQ5HofRPc.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.98.62.0/23 Signature Algorithm: sha256WithRSAEncryption 09:f2:11:24:d1:73:8b:8a:96:46:13:11:d9:0e:a7:dd:90:f7: 39:9e:bb:6b:45:46:94:29:12:f7:12:ab:04:10:8b:05:f1:2d: fc:c5:1f:f9:95:f0:66:e2:a2:7d:d2:a7:63:7f:a8:6b:0c:86: 09:6f:19:56:d8:93:f4:40:3e:1f:5b:cd:77:63:71:69:28:5a: ea:9d:d7:7a:cc:ab:31:02:a7:ad:ed:59:b2:d7:8a:10:44:d3: 38:4f:c9:24:e3:97:7d:e8:cd:3b:04:20:d5:72:fc:15:ac:8d: 85:0b:4e:22:8f:51:28:b7:0f:7b:a4:39:a9:85:cc:e5:31:cc: c8:d2:65:fc:69:f0:67:02:14:92:7b:d9:82:d1:40:b5:81:3d: b4:0f:91:b4:e9:59:3d:37:e6:ab:5f:ce:05:6f:37:b7:53:53: 0a:16:3a:ea:29:d0:13:31:c7:2c:a7:05:b9:11:0e:d3:c6:21: cf:c5:11:1f:3c:60:99:a0:5f:8b:da:0a:9b:92:8c:1a:84:44: f0:e8:0e:85:ee:0d:a3:9a:1f:a1:fe:ef:c4:14:1b:3a:c9:85: 47:e0:ca:33:0a:4e:88:a5:fa:74:99:29:98:e8:1c:42:fc:98: cf:30:29:26:92:ed:9b:7d:0f:a5:b2:97:f2:1f:43:94:4a:8f: 0a:7f:e3:31 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAw8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA2MDEx NjA1MzBaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKEM0Njg2QkJGMzZBNkIw Q0Q1NEZGM0IyODBDODc1MEU0N0ExRjQ0RjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDlS8FaswhYfNYqlFR4zwzJLznXnTxL4om6Pp0wki2iHFikQji6 znHLw6jpkhWHeqPs90woB6XCck6857/TkSTU+WDFBtGIdXGFs1+ia5Jo17heWWve dZnJkKmNejnmE77EmieS8KNGEiK9OXGj9wFWBIE8ifiX4RmZez8GhZroSM5UIVc8 m5Dc0CgDr4myZy++ejZPEGyz5cx2cT74KH8JdrfSzmNqFC104IAneQHRyUkGC5aA bL9yoa5YLCJ3wmizgePxYd1fG9XYmkbRGZLmGMbGgRQ0luvvkJjRmXvTBk3fPlet gABxzYLolgOEpyfKCUSTpxv6d6KrNsrHcshNAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUxGhrvzamsM1U/zsoDIdQ5HofRPcwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3hHaHJ2emFtc00xVV96c29ESWRRNUhvZlJQYy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExYj4wDQYJKoZIhvcNAQELBQADggEBAAnyESTRc4uKlkYTEdkOp92Q9zme u2tFRpQpEvcSqwQQiwXxLfzFH/mV8Gbion3Sp2N/qGsMhglvGVbYk/RAPh9bzXdj cWkoWuqd13rMqzECp63tWbLXihBE0zhPySTjl33ozTsEINVy/BWsjYULTiKPUSi3 D3ukOamFzOUxzMjSZfxp8GcCFJJ72YLRQLWBPbQPkbTpWT035qtfzgVvN7dTUwoW Ouop0BMxxyynBbkRDtPGIc/FER88YJmgX4vaCpuSjBqERPDoDoXuDaOaH6H+78QU GzrJhUfgyjMKToil+nSZKZjoHEL8mM8wKSaS7Zt9D6Wyl/IfQ5RKjwp/4zE= -----END CERTIFICATE-----Generated at Sat Apr 27 10:15:58 2024 by rpki-client on console-ams.rpki-client.org