$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/xJYxYwijqlT_1-MR8OhvIbBzEcY.roa File: xJYxYwijqlT_1-MR8OhvIbBzEcY.roa (raw, json) Hash identifier: wMDLFamo+AJTgWo3Pub3voYs7NLocBge2VjZ/bIPLTM= Subject key identifier: C4:96:31:63:08:A3:AA:54:FF:D7:E3:11:F0:E8:6F:21:B0:73:11:C6 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0674 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/xJYxYwijqlT_1-MR8OhvIbBzEcY.roa Signing time: Tue 30 Apr 2024 01:37:57 +0000 ROA not before: Tue 30 Apr 2024 01:37:57 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 49.98.164.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1652 (0x674) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 30 01:37:57 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=C496316308A3AA54FFD7E311F0E86F21B07311C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a7:15:a7:11:5c:32:4e:42:bc:be:f1:22:03: dd:92:97:f1:c3:9c:5a:d1:9e:ca:b3:eb:36:5c:ba: c7:37:e8:c2:bd:9b:5c:80:e8:bd:93:2c:2e:d4:db: 78:fd:17:20:58:83:4a:f8:51:ba:cb:2f:bc:d9:1b: 00:0d:04:cc:d2:c1:86:bd:92:d3:99:a3:5b:b7:bd: 8f:cf:d9:74:29:54:d8:e8:ae:1c:c1:27:ac:74:99: c9:83:c5:95:59:07:5a:53:76:d7:30:28:7f:29:af: 05:76:8c:f0:59:d3:2b:5b:31:ce:ed:e1:d9:ec:7a: 0a:b0:9d:d5:71:ab:23:f0:6c:39:7f:c9:14:64:b5: 63:b7:9e:62:6f:1b:83:e7:e6:81:44:88:66:b4:f0: 78:a2:67:4e:c5:fd:1c:24:80:18:06:7a:ac:ea:f6: 91:6f:02:db:48:83:2c:79:01:90:1f:d6:20:f1:b2: ca:1c:4d:c3:ac:d7:3a:0c:18:e4:72:cf:64:a8:dc: 65:89:3a:2a:d3:cd:f2:7e:5f:97:ef:6e:14:50:50: 80:74:75:6a:73:4f:0d:f8:6a:c5:6c:39:21:de:94: 74:91:cc:df:6d:98:93:7b:b1:2d:cf:4c:e3:45:ff: 8f:ef:59:cf:e1:0f:93:1c:65:b8:8a:77:19:4f:e5: 07:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:96:31:63:08:A3:AA:54:FF:D7:E3:11:F0:E8:6F:21:B0:73:11:C6 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/xJYxYwijqlT_1-MR8OhvIbBzEcY.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.98.164.0/22 Signature Algorithm: sha256WithRSAEncryption 1b:22:87:35:e5:f9:7d:7f:b5:4d:2f:50:b6:d0:e2:17:fe:a4: 1f:7f:9e:39:b6:d1:c6:58:29:f9:e4:5a:cf:56:6e:cb:75:e1: 41:73:3d:e4:27:10:dc:cd:bd:99:44:02:23:9b:b8:fc:58:82: 72:e6:a7:32:01:0d:e1:81:32:ce:32:cd:05:32:40:0d:14:b1: 99:80:9f:08:e1:ed:a9:4e:93:db:13:ee:58:e2:e9:29:9a:cf: f4:62:90:e0:7f:c0:74:d8:4e:41:9f:ed:fd:a9:7d:fa:4c:21: 21:59:fa:fb:e1:35:98:69:2d:1b:87:e2:1c:f4:1a:7c:87:a9: e0:3f:7d:4b:c4:37:3d:dc:98:d1:de:7f:67:db:49:9e:05:6a: e6:f2:19:39:54:89:0a:39:3e:67:ca:98:c7:1d:a4:b4:bd:5b: 9c:66:8b:5a:48:4c:4c:5e:d7:46:28:9e:51:49:9e:a7:b6:68: 09:d8:41:c8:ed:18:1c:6a:df:96:0c:15:f5:0e:28:03:97:37: 3c:82:56:8a:24:8b:1e:6a:02:5c:52:6e:60:c2:9d:4f:38:06: 0a:ba:6b:34:ec:54:fe:03:fe:3b:9b:69:a1:38:3d:ac:57:75: 22:99:3b:55:c4:3f:0e:40:4f:66:86:63:f0:33:33:1b:fa:2c: 4a:3b:5e:95 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBnQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw MTM3NTdaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEM0OTYzMTYzMDhBM0FB NTRGRkQ3RTMxMUYwRTg2RjIxQjA3MzExQzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDCpxWnEVwyTkK8vvEiA92Sl/HDnFrRnsqz6zZcusc36MK9m1yA 6L2TLC7U23j9FyBYg0r4UbrLL7zZGwANBMzSwYa9ktOZo1u3vY/P2XQpVNjorhzB J6x0mcmDxZVZB1pTdtcwKH8prwV2jPBZ0ytbMc7t4dnsegqwndVxqyPwbDl/yRRk tWO3nmJvG4Pn5oFEiGa08HiiZ07F/RwkgBgGeqzq9pFvAttIgyx5AZAf1iDxssoc TcOs1zoMGORyz2So3GWJOirTzfJ+X5fvbhRQUIB0dWpzTw34asVsOSHelHSRzN9t mJN7sS3PTONF/4/vWc/hD5McZbiKdxlP5QchAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUxJYxYwijqlT/1+MR8OhvIbBzEcYwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3hKWXhZd2lqcWxUXzEtTVI4T2h2SWJCekVjWS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIxYqQwDQYJKoZIhvcNAQELBQADggEBABsihzXl+X1/tU0vULbQ4hf+pB9/ njm20cZYKfnkWs9Wbst14UFzPeQnENzNvZlEAiObuPxYgnLmpzIBDeGBMs4yzQUy QA0UsZmAnwjh7alOk9sT7lji6Smaz/RikOB/wHTYTkGf7f2pffpMISFZ+vvhNZhp LRuH4hz0GnyHqeA/fUvENz3cmNHef2fbSZ4FaubyGTlUiQo5PmfKmMcdpLS9W5xm i1pITExe10YonlFJnqe2aAnYQcjtGBxq35YMFfUOKAOXNzyCVookix5qAlxSbmDC nU84Bgq6azTsVP4D/jubaaE4PaxXdSKZO1XEPw5AT2aGY/AzMxv6LEo7XpU= -----END CERTIFICATE-----Generated at Sat Jun 1 15:54:38 2024 by rpki-client on console-ams.rpki-client.org