$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/xeKhtRpPHxBesS-YW7zcLY3iYUA.roa File: xeKhtRpPHxBesS-YW7zcLY3iYUA.roa (raw, json) Hash identifier: vTcn5JT5n6K2j5AqGNzjh1/eCKqedvT2dH35o5c/o34= Subject key identifier: C5:E2:A1:B5:1A:4F:1F:10:5E:B1:2F:98:5B:BC:DC:2D:8D:E2:61:40 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 079C Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/xeKhtRpPHxBesS-YW7zcLY3iYUA.roa Signing time: Tue 30 Apr 2024 02:06:27 +0000 ROA not before: Tue 30 Apr 2024 02:06:27 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 49.96.10.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:41:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1948 (0x79c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 30 02:06:27 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=C5E2A1B51A4F1F105EB12F985BBCDC2D8DE26140 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:73:70:44:f7:8a:26:56:96:d3:d0:18:45:ed: d2:3d:80:4a:eb:41:60:c9:07:3b:53:6e:bd:de:8c: 7e:8b:10:fc:f3:d3:57:a0:d5:be:b7:d5:0f:20:49: 1a:a5:82:ce:e2:9a:ee:8a:d3:01:19:bf:ff:30:1e: b3:17:df:3e:90:3f:52:d0:34:4f:de:c6:04:78:ef: 94:27:af:0d:16:9e:4a:2d:9a:9e:d3:1c:bf:fd:b4: 62:15:14:b1:78:49:37:c5:5f:e6:bc:8a:a7:a5:5e: 21:7c:a5:3f:6d:ab:a0:58:ee:45:80:77:35:d5:bc: 95:a3:b9:3e:d6:73:53:a3:d6:14:2c:57:8f:fa:2d: 92:37:37:cf:d5:9c:59:83:b9:d7:f0:44:8c:71:af: b7:a4:26:6c:e8:c2:3e:59:da:c9:87:46:e3:12:4b: 0a:8b:a7:7d:86:c7:b8:73:b6:7d:54:3b:a4:cb:7a: 01:dc:46:a3:e1:ec:9f:88:f4:ea:bc:3a:6c:c3:5e: dc:e0:b7:6a:8c:72:48:f4:52:11:d5:6a:fa:72:66: ff:34:48:ea:9c:00:c8:95:1c:aa:d9:9c:c4:cf:b9: f3:a9:6e:54:8a:fc:a9:30:fd:07:22:fb:95:7d:b4: 1b:3c:f1:7d:cb:eb:59:95:71:86:ae:6f:30:61:71: de:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:E2:A1:B5:1A:4F:1F:10:5E:B1:2F:98:5B:BC:DC:2D:8D:E2:61:40 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/xeKhtRpPHxBesS-YW7zcLY3iYUA.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.96.10.0/23 Signature Algorithm: sha256WithRSAEncryption 60:1d:dd:4a:75:27:0d:0f:ec:a2:48:85:95:4c:c2:95:ae:2b: cc:b6:66:93:cd:6d:c8:4b:79:75:37:52:40:9b:b5:2d:a7:e2: 8d:01:77:e9:d1:dc:88:14:90:c8:0f:39:f5:66:7c:9c:e0:7f: ac:be:5f:a3:56:07:d9:0c:8e:dd:89:45:6f:1a:a0:32:85:ec: 97:26:da:6b:9c:14:be:6d:6a:6e:55:38:3b:dd:ea:b0:23:4c: 9a:b8:95:fd:03:55:36:cb:6d:62:50:c2:c4:22:74:7d:3f:04: b5:64:fd:73:99:b7:85:60:ba:18:de:5f:66:7d:7c:45:2b:5f: 89:84:04:1b:8a:cb:66:9d:b0:6d:b0:de:3b:56:16:6e:81:43: f7:8b:be:33:e3:33:8b:11:12:6d:22:07:a4:ee:d9:92:0b:dc: aa:df:5e:fb:6e:9c:92:3a:a4:01:b3:06:ff:a3:4e:ef:b1:43: c9:88:e7:e2:71:0e:75:ef:d3:12:00:22:c1:5e:94:93:f2:88: ce:76:05:14:fc:5b:ca:5e:88:02:d9:e3:de:7b:db:85:b9:43: b8:e5:14:9c:bd:1a:42:a2:18:8c:58:50:05:34:8e:79:c6:2e: 7b:70:ba:31:c6:e0:f5:bb:62:f6:23:6b:8a:d6:1d:0e:0b:58: 7a:67:b2:d2 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICB5wwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw MjA2MjdaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEM1RTJBMUI1MUE0RjFG MTA1RUIxMkY5ODVCQkNEQzJEOERFMjYxNDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC3c3BE94omVpbT0BhF7dI9gErrQWDJBztTbr3ejH6LEPzz01eg 1b631Q8gSRqlgs7imu6K0wEZv/8wHrMX3z6QP1LQNE/exgR475Qnrw0Wnkotmp7T HL/9tGIVFLF4STfFX+a8iqelXiF8pT9tq6BY7kWAdzXVvJWjuT7Wc1Oj1hQsV4/6 LZI3N8/VnFmDudfwRIxxr7ekJmzowj5Z2smHRuMSSwqLp32Gx7hztn1UO6TLegHc RqPh7J+I9Oq8OmzDXtzgt2qMckj0UhHVavpyZv80SOqcAMiVHKrZnMTPufOpblSK /Kkw/Qci+5V9tBs88X3L61mVcYaubzBhcd57AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUxeKhtRpPHxBesS+YW7zcLY3iYUAwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3hlS2h0UnBQSHhCZXNTLVlXN3pjTFkzaVlVQS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExYAowDQYJKoZIhvcNAQELBQADggEBAGAd3Up1Jw0P7KJIhZVMwpWuK8y2 ZpPNbchLeXU3UkCbtS2n4o0Bd+nR3IgUkMgPOfVmfJzgf6y+X6NWB9kMjt2JRW8a oDKF7Jcm2mucFL5tam5VODvd6rAjTJq4lf0DVTbLbWJQwsQidH0/BLVk/XOZt4Vg uhjeX2Z9fEUrX4mEBBuKy2adsG2w3jtWFm6BQ/eLvjPjM4sREm0iB6Tu2ZIL3Krf XvtunJI6pAGzBv+jTu+xQ8mI5+JxDnXv0xIAIsFelJPyiM52BRT8W8peiALZ4957 24W5Q7jlFJy9GkKiGIxYUAU0jnnGLntwujHG4PW7YvYja4rWHQ4LWHpnstI= -----END CERTIFICATE-----Generated at Fri Nov 22 15:24:03 2024 by rpki-client on console-fra.rpki-client.org