$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/xg2Qj5krPAQvFuXyuqe60p0qXNo.roa File: xg2Qj5krPAQvFuXyuqe60p0qXNo.roa (raw, json) Hash identifier: fV9zaY8iuKEI98fBrEL8CDaJliNmLcwXmH3/xpRztz0= Subject key identifier: C6:0D:90:8F:99:2B:3C:04:2F:16:E5:F2:BA:A7:BA:D2:9D:2A:5C:DA Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 06F6 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/xg2Qj5krPAQvFuXyuqe60p0qXNo.roa Signing time: Tue 30 Apr 2024 01:49:46 +0000 ROA not before: Tue 30 Apr 2024 01:49:46 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 49.96.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1782 (0x6f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 30 01:49:46 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=C60D908F992B3C042F16E5F2BAA7BAD29D2A5CDA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:de:9b:ef:a9:7d:de:48:31:34:ea:e3:35:ba: 10:c9:c2:93:52:5c:50:9b:1b:81:5f:66:47:26:0e: 48:3d:b5:17:f7:f1:bf:e6:70:8d:c9:e5:c4:67:c6: 93:13:04:4e:56:2e:08:66:2a:0d:db:73:75:3a:7c: c5:94:70:1b:03:5a:50:8d:2b:b8:3a:f7:02:94:95: 9d:2f:3b:38:50:9f:18:af:df:a6:d7:02:43:dd:0e: 94:bf:d5:12:5f:d4:02:d6:b8:a0:1a:cc:1a:77:04: 4f:b0:8e:ca:f9:2b:45:e1:85:08:ae:11:cd:2b:c3: 8a:4e:da:c3:3f:f4:58:83:22:24:c0:0a:85:55:1f: 8e:85:1c:16:6a:37:78:77:14:7a:9c:20:c3:e6:8c: 45:c0:ee:0a:37:03:50:f0:b6:ed:d9:1f:81:5a:34: ae:76:af:45:8e:60:70:f5:ac:8e:81:08:12:e4:4f: 7e:ed:18:07:e3:02:2a:86:5c:ae:68:dd:d7:59:d6: 97:09:a0:b0:91:40:27:ca:70:67:86:4b:de:ca:5c: a3:d0:a9:fa:63:7a:d1:85:ba:73:b9:36:f6:f8:62: 69:2d:c7:5e:d9:b9:b3:31:d9:b2:01:c1:da:f8:18: 9c:2f:38:f3:ac:dc:c2:3a:17:c7:b8:aa:13:c3:d3: 19:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:0D:90:8F:99:2B:3C:04:2F:16:E5:F2:BA:A7:BA:D2:9D:2A:5C:DA X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/xg2Qj5krPAQvFuXyuqe60p0qXNo.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.96.29.0/24 Signature Algorithm: sha256WithRSAEncryption 31:03:bc:42:66:05:0e:99:81:a0:86:5e:e8:3f:66:ff:ee:a7: 1b:a5:1d:0a:6f:58:44:a0:53:92:ca:41:b0:b8:40:9d:51:3b: 20:5a:9c:12:e0:dc:8e:95:87:99:6a:8e:4f:d2:e9:6c:3e:46: ad:8d:1e:08:46:24:cb:2c:4f:9d:18:ca:20:44:f6:19:2a:d6: f0:a3:bf:27:a8:66:80:2d:3c:de:b6:d8:43:88:d5:54:18:9a: 0e:8b:59:9b:8e:cd:26:2a:d5:c0:00:67:2d:2a:3c:db:6c:25: f8:d2:4e:fc:31:74:38:67:0e:a4:6d:12:e8:e6:f4:f0:90:38: 20:98:a0:c7:35:9e:7e:34:01:14:a1:b7:19:55:29:8d:75:95: 6a:87:09:49:b3:a0:b1:fa:23:53:f5:b5:ab:a4:72:a7:e6:6b: 78:04:c6:bf:15:87:fa:08:35:99:e5:b4:c5:81:96:2a:ea:f8: d3:11:e2:c1:ae:7c:23:84:4f:94:e1:32:33:3c:1c:7f:b8:52: ae:a5:bf:57:5c:1e:2f:d6:44:8d:a4:d6:7b:db:14:54:0a:1e: 23:38:27:90:e1:3a:6c:f5:5f:35:d0:96:d2:d9:1d:22:80:69: 92:c1:52:95:0d:b5:92:0c:ce:8b:98:4c:2f:0c:bb:8d:d6:1e: 17:35:82:12 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBvYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw MTQ5NDZaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEM2MEQ5MDhGOTkyQjND MDQyRjE2RTVGMkJBQTdCQUQyOUQyQTVDREEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDN3pvvqX3eSDE06uM1uhDJwpNSXFCbG4FfZkcmDkg9tRf38b/m cI3J5cRnxpMTBE5WLghmKg3bc3U6fMWUcBsDWlCNK7g69wKUlZ0vOzhQnxiv36bX AkPdDpS/1RJf1ALWuKAazBp3BE+wjsr5K0XhhQiuEc0rw4pO2sM/9FiDIiTACoVV H46FHBZqN3h3FHqcIMPmjEXA7go3A1Dwtu3ZH4FaNK52r0WOYHD1rI6BCBLkT37t GAfjAiqGXK5o3ddZ1pcJoLCRQCfKcGeGS97KXKPQqfpjetGFunO5Nvb4Ymktx17Z ubMx2bIBwdr4GJwvOPOs3MI6F8e4qhPD0xm5AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUxg2Qj5krPAQvFuXyuqe60p0qXNowHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3hnMlFqNWtyUEFRdkZ1WHl1cWU2MHAwcVhOby5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAxYB0wDQYJKoZIhvcNAQELBQADggEBADEDvEJmBQ6ZgaCGXug/Zv/upxul HQpvWESgU5LKQbC4QJ1ROyBanBLg3I6Vh5lqjk/S6Ww+Rq2NHghGJMssT50YyiBE 9hkq1vCjvyeoZoAtPN622EOI1VQYmg6LWZuOzSYq1cAAZy0qPNtsJfjSTvwxdDhn DqRtEujm9PCQOCCYoMc1nn40ARShtxlVKY11lWqHCUmzoLH6I1P1taukcqfma3gE xr8Vh/oINZnltMWBlirq+NMR4sGufCOET5ThMjM8HH+4Uq6lv1dcHi/WRI2k1nvb FFQKHiM4J5DhOmz1XzXQltLZHSKAaZLBUpUNtZIMzouYTC8Mu43WHhc1ghI= -----END CERTIFICATE-----Generated at Sat Jun 1 13:38:49 2024 by rpki-client on console-fra.rpki-client.org