$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/xzqEehc0fBzFACKriJUrRuEdrZ0.roa File: xzqEehc0fBzFACKriJUrRuEdrZ0.roa (raw, json) Hash identifier: EbYrMlPovwHK9OXVpjw0uM9/3gZF2dfb6055KQbhwEI= Subject key identifier: C7:3A:84:7A:17:34:7C:1C:C5:00:22:AB:88:95:2B:46:E1:1D:AD:9D Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 07C3 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/xzqEehc0fBzFACKriJUrRuEdrZ0.roa Signing time: Tue 30 Apr 2024 02:08:46 +0000 ROA not before: Tue 30 Apr 2024 02:08:46 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 49.97.88.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Jun 2024 06:27:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1987 (0x7c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 30 02:08:46 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=C73A847A17347C1CC50022AB88952B46E11DAD9D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:76:45:a9:a8:c3:f1:07:26:d0:ed:98:05:d4: ab:5d:46:ec:94:81:e0:84:c6:d8:c3:82:90:9e:48: 70:af:82:0f:ee:6d:e2:58:77:21:f2:ae:46:51:bf: 34:a7:bd:4c:55:81:26:01:88:fd:52:55:a2:88:50: 7a:94:96:bf:31:73:91:7a:44:62:59:e1:da:09:99: aa:90:a7:ea:2f:38:1d:d0:d8:7a:30:6d:29:4c:3c: 99:b1:68:4f:28:f3:21:ff:8a:e9:42:85:a1:ae:4c: 54:80:b5:c4:25:d8:9c:8b:e1:32:44:28:c6:05:c2: 7e:f1:bc:33:80:ee:3b:32:45:67:e5:5e:30:64:5b: 58:e3:d9:a4:b1:ef:55:08:81:29:88:bb:7b:62:55: a0:6a:e5:9e:9d:16:66:fe:98:56:65:e6:a6:ee:dc: 54:e1:3d:e0:76:8d:86:8a:56:3a:c2:27:3f:9f:c7: 57:9b:22:99:31:68:0e:8d:20:bb:21:2e:d6:db:93: 6b:2b:4d:56:f7:d3:dc:ef:dc:0d:55:34:b0:c3:14: 76:6b:73:67:d1:32:fc:f0:2a:ac:e5:9d:e5:45:91: 04:6d:9c:1e:52:f7:d6:68:da:00:a0:ed:cc:db:0c: ff:0e:95:64:79:95:2e:7a:03:29:7e:84:e1:89:ed: aa:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:3A:84:7A:17:34:7C:1C:C5:00:22:AB:88:95:2B:46:E1:1D:AD:9D X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/xzqEehc0fBzFACKriJUrRuEdrZ0.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.97.88.0/22 Signature Algorithm: sha256WithRSAEncryption 8a:7b:4a:7c:df:80:1c:ae:00:08:93:ee:98:bf:94:7b:49:7f: 70:d5:00:ae:a2:58:2d:12:eb:c2:f2:a5:95:d9:4a:dc:3b:9e: e5:0d:f6:e3:ca:0a:85:ee:16:e9:22:29:10:9e:ec:03:f5:81: e8:dd:89:8f:be:cd:7e:3d:52:b8:80:1a:95:43:ca:81:59:4c: b6:ac:3f:19:42:78:5a:dd:57:1e:74:d7:31:82:37:66:6e:12: 51:97:9d:ff:24:19:0d:ca:fa:1a:c4:36:52:9f:8b:4f:d4:b0: 45:d4:39:ee:fa:17:07:e6:02:56:cd:45:e3:cc:a1:ff:89:54: 45:e1:cb:b6:d9:e0:c9:66:9c:f7:d3:19:db:3f:85:dd:2f:b4: c8:e6:41:d6:a6:e7:78:62:b7:f6:b1:cd:f0:ff:12:a6:49:30: 46:84:a5:06:8b:73:a5:d9:89:a4:00:c5:65:ad:64:30:8c:28: bd:a4:3c:3e:77:23:c3:74:c8:e0:37:3b:c7:85:07:b1:ea:7b: 73:7a:fd:dd:9a:d5:67:68:83:94:11:56:44:6f:6b:ea:c5:32: 27:ef:0a:c5:3f:ac:20:0c:bc:dc:69:a2:56:03:38:38:11:b5: 2d:7d:83:ac:6b:3f:60:b2:4f:1f:dd:cc:2c:de:83:59:52:f9: 90:e3:f8:59 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICB8MwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw MjA4NDZaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEM3M0E4NDdBMTczNDdD MUNDNTAwMjJBQjg4OTUyQjQ2RTExREFEOUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDjdkWpqMPxBybQ7ZgF1KtdRuyUgeCExtjDgpCeSHCvgg/ubeJY dyHyrkZRvzSnvUxVgSYBiP1SVaKIUHqUlr8xc5F6RGJZ4doJmaqQp+ovOB3Q2How bSlMPJmxaE8o8yH/iulChaGuTFSAtcQl2JyL4TJEKMYFwn7xvDOA7jsyRWflXjBk W1jj2aSx71UIgSmIu3tiVaBq5Z6dFmb+mFZl5qbu3FThPeB2jYaKVjrCJz+fx1eb IpkxaA6NILshLtbbk2srTVb309zv3A1VNLDDFHZrc2fRMvzwKqzlneVFkQRtnB5S 99Zo2gCg7czbDP8OlWR5lS56Ayl+hOGJ7aqFAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUxzqEehc0fBzFACKriJUrRuEdrZ0wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3h6cUVlaGMwZkJ6RkFDS3JpSlVyUnVFZHJaMC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIxYVgwDQYJKoZIhvcNAQELBQADggEBAIp7SnzfgByuAAiT7pi/lHtJf3DV AK6iWC0S68LypZXZStw7nuUN9uPKCoXuFukiKRCe7AP1gejdiY++zX49UriAGpVD yoFZTLasPxlCeFrdVx501zGCN2ZuElGXnf8kGQ3K+hrENlKfi0/UsEXUOe76Fwfm AlbNRePMof+JVEXhy7bZ4MlmnPfTGds/hd0vtMjmQdam53hit/axzfD/EqZJMEaE pQaLc6XZiaQAxWWtZDCMKL2kPD53I8N0yOA3O8eFB7Hqe3N6/d2a1Wdog5QRVkRv a+rFMifvCsU/rCAMvNxpolYDODgRtS19g6xrP2CyTx/dzCzeg1lS+ZDj+Fk= -----END CERTIFICATE-----Generated at Mon Jun 24 23:50:28 2024 by rpki-client on console-fra.rpki-client.org