$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/y7ga1FdBvN8zGdBtTC71kYgRKnY.roa File: y7ga1FdBvN8zGdBtTC71kYgRKnY.roa (raw, json) Hash identifier: lJtJsJad7pbPeGV9zl9I/isHcW86ftlDLVuLF/1wNqg= Subject key identifier: CB:B8:1A:D4:57:41:BC:DF:33:19:D0:6D:4C:2E:F5:91:88:11:2A:76 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0860 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/y7ga1FdBvN8zGdBtTC71kYgRKnY.roa Signing time: Tue 30 Apr 2024 02:16:34 +0000 ROA not before: Tue 30 Apr 2024 02:16:34 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 49.102.130.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 22:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2144 (0x860) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 30 02:16:34 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=CBB81AD45741BCDF3319D06D4C2EF59188112A76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:2b:b7:8c:43:1f:4a:cb:0a:f0:d5:bd:a6:af: dc:21:7a:b4:80:ca:12:f2:bb:44:89:e3:f9:bf:5d: 01:2b:c2:e8:71:3a:79:60:85:3d:8f:e5:50:eb:2f: 2e:c8:b7:fb:68:fe:d9:ed:3c:45:79:18:74:a8:1c: c3:70:44:c7:f3:e5:ec:de:77:13:9b:7d:f9:ac:54: 8b:d5:de:f1:6f:da:7e:cc:ad:31:ed:4f:ca:27:3e: b3:c2:bd:33:7a:c4:89:98:7c:07:6d:a2:a4:27:f9: ec:ed:e6:8e:54:18:00:a2:56:77:3e:b0:ce:c7:3a: f9:5b:5e:d8:97:79:6a:9c:c4:74:7c:b8:dd:68:6d: 83:b1:df:f8:db:88:9f:29:5f:6b:26:66:b0:8c:80: 93:53:08:2f:e0:8c:31:17:fd:bf:71:2d:75:af:ed: 1f:a9:5c:6b:50:13:c3:ee:16:f5:95:f5:7c:26:64: 20:55:7a:60:ef:10:c0:cc:1e:06:5b:11:e1:c8:cb: 2e:d8:73:87:2c:d4:f0:eb:ee:0e:3c:bc:73:79:65: 81:14:da:8d:94:ba:d0:f4:4b:a0:84:88:5c:18:65: e0:37:9c:9e:bf:0b:bb:aa:91:c6:25:c3:a3:58:18: 94:ba:24:0f:16:ef:fe:ad:c0:7d:b7:e4:39:2f:cd: 3e:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:B8:1A:D4:57:41:BC:DF:33:19:D0:6D:4C:2E:F5:91:88:11:2A:76 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/y7ga1FdBvN8zGdBtTC71kYgRKnY.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.102.130.0/23 Signature Algorithm: sha256WithRSAEncryption 49:23:06:e4:08:3f:a9:a5:ea:43:7d:c6:e9:00:45:b8:d7:9d: 5c:dd:64:7d:6c:14:11:6b:68:5c:cc:87:e7:4a:b0:86:08:72: 6a:d7:d5:8d:c5:bf:c4:c9:66:d8:a5:4e:ff:9d:6c:39:60:a5: 71:c2:1e:67:4d:d5:08:f2:e7:78:f7:ea:31:dc:1f:1a:9f:8e: 30:31:35:7a:d2:2a:95:48:52:3a:05:ad:e1:90:16:a3:1d:71: 8c:6e:4f:1c:ff:aa:ef:56:3e:a9:d8:25:2e:13:12:8d:42:5c: 25:81:60:ef:04:49:fa:38:06:ea:6e:e1:26:c5:f8:cb:1a:74: 2b:27:d1:c4:f4:b4:44:2b:e5:62:61:12:85:5d:2b:ed:11:87: 92:1b:30:9a:da:13:fc:1b:2a:f4:ce:45:d5:31:8e:7c:dc:71: 08:61:d7:79:3e:1a:53:90:25:a7:5a:c9:99:98:49:9d:9e:3a: 06:20:48:73:f8:4c:94:5a:ab:ad:1b:00:89:ab:c8:7e:75:d0: 54:a7:d7:94:81:46:ea:4f:1f:7b:8d:26:a1:2b:52:c8:4b:ac: ca:42:37:bf:60:96:8b:46:11:f0:89:9e:94:fa:07:d6:d2:85: 22:eb:35:7e:cb:f3:81:55:c2:a6:6e:16:7e:51:ac:4d:8d:4f: b2:83:ca:16 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCGAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw MjE2MzRaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKENCQjgxQUQ0NTc0MUJD REYzMzE5RDA2RDRDMkVGNTkxODgxMTJBNzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCxK7eMQx9Kywrw1b2mr9wherSAyhLyu0SJ4/m/XQErwuhxOnlg hT2P5VDrLy7It/to/tntPEV5GHSoHMNwRMfz5ezedxObffmsVIvV3vFv2n7MrTHt T8onPrPCvTN6xImYfAdtoqQn+ezt5o5UGACiVnc+sM7HOvlbXtiXeWqcxHR8uN1o bYOx3/jbiJ8pX2smZrCMgJNTCC/gjDEX/b9xLXWv7R+pXGtQE8PuFvWV9XwmZCBV emDvEMDMHgZbEeHIyy7Yc4cs1PDr7g48vHN5ZYEU2o2UutD0S6CEiFwYZeA3nJ6/ C7uqkcYlw6NYGJS6JA8W7/6twH235DkvzT51AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUy7ga1FdBvN8zGdBtTC71kYgRKnYwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3k3Z2ExRmRCdk44ekdkQnRUQzcxa1lnUktuWS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExZoIwDQYJKoZIhvcNAQELBQADggEBAEkjBuQIP6ml6kN9xukARbjXnVzd ZH1sFBFraFzMh+dKsIYIcmrX1Y3Fv8TJZtilTv+dbDlgpXHCHmdN1Qjy53j36jHc HxqfjjAxNXrSKpVIUjoFreGQFqMdcYxuTxz/qu9WPqnYJS4TEo1CXCWBYO8ESfo4 Bupu4SbF+MsadCsn0cT0tEQr5WJhEoVdK+0Rh5IbMJraE/wbKvTORdUxjnzccQhh 13k+GlOQJadayZmYSZ2eOgYgSHP4TJRaq60bAImryH510FSn15SBRupPH3uNJqEr UshLrMpCN79glotGEfCJnpT6B9bShSLrNX7L84FVwqZuFn5RrE2NT7KDyhY= -----END CERTIFICATE-----Generated at Mon Nov 25 23:54:43 2024 by rpki-client on console-ams.rpki-client.org