$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/4bh-Vr5n8bfhP5I8iEYg4w8mRk0.roa File: 4bh-Vr5n8bfhP5I8iEYg4w8mRk0.roa (raw, json) Hash identifier: Ju4AgH4cWbuaWiXi6qfY6rfbrc9114fn6YsZpILti/E= Subject key identifier: E1:B8:7E:56:BE:67:F1:B7:E1:3F:92:3C:88:46:20:E3:0F:26:46:4D Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 05A7 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/4bh-Vr5n8bfhP5I8iEYg4w8mRk0.roa Signing time: Thu 27 Jul 2023 17:00:19 +0000 ROA not before: Thu 27 Jul 2023 17:00:19 +0000 ROA not after: Sun 14 Jul 2024 01:30:03 +0000 asID: 9605 IP address blocks: 49.103.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Jul 2024 00:06:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1447 (0x5a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jul 27 17:00:19 2023 GMT Not After : Jul 14 01:30:03 2024 GMT Subject: CN=E1B87E56BE67F1B7E13F923C884620E30F26464D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:36:6e:6b:20:0c:96:18:44:62:36:bf:7c:4e: de:41:1b:05:4a:e8:7b:19:13:b3:a0:d7:79:4c:50: 71:f9:c7:4e:6e:87:e3:0c:23:98:d8:74:a3:53:d9: f2:cf:c1:8a:96:64:e7:65:5e:6f:93:4f:e1:e7:27: 99:db:af:a5:67:43:50:75:49:ca:e1:3c:51:cc:f3: 35:8c:82:dd:84:21:d7:d0:ce:9a:bb:4b:95:03:6e: 9b:12:9c:97:ae:25:ba:1f:c4:41:70:5b:3d:82:14: 4d:e4:a9:f0:da:2a:32:06:88:9b:5f:db:7c:f1:9d: 5c:ba:a4:de:c0:58:be:a2:04:25:e0:79:82:3c:6b: f4:de:71:70:2c:ee:1a:80:a6:3d:36:e8:a9:4b:ea: 6e:3a:d6:5a:54:56:29:63:db:7d:0a:b1:6e:e0:9b: 39:40:32:9c:63:c9:6b:a2:e5:21:97:4d:ff:a9:ae: 8b:b9:ce:bc:00:49:54:b0:75:e5:46:d2:b5:ca:0c: 10:77:ec:c8:ff:18:d5:63:92:da:81:3b:16:13:fd: 38:ad:20:63:31:ea:8d:8e:95:54:3b:3b:ed:3a:67: 6a:db:63:31:1b:65:77:64:89:00:07:43:19:10:42: cd:7a:9b:46:4a:c3:a4:2f:cf:67:df:0b:24:42:20: ae:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:B8:7E:56:BE:67:F1:B7:E1:3F:92:3C:88:46:20:E3:0F:26:46:4D X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/4bh-Vr5n8bfhP5I8iEYg4w8mRk0.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.103.48.0/20 Signature Algorithm: sha256WithRSAEncryption d8:16:5a:49:6a:6b:6d:18:f3:1a:95:04:dc:de:d2:47:a8:e6: f3:67:65:45:4f:2a:03:60:4f:9f:fd:8b:64:b4:45:35:fc:38: 46:fd:39:36:8a:30:96:68:f7:7d:8a:0e:c6:29:28:06:43:3a: c9:c2:6e:f5:1a:23:f7:76:c3:de:ec:eb:10:6a:e4:a6:8f:2c: 76:02:32:38:c8:3c:0e:21:2f:d7:81:35:87:dc:7b:52:a1:37: 3a:a6:fb:bf:30:71:90:43:1f:05:ce:b5:06:fb:21:77:29:88: 00:3d:6a:b8:87:71:f2:79:6b:67:71:e6:89:fa:f8:fa:bd:8f: e2:ba:60:ec:ae:c3:cf:63:13:96:c2:18:72:bf:4b:0d:f5:61: 30:c4:8c:11:ad:01:23:ca:9f:76:e2:82:78:36:1d:3a:f1:e2: 23:80:52:ca:1a:0b:35:65:ba:30:59:9a:0f:9d:13:f8:fd:99: 69:75:5e:49:06:b9:b8:c6:8f:17:3f:fb:c3:7e:b7:27:00:ad: 10:6d:62:03:ac:6e:01:31:c7:9b:a7:23:f8:91:80:8d:cd:e2: ef:d8:e4:a5:00:be:64:7a:27:90:9f:3b:1e:b4:17:62:08:bf: 20:4c:e4:bd:c6:f0:c5:b3:e7:25:e4:9f:7d:fd:cd:cd:14:27: f9:7e:54:21 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBacwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA3Mjcx NzAwMTlaFw0yNDA3MTQwMTMwMDNaMDMxMTAvBgNVBAMTKEUxQjg3RTU2QkU2N0Yx QjdFMTNGOTIzQzg4NDYyMEUzMEYyNjQ2NEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC7Nm5rIAyWGERiNr98Tt5BGwVK6HsZE7Og13lMUHH5x05uh+MM I5jYdKNT2fLPwYqWZOdlXm+TT+HnJ5nbr6VnQ1B1ScrhPFHM8zWMgt2EIdfQzpq7 S5UDbpsSnJeuJbofxEFwWz2CFE3kqfDaKjIGiJtf23zxnVy6pN7AWL6iBCXgeYI8 a/TecXAs7hqApj026KlL6m461lpUVilj230KsW7gmzlAMpxjyWui5SGXTf+prou5 zrwASVSwdeVG0rXKDBB37Mj/GNVjktqBOxYT/TitIGMx6o2OlVQ7O+06Z2rbYzEb ZXdkiQAHQxkQQs16m0ZKw6Qvz2ffCyRCIK5dAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU4bh+Vr5n8bfhP5I8iEYg4w8mRk0wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5LzRiaC1WcjVuOGJmaFA1SThpRVlnNHc4bVJrMC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQxZzAwDQYJKoZIhvcNAQELBQADggEBANgWWklqa20Y8xqVBNze0keo5vNn ZUVPKgNgT5/9i2S0RTX8OEb9OTaKMJZo932KDsYpKAZDOsnCbvUaI/d2w97s6xBq 5KaPLHYCMjjIPA4hL9eBNYfce1KhNzqm+78wcZBDHwXOtQb7IXcpiAA9ariHcfJ5 a2dx5on6+Pq9j+K6YOyuw89jE5bCGHK/Sw31YTDEjBGtASPKn3bigng2HTrx4iOA UsoaCzVlujBZmg+dE/j9mWl1XkkGubjGjxc/+8N+tycArRBtYgOsbgExx5unI/iR gI3N4u/Y5KUAvmR6J5CfOx60F2IIvyBM5L3G8MWz5yXkn339zc0UJ/l+VCE= -----END CERTIFICATE-----Generated at Sun Jun 30 02:54:16 2024 by rpki-client on console.sobornost.net