$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/IKfpcgZnQ_SWgLTZK8wgsj3oBpg.roa File: IKfpcgZnQ_SWgLTZK8wgsj3oBpg.roa (raw, json) Hash identifier: hzDvLBi9XWOCc8SKpYr7OinLVmu2PUziBQhDcu28UOY= Subject key identifier: 20:A7:E9:72:06:67:43:F4:96:80:B4:D9:2B:CC:20:B2:3D:E8:06:98 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 04CB Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/IKfpcgZnQ_SWgLTZK8wgsj3oBpg.roa Signing time: Thu 27 Jul 2023 16:48:18 +0000 ROA not before: Thu 27 Jul 2023 16:48:18 +0000 ROA not after: Sun 14 Jul 2024 01:30:03 +0000 asID: 9605 IP address blocks: 49.106.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Jun 2024 06:27:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1227 (0x4cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jul 27 16:48:18 2023 GMT Not After : Jul 14 01:30:03 2024 GMT Subject: CN=20A7E972066743F49680B4D92BCC20B23DE80698 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:cb:f3:be:0b:6e:0d:a0:68:df:34:39:09:a9: 74:c3:ba:db:89:d3:45:ce:01:bc:44:64:bb:e6:02: d9:6b:10:15:5f:f6:04:37:bb:ac:5f:a4:1a:98:95: 76:23:66:b6:55:d3:56:43:ca:11:ae:79:9a:e0:a7: de:f3:38:23:32:9b:e9:dd:10:c4:0a:92:76:27:d8: e8:cc:14:b8:91:72:4b:bf:7e:aa:cf:e2:96:dd:26: 55:99:bf:38:ff:b8:10:d1:70:78:1c:0d:93:d8:e7: 2b:a4:d5:9d:84:38:4a:93:34:55:29:d4:be:c5:3f: 27:7b:c1:b3:3d:45:8d:df:95:c1:be:62:29:f1:96: 4e:d3:48:e5:90:5a:10:a8:d2:f7:6b:32:78:e7:51: 07:0e:45:0d:e3:c2:a7:6f:90:4d:55:a9:88:c7:e7: 3c:67:be:ff:5e:fe:78:73:55:51:bc:ed:70:8c:1f: 75:a2:21:28:da:7c:7a:ea:5f:72:12:19:02:7b:34: f9:99:66:be:b0:c7:81:95:fa:a1:2b:44:35:98:45: a0:4d:08:ee:f2:f7:0a:a8:91:2c:ec:a2:d9:28:f5: 13:c6:a6:9c:fd:cf:f8:fa:44:ce:8c:6d:59:ec:42: d1:42:2f:16:72:cd:d5:f6:34:26:15:f2:b6:71:37: fb:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:A7:E9:72:06:67:43:F4:96:80:B4:D9:2B:CC:20:B2:3D:E8:06:98 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/IKfpcgZnQ_SWgLTZK8wgsj3oBpg.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.106.174.0/24 Signature Algorithm: sha256WithRSAEncryption e2:a5:1b:72:09:4c:e2:0c:9b:e8:cb:37:93:5c:44:a4:a7:41: eb:83:af:1b:7d:1d:a5:72:77:42:29:21:c3:27:01:af:5b:db: ff:4d:c8:a7:87:50:9d:c7:0f:b0:a0:4b:b4:1f:78:35:85:7d: 00:fd:89:87:a6:06:95:54:1c:41:28:a1:70:f4:9a:93:7d:56: ad:ac:0a:2d:81:0e:c4:64:b1:4a:c9:87:23:28:9f:54:6c:45: d2:7b:b8:2e:25:d9:45:04:07:85:91:0d:e3:ca:94:2c:8b:74: 16:87:6f:02:9f:9e:be:34:f1:7c:72:a2:c2:a8:43:fe:72:7f: a6:79:5b:47:5d:aa:8d:0d:5f:be:43:f5:fa:2c:1b:3e:66:0c: b8:a4:2b:7b:26:05:c1:80:f5:ac:c9:73:b7:1a:2c:9e:d3:0a: 6f:5c:85:b0:51:4b:16:9d:90:e2:f3:63:3a:dd:89:a2:70:2b: b6:7b:26:0a:a6:0d:fd:e3:12:9c:8c:bf:39:89:ca:cb:04:9e: 4c:c3:59:3b:9b:ad:e2:97:67:59:d6:38:a4:bd:86:25:ec:c5: 1e:7a:a5:df:39:32:d7:fd:d1:e1:26:10:5c:30:33:7d:f8:5e: f6:17:a1:d5:19:86:f3:9c:5c:cd:4f:7f:37:11:2c:fc:da:68: e5:eb:f0:42 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBMswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA3Mjcx NjQ4MThaFw0yNDA3MTQwMTMwMDNaMDMxMTAvBgNVBAMTKDIwQTdFOTcyMDY2NzQz RjQ5NjgwQjREOTJCQ0MyMEIyM0RFODA2OTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDBy/O+C24NoGjfNDkJqXTDutuJ00XOAbxEZLvmAtlrEBVf9gQ3 u6xfpBqYlXYjZrZV01ZDyhGueZrgp97zOCMym+ndEMQKknYn2OjMFLiRcku/fqrP 4pbdJlWZvzj/uBDRcHgcDZPY5yuk1Z2EOEqTNFUp1L7FPyd7wbM9RY3flcG+Yinx lk7TSOWQWhCo0vdrMnjnUQcORQ3jwqdvkE1VqYjH5zxnvv9e/nhzVVG87XCMH3Wi ISjafHrqX3ISGQJ7NPmZZr6wx4GV+qErRDWYRaBNCO7y9wqokSzsotko9RPGppz9 z/j6RM6MbVnsQtFCLxZyzdX2NCYV8rZxN/s1AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUIKfpcgZnQ/SWgLTZK8wgsj3oBpgwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0lLZnBjZ1puUV9TV2dMVFpLOHdnc2ozb0JwZy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAxaq4wDQYJKoZIhvcNAQELBQADggEBAOKlG3IJTOIMm+jLN5NcRKSnQeuD rxt9HaVyd0IpIcMnAa9b2/9NyKeHUJ3HD7CgS7QfeDWFfQD9iYemBpVUHEEooXD0 mpN9Vq2sCi2BDsRksUrJhyMon1RsRdJ7uC4l2UUEB4WRDePKlCyLdBaHbwKfnr40 8XxyosKoQ/5yf6Z5W0ddqo0NX75D9fosGz5mDLikK3smBcGA9azJc7caLJ7TCm9c hbBRSxadkOLzYzrdiaJwK7Z7JgqmDf3jEpyMvzmJyssEnkzDWTubreKXZ1nWOKS9 hiXsxR56pd85Mtf90eEmEFwwM334XvYXodUZhvOcXM1PfzcRLPzaaOXr8EI= -----END CERTIFICATE-----Generated at Tue Jun 25 02:54:24 2024 by rpki-client on console.sobornost.net