$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/46mbIDencrZrtmqoyCYyWCZG9PU.roa File: 46mbIDencrZrtmqoyCYyWCZG9PU.roa (raw, json) Hash identifier: Dsd+Mz1pVh3mBOciYpQN4/ymyvv+5Q0mO83JPZEyRl8= Subject key identifier: E3:A9:9B:20:37:A7:72:B6:6B:B6:6A:A8:C8:26:32:58:26:46:F4:F5 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0AA6 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/46mbIDencrZrtmqoyCYyWCZG9PU.roa Signing time: Sun 30 Jun 2024 01:54:26 +0000 ROA not before: Sun 30 Jun 2024 01:54:26 +0000 ROA not after: Tue 24 Jun 2025 10:46:45 +0000 asID: 9605 IP address blocks: 1.76.80.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2726 (0xaa6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 30 01:54:26 2024 GMT Not After : Jun 24 10:46:45 2025 GMT Subject: CN=E3A99B2037A772B66BB66AA8C82632582646F4F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:1b:a3:05:c6:81:45:07:1a:f6:56:4a:ca:01: 00:4e:d1:5f:8e:11:13:27:59:52:27:34:3e:b2:0f: ea:b5:21:d5:11:36:b2:10:25:99:37:d0:d5:8d:ab: c7:a2:1c:3f:7b:0a:cd:67:4f:08:55:bd:ac:c3:54: 3d:1c:76:69:c4:4e:0b:c9:ab:b2:be:b9:99:cb:9b: 43:bd:6f:c0:70:16:ed:fd:6d:f0:01:14:b3:23:02: 1c:7a:7c:c0:c2:82:ef:bb:57:69:38:1f:f5:28:a1: 4d:77:63:5d:36:72:7b:9d:fa:a8:a5:da:c8:cd:ee: 56:6a:0f:e1:10:18:82:09:5d:24:c5:f4:27:91:43: 46:0a:73:d8:4a:6e:32:74:0d:b9:7e:d3:d1:65:06: 5f:19:18:34:1b:8c:af:b7:38:63:de:0f:66:a8:69: 00:60:18:4c:c9:d5:f6:b8:80:b0:7b:8a:bc:3f:c0: fc:55:5e:65:e1:42:9b:7d:ac:31:e7:0c:44:67:21: 3a:6e:b8:e0:ee:a9:c7:61:5d:7a:77:28:b7:e6:07: f9:35:1a:54:7c:94:26:3f:4d:40:65:37:b4:68:8e: ed:80:cd:dc:ae:fc:88:c0:0f:11:6d:e5:24:09:0e: ce:82:77:b7:da:8d:b9:b6:ef:63:5e:79:b1:60:31: e5:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:A9:9B:20:37:A7:72:B6:6B:B6:6A:A8:C8:26:32:58:26:46:F4:F5 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/46mbIDencrZrtmqoyCYyWCZG9PU.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.76.80.0/22 Signature Algorithm: sha256WithRSAEncryption 6d:27:5f:9e:dc:ad:58:1f:52:25:b7:2d:23:9c:dc:c8:b2:be: 12:d9:15:a0:03:33:6a:9b:ea:98:45:36:19:3d:1c:ab:c0:27: 77:a2:ae:61:5d:b9:fa:2a:3d:1d:34:a5:e1:a4:45:56:c1:4e: 13:c9:ba:e8:da:95:26:02:f0:77:2d:f0:60:b1:8d:91:86:b4: d8:a5:6a:1a:f7:a1:48:87:62:7b:c9:3c:d5:0d:9e:4d:b8:b6: e9:43:7d:65:13:36:b5:d9:a7:ac:a2:6b:e1:d1:28:99:0c:f1: 37:9b:72:4a:c3:3a:e8:b1:09:71:50:1f:7f:f5:9a:7e:ce:8c: f0:cd:78:f3:bf:39:dc:4d:ff:1e:e2:8f:1d:02:ff:d4:2c:09: 91:c8:0a:ba:79:46:f6:6f:77:2e:0b:fb:18:0a:f7:bb:c3:e2: 0f:55:c5:31:4c:92:10:f6:83:af:f1:d9:1f:09:58:82:24:ec: bf:d4:fd:34:8f:47:d6:0a:b5:6e:8b:58:a6:23:1b:79:58:60: 58:07:b2:d6:14:f0:d2:5b:74:e9:6b:5b:f1:d4:67:ff:6c:91: ed:6a:e5:23:75:71:f1:0e:24:12:f5:a2:08:35:14:3c:ec:3f: 59:42:88:5f:02:42:54:c7:cf:e4:3a:99:d1:c9:87:2f:44:fb: 1b:08:3f:4a -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCqYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA2MzAw MTU0MjZaFw0yNTA2MjQxMDQ2NDVaMDMxMTAvBgNVBAMTKEUzQTk5QjIwMzdBNzcy QjY2QkI2NkFBOEM4MjYzMjU4MjY0NkY0RjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDsG6MFxoFFBxr2VkrKAQBO0V+OERMnWVInND6yD+q1IdURNrIQ JZk30NWNq8eiHD97Cs1nTwhVvazDVD0cdmnETgvJq7K+uZnLm0O9b8BwFu39bfAB FLMjAhx6fMDCgu+7V2k4H/UooU13Y102cnud+qil2sjN7lZqD+EQGIIJXSTF9CeR Q0YKc9hKbjJ0Dbl+09FlBl8ZGDQbjK+3OGPeD2aoaQBgGEzJ1fa4gLB7irw/wPxV XmXhQpt9rDHnDERnITpuuODuqcdhXXp3KLfmB/k1GlR8lCY/TUBlN7Roju2Azdyu /IjADxFt5SQJDs6Cd7fajbm272NeebFgMeXpAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU46mbIDencrZrtmqoyCYyWCZG9PUwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5LzQ2bWJJRGVuY3JacnRtcW95Q1l5V0NaRzlQVS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIBTFAwDQYJKoZIhvcNAQELBQADggEBAG0nX57crVgfUiW3LSOc3MiyvhLZ FaADM2qb6phFNhk9HKvAJ3eirmFdufoqPR00peGkRVbBThPJuujalSYC8Hct8GCx jZGGtNilahr3oUiHYnvJPNUNnk24tulDfWUTNrXZp6yia+HRKJkM8TebckrDOuix CXFQH3/1mn7OjPDNePO/OdxN/x7ijx0C/9QsCZHICrp5RvZvdy4L+xgK97vD4g9V xTFMkhD2g6/x2R8JWIIk7L/U/TSPR9YKtW6LWKYjG3lYYFgHstYU8NJbdOlrW/HU Z/9ske1q5SN1cfEOJBL1ogg1FDzsP1lCiF8CQlTHz+Q6mdHJhy9E+xsIP0o= -----END CERTIFICATE-----Generated at Sat Apr 5 23:11:14 2025 by rpki-client