$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/UdqauuUaKhLb9iUkLMoIVXUOUTw.roa File: UdqauuUaKhLb9iUkLMoIVXUOUTw.roa (raw, json) Hash identifier: c6BdKzjVrx367e424JSOM7n0tx2D13vZ0UryOiAWDKs= Subject key identifier: 51:DA:9A:BA:E5:1A:2A:12:DB:F6:25:24:2C:CA:08:55:75:0E:51:3C Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0A2E Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/UdqauuUaKhLb9iUkLMoIVXUOUTw.roa Signing time: Sun 30 Jun 2024 01:46:32 +0000 ROA not before: Sun 30 Jun 2024 01:46:32 +0000 ROA not after: Tue 24 Jun 2025 10:46:45 +0000 asID: 9605 IP address blocks: 1.74.198.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2606 (0xa2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 30 01:46:32 2024 GMT Not After : Jun 24 10:46:45 2025 GMT Subject: CN=51DA9ABAE51A2A12DBF625242CCA0855750E513C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:09:d3:ca:e9:93:22:0d:e7:b3:29:fb:98:6f: 80:72:b3:4a:ab:05:f7:f4:36:07:96:58:6e:1e:e7: 35:0f:50:a3:93:26:83:9d:a5:d3:6e:0d:99:8b:58: 7a:7d:fc:be:1b:a4:62:11:7e:f0:97:19:f3:83:c5: e2:fc:88:51:7c:55:ad:65:4f:ef:5b:64:09:e2:13: 8e:07:11:dd:ed:49:dd:6e:2b:32:23:c4:f8:38:1d: 65:1e:19:11:5d:de:8f:00:c2:83:87:a1:f7:45:5f: 94:75:a3:3b:9c:c8:e5:32:51:72:4f:10:5c:f7:11: 4d:c2:78:c8:cf:98:32:b9:9c:da:52:c0:e1:c8:81: 8e:6a:70:78:fa:b2:b7:99:43:b3:a6:45:af:9c:d3: 9c:f6:40:87:6f:68:16:32:24:25:ac:93:7d:2b:45: 0f:3f:aa:3f:9a:42:25:f2:6f:1f:45:5a:16:64:b9: ae:57:87:92:9b:7b:b2:bb:b6:8d:4e:02:f3:69:af: 55:97:f1:08:3d:96:52:cd:4c:7e:49:29:ad:61:bb: 46:11:cd:7d:6e:b9:2f:55:66:17:69:4f:a6:c4:b8: 19:ed:d6:c4:bf:b4:6c:a6:aa:46:f4:21:03:31:34: 0f:66:db:4f:4c:52:19:07:59:66:a9:7a:fa:9c:f7: 1c:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:DA:9A:BA:E5:1A:2A:12:DB:F6:25:24:2C:CA:08:55:75:0E:51:3C X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/UdqauuUaKhLb9iUkLMoIVXUOUTw.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.74.198.0/23 Signature Algorithm: sha256WithRSAEncryption 17:11:23:87:cb:7f:fd:4e:13:19:ad:93:c3:e4:ea:fb:1b:48: 19:75:14:ec:50:fb:77:de:fe:fe:fa:48:27:02:0a:26:57:ed: 68:52:70:8a:4f:91:e4:a3:c6:3f:9a:b9:3e:ec:1a:5e:be:4c: cc:77:88:88:27:bb:98:e2:58:67:10:45:42:04:ce:82:06:93: b7:18:8b:5f:ca:42:e4:2d:c2:45:5f:81:ca:ae:11:8d:b8:98: 67:f1:8a:7f:01:de:fc:31:52:39:20:ce:68:7f:16:9a:7e:b4: 1a:9c:51:60:13:df:b6:ad:d4:a0:a9:22:66:c2:6b:db:87:b6: 8f:94:9a:a9:7f:79:6a:fb:2b:b7:5a:a5:6a:57:0c:9a:ea:f4: a9:fb:7f:e2:75:e7:2c:f8:99:ed:fd:82:95:f6:bd:ca:23:9d: cd:c6:b5:e2:10:08:cf:d1:04:09:60:56:8a:de:fc:87:cc:b1: fd:14:aa:1c:97:2c:5c:fe:69:dd:8e:bf:ac:68:21:f2:58:ce: 2f:78:ba:bd:7a:1d:5e:29:b1:8c:3b:63:26:32:a7:60:fe:8a: 57:c9:d5:a2:a3:74:bf:74:c6:14:d1:26:6b:8d:85:ed:ad:b0: 5a:32:45:0d:9f:7f:25:2c:1c:a2:6a:55:27:db:9a:85:26:2b: dd:48:8f:ab -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCi4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA2MzAw MTQ2MzJaFw0yNTA2MjQxMDQ2NDVaMDMxMTAvBgNVBAMTKDUxREE5QUJBRTUxQTJB MTJEQkY2MjUyNDJDQ0EwODU1NzUwRTUxM0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC7CdPK6ZMiDeezKfuYb4Bys0qrBff0NgeWWG4e5zUPUKOTJoOd pdNuDZmLWHp9/L4bpGIRfvCXGfODxeL8iFF8Va1lT+9bZAniE44HEd3tSd1uKzIj xPg4HWUeGRFd3o8AwoOHofdFX5R1ozucyOUyUXJPEFz3EU3CeMjPmDK5nNpSwOHI gY5qcHj6sreZQ7OmRa+c05z2QIdvaBYyJCWsk30rRQ8/qj+aQiXybx9FWhZkua5X h5Kbe7K7to1OAvNpr1WX8Qg9llLNTH5JKa1hu0YRzX1uuS9VZhdpT6bEuBnt1sS/ tGymqkb0IQMxNA9m209MUhkHWWapevqc9xylAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUUdqauuUaKhLb9iUkLMoIVXUOUTwwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1VkcWF1dVVhS2hMYjlpVWtMTW9JVlhVT1VUdy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEBSsYwDQYJKoZIhvcNAQELBQADggEBABcRI4fLf/1OExmtk8Pk6vsbSBl1 FOxQ+3fe/v76SCcCCiZX7WhScIpPkeSjxj+auT7sGl6+TMx3iIgnu5jiWGcQRUIE zoIGk7cYi1/KQuQtwkVfgcquEY24mGfxin8B3vwxUjkgzmh/Fpp+tBqcUWAT37at 1KCpImbCa9uHto+Umql/eWr7K7dapWpXDJrq9Kn7f+J15yz4me39gpX2vcojnc3G teIQCM/RBAlgVore/IfMsf0UqhyXLFz+ad2Ov6xoIfJYzi94ur16HV4psYw7YyYy p2D+ilfJ1aKjdL90xhTRJmuNhe2tsFoyRQ2ffyUsHKJqVSfbmoUmK91Ij6s= -----END CERTIFICATE-----Generated at Sat Apr 5 17:38:07 2025 by rpki-client