$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/bmstZ0bDSfDoQ7en7NzkpWUH6Kk.roa File: bmstZ0bDSfDoQ7en7NzkpWUH6Kk.roa (raw, json) Hash identifier: +/m8m3WrDcTEid4OUsGfPFnRyZ2iKAv4yxTGyCYBmx4= Subject key identifier: 6E:6B:2D:67:46:C3:49:F0:E8:43:B7:A7:EC:DC:E4:A5:65:07:E8:A9 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 09D3 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/bmstZ0bDSfDoQ7en7NzkpWUH6Kk.roa Signing time: Sun 30 Jun 2024 01:40:31 +0000 ROA not before: Sun 30 Jun 2024 01:40:31 +0000 ROA not after: Tue 24 Jun 2025 10:46:45 +0000 asID: 9605 IP address blocks: 1.67.234.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2515 (0x9d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 30 01:40:31 2024 GMT Not After : Jun 24 10:46:45 2025 GMT Subject: CN=6E6B2D6746C349F0E843B7A7ECDCE4A56507E8A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:90:9b:f7:2a:51:f6:66:64:2f:06:05:f7:7e: 56:92:3a:1f:fe:b4:f0:90:95:8a:08:54:36:56:48: 94:b9:58:7f:57:28:f8:68:ac:8e:7d:3c:0e:23:c0: 95:68:94:ea:9f:4f:76:79:9f:12:8b:8b:eb:55:87: 32:f0:55:7a:37:07:53:2c:e5:18:de:ff:42:97:a0: 09:6f:9f:8b:a6:5d:b3:ce:5a:eb:5b:47:43:41:0c: c8:d4:22:cf:0b:5b:ce:a5:cd:e6:b7:6d:87:ab:ca: 68:67:c7:e8:34:c8:ea:de:c9:9b:49:fb:76:e1:a4: fe:55:bf:5e:1b:d2:19:d0:69:7c:67:08:a0:12:e3: 0d:5e:9d:ce:05:a4:2b:32:39:fe:f3:c9:5b:ad:8b: 06:ed:18:48:c6:8c:ba:60:43:c8:76:a9:cf:85:ff: 7d:7b:3e:83:21:8b:6f:c1:ba:cc:b6:6c:8c:9b:a5: d7:37:65:9c:0c:fb:57:81:01:9d:18:46:64:b9:ef: 5a:7c:9c:4c:0f:a9:a0:3b:58:bb:bb:e1:1c:39:84: 12:ff:16:38:8b:cd:a3:42:97:57:c0:c8:4e:82:9f: ec:ee:bd:d8:83:cc:c2:17:c5:c9:22:d2:5c:0e:12: e3:2d:da:5d:21:89:06:54:80:d4:5d:c2:1a:21:bf: 5d:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:6B:2D:67:46:C3:49:F0:E8:43:B7:A7:EC:DC:E4:A5:65:07:E8:A9 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/bmstZ0bDSfDoQ7en7NzkpWUH6Kk.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.67.234.0/23 Signature Algorithm: sha256WithRSAEncryption 81:40:cf:4a:23:3a:48:30:aa:67:91:dc:9c:7f:82:4d:a2:47: 0a:f6:bf:44:f1:7e:19:50:8e:9d:a1:cb:bd:8b:fa:f8:bb:7f: c9:8c:c8:d2:d8:02:84:f5:4d:11:a9:2b:bf:2b:3d:ff:63:ba: 70:85:c5:d6:2b:56:6a:56:51:be:74:7c:4b:60:02:c4:84:02: 03:d7:d8:60:b4:df:27:e2:5e:06:5c:bf:c9:81:f3:82:c5:00: 93:14:8c:10:da:68:c2:12:3a:d7:4b:3b:29:ae:4c:a8:22:68: 82:e0:da:9d:8d:e9:2d:25:af:38:52:9e:54:14:fe:15:de:c1: 0e:34:e6:3b:ad:92:a7:d1:bd:fd:ec:74:df:ab:a1:40:c6:0b: 4e:16:79:94:70:2c:f2:71:31:76:f6:cf:bf:45:96:97:98:f9: b6:aa:b4:9a:d1:0e:e2:d8:98:e1:39:72:03:45:e4:06:92:01: 72:fd:b0:d0:27:85:b2:0b:d0:be:3b:a0:d2:8f:f1:f9:52:4e: 20:0b:c9:b1:ae:10:e3:2e:f1:28:21:69:a7:ba:39:70:13:50: bb:b7:50:b3:d9:14:be:34:8a:e6:11:41:fc:a5:43:26:b2:36: bd:28:3c:11:15:74:7a:c6:61:99:0d:83:4c:ef:7f:6d:ee:d0: a4:96:a0:01 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCdMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA2MzAw MTQwMzFaFw0yNTA2MjQxMDQ2NDVaMDMxMTAvBgNVBAMTKDZFNkIyRDY3NDZDMzQ5 RjBFODQzQjdBN0VDRENFNEE1NjUwN0U4QTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDDkJv3KlH2ZmQvBgX3flaSOh/+tPCQlYoIVDZWSJS5WH9XKPho rI59PA4jwJVolOqfT3Z5nxKLi+tVhzLwVXo3B1Ms5Rje/0KXoAlvn4umXbPOWutb R0NBDMjUIs8LW86lzea3bYerymhnx+g0yOreyZtJ+3bhpP5Vv14b0hnQaXxnCKAS 4w1enc4FpCsyOf7zyVutiwbtGEjGjLpgQ8h2qc+F/317PoMhi2/Busy2bIybpdc3 ZZwM+1eBAZ0YRmS571p8nEwPqaA7WLu74Rw5hBL/FjiLzaNCl1fAyE6Cn+zuvdiD zMIXxcki0lwOEuMt2l0hiQZUgNRdwhohv11ZAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUbmstZ0bDSfDoQ7en7NzkpWUH6KkwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2Jtc3RaMGJEU2ZEb1E3ZW43TnprcFdVSDZLay5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEBQ+owDQYJKoZIhvcNAQELBQADggEBAIFAz0ojOkgwqmeR3Jx/gk2iRwr2 v0TxfhlQjp2hy72L+vi7f8mMyNLYAoT1TRGpK78rPf9junCFxdYrVmpWUb50fEtg AsSEAgPX2GC03yfiXgZcv8mB84LFAJMUjBDaaMISOtdLOymuTKgiaILg2p2N6S0l rzhSnlQU/hXewQ405jutkqfRvf3sdN+roUDGC04WeZRwLPJxMXb2z79FlpeY+baq tJrRDuLYmOE5cgNF5AaSAXL9sNAnhbIL0L47oNKP8flSTiALybGuEOMu8Sghaae6 OXATULu3ULPZFL40iuYRQfylQyayNr0oPBEVdHrGYZkNg0zvf23u0KSWoAE= -----END CERTIFICATE-----Generated at Sun Apr 6 01:44:22 2025 by rpki-client