$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/9pZ9-6nuWrd457XhXDJqxVMkjK8.roa File: 9pZ9-6nuWrd457XhXDJqxVMkjK8.roa (raw, json) Hash identifier: 20FW/9nbyFtwmwbCTsZFAMGVlBYinTdCnDmN2w8Y6x0= Subject key identifier: F6:96:7D:FB:A9:EE:5A:B7:78:E7:B5:E1:5C:32:6A:C5:53:24:8C:AF Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 0311 Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/9pZ9-6nuWrd457XhXDJqxVMkjK8.roa Signing time: Mon 21 Oct 2024 01:08:40 +0000 ROA not before: Mon 21 Oct 2024 01:08:40 +0000 ROA not after: Wed 15 Oct 2025 01:30:02 +0000 asID: 10013 IP address blocks: 153.120.210.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 785 (0x311) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: Oct 21 01:08:40 2024 GMT Not After : Oct 15 01:30:02 2025 GMT Subject: CN=F6967DFBA9EE5AB778E7B5E15C326AC553248CAF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:13:fc:e1:5a:b6:d3:24:eb:2e:74:d7:be:24: 2a:84:3d:00:51:97:53:f3:69:44:16:78:98:c6:d3: e4:00:e1:1e:13:be:63:1e:0b:3c:2c:9e:0b:09:5e: c0:4b:da:7d:d8:ce:f6:63:e2:94:51:70:38:d7:8b: 8f:af:86:00:c5:1c:8a:c0:c2:39:3a:c5:6c:db:00: 9d:34:45:76:d1:6b:52:6b:26:71:e7:cf:84:e1:f0: 58:b9:b3:a9:b4:0b:d2:74:26:55:0a:5f:60:45:df: 8b:20:4f:12:8e:bf:ff:80:de:d7:11:87:3d:84:f9: 68:b6:71:1e:ef:e6:2e:51:82:a9:81:ae:82:b6:a6: e8:1c:a5:86:7b:b3:75:46:98:18:37:1c:0b:89:c0: f3:72:32:a7:dc:11:cc:d1:98:ed:f5:7d:df:ab:df: 1a:3a:1d:22:80:ff:ef:83:7f:b8:84:36:fd:25:dc: 1d:d7:12:f3:32:98:47:42:4b:37:46:11:69:5d:a9: 78:eb:53:97:27:e1:27:b4:93:bc:36:3a:8e:7b:a6: aa:0b:80:3a:21:47:a8:02:b4:4d:bb:b8:80:f0:2a: 37:e4:d4:47:04:4c:ba:f7:b9:27:21:3d:9b:19:af: 99:d7:48:f2:f5:9e:b8:24:ba:90:c8:78:1c:7d:40: 28:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:96:7D:FB:A9:EE:5A:B7:78:E7:B5:E1:5C:32:6A:C5:53:24:8C:AF X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/9pZ9-6nuWrd457XhXDJqxVMkjK8.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 153.120.210.0/23 Signature Algorithm: sha256WithRSAEncryption 2a:f9:34:a4:f5:e4:58:58:4b:18:88:33:85:b5:26:8a:42:cb: 0b:94:d9:fc:03:12:87:40:a3:67:32:ef:30:0e:0f:d5:a5:f1: d5:56:2f:29:60:d9:ad:54:66:8d:7c:78:84:44:c2:8e:1d:5d: 4f:69:41:0a:87:17:2d:94:85:0e:c4:ae:6e:21:0d:14:db:d8: c3:68:a4:6c:9b:d1:a6:4b:ef:a6:a5:a9:a3:62:ce:81:fd:5b: 5b:4d:09:8d:f5:5e:5f:ad:e0:bb:20:d5:8a:39:92:1d:3d:1c: 3f:79:16:75:2e:fd:19:98:8b:31:c2:23:82:07:06:00:86:00: 92:47:6d:af:98:ae:f5:ba:97:59:12:8b:11:53:d0:62:c9:40: ef:df:92:e2:2b:d2:ea:ef:0c:be:ed:fc:61:15:b7:28:c9:06: ef:12:78:4b:e3:86:68:0d:8f:25:72:19:3a:f2:92:34:35:df: ea:3e:93:24:8b:54:a2:31:b0:83:db:73:33:a5:40:13:c5:a1: 76:b1:a0:e9:2a:c5:4e:d9:ad:02:4e:d7:50:04:5d:e7:ba:ec: 02:b6:b4:de:b3:01:3c:eb:eb:44:d6:3e:4b:62:02:70:cf:ac: cd:c1:66:27:2a:bd:fe:5c:49:2f:8f:ba:0e:07:f2:c1:b6:91: 64:11:bd:a3 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAxEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNDEwMjEw MTA4NDBaFw0yNTEwMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEY2OTY3REZCQTlFRTVB Qjc3OEU3QjVFMTVDMzI2QUM1NTMyNDhDQUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCjE/zhWrbTJOsudNe+JCqEPQBRl1PzaUQWeJjG0+QA4R4TvmMe CzwsngsJXsBL2n3YzvZj4pRRcDjXi4+vhgDFHIrAwjk6xWzbAJ00RXbRa1JrJnHn z4Th8Fi5s6m0C9J0JlUKX2BF34sgTxKOv/+A3tcRhz2E+Wi2cR7v5i5RgqmBroK2 pugcpYZ7s3VGmBg3HAuJwPNyMqfcEczRmO31fd+r3xo6HSKA/++Df7iENv0l3B3X EvMymEdCSzdGEWldqXjrU5cn4Se0k7w2Oo57pqoLgDohR6gCtE27uIDwKjfk1EcE TLr3uSchPZsZr5nXSPL1nrgkupDIeBx9QCg3AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU9pZ9+6nuWrd457XhXDJqxVMkjK8wHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0LzlwWjktNm51V3JkNDU3WGhYREpxeFZNa2pLOC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAGZeNIwDQYJKoZIhvcNAQELBQADggEBACr5NKT15FhYSxiIM4W1JopCywuU 2fwDEodAo2cy7zAOD9Wl8dVWLylg2a1UZo18eIREwo4dXU9pQQqHFy2UhQ7Erm4h DRTb2MNopGyb0aZL76alqaNizoH9W1tNCY31Xl+t4Lsg1Yo5kh09HD95FnUu/RmY izHCI4IHBgCGAJJHba+YrvW6l1kSixFT0GLJQO/fkuIr0urvDL7t/GEVtyjJBu8S eEvjhmgNjyVyGTrykjQ13+o+kySLVKIxsIPbczOlQBPFoXaxoOkqxU7ZrQJO11AE Xee67AK2tN6zATzr60TWPktiAnDPrM3BZicqvf5cSS+Pug4H8sG2kWQRvaM= -----END CERTIFICATE-----Generated at Sat Apr 5 17:44:01 2025 by rpki-client