$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/307/IijCDX2r60IB6_73_KbKNGP0mjQ.roa File: IijCDX2r60IB6_73_KbKNGP0mjQ.roa (raw, json) Hash identifier: 5IXh0Ok+fvVI/Quq//BTnDEz4PnL6l88uqaJ7hBBvXw= Subject key identifier: 22:28:C2:0D:7D:AB:EB:42:01:EB:FE:F7:FC:A6:CA:34:63:F4:9A:34 Certificate issuer: /CN=6D1ED16D8C6D3BA40BF42CB3A29652ADAB76D061 Certificate serial: 11 Authority key identifier: 6D:1E:D1:6D:8C:6D:3B:A4:0B:F4:2C:B3:A2:96:52:AD:AB:76:D0:61 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bR7RbYxtO6QL9CyzopZSrat20GE.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/IijCDX2r60IB6_73_KbKNGP0mjQ.roa Signing time: Thu 16 Nov 2023 02:56:43 +0000 ROA not before: Thu 16 Nov 2023 02:56:43 +0000 ROA not after: Thu 14 Nov 2024 01:30:03 +0000 asID: 23783 IP address blocks: 219.124.100.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/bR7RbYxtO6QL9CyzopZSrat20GE.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/bR7RbYxtO6QL9CyzopZSrat20GE.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bR7RbYxtO6QL9CyzopZSrat20GE.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 13 Jun 2024 14:03:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17 (0x11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D1ED16D8C6D3BA40BF42CB3A29652ADAB76D061 Validity Not Before: Nov 16 02:56:43 2023 GMT Not After : Nov 14 01:30:03 2024 GMT Subject: CN=2228C20D7DABEB4201EBFEF7FCA6CA3463F49A34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:2a:28:92:16:45:f5:3e:fb:ae:38:7f:92:d6: 1e:73:ea:7c:b4:2e:c2:95:f9:41:69:0d:25:92:3e: c7:15:62:70:b6:1e:92:55:e2:e9:ad:67:a4:9c:e3: eb:30:14:2a:43:69:a2:1f:bb:68:2d:5c:fc:9e:52: 34:a5:99:6d:76:98:60:e0:61:c9:6a:93:e0:ad:30: 0d:1b:e7:0b:03:12:ab:6a:cf:e3:51:4c:00:59:1b: d5:9c:a5:1a:9b:95:b2:d7:ce:7e:ac:82:48:d2:90: b4:a2:50:19:6d:40:53:af:29:4c:c4:74:13:95:8a: 36:f9:0e:be:0c:26:74:a8:06:f3:20:0b:46:12:89: 15:01:74:dc:af:52:03:4a:4f:ea:e0:7e:5b:f0:fc: e8:e5:3a:0e:71:c7:29:aa:7f:77:0d:74:4a:fd:f5: 70:0c:4b:61:dd:98:01:8b:39:f9:90:64:78:c3:65: 56:1b:ee:cc:62:6d:84:1a:0c:66:38:01:72:1e:1b: a0:ca:0e:b8:d0:02:5b:b8:c4:cc:89:06:f1:97:77: 6f:9f:ef:1f:f6:4c:8b:9b:8b:ae:d5:c1:f4:a1:72: 03:81:30:64:7c:5b:a5:9f:72:8d:87:2a:e2:b8:79: 62:91:0d:5e:da:64:b1:01:92:58:80:b8:48:96:20: 06:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:28:C2:0D:7D:AB:EB:42:01:EB:FE:F7:FC:A6:CA:34:63:F4:9A:34 X509v3 Authority Key Identifier: keyid:6D:1E:D1:6D:8C:6D:3B:A4:0B:F4:2C:B3:A2:96:52:AD:AB:76:D0:61 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/bR7RbYxtO6QL9CyzopZSrat20GE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bR7RbYxtO6QL9CyzopZSrat20GE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/IijCDX2r60IB6_73_KbKNGP0mjQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 219.124.100.0/22 Signature Algorithm: sha256WithRSAEncryption 8c:8c:af:bd:11:2e:98:56:bb:6f:1c:f6:c4:0a:82:1d:8b:da: 20:10:6e:57:0e:2c:a9:b0:d5:8b:b8:f2:65:24:0b:a0:d8:d4: b2:73:68:7f:6a:4b:5a:01:10:1d:4e:f5:20:0e:14:7e:11:d6: d0:ad:e6:5b:72:27:dd:70:03:eb:e2:83:86:d7:8b:c8:0c:10: e9:0c:52:91:41:b1:a4:f1:2b:ff:41:a7:27:fb:7a:61:e0:f4: 61:10:6f:e0:a4:b4:0d:4c:82:1c:03:3c:cf:31:94:ba:e4:22: 4a:68:fb:1c:9c:91:06:08:67:4e:ed:bd:21:58:94:ac:00:75: b6:9d:39:b9:b5:1b:23:82:29:db:8d:e1:38:41:0e:f2:09:5a: 80:69:6b:6b:12:52:9e:a1:b9:c3:0b:59:5b:9a:12:14:13:4e: bb:c2:3b:71:ed:0f:1a:74:81:76:43:d7:0a:f2:65:45:54:97: 5e:6f:9a:d4:4c:b7:cd:04:6d:1d:93:59:52:22:06:13:55:c8: 51:41:3a:08:c0:b0:f1:1c:77:62:8e:92:b3:70:ff:bb:03:54: c0:e5:3d:ed:fa:34:64:51:f8:1e:98:f1:52:11:4c:68:1a:23: 06:54:76:b1:33:9a:7b:d1:64:29:13:e8:a8:f1:bc:7b:38:e7: df:33:aa:ac -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBETANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2RDFF RDE2RDhDNkQzQkE0MEJGNDJDQjNBMjk2NTJBREFCNzZEMDYxMB4XDTIzMTExNjAy NTY0M1oXDTI0MTExNDAxMzAwM1owMzExMC8GA1UEAxMoMjIyOEMyMEQ3REFCRUI0 MjAxRUJGRUY3RkNBNkNBMzQ2M0Y0OUEzNDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAPcqKJIWRfU++644f5LWHnPqfLQuwpX5QWkNJZI+xxVicLYeklXi 6a1npJzj6zAUKkNpoh+7aC1c/J5SNKWZbXaYYOBhyWqT4K0wDRvnCwMSq2rP41FM AFkb1ZylGpuVstfOfqyCSNKQtKJQGW1AU68pTMR0E5WKNvkOvgwmdKgG8yALRhKJ FQF03K9SA0pP6uB+W/D86OU6DnHHKap/dw10Sv31cAxLYd2YAYs5+ZBkeMNlVhvu zGJthBoMZjgBch4boMoOuNACW7jEzIkG8Zd3b5/vH/ZMi5uLrtXB9KFyA4EwZHxb pZ9yjYcq4rh5YpENXtpksQGSWIC4SJYgBi8CAwEAAaOCAiQwggIgMB0GA1UdDgQW BBQiKMINfavrQgHr/vf8pso0Y/SaNDAfBgNVHSMEGDAWgBRtHtFtjG07pAv0LLOi llKtq3bQYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzA3L2JSN1JiWXh0TzZRTDlDeXpvcFpTcmF0MjBHRS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2JSN1JiWXh0TzZRTDlDeXpvcFpTcmF0 MjBHRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8zMDcvSWlqQ0RYMnI2MElCNl83M19LYktOR1AwbWpRLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAtt8ZDANBgkqhkiG9w0BAQsFAAOCAQEAjIyvvREumFa7bxz2xAqCHYvaIBBu Vw4sqbDVi7jyZSQLoNjUsnNof2pLWgEQHU71IA4UfhHW0K3mW3In3XAD6+KDhteL yAwQ6QxSkUGxpPEr/0GnJ/t6YeD0YRBv4KS0DUyCHAM8zzGUuuQiSmj7HJyRBghn Tu29IViUrAB1tp05ubUbI4Ip243hOEEO8glagGlraxJSnqG5wwtZW5oSFBNOu8I7 ce0PGnSBdkPXCvJlRVSXXm+a1Ey3zQRtHZNZUiIGE1XIUUE6CMCw8Rx3Yo6Ss3D/ uwNUwOU97fo0ZFH4HpjxUhFMaBojBlR2sTOae9FkKRPoqPG8ezjn3zOqrA== -----END CERTIFICATE-----Generated at Thu Jun 6 15:06:35 2024 by rpki-client on console-ams.rpki-client.org