$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/1-9gpEjA07eOhVGATEzUzomDUy0.roa File: 1-9gpEjA07eOhVGATEzUzomDUy0.roa (raw, json) Hash identifier: gxIywnFYbP64YFhqpu/60yjuvi5awcuLZUDnHa9Au2c= Subject key identifier: D7:EF:60:A4:48:C0:D3:B7:8E:85:51:80:4C:4C:D4:CE:89:83:53:2D Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0746 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/1-9gpEjA07eOhVGATEzUzomDUy0.roa Signing time: Tue 30 Apr 2024 01:58:51 +0000 ROA not before: Tue 30 Apr 2024 01:58:51 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 49.104.6.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1862 (0x746) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 30 01:58:51 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=D7EF60A448C0D3B78E8551804C4CD4CE8983532D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:7e:f8:71:13:c2:c3:0a:d1:62:32:86:3a:ed: 16:7a:ec:49:86:3c:97:81:3b:69:6a:a3:ee:91:33: bc:23:84:b0:e6:6e:f3:c1:92:00:96:29:aa:ff:8c: e4:b1:c6:a7:24:ad:e5:d1:97:76:6e:98:fa:f2:5d: 97:b3:ed:8d:9d:86:3a:c3:d0:47:b4:82:71:92:63: 9f:e9:78:aa:7f:1b:ad:ff:eb:2b:fb:30:1b:5b:f2: a3:9f:45:3d:4f:a8:d0:0d:c0:9f:53:2e:2d:5a:b6: 6e:83:6a:2c:1f:93:1e:1f:72:20:f9:c9:15:25:8e: f9:26:6d:08:f4:89:f3:ae:a9:e7:f5:0a:0b:cc:e9: b1:f8:45:17:d6:13:0a:eb:75:ed:0c:f4:0e:2b:70: 2d:a0:81:f3:45:2c:71:4b:85:26:a2:4a:aa:8a:e0: dd:f6:5f:88:6a:23:74:ae:2f:14:ee:1c:6f:61:7f: 33:8e:89:b5:78:a2:9e:57:1a:6e:a0:86:18:d5:fd: e1:44:ac:ac:20:ae:a0:dd:c3:fb:ea:90:5f:f2:24: da:5c:49:6f:f2:b6:28:31:54:3c:4e:f4:52:ea:69: 74:6c:dd:da:fa:e4:82:7f:38:ea:6c:19:ee:ef:df: b8:e1:69:01:0b:f8:e2:b2:6a:7c:1d:e5:41:57:e5: 5c:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:EF:60:A4:48:C0:D3:B7:8E:85:51:80:4C:4C:D4:CE:89:83:53:2D X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/1-9gpEjA07eOhVGATEzUzomDUy0.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.104.6.0/23 Signature Algorithm: sha256WithRSAEncryption ad:92:18:e1:fb:1f:24:21:34:75:cf:6c:ea:ef:fe:3f:08:52: a0:43:73:78:87:3a:08:a8:a7:b4:b6:b7:01:bb:e9:80:f1:1c: c6:7d:16:b4:be:65:49:c9:d1:03:77:be:15:91:2d:fa:12:bf: 9f:a5:f7:5d:3e:c8:ca:21:b6:48:e2:29:bb:d2:a1:b6:c4:c4: 3e:f7:9b:1f:e3:52:35:24:ce:33:b3:0d:d6:ea:92:48:6f:52: a0:cd:05:ba:80:b7:19:38:46:28:22:10:a1:3d:da:b8:f7:57: b4:4e:23:ea:9a:92:f3:5b:a9:c2:44:6a:72:25:c6:e3:29:ca: c9:65:16:dd:e9:3e:74:b3:2e:c7:4e:9a:c1:c6:30:54:14:14: a8:7f:52:4d:1b:80:53:ea:54:43:27:0d:74:af:72:c8:a6:a5: 75:15:df:0c:12:56:1e:37:c5:65:3d:ed:5a:e2:c0:35:bf:a8: a7:80:d4:43:ae:a2:28:71:1c:bb:d5:88:37:7e:8d:b9:ca:39: 50:27:8a:54:5f:17:69:fa:21:71:c6:06:f2:cd:08:01:f9:49: 81:a0:84:a5:68:51:34:f2:8a:4e:2b:e8:6f:a3:51:99:a0:f9: b3:d1:e6:db:01:63:28:fe:9c:d8:73:34:12:38:45:9f:73:f5: 0f:08:6f:f1 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICB0YwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw MTU4NTFaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEQ3RUY2MEE0NDhDMEQz Qjc4RTg1NTE4MDRDNENENENFODk4MzUzMkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDPfvhxE8LDCtFiMoY67RZ67EmGPJeBO2lqo+6RM7wjhLDmbvPB kgCWKar/jOSxxqckreXRl3ZumPryXZez7Y2dhjrD0Ee0gnGSY5/peKp/G63/6yv7 MBtb8qOfRT1PqNANwJ9TLi1atm6Daiwfkx4fciD5yRUljvkmbQj0ifOuqef1CgvM 6bH4RRfWEwrrde0M9A4rcC2ggfNFLHFLhSaiSqqK4N32X4hqI3SuLxTuHG9hfzOO ibV4op5XGm6ghhjV/eFErKwgrqDdw/vqkF/yJNpcSW/ytigxVDxO9FLqaXRs3dr6 5IJ/OOpsGe7v37jhaQEL+OKyanwd5UFX5VwVAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU1+9gpEjA07eOhVGATEzUzomDUy0wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5LzEtOWdwRWpBMDdlT2hWR0FURXpVem9tRFV5MC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExaAYwDQYJKoZIhvcNAQELBQADggEBAK2SGOH7HyQhNHXPbOrv/j8IUqBD c3iHOgiop7S2twG76YDxHMZ9FrS+ZUnJ0QN3vhWRLfoSv5+l910+yMohtkjiKbvS obbExD73mx/jUjUkzjOzDdbqkkhvUqDNBbqAtxk4RigiEKE92rj3V7ROI+qakvNb qcJEanIlxuMpysllFt3pPnSzLsdOmsHGMFQUFKh/Uk0bgFPqVEMnDXSvcsimpXUV 3wwSVh43xWU97VriwDW/qKeA1EOuoihxHLvViDd+jbnKOVAnilRfF2n6IXHGBvLN CAH5SYGghKVoUTTyik4r6G+jUZmg+bPR5tsBYyj+nNhzNBI4RZ9z9Q8Ib/E= -----END CERTIFICATE-----Generated at Sat Jun 1 15:54:29 2024 by rpki-client on console-ams.rpki-client.org