$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/30pyILljJ7jqUyDWLISDeXFLvpo.roa File: 30pyILljJ7jqUyDWLISDeXFLvpo.roa (raw, json) Hash identifier: sFWroMNB59vWO1LWWQx+gAWCJUDaYnUpmM1GGeM3A0w= Subject key identifier: DF:4A:72:20:B9:63:27:B8:EA:53:20:D6:2C:84:83:79:71:4B:BE:9A Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0970 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/30pyILljJ7jqUyDWLISDeXFLvpo.roa Signing time: Sun 30 Jun 2024 01:33:39 +0000 ROA not before: Sun 30 Jun 2024 01:33:39 +0000 ROA not after: Tue 24 Jun 2025 10:46:45 +0000 asID: 9605 IP address blocks: 110.161.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 12:58:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2416 (0x970) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 30 01:33:39 2024 GMT Not After : Jun 24 10:46:45 2025 GMT Subject: CN=DF4A7220B96327B8EA5320D62C848379714BBE9A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:7f:04:c5:2d:e8:c0:2b:e7:8a:a1:94:34:ea: aa:55:20:b6:b2:bd:26:22:f9:4e:44:29:b4:28:5a: b3:fb:cd:6a:55:d1:31:68:d7:f9:75:21:90:d3:0d: a6:4b:d8:91:c1:29:ae:a7:cc:be:a7:6d:4f:c8:12: fa:4a:78:4c:98:70:87:e9:ab:14:c5:a3:55:b8:20: 13:0a:f4:bf:78:3d:8c:83:6c:e2:3f:3e:96:d7:f0: 6d:c5:03:f1:05:29:3e:35:6c:5d:fa:4d:41:7e:cc: 92:f0:50:1f:dc:81:00:ec:1f:45:71:7e:5e:e0:a9: 66:93:bd:36:e3:1c:d7:53:96:5c:67:3d:ed:d2:01: 8c:ce:ea:11:a7:83:48:2f:0b:a3:6f:1e:5f:e1:d9: 79:89:f2:d4:d4:0f:d2:30:70:bc:4e:b8:1f:a9:19: b9:32:d1:0c:a1:d9:7c:80:d2:80:f0:9e:83:ce:86: 83:50:17:a9:7b:6e:69:73:60:3d:ac:b2:6f:a0:69: 44:84:a7:28:54:1f:9a:a2:8a:73:ad:fd:50:7c:b2: df:17:0f:b5:64:5c:e4:74:42:b1:97:2d:0c:1c:3f: aa:7a:57:09:85:bf:6c:07:d7:12:d6:1e:ce:56:d7: d0:54:96:4d:1d:34:4c:53:58:86:c7:82:d1:92:d1: 3c:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:4A:72:20:B9:63:27:B8:EA:53:20:D6:2C:84:83:79:71:4B:BE:9A X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/30pyILljJ7jqUyDWLISDeXFLvpo.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 110.161.216.0/21 Signature Algorithm: sha256WithRSAEncryption 95:ad:be:1d:5c:6e:ce:5e:0f:08:28:d9:fd:ce:44:e8:a6:15: 1c:26:a1:39:0d:fb:23:ce:b2:40:59:34:4f:6a:e0:9f:6e:5f: ab:11:cd:7c:e4:33:55:c1:99:40:fd:de:17:7a:a0:2f:9d:a1: eb:9b:9d:a4:c3:e2:1a:61:7e:72:5a:26:3b:81:42:a8:20:e2: 42:97:98:95:2a:77:40:f5:d9:ca:36:41:5b:07:22:92:b0:ad: 11:43:4b:b1:10:c1:10:d1:ee:ed:d0:a0:cb:e0:ae:62:8f:b1: a1:30:76:4f:94:a2:9d:76:6e:d7:e3:cf:0f:09:13:da:8a:b4: 75:a2:6a:f8:11:ef:b1:f8:df:4f:da:59:d7:eb:25:da:65:11: db:34:de:71:2f:e9:52:5b:55:47:50:94:d5:1d:ff:d3:cd:09: 94:fd:83:e4:a3:45:b9:0f:7f:9d:9e:ff:05:73:85:8a:ab:ba: 1f:be:2a:a4:ab:cf:b0:6c:4a:5d:5f:53:ff:8b:b9:90:61:cf: 40:05:16:5b:6e:a6:cf:85:e4:06:78:8d:d0:18:9d:2c:2d:7c: 92:68:cb:3d:04:12:e2:55:c7:a0:ee:7a:3b:11:2c:80:bc:43: cd:32:ee:dc:93:2e:02:41:84:04:0a:37:b4:68:03:a2:b6:56: dc:9a:52:15 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCXAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA2MzAw MTMzMzlaFw0yNTA2MjQxMDQ2NDVaMDMxMTAvBgNVBAMTKERGNEE3MjIwQjk2MzI3 QjhFQTUzMjBENjJDODQ4Mzc5NzE0QkJFOUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCbfwTFLejAK+eKoZQ06qpVILayvSYi+U5EKbQoWrP7zWpV0TFo 1/l1IZDTDaZL2JHBKa6nzL6nbU/IEvpKeEyYcIfpqxTFo1W4IBMK9L94PYyDbOI/ PpbX8G3FA/EFKT41bF36TUF+zJLwUB/cgQDsH0Vxfl7gqWaTvTbjHNdTllxnPe3S AYzO6hGng0gvC6NvHl/h2XmJ8tTUD9IwcLxOuB+pGbky0Qyh2XyA0oDwnoPOhoNQ F6l7bmlzYD2ssm+gaUSEpyhUH5qiinOt/VB8st8XD7VkXOR0QrGXLQwcP6p6VwmF v2wH1xLWHs5W19BUlk0dNExTWIbHgtGS0Ty3AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU30pyILljJ7jqUyDWLISDeXFLvpowHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5LzMwcHlJTGxqSjdqcVV5RFdMSVNEZVhGTHZwby5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBANuodgwDQYJKoZIhvcNAQELBQADggEBAJWtvh1cbs5eDwgo2f3OROimFRwm oTkN+yPOskBZNE9q4J9uX6sRzXzkM1XBmUD93hd6oC+doeubnaTD4hphfnJaJjuB Qqgg4kKXmJUqd0D12co2QVsHIpKwrRFDS7EQwRDR7u3QoMvgrmKPsaEwdk+Uop12 btfjzw8JE9qKtHWiavgR77H430/aWdfrJdplEds03nEv6VJbVUdQlNUd/9PNCZT9 g+SjRbkPf52e/wVzhYqruh++KqSrz7BsSl1fU/+LuZBhz0AFFltups+F5AZ4jdAY nSwtfJJoyz0EEuJVx6DuejsRLIC8Q80y7tyTLgJBhAQKN7RoA6K2VtyaUhU= -----END CERTIFICATE-----Generated at Fri Nov 22 14:21:18 2024 by rpki-client on console-ams.rpki-client.org