$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/3ZqwLjv6tvdioAyrMMVJp7Xld9w.roa File: 3ZqwLjv6tvdioAyrMMVJp7Xld9w.roa (raw, json) Hash identifier: dfNcRtuCQRqa8p0MwwnqaLLRZD0rGiFokLKZptNRWSg= Subject key identifier: DD:9A:B0:2E:3B:FA:B6:F7:62:A0:0C:AB:30:C5:49:A7:B5:E5:77:DC Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 095E Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/3ZqwLjv6tvdioAyrMMVJp7Xld9w.roa Signing time: Sun 30 Jun 2024 01:33:30 +0000 ROA not before: Sun 30 Jun 2024 01:33:30 +0000 ROA not after: Tue 24 Jun 2025 10:46:45 +0000 asID: 9605 IP address blocks: 49.102.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:41:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2398 (0x95e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 30 01:33:30 2024 GMT Not After : Jun 24 10:46:45 2025 GMT Subject: CN=DD9AB02E3BFAB6F762A00CAB30C549A7B5E577DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:84:7a:03:52:4d:72:d7:47:dd:95:7b:61:39: 22:e6:4e:78:d9:ff:ca:df:77:f7:dc:ff:4d:76:0a: 8d:9c:b0:68:5a:23:7d:0b:3e:69:7f:e4:0a:8b:2f: 02:f3:ff:24:c1:70:aa:82:d2:0d:a2:12:0c:a0:fa: 75:f5:ad:1f:0e:a0:93:09:ae:c1:73:73:66:e3:24: f2:55:0c:0e:18:df:c5:e5:d7:60:30:c7:c8:15:49: 9a:f1:03:31:6b:80:f3:55:aa:13:0c:40:01:20:86: 8f:b3:d8:88:70:d7:e4:2d:d8:6f:c5:d4:ca:27:e5: 20:91:b1:22:9e:f8:8a:c3:30:df:96:91:ca:40:af: af:64:01:0b:a6:b3:50:75:a8:f1:97:51:cf:ce:62: 80:48:72:b1:75:aa:e7:c7:5e:95:41:07:29:18:54: 83:c3:db:bb:25:df:7e:01:33:5c:94:64:dd:84:dd: 6b:50:c1:bc:16:cc:46:69:e2:04:30:94:6d:8b:58: 27:96:4c:53:ea:1c:2e:8e:c4:a9:6b:9a:56:c4:c6: a9:dc:cd:20:02:fa:e7:15:11:0d:f0:f0:e3:41:50: f5:ef:2b:04:63:0a:4a:d5:dc:f7:2a:38:2a:78:05: b6:84:b5:2d:67:fa:ee:57:62:7a:1e:1f:bd:20:5e: 9b:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:9A:B0:2E:3B:FA:B6:F7:62:A0:0C:AB:30:C5:49:A7:B5:E5:77:DC X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/3ZqwLjv6tvdioAyrMMVJp7Xld9w.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.102.155.0/24 Signature Algorithm: sha256WithRSAEncryption cd:ae:6a:e3:ed:b4:05:e1:60:99:18:a9:62:da:da:b1:7a:0c: cd:8f:af:9d:a3:61:b5:8e:c1:f7:60:0a:7b:27:84:6f:5a:fb: 34:2b:60:2c:a5:8f:b6:0e:f7:cc:db:3a:16:be:ef:a2:6f:a5: 21:c7:2f:e6:ff:82:ea:3e:38:62:cd:bb:13:0a:ce:58:b3:dd: 33:7a:18:b2:be:e4:6b:ae:64:5e:11:ed:85:34:e5:ad:a7:23: db:bd:29:df:8b:0b:58:8b:d6:c1:f9:d8:4d:0b:82:6f:e8:f8: 25:85:b9:31:6d:40:dd:93:bd:79:70:5d:f0:ab:1a:a4:fb:dd: 3a:b4:63:2c:0d:18:b9:eb:a8:69:9e:1b:de:2f:94:ce:b9:3d: 48:fa:9e:97:7a:30:17:1c:38:9f:dd:9a:98:25:26:3d:c0:96: 67:cd:a7:d7:d0:07:bf:c8:bf:31:65:03:f7:30:0d:b8:fc:7c: aa:d7:85:0f:0b:a8:2b:02:1d:99:80:49:bd:50:da:3a:aa:1d: 19:f4:23:5c:98:bf:9b:71:e6:74:11:b3:1b:7b:8e:30:62:78: 05:57:f5:9f:6a:3b:db:3a:03:67:2d:94:13:ef:1e:89:7b:4c: 91:c8:6a:80:b7:56:f9:0d:87:48:00:29:62:07:5b:5c:be:4e: 31:57:7a:e1 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCV4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA2MzAw MTMzMzBaFw0yNTA2MjQxMDQ2NDVaMDMxMTAvBgNVBAMTKEREOUFCMDJFM0JGQUI2 Rjc2MkEwMENBQjMwQzU0OUE3QjVFNTc3REMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCqhHoDUk1y10fdlXthOSLmTnjZ/8rfd/fc/012Co2csGhaI30L Pml/5AqLLwLz/yTBcKqC0g2iEgyg+nX1rR8OoJMJrsFzc2bjJPJVDA4Y38Xl12Aw x8gVSZrxAzFrgPNVqhMMQAEgho+z2Ihw1+Qt2G/F1Mon5SCRsSKe+IrDMN+WkcpA r69kAQums1B1qPGXUc/OYoBIcrF1qufHXpVBBykYVIPD27sl334BM1yUZN2E3WtQ wbwWzEZp4gQwlG2LWCeWTFPqHC6OxKlrmlbExqnczSAC+ucVEQ3w8ONBUPXvKwRj CkrV3PcqOCp4BbaEtS1n+u5XYnoeH70gXpttAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU3ZqwLjv6tvdioAyrMMVJp7Xld9wwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5LzNacXdManY2dHZkaW9BeXJNTVZKcDdYbGQ5dy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAxZpswDQYJKoZIhvcNAQELBQADggEBAM2uauPttAXhYJkYqWLa2rF6DM2P r52jYbWOwfdgCnsnhG9a+zQrYCylj7YO98zbOha+76JvpSHHL+b/guo+OGLNuxMK zliz3TN6GLK+5GuuZF4R7YU05a2nI9u9Kd+LC1iL1sH52E0Lgm/o+CWFuTFtQN2T vXlwXfCrGqT73Tq0YywNGLnrqGmeG94vlM65PUj6npd6MBccOJ/dmpglJj3AlmfN p9fQB7/IvzFlA/cwDbj8fKrXhQ8LqCsCHZmASb1Q2jqqHRn0I1yYv5tx5nQRsxt7 jjBieAVX9Z9qO9s6A2ctlBPvHol7TJHIaoC3VvkNh0gAKWIHW1y+TjFXeuE= -----END CERTIFICATE-----Generated at Fri Nov 22 15:23:58 2024 by rpki-client on console-fra.rpki-client.org