$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/5YDMFUa8sgGvDlp9kHmbEmgXRFE.roa File: 5YDMFUa8sgGvDlp9kHmbEmgXRFE.roa (raw, json) Hash identifier: V3DdJhWwIYU8RQ7aEXSWuXB82K/D0GCC8fITT+Tne8o= Subject key identifier: E5:80:CC:15:46:BC:B2:01:AF:0E:5A:7D:90:79:9B:12:68:17:44:51 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0835 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/5YDMFUa8sgGvDlp9kHmbEmgXRFE.roa Signing time: Tue 30 Apr 2024 02:14:28 +0000 ROA not before: Tue 30 Apr 2024 02:14:28 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 110.163.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2101 (0x835) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 30 02:14:28 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=E580CC1546BCB201AF0E5A7D90799B1268174451 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:56:f5:d6:4c:bd:a9:e2:00:1f:98:1f:ff:54: 1e:8a:c2:94:ca:a0:1d:af:4a:ec:76:a7:d2:7d:cd: d5:0d:4c:ed:50:06:7c:dc:2d:57:01:fb:5d:dc:4a: 40:4a:3f:7d:6f:89:f9:2c:62:49:64:e3:b1:f1:38: f0:19:7a:63:79:0f:1e:5c:21:7e:dd:08:91:3f:04: 10:6f:4d:80:f1:80:2e:3c:35:1e:47:d9:e9:14:49: 48:24:5a:83:81:d1:b5:97:49:0f:44:31:29:04:31: 71:35:b6:64:87:5c:6a:14:07:78:cc:06:ee:7d:2a: a0:d2:f1:a3:33:c3:5f:58:1d:36:95:b5:44:39:ad: 73:34:cd:41:f2:13:7b:a5:6d:a4:f4:e5:f4:22:65: 59:8b:fb:a7:1f:0d:db:39:bc:20:38:a6:c4:bb:f8: 18:34:ca:ad:1c:ce:91:d9:8b:b0:e5:7d:2d:6d:82: fa:0c:83:90:f3:49:ab:fb:b4:58:26:bd:35:70:fe: 05:a3:f0:f6:e1:8b:43:96:7c:76:ac:d2:c4:ec:f1: cd:cc:8e:6e:3b:04:e3:94:71:2a:ae:ac:48:db:a5: 39:56:8e:bf:a8:5e:ac:da:ae:33:65:61:4a:95:0e: 05:91:31:24:b7:cc:ca:d8:86:c6:ff:b5:71:40:bb: 22:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:80:CC:15:46:BC:B2:01:AF:0E:5A:7D:90:79:9B:12:68:17:44:51 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/5YDMFUa8sgGvDlp9kHmbEmgXRFE.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 110.163.216.0/24 Signature Algorithm: sha256WithRSAEncryption 64:20:d8:57:bd:69:e2:07:07:94:64:5d:7f:fb:ee:53:32:3a: 7f:9c:2b:4b:cf:32:b7:8a:aa:b6:45:4a:30:aa:22:12:ca:d2: 0d:8a:cc:86:4d:6b:3c:90:48:01:cd:3b:52:ca:cd:fb:d2:e8: 97:ed:72:8d:30:14:05:87:b8:93:02:f9:3c:3c:82:4a:1c:ec: db:13:30:e1:8b:a1:f5:d8:5b:22:93:a5:e7:03:8f:7e:c3:1e: 83:45:e2:15:6b:cc:a4:84:f8:52:aa:ee:4c:00:df:05:3a:43: 7f:a2:f9:e7:e1:57:c4:91:b5:2a:38:92:f5:e0:99:9a:80:1d: b4:ad:26:d4:1d:97:b1:df:8e:48:0a:93:90:9a:fa:7f:e3:5d: 59:4e:33:20:1e:5e:03:0e:91:c1:31:1e:41:df:2b:0c:1a:49: 86:2f:2c:df:ca:63:ae:08:84:2c:70:3e:5e:6b:fc:59:66:ad: 39:1f:a5:34:d6:ae:e0:81:ee:f7:49:87:fa:44:34:1a:f4:ee: e4:6b:2e:0d:01:9d:39:60:7a:5d:d9:0c:b9:5d:5a:27:37:d4: 7e:d6:90:97:a0:e2:df:c4:f1:c7:20:52:ba:6b:e8:2e:34:96: f2:3e:4f:47:a8:b9:6d:9f:f1:64:8d:9d:08:e1:c8:2c:30:d2: bc:d0:b8:ae -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCDUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw MjE0MjhaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEU1ODBDQzE1NDZCQ0Iy MDFBRjBFNUE3RDkwNzk5QjEyNjgxNzQ0NTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC0VvXWTL2p4gAfmB//VB6KwpTKoB2vSux2p9J9zdUNTO1QBnzc LVcB+13cSkBKP31vifksYklk47HxOPAZemN5Dx5cIX7dCJE/BBBvTYDxgC48NR5H 2ekUSUgkWoOB0bWXSQ9EMSkEMXE1tmSHXGoUB3jMBu59KqDS8aMzw19YHTaVtUQ5 rXM0zUHyE3ulbaT05fQiZVmL+6cfDds5vCA4psS7+Bg0yq0czpHZi7DlfS1tgvoM g5DzSav7tFgmvTVw/gWj8Pbhi0OWfHas0sTs8c3Mjm47BOOUcSqurEjbpTlWjr+o XqzarjNlYUqVDgWRMSS3zMrYhsb/tXFAuyLRAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU5YDMFUa8sgGvDlp9kHmbEmgXRFEwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5LzVZRE1GVWE4c2dHdkRscDlrSG1iRW1nWFJGRS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABuo9gwDQYJKoZIhvcNAQELBQADggEBAGQg2Fe9aeIHB5RkXX/77lMyOn+c K0vPMreKqrZFSjCqIhLK0g2KzIZNazyQSAHNO1LKzfvS6Jftco0wFAWHuJMC+Tw8 gkoc7NsTMOGLofXYWyKTpecDj37DHoNF4hVrzKSE+FKq7kwA3wU6Q3+i+efhV8SR tSo4kvXgmZqAHbStJtQdl7HfjkgKk5Ca+n/jXVlOMyAeXgMOkcExHkHfKwwaSYYv LN/KY64IhCxwPl5r/FlmrTkfpTTWruCB7vdJh/pENBr07uRrLg0BnTlgel3ZDLld Wic31H7WkJeg4t/E8ccgUrpr6C40lvI+T0eouW2f8WSNnQjhyCww0rzQuK4= -----END CERTIFICATE-----Generated at Sat Jun 1 15:54:29 2024 by rpki-client on console-ams.rpki-client.org