$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/9K5qPNsuHRhn_IsHsmZOA5r8gw8.roa File: 9K5qPNsuHRhn_IsHsmZOA5r8gw8.roa (raw, json) Hash identifier: ARuCZsFLHpPPUeRAvBo0MhR7/FxH3Etd/CdiCOQfbu4= Subject key identifier: F4:AE:6A:3C:DB:2E:1D:18:67:FC:8B:07:B2:66:4E:03:9A:FC:83:0F Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 071C Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/9K5qPNsuHRhn_IsHsmZOA5r8gw8.roa Signing time: Tue 30 Apr 2024 01:55:49 +0000 ROA not before: Tue 30 Apr 2024 01:55:49 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 220.210.60.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1820 (0x71c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 30 01:55:49 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=F4AE6A3CDB2E1D1867FC8B07B2664E039AFC830F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:8e:9b:b6:21:14:88:c8:62:07:a2:7e:05:a0: 28:ae:ca:03:36:04:4e:b2:0a:d9:8d:8c:53:91:74: 84:4c:dc:d8:8c:69:3e:98:f8:18:43:5e:94:31:e7: fc:43:8a:4a:88:ae:59:1e:4f:96:71:e3:49:8c:33: 79:42:b3:a5:de:09:e6:87:14:2d:3f:a9:2a:93:86: df:61:b9:32:f7:84:12:44:c8:88:31:d1:c7:02:23: 2c:55:4d:11:5f:b0:35:72:5d:bd:48:23:26:a2:8e: dd:f1:99:45:5f:87:80:3e:c2:2a:38:90:e6:70:ce: 88:d6:c4:95:03:f7:95:25:9c:bc:96:e8:1d:41:12: 19:43:b9:fb:40:aa:bb:1d:72:41:b7:fe:49:d2:65: ae:30:ee:aa:c1:12:b1:bc:38:f2:16:df:7c:60:a6: 16:9c:f2:fb:9b:34:8d:d7:0a:27:b6:07:60:c7:6d: 7d:f0:34:c7:55:0b:18:1e:6e:27:4b:4b:a8:63:23: ad:e0:f4:f7:6c:77:dc:93:e4:ae:0b:02:3c:1f:75: 1a:5b:a3:14:29:c4:a9:27:c1:cf:c9:22:d1:41:55: 61:1c:57:4b:b6:43:e6:20:e2:b2:90:0a:77:fb:36: 9c:f1:f6:1a:b8:39:39:7d:5d:21:28:49:1b:49:81: d8:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:AE:6A:3C:DB:2E:1D:18:67:FC:8B:07:B2:66:4E:03:9A:FC:83:0F X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/9K5qPNsuHRhn_IsHsmZOA5r8gw8.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 220.210.60.0/22 Signature Algorithm: sha256WithRSAEncryption 5a:4f:f9:09:c8:87:3f:f6:d5:83:79:c4:88:9b:09:bb:3f:31: ea:0f:73:06:4a:0d:a7:d9:9c:fe:77:6e:05:13:92:27:a1:05: 32:01:7e:46:34:38:42:43:80:de:99:e1:7a:13:fb:bb:f3:c4: 37:93:28:97:4c:e3:d3:7a:31:84:91:0c:97:96:74:05:32:59: fa:81:c2:a9:75:27:b0:9b:fb:07:37:ab:39:eb:0d:61:7f:d7: 40:41:9e:cb:5d:d4:a8:7d:86:95:72:ed:23:ba:f9:62:58:c7: a3:76:e8:37:01:aa:1b:a0:9d:2b:f1:c1:05:05:32:7b:aa:51: 58:18:90:1f:7f:c0:96:9e:11:56:7e:00:f0:21:96:24:cf:b9: a7:a8:01:97:cf:29:0f:f2:ef:92:8b:a5:09:cc:6e:f2:1c:85: ae:79:be:84:94:79:25:0a:ad:71:2f:a9:9a:e4:3d:e0:99:42: 6e:a7:5b:c0:2b:42:5f:d0:7b:4e:fa:cc:06:02:d6:0f:36:d5: e9:79:f9:52:45:d3:cc:52:6b:ae:f0:06:c2:67:6f:43:4f:4b: 96:23:4d:86:4b:e0:8c:02:aa:be:31:fa:76:92:7b:9e:e5:78: cf:89:69:13:61:52:10:4b:de:db:b1:bc:82:02:f9:0d:00:77: 45:41:42:32 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBxwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw MTU1NDlaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEY0QUU2QTNDREIyRTFE MTg2N0ZDOEIwN0IyNjY0RTAzOUFGQzgzMEYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDCjpu2IRSIyGIHon4FoCiuygM2BE6yCtmNjFORdIRM3NiMaT6Y +BhDXpQx5/xDikqIrlkeT5Zx40mMM3lCs6XeCeaHFC0/qSqTht9huTL3hBJEyIgx 0ccCIyxVTRFfsDVyXb1IIyaijt3xmUVfh4A+wio4kOZwzojWxJUD95UlnLyW6B1B EhlDuftAqrsdckG3/knSZa4w7qrBErG8OPIW33xgphac8vubNI3XCie2B2DHbX3w NMdVCxgebidLS6hjI63g9Pdsd9yT5K4LAjwfdRpboxQpxKknwc/JItFBVWEcV0u2 Q+Yg4rKQCnf7Npzx9hq4OTl9XSEoSRtJgdh3AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU9K5qPNsuHRhn/IsHsmZOA5r8gw8wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5LzlLNXFQTnN1SFJobl9Jc0hzbVpPQTVyOGd3OC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBALc0jwwDQYJKoZIhvcNAQELBQADggEBAFpP+QnIhz/21YN5xIibCbs/MeoP cwZKDafZnP53bgUTkiehBTIBfkY0OEJDgN6Z4XoT+7vzxDeTKJdM49N6MYSRDJeW dAUyWfqBwql1J7Cb+wc3qznrDWF/10BBnstd1Kh9hpVy7SO6+WJYx6N26DcBqhug nSvxwQUFMnuqUVgYkB9/wJaeEVZ+APAhliTPuaeoAZfPKQ/y75KLpQnMbvIcha55 voSUeSUKrXEvqZrkPeCZQm6nW8ArQl/Qe076zAYC1g821el5+VJF08xSa67wBsJn b0NPS5YjTYZL4IwCqr4x+naSe57leM+JaRNhUhBL3tuxvIIC+Q0Ad0VBQjI= -----END CERTIFICATE-----Generated at Sun Feb 16 22:34:20 2025 by rpki-client