$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/9u8_4YIZ6iLkIciBtOdCpnQ2L-0.roa File: 9u8_4YIZ6iLkIciBtOdCpnQ2L-0.roa (raw, json) Hash identifier: 35fAygl6bhqlqnPk0Bv7glSkf3VmuILk0+1cfm1ZGCE= Subject key identifier: F6:EF:3F:E1:82:19:EA:22:E4:21:C8:81:B4:E7:42:A6:74:36:2F:ED Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0986 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/9u8_4YIZ6iLkIciBtOdCpnQ2L-0.roa Signing time: Sun 30 Jun 2024 01:36:23 +0000 ROA not before: Sun 30 Jun 2024 01:36:23 +0000 ROA not after: Tue 24 Jun 2025 10:46:45 +0000 asID: 9605 IP address blocks: 49.111.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2438 (0x986) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 30 01:36:23 2024 GMT Not After : Jun 24 10:46:45 2025 GMT Subject: CN=F6EF3FE18219EA22E421C881B4E742A674362FED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:1c:59:db:a8:2f:aa:fa:56:81:55:f6:de:44: 63:01:38:ff:e6:bb:e3:4a:42:0d:28:4d:ef:56:ea: 15:d9:58:74:90:fb:86:a1:05:e5:5e:fd:18:72:e8: e9:74:ad:63:c4:24:00:c3:71:0c:e6:5a:f5:fb:a2: b0:87:76:aa:50:07:05:08:2b:9d:be:6c:7f:81:66: 44:c9:3c:b3:01:22:d1:27:cc:d2:d6:45:ba:db:87: 5f:56:7c:79:79:46:2e:82:27:02:7f:25:05:22:bb: bb:01:97:f8:d3:2d:61:2e:a9:6b:63:d4:12:1d:3e: f4:4d:65:00:9b:10:8e:ba:4c:15:73:04:85:1a:3e: b2:5c:7e:1f:0e:fb:de:ef:fe:a4:6c:0b:ea:e3:a2: c2:54:41:f0:0c:d3:79:7c:3e:a3:4a:38:ec:fd:50: 06:98:83:7e:40:e5:f8:cd:8d:b8:9d:b5:73:50:9a: ee:ad:17:eb:76:cf:19:b8:97:22:f5:9d:b3:52:0a: b3:cb:1d:f7:da:1b:e8:2c:9b:9c:06:6e:a9:3c:a4: 41:4d:1e:46:64:79:ce:91:a1:07:78:77:fa:35:2f: ad:c5:81:fc:79:53:72:f8:8b:f5:ea:09:70:7f:c3: a9:37:d9:4e:63:ea:9f:0e:0d:5e:67:ae:9d:e9:5d: b8:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:EF:3F:E1:82:19:EA:22:E4:21:C8:81:B4:E7:42:A6:74:36:2F:ED X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/9u8_4YIZ6iLkIciBtOdCpnQ2L-0.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.111.128.0/17 Signature Algorithm: sha256WithRSAEncryption 82:38:5d:0c:33:30:46:dd:00:b2:14:0f:7c:1d:8c:b2:51:d7: 18:02:b1:01:71:f4:6e:0e:08:af:00:74:49:e0:a5:44:09:a9: 85:4d:db:34:c2:14:cd:68:64:76:c4:5d:f7:49:25:f6:1c:88: ba:75:d4:22:ba:bc:1d:70:e7:f2:98:c6:e1:58:ee:c6:86:9f: 8b:b7:28:54:ca:a3:16:de:8c:3c:20:c1:42:9f:1c:ed:94:17: d8:49:b2:76:d6:ff:3a:ef:05:6c:c1:29:b6:ea:c1:cf:b2:02: 16:5a:49:0c:e3:1d:48:a4:53:d6:fe:be:24:fd:7b:bf:c6:3a: a8:d5:3b:03:bb:2c:ab:55:1e:ec:02:81:f3:00:9b:4c:2b:22: 9f:10:35:be:b8:c7:ad:14:1d:0b:0a:e9:97:9f:0a:55:3c:69: d4:2b:4e:c5:20:de:21:97:e7:8e:38:51:bc:dd:ac:6a:c0:02: 11:ac:4c:ef:57:97:43:14:44:bf:6a:98:f1:f8:03:ab:f1:9b: 0f:63:e0:e2:8c:b2:b2:e7:74:17:5b:27:be:9c:23:f7:7d:29: 3a:23:0a:f0:fb:c2:7a:1c:ba:3f:ab:62:55:1a:54:63:d0:b9: be:74:5d:86:ea:95:c4:11:3b:72:0e:21:e9:5e:2e:ec:12:c5: f4:8c:bf:68 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCYYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA2MzAw MTM2MjNaFw0yNTA2MjQxMDQ2NDVaMDMxMTAvBgNVBAMTKEY2RUYzRkUxODIxOUVB MjJFNDIxQzg4MUI0RTc0MkE2NzQzNjJGRUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC9HFnbqC+q+laBVfbeRGMBOP/mu+NKQg0oTe9W6hXZWHSQ+4ah BeVe/Rhy6Ol0rWPEJADDcQzmWvX7orCHdqpQBwUIK52+bH+BZkTJPLMBItEnzNLW Rbrbh19WfHl5Ri6CJwJ/JQUiu7sBl/jTLWEuqWtj1BIdPvRNZQCbEI66TBVzBIUa PrJcfh8O+97v/qRsC+rjosJUQfAM03l8PqNKOOz9UAaYg35A5fjNjbidtXNQmu6t F+t2zxm4lyL1nbNSCrPLHffaG+gsm5wGbqk8pEFNHkZkec6RoQd4d/o1L63Fgfx5 U3L4i/XqCXB/w6k32U5j6p8ODV5nrp3pXbh9AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU9u8/4YIZ6iLkIciBtOdCpnQ2L+0wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5Lzl1OF80WUlaNmlMa0ljaUJ0T2RDcG5RMkwtMC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAcxb4AwDQYJKoZIhvcNAQELBQADggEBAII4XQwzMEbdALIUD3wdjLJR1xgC sQFx9G4OCK8AdEngpUQJqYVN2zTCFM1oZHbEXfdJJfYciLp11CK6vB1w5/KYxuFY 7saGn4u3KFTKoxbejDwgwUKfHO2UF9hJsnbW/zrvBWzBKbbqwc+yAhZaSQzjHUik U9b+viT9e7/GOqjVOwO7LKtVHuwCgfMAm0wrIp8QNb64x60UHQsK6ZefClU8adQr TsUg3iGX5444UbzdrGrAAhGsTO9Xl0MURL9qmPH4A6vxmw9j4OKMsrLndBdbJ76c I/d9KTojCvD7wnocuj+rYlUaVGPQub50XYbqlcQRO3IOIeleLuwSxfSMv2g= -----END CERTIFICATE-----Generated at Sun Feb 16 22:07:11 2025 by rpki-client