$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/JKHRI1flzowR7ftbKMOnvzBRgSM.roa File: JKHRI1flzowR7ftbKMOnvzBRgSM.roa (raw, json) Hash identifier: h6uNdKIkEjY77w2M6InRYMhEtPGIc9QjDSUQ7WqYdd4= Subject key identifier: 24:A1:D1:23:57:E5:CE:8C:11:ED:FB:5B:28:C3:A7:BF:30:51:81:23 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 09AE Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/JKHRI1flzowR7ftbKMOnvzBRgSM.roa Signing time: Sun 30 Jun 2024 01:38:19 +0000 ROA not before: Sun 30 Jun 2024 01:38:19 +0000 ROA not after: Tue 24 Jun 2025 10:46:45 +0000 asID: 9605 IP address blocks: 219.122.76.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2478 (0x9ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 30 01:38:19 2024 GMT Not After : Jun 24 10:46:45 2025 GMT Subject: CN=24A1D12357E5CE8C11EDFB5B28C3A7BF30518123 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:2c:cb:61:0c:68:c4:10:ce:9f:ee:5a:c4:42: 8b:06:2a:a1:c2:d6:bd:72:4c:b6:16:30:c7:00:54: 11:94:c9:71:50:3d:b3:41:22:6d:4d:cf:27:7d:9e: 47:f8:a6:be:1b:1e:e5:b5:fe:b0:ea:96:e6:69:73: 1b:af:54:88:d7:63:64:72:69:7b:2d:65:0d:8e:8b: 3e:98:f5:e7:23:82:b0:a6:cd:a9:fa:51:2e:e9:8b: 6f:5d:41:b1:18:3b:b9:0b:77:30:39:13:78:7a:e9: 55:08:7f:c6:53:d2:4a:c3:4b:f5:9c:ee:ac:f4:5e: 50:93:ab:ed:3b:13:a0:17:cb:b2:1d:d6:bc:9a:21: 01:f5:42:9e:33:be:c2:00:cd:71:f9:6b:f5:dc:8a: 0a:b4:d3:74:15:22:76:58:15:d7:eb:1b:c8:22:50: 89:30:4a:31:84:a7:c1:f1:56:ff:b8:4b:89:75:6e: bb:45:da:07:3f:4a:18:9c:0b:21:87:2c:59:9d:bc: 65:e9:29:96:ff:37:22:4a:a9:8d:fd:6e:5b:4b:a4: 77:cd:44:6f:98:79:02:35:a5:93:fd:aa:6b:b6:f3: 3c:07:e9:0c:e4:e5:a4:45:9e:cc:9b:c2:76:f9:45: 27:0f:ae:f0:be:ba:38:24:1b:bb:5e:39:ea:7f:25: 82:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:A1:D1:23:57:E5:CE:8C:11:ED:FB:5B:28:C3:A7:BF:30:51:81:23 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/JKHRI1flzowR7ftbKMOnvzBRgSM.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 219.122.76.0/22 Signature Algorithm: sha256WithRSAEncryption d9:10:1e:43:c0:b0:b9:a0:ee:d8:29:1b:11:49:f9:19:6d:25: 42:22:92:1a:75:0e:f0:f1:3e:8e:18:12:15:c8:55:91:17:c4: f6:42:b6:00:cc:4c:2d:85:93:a1:80:78:d4:33:a3:87:8f:59: 05:5c:dd:48:e3:2a:7b:22:2a:78:bf:d2:54:28:84:f1:73:25: 4a:fd:96:ba:1e:7d:76:db:bd:63:7b:e5:42:f1:e9:23:7a:1d: 2c:e9:e2:e8:8b:7a:d4:78:57:03:a4:d5:4b:8b:87:03:b4:4a: 0c:a6:39:c9:91:18:ba:5a:71:f8:42:19:a8:26:62:23:d2:d9: e3:0a:6d:0c:f7:ee:60:a3:a1:62:27:68:9a:aa:26:57:a3:3d: 9e:c7:19:7c:b8:a3:db:58:45:eb:b3:df:09:32:e4:ce:61:3e: 25:b9:92:2d:30:6d:bb:ee:98:59:81:63:25:e7:e4:ea:60:a3: 09:b7:d7:2d:d1:44:9d:90:a8:5e:8b:b2:2d:fb:2d:21:63:c8: d0:d3:a4:c1:44:6a:e3:db:88:5c:cb:25:05:1c:2d:5b:da:8e: 01:b9:8d:56:c8:54:92:c3:e6:fa:7a:80:56:40:79:be:c0:29: 1e:64:04:e3:aa:44:22:3c:96:74:5b:f6:b7:ac:86:b0:dc:0b: f2:92:01:1b -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCa4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA2MzAw MTM4MTlaFw0yNTA2MjQxMDQ2NDVaMDMxMTAvBgNVBAMTKDI0QTFEMTIzNTdFNUNF OEMxMUVERkI1QjI4QzNBN0JGMzA1MTgxMjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDlLMthDGjEEM6f7lrEQosGKqHC1r1yTLYWMMcAVBGUyXFQPbNB Im1Nzyd9nkf4pr4bHuW1/rDqluZpcxuvVIjXY2RyaXstZQ2Oiz6Y9ecjgrCmzan6 US7pi29dQbEYO7kLdzA5E3h66VUIf8ZT0krDS/Wc7qz0XlCTq+07E6AXy7Id1rya IQH1Qp4zvsIAzXH5a/Xcigq003QVInZYFdfrG8giUIkwSjGEp8HxVv+4S4l1brtF 2gc/ShicCyGHLFmdvGXpKZb/NyJKqY39bltLpHfNRG+YeQI1pZP9qmu28zwH6Qzk 5aRFnsybwnb5RScPrvC+ujgkG7teOep/JYIvAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUJKHRI1flzowR7ftbKMOnvzBRgSMwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0pLSFJJMWZsem93UjdmdGJLTU9udnpCUmdTTS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBALbekwwDQYJKoZIhvcNAQELBQADggEBANkQHkPAsLmg7tgpGxFJ+RltJUIi khp1DvDxPo4YEhXIVZEXxPZCtgDMTC2Fk6GAeNQzo4ePWQVc3UjjKnsiKni/0lQo hPFzJUr9lroefXbbvWN75ULx6SN6HSzp4uiLetR4VwOk1UuLhwO0SgymOcmRGLpa cfhCGagmYiPS2eMKbQz37mCjoWInaJqqJlejPZ7HGXy4o9tYReuz3wky5M5hPiW5 ki0wbbvumFmBYyXn5Opgowm31y3RRJ2QqF6Lsi37LSFjyNDTpMFEauPbiFzLJQUc LVvajgG5jVbIVJLD5vp6gFZAeb7AKR5kBOOqRCI8lnRb9reshrDcC/KSARs= -----END CERTIFICATE-----Generated at Sun Feb 16 22:29:50 2025 by rpki-client