$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/K2kRamPly68X6CqPehsExRbfTbI.roa File: K2kRamPly68X6CqPehsExRbfTbI.roa (raw, json) Hash identifier: jcEDIPhO94OZAqJWZ7/u+bt0m+ugEmZALDNOJ5ToVEw= Subject key identifier: 2B:69:11:6A:63:E5:CB:AF:17:E8:2A:8F:7A:1B:04:C5:16:DF:4D:B2 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0A61 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/K2kRamPly68X6CqPehsExRbfTbI.roa Signing time: Sun 30 Jun 2024 01:50:23 +0000 ROA not before: Sun 30 Jun 2024 01:50:23 +0000 ROA not after: Tue 24 Jun 2025 10:46:45 +0000 asID: 9605 IP address blocks: 1.73.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 22:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2657 (0xa61) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 30 01:50:23 2024 GMT Not After : Jun 24 10:46:45 2025 GMT Subject: CN=2B69116A63E5CBAF17E82A8F7A1B04C516DF4DB2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:14:25:9d:2a:7e:cb:a8:0e:2f:95:12:f6:b1: f7:0e:c6:89:19:1e:f9:0d:67:00:a6:c3:af:77:de: dc:6b:1b:eb:78:7d:4e:a9:e2:47:b2:01:56:37:b2: 4b:3f:74:6a:3c:59:db:d2:50:ba:96:d9:7a:c7:0d: fa:90:46:54:6c:57:e8:64:1f:2d:17:a7:02:58:5c: 65:5a:fa:17:e8:cc:2b:39:11:57:6a:f3:aa:5f:2d: 13:a9:31:bc:3c:35:5a:4f:55:43:c6:2f:e8:dc:3c: dd:7d:29:10:c6:f3:93:3a:7a:63:f3:f4:5e:f5:90: a7:26:eb:8b:2b:8d:59:29:dc:7e:33:4c:83:95:5e: 41:e8:b2:ef:c7:f3:5c:55:48:ae:7e:56:23:d6:07: b3:c1:60:26:13:f9:42:90:c1:8f:67:74:f1:85:31: ed:19:fa:f4:d1:0f:85:de:bc:3b:e5:cd:b1:6f:ef: 14:b3:d1:b5:6c:b3:cc:27:e8:60:43:ae:9f:b6:b9: 3c:53:d3:bd:f4:d5:24:49:59:ab:3a:2e:6e:9c:af: d7:c9:51:b5:6d:98:9b:43:72:72:83:5d:ae:76:d3: 89:8f:2b:48:8e:b2:4f:b3:3a:de:1c:2b:29:82:1a: 7c:46:45:61:16:89:cb:22:ae:10:1c:ef:25:c4:5e: 9b:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:69:11:6A:63:E5:CB:AF:17:E8:2A:8F:7A:1B:04:C5:16:DF:4D:B2 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/K2kRamPly68X6CqPehsExRbfTbI.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.73.244.0/24 Signature Algorithm: sha256WithRSAEncryption c2:0b:e3:d9:38:3e:14:d6:63:cc:88:92:29:1d:d0:aa:df:8e: c1:a9:88:69:db:f7:a0:17:84:d3:9d:dc:99:27:43:4d:2e:af: 46:17:34:66:f7:1b:1b:62:3d:5a:0a:5f:a2:06:74:38:3e:58: 91:0d:c3:ff:7d:89:16:7f:b5:28:58:a0:02:c0:12:14:b4:be: d3:b2:f5:e6:1c:8a:b2:c6:e8:0b:f4:84:2f:8c:1a:a6:f8:67: a1:95:e2:e7:8b:7e:13:59:a2:4b:8c:a0:f8:c1:73:b1:f3:9c: 06:71:c6:f0:bd:d6:46:32:cb:83:dd:03:1c:f3:44:92:63:96: 57:d4:f3:6d:c5:8c:86:f8:91:46:e8:1c:c6:ca:0b:eb:4b:05: 36:03:d4:ea:5d:25:31:5d:d2:10:e4:0e:da:5a:6d:90:e4:85: d1:79:15:2d:32:3e:da:12:6e:68:02:ba:5e:b4:dc:c6:4c:c8: 29:47:ab:2e:de:a2:f8:14:d7:34:e1:5b:7a:ba:86:be:c0:51: 32:c5:a7:80:cb:96:14:bb:11:93:31:f6:e1:38:fb:1e:aa:80: 18:48:4f:d3:a8:cf:ba:02:dd:77:bc:3b:16:9a:66:ca:b3:ac: 40:20:29:75:4f:32:27:a5:7e:be:2d:51:c5:27:27:67:93:69: c5:7f:8f:89 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCmEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA2MzAw MTUwMjNaFw0yNTA2MjQxMDQ2NDVaMDMxMTAvBgNVBAMTKDJCNjkxMTZBNjNFNUNC QUYxN0U4MkE4RjdBMUIwNEM1MTZERjREQjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDmFCWdKn7LqA4vlRL2sfcOxokZHvkNZwCmw6933txrG+t4fU6p 4keyAVY3sks/dGo8WdvSULqW2XrHDfqQRlRsV+hkHy0XpwJYXGVa+hfozCs5EVdq 86pfLROpMbw8NVpPVUPGL+jcPN19KRDG85M6emPz9F71kKcm64srjVkp3H4zTIOV XkHosu/H81xVSK5+ViPWB7PBYCYT+UKQwY9ndPGFMe0Z+vTRD4XevDvlzbFv7xSz 0bVss8wn6GBDrp+2uTxT07301SRJWas6Lm6cr9fJUbVtmJtDcnKDXa5204mPK0iO sk+zOt4cKymCGnxGRWEWicsirhAc7yXEXpsTAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUK2kRamPly68X6CqPehsExRbfTbIwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0sya1JhbVBseTY4WDZDcVBlaHNFeFJiZlRiSS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAABSfQwDQYJKoZIhvcNAQELBQADggEBAMIL49k4PhTWY8yIkikd0KrfjsGp iGnb96AXhNOd3JknQ00ur0YXNGb3GxtiPVoKX6IGdDg+WJENw/99iRZ/tShYoALA EhS0vtOy9eYcirLG6Av0hC+MGqb4Z6GV4ueLfhNZokuMoPjBc7HznAZxxvC91kYy y4PdAxzzRJJjllfU823FjIb4kUboHMbKC+tLBTYD1OpdJTFd0hDkDtpabZDkhdF5 FS0yPtoSbmgCul603MZMyClHqy7eovgU1zThW3q6hr7AUTLFp4DLlhS7EZMx9uE4 +x6qgBhIT9Ooz7oC3Xe8OxaaZsqzrEAgKXVPMielfr4tUcUnJ2eTacV/j4k= -----END CERTIFICATE-----Generated at Mon Nov 25 23:54:41 2024 by rpki-client on console-ams.rpki-client.org