$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/KPgKhIR1qbTsh2R1aNCMjySkNAQ.roa File: KPgKhIR1qbTsh2R1aNCMjySkNAQ.roa (raw, json) Hash identifier: MVJd32x0e1CCFvrkx+ZgSiiLUI6HUKEi87IC8fs+kcQ= Subject key identifier: 28:F8:0A:84:84:75:A9:B4:EC:87:64:75:68:D0:8C:8F:24:A4:34:04 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0994 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/KPgKhIR1qbTsh2R1aNCMjySkNAQ.roa Signing time: Sun 30 Jun 2024 01:36:28 +0000 ROA not before: Sun 30 Jun 2024 01:36:28 +0000 ROA not after: Tue 24 Jun 2025 10:46:45 +0000 asID: 9605 IP address blocks: 1.75.190.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2452 (0x994) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 30 01:36:28 2024 GMT Not After : Jun 24 10:46:45 2025 GMT Subject: CN=28F80A848475A9B4EC87647568D08C8F24A43404 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e7:94:54:06:e9:0b:73:e1:51:3e:e1:6a:a6: 3c:f6:ed:e4:be:ac:8f:d0:0f:e8:89:0b:5c:4a:d1: b9:5b:11:0f:ba:40:00:df:97:59:f8:19:a2:39:64: a3:dc:5d:e6:df:68:1a:e8:ea:56:38:6d:82:8f:f5: b3:20:2c:03:af:a9:77:4b:be:59:5b:c4:77:a5:ad: 9a:6a:5c:43:8b:6a:a9:50:e6:74:52:7f:c5:0b:7b: 93:83:7b:93:6f:76:43:f4:9f:e3:bb:61:41:ae:6c: 23:cb:3c:6b:c0:59:f2:5c:08:31:36:84:f6:54:a0: 55:96:6f:26:62:6a:48:26:85:3f:c1:1d:67:17:bf: d4:90:fc:9d:31:69:03:3c:4d:4c:ad:5a:e2:3b:ed: cb:13:e1:2a:2a:f2:5e:a7:89:1f:d8:75:b1:6d:d5: ba:2c:af:29:3d:bd:a0:99:8f:26:1b:34:95:c9:ee: 40:63:45:fc:92:49:51:33:63:b2:ea:da:ec:f0:d5: de:ae:7f:ce:0c:db:d3:41:83:8b:9b:16:d2:94:36: 4c:95:6d:52:f3:e6:b2:cb:08:ea:16:dc:e1:91:bf: d0:e8:4c:eb:30:d4:2d:43:fc:89:50:53:74:16:45: 2f:de:a0:9b:aa:d5:de:6e:2a:fd:6b:43:8a:cb:4b: 68:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:F8:0A:84:84:75:A9:B4:EC:87:64:75:68:D0:8C:8F:24:A4:34:04 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/KPgKhIR1qbTsh2R1aNCMjySkNAQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.75.190.0/23 Signature Algorithm: sha256WithRSAEncryption 73:5e:20:bc:50:12:1a:4a:f8:74:0f:14:d4:e8:33:ef:4c:b4: bd:d7:a6:5b:4b:16:b5:ff:98:af:54:7f:c4:68:a6:17:90:9e: bd:59:6f:0d:3c:69:0c:67:8f:2e:b7:fb:3c:cd:b1:ab:5e:e2: 63:54:94:24:21:e6:1f:39:95:74:fd:29:c2:86:75:3e:6c:a1: 5d:c7:ad:bd:55:e3:91:1c:2b:55:50:64:68:ad:c9:82:d2:48: 0b:ec:4a:bf:96:8a:d6:c0:f8:f0:31:72:57:84:e4:7f:27:d1: af:31:d9:c9:b9:88:f7:3f:f5:86:49:85:d6:89:68:5d:7e:56: 25:94:2d:12:18:b1:a0:29:c3:96:f8:b4:a4:21:ab:79:c0:0b: d0:b3:9e:bc:0c:1b:f8:b6:b9:94:f3:2e:08:f9:97:08:c5:57: a5:33:84:9b:ba:6d:aa:3b:7e:7c:50:4f:d9:cf:ed:47:1f:79: 89:69:ad:34:25:a4:dd:19:1b:70:6e:37:22:92:ee:e1:be:c6: 99:97:b4:40:05:1a:1c:bd:30:01:7b:9f:ad:58:7f:21:67:ea: ff:cf:23:4f:c5:4f:e2:0d:f6:e8:ac:c0:2b:e0:8d:bf:89:61: b5:88:46:fc:44:93:69:cc:2d:2e:c4:d0:c8:6b:89:81:6d:23: dc:ab:59:32 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCZQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA2MzAw MTM2MjhaFw0yNTA2MjQxMDQ2NDVaMDMxMTAvBgNVBAMTKDI4RjgwQTg0ODQ3NUE5 QjRFQzg3NjQ3NTY4RDA4QzhGMjRBNDM0MDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDB55RUBukLc+FRPuFqpjz27eS+rI/QD+iJC1xK0blbEQ+6QADf l1n4GaI5ZKPcXebfaBro6lY4bYKP9bMgLAOvqXdLvllbxHelrZpqXEOLaqlQ5nRS f8ULe5ODe5NvdkP0n+O7YUGubCPLPGvAWfJcCDE2hPZUoFWWbyZiakgmhT/BHWcX v9SQ/J0xaQM8TUytWuI77csT4Soq8l6niR/YdbFt1bosryk9vaCZjyYbNJXJ7kBj RfySSVEzY7Lq2uzw1d6uf84M29NBg4ubFtKUNkyVbVLz5rLLCOoW3OGRv9DoTOsw 1C1D/IlQU3QWRS/eoJuq1d5uKv1rQ4rLS2glAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUKPgKhIR1qbTsh2R1aNCMjySkNAQwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0tQZ0toSVIxcWJUc2gyUjFhTkNNanlTa05BUS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEBS74wDQYJKoZIhvcNAQELBQADggEBAHNeILxQEhpK+HQPFNToM+9MtL3X pltLFrX/mK9Uf8RopheQnr1Zbw08aQxnjy63+zzNsate4mNUlCQh5h85lXT9KcKG dT5soV3Hrb1V45EcK1VQZGityYLSSAvsSr+WitbA+PAxcleE5H8n0a8x2cm5iPc/ 9YZJhdaJaF1+ViWULRIYsaApw5b4tKQhq3nAC9CznrwMG/i2uZTzLgj5lwjFV6Uz hJu6bao7fnxQT9nP7UcfeYlprTQlpN0ZG3BuNyKS7uG+xpmXtEAFGhy9MAF7n61Y fyFn6v/PI0/FT+IN9uiswCvgjb+JYbWIRvxEk2nMLS7E0MhriYFtI9yrWTI= -----END CERTIFICATE-----Generated at Sun Feb 16 22:24:07 2025 by rpki-client