$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/N1XQfckUw9ctmE2oVlmVGMENwvc.roa File: N1XQfckUw9ctmE2oVlmVGMENwvc.roa (raw, json) Hash identifier: v8Z0ZC8J9xgYk0rBVsJ6/o6IKP4xXBfGWfRErxqMaCw= Subject key identifier: 37:55:D0:7D:C9:14:C3:D7:2D:98:4D:A8:56:59:95:18:C1:0D:C2:F7 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0830 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/N1XQfckUw9ctmE2oVlmVGMENwvc.roa Signing time: Tue 30 Apr 2024 02:14:26 +0000 ROA not before: Tue 30 Apr 2024 02:14:26 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 110.158.128.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2096 (0x830) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 30 02:14:26 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=3755D07DC914C3D72D984DA856599518C10DC2F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:d5:5f:24:f7:c8:ab:ed:d6:69:0f:47:d6:6b: 95:58:40:a2:fb:b0:05:ad:fc:24:15:7d:3e:70:e6: 27:10:c6:fd:a5:06:cc:79:c2:7a:1e:fb:2a:1d:8e: bd:25:a4:7f:cb:6f:f5:95:d0:f7:1d:77:24:c9:44: 62:bb:7c:9a:19:11:a9:b2:de:f4:81:88:e8:44:98: 8f:02:23:21:60:3b:20:6a:d8:a3:43:33:34:33:d8: 1b:e3:f1:db:d5:0b:cc:19:dd:62:bc:31:03:c9:ad: 85:e9:76:e2:aa:c2:91:9b:e9:cb:2e:bb:80:a4:4f: b7:14:40:94:29:af:f2:3f:7c:b6:91:2f:99:a1:0b: 72:8c:c1:cf:6c:39:cc:f7:41:00:ee:c1:25:5e:d8: cc:e5:9d:de:1f:96:db:5e:84:61:d7:01:70:84:be: bc:0f:9f:bd:9a:50:46:d5:73:ec:96:02:f6:38:1d: 93:9e:a7:d6:80:67:13:b6:23:62:af:a0:cc:62:ed: 57:40:f7:f0:9f:cd:2f:bd:f2:5d:fb:f6:67:12:25: 71:f6:68:9f:34:6c:b8:81:bb:80:21:da:81:8c:06: 91:6b:14:d6:0a:e4:09:6b:20:57:26:bd:d7:0d:a4: ce:d2:ac:54:f9:d7:cb:a8:60:43:bb:33:ea:d0:5d: 7d:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:55:D0:7D:C9:14:C3:D7:2D:98:4D:A8:56:59:95:18:C1:0D:C2:F7 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/N1XQfckUw9ctmE2oVlmVGMENwvc.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 110.158.128.0/23 Signature Algorithm: sha256WithRSAEncryption 9c:d9:f9:d6:c5:84:0c:c7:11:9c:94:59:37:ac:45:1f:cf:13: e7:26:9a:f3:0f:01:2e:98:c8:af:b1:d3:4e:ae:22:c0:35:ad: ba:d3:c5:c2:28:9f:c9:2f:19:9d:a6:15:64:88:88:c0:d9:68: 45:db:ac:9c:a5:ff:7e:69:f9:34:bd:33:3f:95:c1:b1:17:46: 36:f1:e2:f1:84:24:3d:a7:1c:a8:1f:3a:67:fa:69:60:08:74: 0c:67:e2:22:fb:81:d2:5a:35:7e:7a:02:64:1e:f8:6e:9b:56: 2c:5c:9d:7d:4e:19:05:60:b0:36:0e:50:f8:c0:ee:95:f2:ea: 47:7b:67:21:fc:f3:02:61:55:28:3e:cc:1f:43:d5:15:57:5a: 9b:fc:d1:14:29:8b:69:90:d7:00:95:2b:a0:a7:db:6e:dc:50: 76:c8:54:9b:d1:a1:68:f0:2f:55:c7:7e:f6:62:e4:68:1b:2e: 1b:ec:a2:a3:72:a7:da:68:a8:3a:73:4f:4e:68:3e:97:5e:47: 8c:cb:e9:3b:78:41:f9:77:c1:1c:d5:d6:d5:2f:49:27:4e:17: 47:2f:6a:dd:bf:f5:82:0b:a7:e2:a6:ef:52:ab:bb:d8:43:51: fd:f2:a7:da:79:4f:63:97:9c:d3:69:4c:64:fa:e1:02:b1:eb: cd:d4:48:70 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCDAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw MjE0MjZaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDM3NTVEMDdEQzkxNEMz RDcyRDk4NERBODU2NTk5NTE4QzEwREMyRjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDU1V8k98ir7dZpD0fWa5VYQKL7sAWt/CQVfT5w5icQxv2lBsx5 wnoe+yodjr0lpH/Lb/WV0PcddyTJRGK7fJoZEamy3vSBiOhEmI8CIyFgOyBq2KND MzQz2Bvj8dvVC8wZ3WK8MQPJrYXpduKqwpGb6csuu4CkT7cUQJQpr/I/fLaRL5mh C3KMwc9sOcz3QQDuwSVe2Mzlnd4flttehGHXAXCEvrwPn72aUEbVc+yWAvY4HZOe p9aAZxO2I2KvoMxi7VdA9/CfzS+98l379mcSJXH2aJ80bLiBu4Ah2oGMBpFrFNYK 5AlrIFcmvdcNpM7SrFT518uoYEO7M+rQXX2XAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUN1XQfckUw9ctmE2oVlmVGMENwvcwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L04xWFFmY2tVdzljdG1FMm9WbG1WR01FTnd2Yy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFunoAwDQYJKoZIhvcNAQELBQADggEBAJzZ+dbFhAzHEZyUWTesRR/PE+cm mvMPAS6YyK+x006uIsA1rbrTxcIon8kvGZ2mFWSIiMDZaEXbrJyl/35p+TS9Mz+V wbEXRjbx4vGEJD2nHKgfOmf6aWAIdAxn4iL7gdJaNX56AmQe+G6bVixcnX1OGQVg sDYOUPjA7pXy6kd7ZyH88wJhVSg+zB9D1RVXWpv80RQpi2mQ1wCVK6Cn227cUHbI VJvRoWjwL1XHfvZi5GgbLhvsoqNyp9poqDpzT05oPpdeR4zL6Tt4Qfl3wRzV1tUv SSdOF0cvat2/9YILp+Km71Kru9hDUf3yp9p5T2OXnNNpTGT64QKx683USHA= -----END CERTIFICATE-----Generated at Sat Jun 1 15:54:30 2024 by rpki-client on console-ams.rpki-client.org