$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/NeOuBw0AnFY4TXzX0Du431GX7HE.roa File: NeOuBw0AnFY4TXzX0Du431GX7HE.roa (raw, json) Hash identifier: hoA0+fIz26wcTWzBL+Pg6NJIKZYG0zkIyqeIGMI/s5Y= Subject key identifier: 35:E3:AE:07:0D:00:9C:56:38:4D:7C:D7:D0:3B:B8:DF:51:97:EC:71 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0AA2 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/NeOuBw0AnFY4TXzX0Du431GX7HE.roa Signing time: Sun 30 Jun 2024 01:54:24 +0000 ROA not before: Sun 30 Jun 2024 01:54:24 +0000 ROA not after: Tue 24 Jun 2025 10:46:45 +0000 asID: 9605 IP address blocks: 220.159.96.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:41:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2722 (0xaa2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 30 01:54:24 2024 GMT Not After : Jun 24 10:46:45 2025 GMT Subject: CN=35E3AE070D009C56384D7CD7D03BB8DF5197EC71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ee:55:60:20:aa:0b:52:73:ae:35:52:55:c0: cb:1c:6a:b9:8c:0c:87:98:e5:5b:65:1c:82:82:a3: 59:08:2c:65:42:b7:e0:65:68:f1:e6:00:37:53:23: 48:4b:9a:1e:7f:1e:08:c5:9c:19:31:70:a9:8c:91: d7:32:e9:0d:5e:6b:8c:fc:82:86:3e:73:d7:f4:4c: ea:92:0a:95:04:8e:1f:40:45:0b:96:f9:98:3f:56: a6:ff:0f:b7:98:fb:60:86:52:7c:4b:44:92:ea:aa: b9:51:b2:5a:9d:b5:94:ce:a8:cf:f7:eb:77:f7:0c: 31:ff:22:72:6a:e9:0c:83:b9:06:2f:d1:19:4d:fd: 72:7a:31:65:f7:b6:5a:7a:d6:57:47:72:56:7a:ba: 06:aa:9f:70:65:df:4d:14:b1:99:c4:72:4a:85:b3: e5:74:dd:4b:cf:9e:b7:9a:8b:a1:7f:64:cd:b5:a0: 33:9d:64:c2:40:c4:51:47:ff:03:bb:f7:cd:ea:1f: 3d:9b:a6:42:ce:dc:1d:43:20:a8:a9:33:22:35:9e: a1:a4:99:43:1f:b8:0e:5a:84:c6:a0:b4:af:48:c0: e7:16:b1:ad:09:d8:98:0c:49:40:da:7b:18:02:b7: 02:db:02:a4:db:1b:8c:4b:75:e6:8e:7a:0b:59:48: 82:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:E3:AE:07:0D:00:9C:56:38:4D:7C:D7:D0:3B:B8:DF:51:97:EC:71 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/NeOuBw0AnFY4TXzX0Du431GX7HE.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 220.159.96.0/19 Signature Algorithm: sha256WithRSAEncryption 81:98:ac:36:16:c5:88:55:9e:ac:3a:a8:19:fe:e2:b1:f4:91: cf:6e:ce:d1:07:95:66:7b:76:08:d3:52:4b:dd:11:83:f7:60: 85:95:42:e2:30:28:36:5a:36:17:7d:35:7c:15:5b:c8:e9:7f: a4:d5:13:bc:e2:9b:76:f4:d8:de:7a:16:cf:26:f2:ef:a2:e9: b6:6f:0a:31:90:f8:90:58:0b:e2:59:e0:9d:2b:6b:12:69:76: 56:d9:3c:25:df:32:7e:0c:9b:98:53:e6:7f:07:01:dd:71:e9: de:87:33:c4:c7:e3:bf:7e:aa:cb:b7:13:3a:91:c8:95:03:8b: 4a:e1:ee:e0:d2:4a:53:86:c9:ad:54:88:89:61:8d:64:ec:bf: 81:46:55:7d:fc:4b:60:d4:ad:b3:bd:5d:bf:48:52:71:7b:99: 17:d4:91:57:42:50:10:33:79:8e:9b:1d:cd:9e:68:7f:e2:f6: 00:9b:e3:2a:fe:14:43:d6:fc:ed:b9:1d:c1:ed:33:fb:80:ab: 19:95:35:49:e7:e8:f5:ec:31:3e:65:86:64:aa:1e:3d:81:6b: d6:05:74:53:2d:6d:22:4e:a9:3c:84:c2:41:1b:5d:ac:c1:93: 81:d6:3c:4f:ae:cf:0e:43:8d:a6:9e:5c:19:0a:f7:d9:99:a4: b1:49:80:eb -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCqIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA2MzAw MTU0MjRaFw0yNTA2MjQxMDQ2NDVaMDMxMTAvBgNVBAMTKDM1RTNBRTA3MEQwMDlD NTYzODREN0NEN0QwM0JCOERGNTE5N0VDNzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC17lVgIKoLUnOuNVJVwMscarmMDIeY5VtlHIKCo1kILGVCt+Bl aPHmADdTI0hLmh5/HgjFnBkxcKmMkdcy6Q1ea4z8goY+c9f0TOqSCpUEjh9ARQuW +Zg/Vqb/D7eY+2CGUnxLRJLqqrlRslqdtZTOqM/363f3DDH/InJq6QyDuQYv0RlN /XJ6MWX3tlp61ldHclZ6ugaqn3Bl300UsZnEckqFs+V03UvPnreai6F/ZM21oDOd ZMJAxFFH/wO7983qHz2bpkLO3B1DIKipMyI1nqGkmUMfuA5ahMagtK9IwOcWsa0J 2JgMSUDaexgCtwLbAqTbG4xLdeaOegtZSII1AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUNeOuBw0AnFY4TXzX0Du431GX7HEwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L05lT3VCdzBBbkZZNFRYelgwRHU0MzFHWDdIRS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAXcn2AwDQYJKoZIhvcNAQELBQADggEBAIGYrDYWxYhVnqw6qBn+4rH0kc9u ztEHlWZ7dgjTUkvdEYP3YIWVQuIwKDZaNhd9NXwVW8jpf6TVE7zim3b02N56Fs8m 8u+i6bZvCjGQ+JBYC+JZ4J0raxJpdlbZPCXfMn4Mm5hT5n8HAd1x6d6HM8TH479+ qsu3EzqRyJUDi0rh7uDSSlOGya1UiIlhjWTsv4FGVX38S2DUrbO9Xb9IUnF7mRfU kVdCUBAzeY6bHc2eaH/i9gCb4yr+FEPW/O25HcHtM/uAqxmVNUnn6PXsMT5lhmSq Hj2Ba9YFdFMtbSJOqTyEwkEbXazBk4HWPE+uzw5DjaaeXBkK99mZpLFJgOs= -----END CERTIFICATE-----Generated at Fri Nov 22 15:24:00 2024 by rpki-client on console-fra.rpki-client.org