$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/PaniMyPm-wPK3yMY6DTJhRfXeI4.roa File: PaniMyPm-wPK3yMY6DTJhRfXeI4.roa (raw, json) Hash identifier: Up4tMhvr2kOALvb8sYejV5fIJnOkQEKeJpuMjCdngLQ= Subject key identifier: 3D:A9:E2:33:23:E6:FB:03:CA:DF:23:18:E8:34:C9:85:17:D7:78:8E Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 075F Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/PaniMyPm-wPK3yMY6DTJhRfXeI4.roa Signing time: Tue 30 Apr 2024 02:01:38 +0000 ROA not before: Tue 30 Apr 2024 02:01:38 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 1.66.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1887 (0x75f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 30 02:01:38 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=3DA9E23323E6FB03CADF2318E834C98517D7788E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ed:4b:ae:f9:86:c2:0d:34:8f:ca:6d:2b:e2: 19:74:69:f9:e4:71:eb:64:a0:d4:ec:fc:3a:c7:02: 98:2a:ff:27:33:3e:aa:56:99:34:01:40:e9:3c:17: 46:94:a4:2f:c1:de:91:bd:79:48:06:82:bb:78:13: 82:c7:58:13:71:00:fb:af:84:f5:e2:e8:79:3d:99: f9:8d:c4:49:96:12:fa:1c:7b:1c:c7:d5:61:f2:20: 96:ef:82:0d:ab:5d:86:b7:74:b9:26:01:f7:13:af: 13:35:f4:4c:e0:d4:39:e2:ff:2a:db:ce:4f:8a:dc: 78:ef:18:15:91:35:99:1a:a0:ea:9a:03:45:8b:3d: 75:5f:6e:5e:5d:eb:59:4b:7e:5a:92:33:b0:18:2b: 74:56:b1:c1:0e:3e:7e:34:0e:d8:fa:b3:0b:aa:58: b8:88:be:9b:ab:4d:40:cb:3b:e0:9c:6d:ac:9e:59: 9e:93:09:7f:ec:66:89:10:95:9d:52:46:b6:2c:3e: 91:02:be:77:85:c1:01:2c:cd:6c:43:3f:be:06:6d: 5c:11:53:69:bb:1d:5e:07:c6:b3:6c:e1:a3:d6:b3: 19:e1:36:d1:19:b8:56:e3:ae:25:3f:2c:aa:01:f6: b8:f3:a9:a9:28:b4:cb:a9:84:51:82:fd:9d:d8:fb: 04:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:A9:E2:33:23:E6:FB:03:CA:DF:23:18:E8:34:C9:85:17:D7:78:8E X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/PaniMyPm-wPK3yMY6DTJhRfXeI4.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.66.32.0/19 Signature Algorithm: sha256WithRSAEncryption 4e:f1:9f:3d:04:ae:94:bd:3d:c4:4f:f2:5d:99:9a:37:27:58: b6:ae:20:f2:11:0e:a8:e8:ef:f8:95:ad:76:9a:7f:85:67:0e: ac:c6:dc:43:2d:33:23:d1:f2:72:35:95:10:58:f6:3d:3a:93: f4:fe:46:3b:71:51:65:55:6e:5d:06:29:66:d3:f8:e4:69:53: 9d:be:bd:57:9f:e6:84:4f:0d:a0:d0:b6:f7:2b:db:6c:00:7b: 82:05:ba:e4:5a:8a:c0:db:b4:2f:2e:70:99:88:e1:01:47:fe: 73:15:42:82:71:d0:97:8a:9f:e6:d6:d4:5e:60:31:a3:d7:a8: 32:93:a7:da:48:02:a0:6b:6e:89:bd:1b:70:3b:00:e5:96:08: 0a:65:5b:f0:ae:1e:4b:79:39:34:c8:4b:46:e4:11:8e:32:e8: 5b:54:ca:14:21:2c:af:38:71:01:c0:94:99:2b:c8:a7:eb:e9: 99:07:50:65:fd:a1:a5:2e:ed:4e:bd:d1:49:7f:89:5f:52:49: 1b:6c:5e:e6:5c:30:d2:d0:4f:13:00:bf:b4:a4:f1:95:6f:ba: 76:05:49:d1:03:07:f9:1d:de:4b:35:ae:ad:76:bf:a6:55:21: a8:a0:a3:d8:33:bc:bc:a8:ee:05:96:06:99:af:22:a6:c3:ab: e9:9f:a7:09 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICB18wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw MjAxMzhaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDNEQTlFMjMzMjNFNkZC MDNDQURGMjMxOEU4MzRDOTg1MTdENzc4OEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCh7Uuu+YbCDTSPym0r4hl0afnkcetkoNTs/DrHApgq/yczPqpW mTQBQOk8F0aUpC/B3pG9eUgGgrt4E4LHWBNxAPuvhPXi6Hk9mfmNxEmWEvocexzH 1WHyIJbvgg2rXYa3dLkmAfcTrxM19Ezg1Dni/yrbzk+K3HjvGBWRNZkaoOqaA0WL PXVfbl5d61lLflqSM7AYK3RWscEOPn40Dtj6swuqWLiIvpurTUDLO+CcbayeWZ6T CX/sZokQlZ1SRrYsPpECvneFwQEszWxDP74GbVwRU2m7HV4HxrNs4aPWsxnhNtEZ uFbjriU/LKoB9rjzqakotMuphFGC/Z3Y+wRRAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUPaniMyPm+wPK3yMY6DTJhRfXeI4wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1BhbmlNeVBtLXdQSzN5TVk2RFRKaFJmWGVJNC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAUBQiAwDQYJKoZIhvcNAQELBQADggEBAE7xnz0ErpS9PcRP8l2ZmjcnWLau IPIRDqjo7/iVrXaaf4VnDqzG3EMtMyPR8nI1lRBY9j06k/T+RjtxUWVVbl0GKWbT +ORpU52+vVef5oRPDaDQtvcr22wAe4IFuuRaisDbtC8ucJmI4QFH/nMVQoJx0JeK n+bW1F5gMaPXqDKTp9pIAqBrbom9G3A7AOWWCAplW/CuHkt5OTTIS0bkEY4y6FtU yhQhLK84cQHAlJkryKfr6ZkHUGX9oaUu7U690Ul/iV9SSRtsXuZcMNLQTxMAv7Sk 8ZVvunYFSdEDB/kd3ks1rq12v6ZVIaigo9gzvLyo7gWWBpmvIqbDq+mfpwk= -----END CERTIFICATE-----Generated at Sun Feb 16 22:24:46 2025 by rpki-client