$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/SdLSES3EnjqwDXPCUQ1LEsB4hdo.roa File: SdLSES3EnjqwDXPCUQ1LEsB4hdo.roa (raw, json) Hash identifier: m7DQ2+Hsj6dG8+tSOlvOVkfGbcatUCMFNFOLR/C4txE= Subject key identifier: 49:D2:D2:11:2D:C4:9E:3A:B0:0D:73:C2:51:0D:4B:12:C0:78:85:DA Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 095A Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/SdLSES3EnjqwDXPCUQ1LEsB4hdo.roa Signing time: Sun 30 Jun 2024 01:33:29 +0000 ROA not before: Sun 30 Jun 2024 01:33:29 +0000 ROA not after: Tue 24 Jun 2025 10:46:45 +0000 asID: 9605 IP address blocks: 110.158.192.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 22:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2394 (0x95a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 30 01:33:29 2024 GMT Not After : Jun 24 10:46:45 2025 GMT Subject: CN=49D2D2112DC49E3AB00D73C2510D4B12C07885DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:99:00:35:3e:97:98:8d:f5:63:e6:06:54:43: 3d:4a:2e:44:b0:c7:7c:0c:4f:8f:d1:19:f1:9e:46: 9a:50:38:b1:e0:fb:81:45:9c:ad:a3:1a:f8:b2:60: 97:76:c8:39:c2:9b:38:3d:94:b2:8f:0b:ca:2b:9e: 8c:e4:fd:f8:bb:e8:a5:20:da:cd:a9:d8:0d:0a:1f: c2:04:c0:be:fe:25:e2:6e:2b:be:57:16:65:de:d5: 18:73:8f:cf:22:c4:ab:fb:98:16:9d:d5:57:29:fb: 79:6b:ae:08:84:6d:45:f6:ea:95:bb:5b:34:ea:82: 05:fe:be:8c:9c:17:85:4b:50:1e:07:60:eb:ac:56: 8c:11:ab:6b:40:d7:36:a3:bf:34:4a:c0:8f:57:03: f1:12:b4:64:28:91:db:6b:2b:d1:2b:ed:03:08:31: bb:cb:db:d5:a9:cf:ca:a1:64:90:49:c5:df:74:40: ff:06:5b:da:b4:19:d0:05:6a:27:ff:db:30:05:d2: 53:cb:4b:dd:d9:4c:5c:17:1f:36:71:01:29:75:44: b3:b3:29:83:9c:1e:43:39:ab:5f:04:d0:10:7e:fa: 76:3b:a3:e3:2e:e8:99:47:7e:31:75:37:c7:03:6e: 06:51:56:c9:95:c7:e6:26:ec:6c:07:6f:7a:42:4c: e5:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:D2:D2:11:2D:C4:9E:3A:B0:0D:73:C2:51:0D:4B:12:C0:78:85:DA X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/SdLSES3EnjqwDXPCUQ1LEsB4hdo.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 110.158.192.0/19 Signature Algorithm: sha256WithRSAEncryption 85:fa:36:d7:d5:8f:64:75:21:15:d1:a2:6b:aa:ad:e8:0e:a7: 77:02:7d:ef:24:7f:9b:f8:18:9e:c3:d6:19:54:20:ba:4b:e4: 38:3e:27:7f:39:28:ff:83:ea:88:68:4f:a8:e7:b6:68:0b:88: 04:04:ec:a8:3f:cd:50:30:b1:bf:d5:f5:ad:dc:f6:63:67:56: f6:6d:e5:62:f9:b7:74:b3:ee:1b:e5:9d:a5:f3:6e:3c:9d:c2: 61:ac:72:19:19:c9:e3:92:85:a2:5d:be:b1:4f:37:60:f3:46: 30:7a:6f:0c:c4:e8:02:54:37:e6:50:6f:df:c6:ed:96:53:ab: 2f:bc:5d:e2:95:d9:0e:1a:e0:df:95:28:d5:a4:0b:72:3f:c1: 0b:2c:71:84:79:9c:07:40:d8:fe:4e:b9:b5:24:4b:16:b4:71: 0c:c4:39:72:81:1c:87:85:2a:61:3a:82:df:55:97:8e:ec:dd: a6:21:d0:38:07:2a:78:0c:e0:b7:9b:80:29:d9:70:2d:27:3e: 69:21:e7:7d:24:db:6f:bd:3f:ef:ca:a8:82:01:ae:00:bc:e8: 96:be:f2:f3:10:0c:7f:9c:fa:82:52:4c:6e:9c:07:2c:c0:e0: c4:25:76:eb:0a:78:a0:df:43:d7:34:08:dd:f2:76:2e:eb:2f: 9e:b6:f0:8a -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCVowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA2MzAw MTMzMjlaFw0yNTA2MjQxMDQ2NDVaMDMxMTAvBgNVBAMTKDQ5RDJEMjExMkRDNDlF M0FCMDBENzNDMjUxMEQ0QjEyQzA3ODg1REEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC3mQA1PpeYjfVj5gZUQz1KLkSwx3wMT4/RGfGeRppQOLHg+4FF nK2jGviyYJd2yDnCmzg9lLKPC8ornozk/fi76KUg2s2p2A0KH8IEwL7+JeJuK75X FmXe1Rhzj88ixKv7mBad1Vcp+3lrrgiEbUX26pW7WzTqggX+voycF4VLUB4HYOus VowRq2tA1zajvzRKwI9XA/EStGQokdtrK9Er7QMIMbvL29Wpz8qhZJBJxd90QP8G W9q0GdAFaif/2zAF0lPLS93ZTFwXHzZxASl1RLOzKYOcHkM5q18E0BB++nY7o+Mu 6JlHfjF1N8cDbgZRVsmVx+Ym7GwHb3pCTOV9AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUSdLSES3EnjqwDXPCUQ1LEsB4hdowHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1NkTFNFUzNFbmpxd0RYUENVUTFMRXNCNGhkby5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAVunsAwDQYJKoZIhvcNAQELBQADggEBAIX6NtfVj2R1IRXRomuqregOp3cC fe8kf5v4GJ7D1hlUILpL5Dg+J385KP+D6ohoT6jntmgLiAQE7Kg/zVAwsb/V9a3c 9mNnVvZt5WL5t3Sz7hvlnaXzbjydwmGschkZyeOShaJdvrFPN2DzRjB6bwzE6AJU N+ZQb9/G7ZZTqy+8XeKV2Q4a4N+VKNWkC3I/wQsscYR5nAdA2P5OubUkSxa0cQzE OXKBHIeFKmE6gt9Vl47s3aYh0DgHKngM4LebgCnZcC0nPmkh530k22+9P+/KqIIB rgC86Ja+8vMQDH+c+oJSTG6cByzA4MQldusKeKDfQ9c0CN3ydi7rL5628Io= -----END CERTIFICATE-----Generated at Mon Nov 25 23:59:10 2024 by rpki-client on console-fra.rpki-client.org