$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/UIj3N0Vjuv2qEUQxnApfu4zvPiE.roa File: UIj3N0Vjuv2qEUQxnApfu4zvPiE.roa (raw, json) Hash identifier: piJbmCN484z5aP1Dp7LLmGNL3t4+yhPTMTS6kfEv+zs= Subject key identifier: 50:88:F7:37:45:63:BA:FD:AA:11:44:31:9C:0A:5F:BB:8C:EF:3E:21 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0A3D Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/UIj3N0Vjuv2qEUQxnApfu4zvPiE.roa Signing time: Sun 30 Jun 2024 01:46:39 +0000 ROA not before: Sun 30 Jun 2024 01:46:39 +0000 ROA not after: Tue 24 Jun 2025 10:46:45 +0000 asID: 9605 IP address blocks: 219.114.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2621 (0xa3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 30 01:46:39 2024 GMT Not After : Jun 24 10:46:45 2025 GMT Subject: CN=5088F7374563BAFDAA1144319C0A5FBB8CEF3E21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:3f:ef:ba:ce:f0:81:4a:f0:40:2f:7d:76:eb: ca:d2:2f:9d:5d:f3:7a:41:92:28:0a:9d:7c:f0:54: 71:46:d0:fa:ed:fd:c5:2c:40:cf:0d:4a:24:a7:2e: 15:51:b2:4b:52:5c:ab:3d:d4:a8:15:3f:73:41:76: 21:70:fc:03:be:16:e2:45:2e:60:3b:6e:4a:2e:b8: 52:fe:ec:e4:80:c7:9d:83:d8:c2:78:1c:03:af:82: 9b:cf:38:93:f4:f2:43:b9:9a:5e:61:2d:78:19:62: 60:98:d5:73:fe:70:c4:2b:87:06:43:3a:64:6c:03: 2c:92:2f:bd:d7:61:94:b3:41:32:d3:6b:ae:99:46: 17:32:96:ac:c1:fb:2a:a6:2c:66:ec:27:69:7d:79: 26:61:56:f7:89:2a:10:51:28:83:74:03:63:e9:2f: ea:dc:a8:22:dc:83:df:5f:24:3c:8d:9e:54:f7:ad: b1:c3:fc:15:4f:6e:c8:af:d6:6b:f5:71:62:56:12: 8d:f0:e9:f6:e7:04:13:fa:a4:31:ab:4a:3f:70:e2: a1:28:71:5d:51:6d:2c:c5:7d:96:ff:12:65:b7:5e: c5:1d:14:15:6c:bc:81:d2:75:e0:55:ae:a4:11:df: c0:27:7f:d6:58:32:30:81:12:97:dc:8e:4f:85:70: bd:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:88:F7:37:45:63:BA:FD:AA:11:44:31:9C:0A:5F:BB:8C:EF:3E:21 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/UIj3N0Vjuv2qEUQxnApfu4zvPiE.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 219.114.168.0/22 Signature Algorithm: sha256WithRSAEncryption cd:7a:a2:30:25:6e:84:79:2a:0b:24:46:1a:1f:3a:38:77:69: 0d:6f:e2:3b:d3:42:8c:23:62:d4:0f:4e:32:54:21:91:f9:af: 73:95:fc:23:bc:5c:65:42:76:2a:cf:43:f6:76:28:92:8f:63: a2:2e:6d:d9:d5:d5:08:6a:f2:b6:8d:5e:7c:cf:fc:87:7e:a4: e3:90:cd:29:ef:2f:7a:90:8d:9b:6e:43:4f:29:78:cf:45:5b: 8b:1e:1f:11:4f:5c:28:f8:b6:da:23:ee:40:ca:df:eb:96:de: 5c:31:e5:4b:24:7e:49:24:c7:a7:92:bb:61:d0:a9:67:0a:31: a3:bb:2f:32:2d:fd:0b:2e:4c:fc:8a:53:8e:e7:c1:7c:83:a2: ff:26:83:b3:ae:ae:cd:ff:cd:22:c3:cc:a2:93:d4:4d:ce:83: 20:2e:c6:19:1f:51:21:58:82:29:3c:33:8b:76:df:f4:70:43: b6:fc:54:db:9a:b3:5e:09:b9:0a:7b:e6:86:e3:6d:f3:5b:e8: 6d:23:83:bb:9f:a8:7d:65:80:92:68:41:77:ee:be:a0:58:74: 5c:f4:85:30:02:28:6e:22:26:6f:35:89:a2:b0:0e:b1:ab:df: 3a:fb:e0:39:22:3b:8e:72:63:7e:6c:d6:56:39:7a:06:18:93: be:33:50:29 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCj0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA2MzAw MTQ2MzlaFw0yNTA2MjQxMDQ2NDVaMDMxMTAvBgNVBAMTKDUwODhGNzM3NDU2M0JB RkRBQTExNDQzMTlDMEE1RkJCOENFRjNFMjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCwP++6zvCBSvBAL31268rSL51d83pBkigKnXzwVHFG0Prt/cUs QM8NSiSnLhVRsktSXKs91KgVP3NBdiFw/AO+FuJFLmA7bkouuFL+7OSAx52D2MJ4 HAOvgpvPOJP08kO5ml5hLXgZYmCY1XP+cMQrhwZDOmRsAyySL73XYZSzQTLTa66Z RhcylqzB+yqmLGbsJ2l9eSZhVveJKhBRKIN0A2PpL+rcqCLcg99fJDyNnlT3rbHD /BVPbsiv1mv1cWJWEo3w6fbnBBP6pDGrSj9w4qEocV1RbSzFfZb/EmW3XsUdFBVs vIHSdeBVrqQR38Anf9ZYMjCBEpfcjk+FcL3XAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUUIj3N0Vjuv2qEUQxnApfu4zvPiEwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1VJajNOMFZqdXYycUVVUXhuQXBmdTR6dlBpRS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBALbcqgwDQYJKoZIhvcNAQELBQADggEBAM16ojAlboR5KgskRhofOjh3aQ1v 4jvTQowjYtQPTjJUIZH5r3OV/CO8XGVCdirPQ/Z2KJKPY6IubdnV1Qhq8raNXnzP /Id+pOOQzSnvL3qQjZtuQ08peM9FW4seHxFPXCj4ttoj7kDK3+uW3lwx5Uskfkkk x6eSu2HQqWcKMaO7LzIt/QsuTPyKU47nwXyDov8mg7Ours3/zSLDzKKT1E3OgyAu xhkfUSFYgik8M4t23/RwQ7b8VNuas14JuQp75objbfNb6G0jg7ufqH1lgJJoQXfu vqBYdFz0hTACKG4iJm81iaKwDrGr3zr74DkiO45yY35s1lY5egYYk74zUCk= -----END CERTIFICATE-----Generated at Sun Feb 16 22:09:10 2025 by rpki-client