$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/V_AHCD8qwMVJ1d2TkwQQ_DNpf-k.roa File: V_AHCD8qwMVJ1d2TkwQQ_DNpf-k.roa (raw, json) Hash identifier: odwUVlYAdfDK2vTGR1EuLCcqxqDgRSV5wk+xMdvOM6I= Subject key identifier: 57:F0:07:08:3F:2A:C0:C5:49:D5:DD:93:93:04:10:FC:33:69:7F:E9 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0A20 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/V_AHCD8qwMVJ1d2TkwQQ_DNpf-k.roa Signing time: Sun 30 Jun 2024 01:46:25 +0000 ROA not before: Sun 30 Jun 2024 01:46:25 +0000 ROA not after: Tue 24 Jun 2025 10:46:45 +0000 asID: 9605 IP address blocks: 1.67.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2592 (0xa20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 30 01:46:25 2024 GMT Not After : Jun 24 10:46:45 2025 GMT Subject: CN=57F007083F2AC0C549D5DD93930410FC33697FE9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:71:c7:30:22:50:9a:78:3b:4b:ea:19:56:41: 2a:90:0f:5c:a9:a2:a5:57:ce:ab:f3:21:97:e8:f4: 0a:17:d0:da:a0:b4:72:da:88:45:52:d4:7a:22:17: 7f:d8:bc:1e:65:40:68:c4:11:eb:07:6e:e9:a7:68: 3c:ba:8e:6c:4d:4b:f0:50:57:b6:78:94:8c:24:b1: 5c:6c:59:6d:ab:d6:fe:14:66:e9:41:56:58:de:7a: 3f:e0:2c:78:5e:d0:4c:af:d4:01:8c:09:3c:2e:1a: c6:0c:28:a0:f9:07:99:d4:d3:b7:56:26:e2:87:08: 4d:77:cf:ff:f4:3e:50:95:7e:e4:5d:1c:1b:c3:23: c6:87:c5:da:27:55:bc:ac:d6:7d:4f:cf:71:55:9e: 86:aa:3f:47:ac:fc:63:aa:9e:c0:55:e5:a0:24:d7: ba:38:c7:db:93:96:cf:2c:27:33:90:54:eb:2f:82: 30:64:de:4f:c7:c4:8e:4c:58:b0:2e:93:10:00:18: 29:6c:92:06:f3:6a:a7:11:c5:6e:ef:20:c9:61:67: 46:e2:81:4b:d0:f6:84:00:8b:03:c5:a7:88:71:d5: 5a:be:8c:11:87:4c:a2:8e:ea:f3:5c:13:ac:50:22: 53:65:2b:19:05:ab:85:12:c6:e9:99:51:be:28:bf: 56:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:F0:07:08:3F:2A:C0:C5:49:D5:DD:93:93:04:10:FC:33:69:7F:E9 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/V_AHCD8qwMVJ1d2TkwQQ_DNpf-k.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.67.237.0/24 Signature Algorithm: sha256WithRSAEncryption a1:5f:e2:66:52:f8:a4:32:e0:a4:6c:66:68:b6:1b:76:c4:86: 9f:9f:e4:e1:e9:da:41:29:ae:b8:78:1a:10:1e:9b:9f:d0:d2: f2:a3:ad:88:aa:76:75:72:20:82:73:4a:7f:5b:b8:8e:88:44: ae:53:53:e4:e1:b3:60:5a:b3:ab:5f:3e:13:da:58:6d:46:fd: 1c:b4:f7:cf:cf:36:db:32:51:0b:7f:9c:16:76:20:f9:ad:e4: 95:6e:6e:16:ae:0b:82:3e:7f:ca:ce:47:2a:64:8e:55:a4:3f: 16:0f:92:99:62:07:19:1d:19:2b:bc:49:eb:26:38:50:d6:f8: 3c:2e:72:83:e2:61:5e:dd:bd:fc:42:37:92:fb:0d:ee:8c:3b: 91:bb:7f:5d:4e:6d:5c:dd:8b:b4:3f:79:d7:c7:6a:89:dc:7a: 4a:b8:f5:59:0b:cd:cf:0e:5e:ad:c8:9e:b3:c0:bd:54:ed:87: 46:69:a2:92:52:51:1a:69:18:d8:18:0f:85:83:3f:4a:74:16: cc:41:71:80:93:f2:e8:7b:70:43:6a:ee:c0:69:91:98:b7:4e: 70:6a:67:27:40:30:69:39:60:ef:7e:87:d5:56:18:14:29:25: c2:9f:cb:ec:03:3e:9f:31:7b:ee:85:25:d1:b8:dc:60:aa:15: 25:18:79:38 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCiAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA2MzAw MTQ2MjVaFw0yNTA2MjQxMDQ2NDVaMDMxMTAvBgNVBAMTKDU3RjAwNzA4M0YyQUMw QzU0OUQ1REQ5MzkzMDQxMEZDMzM2OTdGRTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDccccwIlCaeDtL6hlWQSqQD1ypoqVXzqvzIZfo9AoX0NqgtHLa iEVS1HoiF3/YvB5lQGjEEesHbumnaDy6jmxNS/BQV7Z4lIwksVxsWW2r1v4UZulB Vljeej/gLHhe0Eyv1AGMCTwuGsYMKKD5B5nU07dWJuKHCE13z//0PlCVfuRdHBvD I8aHxdonVbys1n1Pz3FVnoaqP0es/GOqnsBV5aAk17o4x9uTls8sJzOQVOsvgjBk 3k/HxI5MWLAukxAAGClskgbzaqcRxW7vIMlhZ0bigUvQ9oQAiwPFp4hx1Vq+jBGH TKKO6vNcE6xQIlNlKxkFq4USxumZUb4ov1aJAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUV/AHCD8qwMVJ1d2TkwQQ/DNpf+kwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1ZfQUhDRDhxd01WSjFkMlRrd1FRX0ROcGYtay5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAABQ+0wDQYJKoZIhvcNAQELBQADggEBAKFf4mZS+KQy4KRsZmi2G3bEhp+f 5OHp2kEprrh4GhAem5/Q0vKjrYiqdnVyIIJzSn9buI6IRK5TU+Ths2Bas6tfPhPa WG1G/Ry098/PNtsyUQt/nBZ2IPmt5JVubhauC4I+f8rORypkjlWkPxYPkpliBxkd GSu8SesmOFDW+DwucoPiYV7dvfxCN5L7De6MO5G7f11ObVzdi7Q/edfHaoncekq4 9VkLzc8OXq3InrPAvVTth0ZpopJSURppGNgYD4WDP0p0FsxBcYCT8uh7cENq7sBp kZi3TnBqZydAMGk5YO9+h9VWGBQpJcKfy+wDPp8xe+6FJdG43GCqFSUYeTg= -----END CERTIFICATE-----Generated at Sun Feb 16 22:07:33 2025 by rpki-client