$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Ye4HMQL4A0KrBROK8L69Cegq5Qo.roa File: Ye4HMQL4A0KrBROK8L69Cegq5Qo.roa (raw, json) Hash identifier: sQNCb5MP7awLegLim3WKWZmhu/wkbK6zwDrqxIafLo0= Subject key identifier: 61:EE:07:31:02:F8:03:42:AB:05:13:8A:F0:BE:BD:09:E8:2A:E5:0A Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0AB7 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Ye4HMQL4A0KrBROK8L69Cegq5Qo.roa Signing time: Sun 30 Jun 2024 01:54:33 +0000 ROA not before: Sun 30 Jun 2024 01:54:33 +0000 ROA not after: Tue 24 Jun 2025 10:46:45 +0000 asID: 9605 IP address blocks: 1.67.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:22:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2743 (0xab7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 30 01:54:33 2024 GMT Not After : Jun 24 10:46:45 2025 GMT Subject: CN=61EE073102F80342AB05138AF0BEBD09E82AE50A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:3c:de:8c:3c:bf:9a:b5:10:eb:c0:a6:ba:34: 0c:9e:10:b0:75:89:c5:e7:49:ff:30:3f:9e:7d:09: ba:76:72:fe:e9:b3:2f:b5:e0:97:21:0b:8c:ba:87: 94:b4:5e:40:a0:53:b1:65:e7:d4:b7:fe:19:5e:57: 2a:ca:94:e4:be:ee:0c:30:94:23:fc:ee:40:62:79: 99:e6:f8:ec:55:8b:47:80:41:34:10:07:40:c0:36: a4:68:70:3d:a3:85:2e:37:85:e3:f6:b7:ab:68:3e: ea:43:6e:b9:4f:2b:eb:1f:0e:c1:3c:ca:7d:af:c8: f1:81:46:e6:1a:8c:57:e2:76:a5:af:23:e2:36:c6: 5c:a5:30:39:4a:3d:e6:a0:be:17:4e:b1:8f:82:e7: c7:5d:e9:9f:40:02:1d:37:41:ee:25:ef:3e:ff:8e: e4:ed:8f:fe:04:a0:8a:22:2d:3f:18:07:43:5d:de: ca:2d:15:6b:c4:8a:2a:ec:cb:98:74:7b:e9:52:0a: 66:98:30:79:46:20:a8:8c:1d:42:37:0f:d1:24:83: 1a:5d:c2:3b:07:86:8c:c5:ef:0c:28:de:d6:d8:f8: a7:f5:25:fe:f2:bb:1e:86:7b:f2:1c:22:b4:ee:d6: fc:64:5a:8c:e0:07:85:d6:c1:1d:3a:a8:c5:03:cc: 42:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:EE:07:31:02:F8:03:42:AB:05:13:8A:F0:BE:BD:09:E8:2A:E5:0A X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Ye4HMQL4A0KrBROK8L69Cegq5Qo.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.67.0.0/18 Signature Algorithm: sha256WithRSAEncryption 24:0f:00:65:0b:23:e3:f9:49:cb:4d:4f:a3:27:71:06:d0:8f: c9:17:80:65:f9:d5:2a:48:61:f6:29:57:d8:3f:9c:91:eb:30: 7c:6c:73:2c:84:85:37:79:af:61:ed:8e:bc:09:60:36:8a:2d: 0b:aa:a2:91:69:e2:f7:5a:1d:5e:d2:61:d9:1e:cb:61:c4:27: 74:bd:93:d0:34:57:87:41:0f:05:d6:12:96:26:0c:05:b6:e9: 74:05:5a:80:f1:6e:5f:c7:bf:60:7c:35:5f:72:b5:a0:83:a0: 38:2c:3c:d8:24:d7:55:0d:67:02:d1:8d:e8:83:32:f5:b4:7a: 0d:ad:9e:0f:53:7c:2d:09:28:5e:5f:3a:da:56:0f:6a:5d:9a: d6:98:e0:e0:03:18:2f:d9:1a:a5:f3:3d:e6:79:c1:5a:91:8d: 25:10:8f:5b:8b:2e:22:ba:2b:62:f1:bc:b6:a9:1d:86:61:24: 4e:fa:fd:66:b8:84:91:4e:6e:cd:a3:78:44:49:02:1f:42:7f: 6e:e7:3c:79:05:d6:b7:74:6a:2b:16:89:e5:80:00:98:ce:7d: 63:98:69:5f:5c:fc:00:ef:14:2d:d8:09:38:1f:be:fd:5b:8f: d3:1c:64:70:c9:b6:14:12:f6:3d:a7:ac:79:47:2d:f6:2e:f0: 5a:00:b6:50 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCrcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA2MzAw MTU0MzNaFw0yNTA2MjQxMDQ2NDVaMDMxMTAvBgNVBAMTKDYxRUUwNzMxMDJGODAz NDJBQjA1MTM4QUYwQkVCRDA5RTgyQUU1MEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD8PN6MPL+atRDrwKa6NAyeELB1icXnSf8wP559Cbp2cv7psy+1 4JchC4y6h5S0XkCgU7Fl59S3/hleVyrKlOS+7gwwlCP87kBieZnm+OxVi0eAQTQQ B0DANqRocD2jhS43heP2t6toPupDbrlPK+sfDsE8yn2vyPGBRuYajFfidqWvI+I2 xlylMDlKPeagvhdOsY+C58dd6Z9AAh03Qe4l7z7/juTtj/4EoIoiLT8YB0Nd3sot FWvEiirsy5h0e+lSCmaYMHlGIKiMHUI3D9EkgxpdwjsHhozF7wwo3tbY+Kf1Jf7y ux6Ge/IcIrTu1vxkWozgB4XWwR06qMUDzEKzAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUYe4HMQL4A0KrBROK8L69Cegq5QowHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1llNEhNUUw0QTBLckJST0s4TDY5Q2VncTVRby5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAYBQwAwDQYJKoZIhvcNAQELBQADggEBACQPAGULI+P5SctNT6MncQbQj8kX gGX51SpIYfYpV9g/nJHrMHxscyyEhTd5r2HtjrwJYDaKLQuqopFp4vdaHV7SYdke y2HEJ3S9k9A0V4dBDwXWEpYmDAW26XQFWoDxbl/Hv2B8NV9ytaCDoDgsPNgk11UN ZwLRjeiDMvW0eg2tng9TfC0JKF5fOtpWD2pdmtaY4OADGC/ZGqXzPeZ5wVqRjSUQ j1uLLiK6K2LxvLapHYZhJE76/Wa4hJFObs2jeERJAh9Cf27nPHkF1rd0aisWieWA AJjOfWOYaV9c/ADvFC3YCTgfvv1bj9McZHDJthQS9j2nrHlHLfYu8FoAtlA= -----END CERTIFICATE-----Generated at Fri Nov 22 16:45:40 2024 by rpki-client on console-ams.rpki-client.org