$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/YoLQjCmfObIoj61z4CZlpm0a7d4.roa File: YoLQjCmfObIoj61z4CZlpm0a7d4.roa (raw, json) Hash identifier: vK2ElveBt3u8ks/rNJKEoknKWklqGf09ZVjCAR4sUCA= Subject key identifier: 62:82:D0:8C:29:9F:39:B2:28:8F:AD:73:E0:26:65:A6:6D:1A:ED:DE Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0A31 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/YoLQjCmfObIoj61z4CZlpm0a7d4.roa Signing time: Sun 30 Jun 2024 01:46:33 +0000 ROA not before: Sun 30 Jun 2024 01:46:33 +0000 ROA not after: Tue 24 Jun 2025 10:46:45 +0000 asID: 9605 IP address blocks: 1.79.48.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2609 (0xa31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 30 01:46:33 2024 GMT Not After : Jun 24 10:46:45 2025 GMT Subject: CN=6282D08C299F39B2288FAD73E02665A66D1AEDDE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:13:b6:b1:a7:04:07:90:29:eb:b5:ff:cd:d2: 5a:fb:c8:6c:85:6a:f5:94:79:40:03:6c:8d:f3:d3: 13:54:17:8a:b7:a1:a9:92:45:54:56:41:cf:e3:eb: b8:63:a3:49:4b:d9:95:b1:e7:be:ec:d9:e3:72:b8: 24:24:d6:c4:b3:e8:88:ee:8a:27:72:67:b3:6c:ac: c6:b1:a9:96:7f:95:9f:8d:4e:e6:3e:b6:f0:14:a1: a9:7f:46:db:9a:ad:9f:49:e0:28:83:a1:58:e1:9c: 40:5f:04:6f:48:07:e4:50:03:74:58:29:b4:14:9f: 13:c0:42:9b:22:30:18:ae:39:3a:7f:cf:35:f0:54: a4:e7:9e:95:bd:8a:a1:c6:48:96:72:fb:36:76:84: c8:cb:61:0e:37:9f:9e:63:d8:25:e1:0a:1e:47:6d: f6:64:8e:23:06:6b:05:b9:e9:4b:0a:b8:e0:2c:48: 2f:49:25:e7:a4:34:44:87:69:15:8e:fe:3a:b9:15: bc:f9:34:f7:1c:24:91:b8:eb:46:49:6d:47:66:61: 7b:a1:75:1d:49:e4:b1:f7:8a:c1:bb:e2:db:e4:31: 3b:26:a0:8a:b6:e5:0e:47:f7:e5:14:4f:9b:7f:5a: 5b:e5:64:87:a9:8a:10:af:e3:1a:35:6e:c3:17:b4: ea:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:82:D0:8C:29:9F:39:B2:28:8F:AD:73:E0:26:65:A6:6D:1A:ED:DE X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/YoLQjCmfObIoj61z4CZlpm0a7d4.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.79.48.0/21 Signature Algorithm: sha256WithRSAEncryption 4f:11:54:de:1e:c5:fe:1a:59:0b:76:3f:e4:a3:7a:3a:29:de: d3:02:3a:5a:21:2e:f4:e6:09:0e:8c:3c:f7:84:8c:28:e8:0a: 42:cf:92:2f:dc:87:8d:25:6c:a1:91:53:74:a2:3e:34:bc:99: fb:15:e2:e9:70:2b:52:fd:b3:89:44:c4:44:c8:d3:fb:1a:e1: 45:24:9c:f4:06:d8:5f:7b:41:dd:f0:0b:f6:b4:86:f5:6f:7b: 97:3f:37:8b:03:06:75:5c:dd:dd:dd:18:dc:20:e2:05:39:b8: 77:74:bf:f9:9d:b6:11:17:10:02:6f:54:7a:52:07:96:8f:c8: df:37:86:3c:54:03:b6:b3:77:cf:0f:0f:94:5f:e3:5f:a3:3b: 52:9f:3a:88:82:d8:f9:90:77:2c:6d:25:70:ee:3b:71:7a:72: 96:80:6f:78:5f:f1:0a:82:b5:9b:f6:b1:00:f0:77:78:0c:d5: 33:ff:1a:3f:11:2e:95:ed:ed:cd:03:24:5a:7a:cd:b6:cd:5a: 97:0c:26:95:1b:8f:d1:f3:1e:f7:a5:39:e1:b1:30:8e:ff:37: 84:a4:bf:b8:86:6a:4a:89:8b:f4:7c:1a:d3:62:24:39:4e:c7: d0:2a:60:57:ba:35:34:8a:40:7f:2e:d4:34:58:3f:2d:e3:d2: 19:48:9d:4e -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCjEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA2MzAw MTQ2MzNaFw0yNTA2MjQxMDQ2NDVaMDMxMTAvBgNVBAMTKDYyODJEMDhDMjk5RjM5 QjIyODhGQUQ3M0UwMjY2NUE2NkQxQUVEREUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDKE7axpwQHkCnrtf/N0lr7yGyFavWUeUADbI3z0xNUF4q3oamS RVRWQc/j67hjo0lL2ZWx577s2eNyuCQk1sSz6IjuiidyZ7NsrMaxqZZ/lZ+NTuY+ tvAUoal/RtuarZ9J4CiDoVjhnEBfBG9IB+RQA3RYKbQUnxPAQpsiMBiuOTp/zzXw VKTnnpW9iqHGSJZy+zZ2hMjLYQ43n55j2CXhCh5HbfZkjiMGawW56UsKuOAsSC9J JeekNESHaRWO/jq5Fbz5NPccJJG460ZJbUdmYXuhdR1J5LH3isG74tvkMTsmoIq2 5Q5H9+UUT5t/WlvlZIepihCv4xo1bsMXtOptAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUYoLQjCmfObIoj61z4CZlpm0a7d4wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1lvTFFqQ21mT2JJb2o2MXo0Q1pscG0wYTdkNC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMBTzAwDQYJKoZIhvcNAQELBQADggEBAE8RVN4exf4aWQt2P+Sjejop3tMC OlohLvTmCQ6MPPeEjCjoCkLPki/ch40lbKGRU3SiPjS8mfsV4ulwK1L9s4lExETI 0/sa4UUknPQG2F97Qd3wC/a0hvVve5c/N4sDBnVc3d3dGNwg4gU5uHd0v/mdthEX EAJvVHpSB5aPyN83hjxUA7azd88PD5Rf41+jO1KfOoiC2PmQdyxtJXDuO3F6cpaA b3hf8QqCtZv2sQDwd3gM1TP/Gj8RLpXt7c0DJFp6zbbNWpcMJpUbj9HzHvelOeGx MI7/N4Skv7iGakqJi/R8GtNiJDlOx9AqYFe6NTSKQH8u1DRYPy3j0hlInU4= -----END CERTIFICATE-----Generated at Sun Feb 16 22:26:35 2025 by rpki-client