$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/YyiWF3sSPDFICtfyqoV16BW_l9I.roa File: YyiWF3sSPDFICtfyqoV16BW_l9I.roa (raw, json) Hash identifier: fKK+gKW2m32y0oX071V9CjrNlsqeejNRAnDJwb39B+E= Subject key identifier: 63:28:96:17:7B:12:3C:31:48:0A:D7:F2:AA:85:75:E8:15:BF:97:D2 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 081B Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/YyiWF3sSPDFICtfyqoV16BW_l9I.roa Signing time: Tue 30 Apr 2024 02:12:32 +0000 ROA not before: Tue 30 Apr 2024 02:12:32 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 1.73.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2075 (0x81b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 30 02:12:32 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=632896177B123C31480AD7F2AA8575E815BF97D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:8f:a8:7d:58:d8:7d:0e:f1:d0:90:e9:f6:76: c0:b5:23:ca:5c:8c:68:36:48:76:e6:0d:08:da:45: a0:c2:b6:8c:08:36:55:ad:a0:ec:56:32:39:80:f7: d7:76:91:f1:88:16:73:a9:bf:8e:5e:ab:5d:f9:51: d5:7a:bf:f4:fe:fb:f3:42:6a:4f:5f:55:76:13:e4: f6:eb:50:b9:94:3e:b8:69:fd:8c:e3:4f:5c:23:a3: 4c:7b:69:cd:d2:a9:8d:d5:f2:c9:d1:fd:ce:ce:64: ab:6b:10:b7:80:99:09:74:48:ae:f7:6a:f1:9c:c3: d2:78:77:94:c3:c9:7e:26:3e:74:22:5a:f4:bc:4f: fb:05:9f:6e:33:87:70:df:1f:0f:f7:47:b2:4b:cf: c7:c1:c6:a7:a3:da:5a:45:32:63:08:a7:82:c3:e5: 1b:ad:7a:f4:bc:7c:3d:48:40:c4:30:1b:71:df:fb: b9:6f:54:dc:02:22:cb:22:18:28:2b:3a:88:de:74: c5:09:2e:5e:95:c2:bc:59:66:9d:95:73:5b:b1:07: 41:10:56:df:aa:04:8c:3c:ed:80:cd:e8:00:83:39: db:7e:59:4c:88:8f:65:96:81:6e:5d:54:c1:0c:e6: 07:3f:00:e8:5b:be:05:e5:4c:24:42:7e:05:1c:71: 02:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:28:96:17:7B:12:3C:31:48:0A:D7:F2:AA:85:75:E8:15:BF:97:D2 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/YyiWF3sSPDFICtfyqoV16BW_l9I.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.73.238.0/24 Signature Algorithm: sha256WithRSAEncryption a6:8a:e5:ea:8c:a8:0a:68:9b:01:fb:a0:4f:18:d8:a6:85:81: 11:b3:f8:cf:2b:2e:8f:e5:9c:98:d6:d6:e6:34:35:bd:55:89: 05:e2:a0:b9:0d:cf:1e:49:00:8a:5a:41:4a:e5:da:9b:f9:1e: b2:2b:40:0b:62:d6:3c:e8:28:98:a7:87:54:4b:25:dc:00:f2: a8:58:4f:b2:22:5f:7d:b7:ae:85:59:25:98:df:ef:6a:30:31: ae:ea:c7:7e:35:29:d6:54:a5:cc:3a:e7:94:2e:94:98:48:7a: 75:5a:41:6b:90:44:91:3f:6d:61:34:58:68:c1:c2:c4:c4:de: 09:c6:b1:7e:23:3d:33:8c:fe:33:0c:ac:be:80:07:06:70:b0: 7a:d6:14:3e:9f:ec:93:b7:34:82:b0:3b:62:38:54:24:80:22: db:ed:58:82:4b:df:31:c1:78:95:03:73:36:f1:4c:76:d2:45: 93:5c:f4:c1:75:1d:af:6d:28:7d:b0:a9:76:54:b1:e6:b8:38: 79:39:ca:c9:53:96:13:f5:dd:ee:4c:7e:ee:f3:e9:df:6c:8a: 1a:13:04:a8:29:09:73:93:b6:ef:1c:f9:58:b9:3a:bb:89:5d: 05:a1:d3:c4:a2:7b:ef:55:cd:29:a4:30:60:42:26:eb:f9:c0: a6:75:9c:9e -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCBswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw MjEyMzJaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDYzMjg5NjE3N0IxMjND MzE0ODBBRDdGMkFBODU3NUU4MTVCRjk3RDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDYj6h9WNh9DvHQkOn2dsC1I8pcjGg2SHbmDQjaRaDCtowINlWt oOxWMjmA99d2kfGIFnOpv45eq135UdV6v/T++/NCak9fVXYT5PbrULmUPrhp/Yzj T1wjo0x7ac3SqY3V8snR/c7OZKtrELeAmQl0SK73avGcw9J4d5TDyX4mPnQiWvS8 T/sFn24zh3DfHw/3R7JLz8fBxqej2lpFMmMIp4LD5RutevS8fD1IQMQwG3Hf+7lv VNwCIssiGCgrOojedMUJLl6VwrxZZp2Vc1uxB0EQVt+qBIw87YDN6ACDOdt+WUyI j2WWgW5dVMEM5gc/AOhbvgXlTCRCfgUccQIPAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUYyiWF3sSPDFICtfyqoV16BW/l9IwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1l5aVdGM3NTUERGSUN0Znlxb1YxNkJXX2w5SS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAABSe4wDQYJKoZIhvcNAQELBQADggEBAKaK5eqMqApomwH7oE8Y2KaFgRGz +M8rLo/lnJjW1uY0Nb1ViQXioLkNzx5JAIpaQUrl2pv5HrIrQAti1jzoKJinh1RL JdwA8qhYT7IiX323roVZJZjf72owMa7qx341KdZUpcw655QulJhIenVaQWuQRJE/ bWE0WGjBwsTE3gnGsX4jPTOM/jMMrL6ABwZwsHrWFD6f7JO3NIKwO2I4VCSAItvt WIJL3zHBeJUDczbxTHbSRZNc9MF1Ha9tKH2wqXZUsea4OHk5yslTlhP13e5Mfu7z 6d9sihoTBKgpCXOTtu8c+Vi5OruJXQWh08Sie+9VzSmkMGBCJuv5wKZ1nJ4= -----END CERTIFICATE-----Generated at Sat Jun 1 15:54:31 2024 by rpki-client on console-ams.rpki-client.org