$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/_Lult6aL0bnGm3nNpuwd53-BHGo.roa File: _Lult6aL0bnGm3nNpuwd53-BHGo.roa (raw, json) Hash identifier: 9LGp4TIdT2a3xEE7dpNr2sHq4H3krSCQh7N2+5LnsHw= Subject key identifier: FC:BB:A5:B7:A6:8B:D1:B9:C6:9B:79:CD:A6:EC:1D:E7:7F:81:1C:6A Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 088C Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/_Lult6aL0bnGm3nNpuwd53-BHGo.roa Signing time: Tue 30 Apr 2024 02:20:35 +0000 ROA not before: Tue 30 Apr 2024 02:20:35 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 1.72.12.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2188 (0x88c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 30 02:20:35 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=FCBBA5B7A68BD1B9C69B79CDA6EC1DE77F811C6A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:01:17:eb:33:20:1f:d8:47:81:c0:52:6d:75: 61:34:c0:52:79:e6:66:f4:b5:03:fd:d6:65:15:e1: d2:d3:48:fc:7d:62:b6:e4:93:60:02:a4:9a:92:52: b8:c9:5d:76:3c:98:7c:f8:ee:0f:bc:dc:87:82:46: a0:2f:f8:36:e8:7d:fd:27:2e:f1:b1:9b:2a:9a:a2: c9:1b:48:40:94:b8:27:4b:d6:1b:5b:ae:b6:5f:af: 95:23:42:dd:d7:00:db:f9:23:ee:f1:87:e0:44:8f: 2d:c2:fe:64:56:19:9f:f7:26:d0:e5:5a:d3:75:c9: c6:46:11:2b:f4:05:e0:29:a1:8f:9a:51:c3:a4:43: 36:d2:f7:d2:4f:e2:c5:26:ef:14:aa:4f:67:ac:b2: 90:b4:18:a3:95:69:7e:17:23:2c:c1:94:45:e8:0b: 11:3c:45:11:11:e6:c4:c2:58:80:95:01:0a:20:b8: 05:0c:7d:df:a6:46:4e:53:04:05:cb:7d:25:ea:b1: 1b:2a:6e:f6:74:17:6c:31:ec:bf:7a:79:d0:83:b3: 90:6b:f7:2c:42:80:b7:cc:48:d4:8f:e3:67:54:33: 44:8f:77:41:1d:68:f4:8b:d5:24:ed:e5:b7:61:1a: d3:f8:8d:60:bb:69:23:46:dc:73:db:0a:87:3a:ff: c2:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:BB:A5:B7:A6:8B:D1:B9:C6:9B:79:CD:A6:EC:1D:E7:7F:81:1C:6A X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/_Lult6aL0bnGm3nNpuwd53-BHGo.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.72.12.0/22 Signature Algorithm: sha256WithRSAEncryption 75:a7:c3:2d:e9:9e:bb:61:38:c7:fe:f6:10:c3:3d:5d:de:24: d7:c4:78:9a:e9:20:b3:d0:73:85:ae:59:38:99:c8:80:18:7e: 41:12:28:6d:72:ce:e5:55:c6:99:c0:70:b5:98:08:7c:5f:08: 29:1b:36:45:56:eb:5e:d2:f8:24:77:bc:d8:76:07:71:39:bf: 11:d1:de:2e:63:c4:17:cc:1c:67:b1:37:35:1e:c9:e3:02:e3: 01:28:f4:3a:82:e8:19:0d:a8:13:02:b9:55:ba:3e:91:1b:8e: 7d:7e:80:9a:31:fb:28:29:17:2b:cd:45:80:0f:90:d2:62:9b: 1b:a8:5c:bb:b6:3e:cb:da:5d:58:18:7d:2f:ab:fb:bb:e3:cd: e5:83:ca:0f:5e:08:29:c3:11:6e:8c:4c:a3:f7:40:9b:7d:15: 21:53:ee:2e:41:85:2b:6d:31:ef:db:f6:50:89:51:7d:2b:ce: cf:13:df:bd:74:84:ba:40:e3:51:da:96:5d:3e:b9:48:b9:1a: c1:0a:4b:a7:11:6c:04:eb:23:13:e1:4f:c8:3c:80:46:75:89: da:01:32:00:de:da:6f:0c:54:69:63:a8:9d:f0:87:88:61:9f: ad:7a:30:11:7b:9f:c7:d1:45:87:84:5e:e1:f5:a9:5c:2b:6f: 98:5f:79:0a -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCIwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw MjIwMzVaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEZDQkJBNUI3QTY4QkQx QjlDNjlCNzlDREE2RUMxREU3N0Y4MTFDNkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCoARfrMyAf2EeBwFJtdWE0wFJ55mb0tQP91mUV4dLTSPx9Yrbk k2ACpJqSUrjJXXY8mHz47g+83IeCRqAv+Dboff0nLvGxmyqaoskbSECUuCdL1htb rrZfr5UjQt3XANv5I+7xh+BEjy3C/mRWGZ/3JtDlWtN1ycZGESv0BeApoY+aUcOk QzbS99JP4sUm7xSqT2esspC0GKOVaX4XIyzBlEXoCxE8RRER5sTCWICVAQoguAUM fd+mRk5TBAXLfSXqsRsqbvZ0F2wx7L96edCDs5Br9yxCgLfMSNSP42dUM0SPd0Ed aPSL1STt5bdhGtP4jWC7aSNG3HPbCoc6/8LzAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU/Lult6aL0bnGm3nNpuwd53+BHGowHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L19MdWx0NmFMMGJuR20zbk5wdXdkNTMtQkhHby5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIBSAwwDQYJKoZIhvcNAQELBQADggEBAHWnwy3pnrthOMf+9hDDPV3eJNfE eJrpILPQc4WuWTiZyIAYfkESKG1yzuVVxpnAcLWYCHxfCCkbNkVW617S+CR3vNh2 B3E5vxHR3i5jxBfMHGexNzUeyeMC4wEo9DqC6BkNqBMCuVW6PpEbjn1+gJox+ygp FyvNRYAPkNJimxuoXLu2PsvaXVgYfS+r+7vjzeWDyg9eCCnDEW6MTKP3QJt9FSFT 7i5BhSttMe/b9lCJUX0rzs8T3710hLpA41Hall0+uUi5GsEKS6cRbATrIxPhT8g8 gEZ1idoBMgDe2m8MVGljqJ3wh4hhn616MBF7n8fRRYeEXuH1qVwrb5hfeQo= -----END CERTIFICATE-----Generated at Sat Jun 1 15:54:31 2024 by rpki-client on console-ams.rpki-client.org