$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ayAo2HWMPDiYmVhoe-IO8XCoRzw.roa File: ayAo2HWMPDiYmVhoe-IO8XCoRzw.roa (raw, json) Hash identifier: 5v/fkVXt71xzoIgKy+1YQrAQKhzQKumof6vio+i7XgY= Subject key identifier: 6B:20:28:D8:75:8C:3C:38:98:99:58:68:7B:E2:0E:F1:70:A8:47:3C Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0975 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ayAo2HWMPDiYmVhoe-IO8XCoRzw.roa Signing time: Sun 30 Jun 2024 01:33:41 +0000 ROA not before: Sun 30 Jun 2024 01:33:41 +0000 ROA not after: Tue 24 Jun 2025 10:46:45 +0000 asID: 9605 IP address blocks: 49.110.124.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:41:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2421 (0x975) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 30 01:33:41 2024 GMT Not After : Jun 24 10:46:45 2025 GMT Subject: CN=6B2028D8758C3C38989958687BE20EF170A8473C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:82:d3:6d:74:12:bd:de:71:7e:9f:6b:7a:c7: 29:47:bb:90:87:a2:fa:4b:9e:d4:0c:f8:7b:22:80: 28:43:d4:a0:48:e0:f1:eb:91:6d:62:55:db:59:6f: b0:27:dd:0e:95:d2:35:dd:a3:bd:75:d7:47:2f:2e: 14:a7:d8:59:ae:10:d5:80:f1:3b:16:b5:c4:e6:45: df:8c:d5:c6:ee:b0:f2:4d:28:7a:ba:14:a1:5a:8d: f3:0e:e2:d3:21:71:07:a2:bb:22:1e:5a:46:8b:9b: ba:c0:10:a3:4c:74:e3:60:59:ab:c2:83:7a:12:d5: 44:c3:37:75:56:7d:8c:d2:df:d2:ce:39:92:4e:67: 59:c8:8f:07:8a:7f:2d:51:f3:84:54:b2:62:d3:18: 54:af:f3:45:06:77:c1:b9:54:14:06:15:1c:6b:6c: 27:02:85:d3:af:7c:b6:19:8d:8b:37:9a:6a:0d:fc: 8d:1d:bb:f5:9b:28:be:fc:b2:23:e7:39:9a:3c:9f: 90:03:05:a6:e8:dc:48:cf:7a:a3:60:1c:e7:80:cf: 3c:a5:cf:6f:3c:32:84:3f:1c:31:7d:45:be:bc:72: b7:2a:b0:7d:fb:a2:2f:55:29:bb:91:1d:27:54:b9: 53:4d:19:d0:de:83:d0:6c:0c:ca:2c:a6:e5:9a:6e: 62:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:20:28:D8:75:8C:3C:38:98:99:58:68:7B:E2:0E:F1:70:A8:47:3C X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ayAo2HWMPDiYmVhoe-IO8XCoRzw.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.110.124.0/23 Signature Algorithm: sha256WithRSAEncryption 66:6f:d5:2a:19:35:e4:18:47:a0:89:78:51:e4:b0:d4:70:14: 23:59:a9:b1:e5:a3:6c:00:6e:ee:84:f2:4f:b6:b5:8e:9f:6b: 62:0d:fa:63:cf:17:9d:a7:8c:a7:35:80:0a:ca:6b:a5:44:51: 2f:d6:14:c6:5c:6a:ac:b1:ba:98:fa:79:79:9a:1c:c7:7e:85: ac:80:f0:dd:9f:d6:ef:2b:2b:03:63:19:4f:7a:2f:45:12:03: 74:e2:74:ce:f3:ad:03:90:d9:48:cb:55:c7:10:fc:c7:5d:c2: d1:0c:6f:2d:68:15:e3:97:e2:1e:1c:b7:fd:e3:d0:ff:0a:9f: dd:f6:2c:91:59:d0:33:ad:e8:1d:79:38:33:25:10:d5:4b:f5: 60:1b:4e:8f:92:69:42:fc:8b:a6:7c:ba:a0:b6:9f:03:bd:2c: 44:4f:e7:ec:6f:4e:a5:27:d7:6a:a2:1f:76:b8:2d:2a:08:ae: 5c:ec:3c:09:5a:c7:be:f9:7f:85:24:b2:a3:14:cd:19:13:8e: 52:14:1e:28:ae:0f:06:ec:46:d7:d1:23:b9:7f:a1:1c:19:11: 8d:3b:6c:88:f4:9f:51:aa:1d:07:76:a4:20:8a:ab:54:81:64: 83:06:c4:9a:53:77:9f:1b:20:96:7d:a9:07:64:37:e2:f4:1e: 90:10:c4:eb -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCXUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA2MzAw MTMzNDFaFw0yNTA2MjQxMDQ2NDVaMDMxMTAvBgNVBAMTKDZCMjAyOEQ4NzU4QzND Mzg5ODk5NTg2ODdCRTIwRUYxNzBBODQ3M0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDjgtNtdBK93nF+n2t6xylHu5CHovpLntQM+HsigChD1KBI4PHr kW1iVdtZb7An3Q6V0jXdo71110cvLhSn2FmuENWA8TsWtcTmRd+M1cbusPJNKHq6 FKFajfMO4tMhcQeiuyIeWkaLm7rAEKNMdONgWavCg3oS1UTDN3VWfYzS39LOOZJO Z1nIjweKfy1R84RUsmLTGFSv80UGd8G5VBQGFRxrbCcChdOvfLYZjYs3mmoN/I0d u/WbKL78siPnOZo8n5ADBabo3EjPeqNgHOeAzzylz288MoQ/HDF9Rb68crcqsH37 oi9VKbuRHSdUuVNNGdDeg9BsDMospuWabmKzAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUayAo2HWMPDiYmVhoe+IO8XCoRzwwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2F5QW8ySFdNUERpWW1WaG9lLUlPOFhDb1J6dy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExbnwwDQYJKoZIhvcNAQELBQADggEBAGZv1SoZNeQYR6CJeFHksNRwFCNZ qbHlo2wAbu6E8k+2tY6fa2IN+mPPF52njKc1gArKa6VEUS/WFMZcaqyxupj6eXma HMd+hayA8N2f1u8rKwNjGU96L0USA3TidM7zrQOQ2UjLVccQ/MddwtEMby1oFeOX 4h4ct/3j0P8Kn932LJFZ0DOt6B15ODMlENVL9WAbTo+SaUL8i6Z8uqC2nwO9LERP 5+xvTqUn12qiH3a4LSoIrlzsPAlax775f4UksqMUzRkTjlIUHiiuDwbsRtfRI7l/ oRwZEY07bIj0n1GqHQd2pCCKq1SBZIMGxJpTd58bIJZ9qQdkN+L0HpAQxOs= -----END CERTIFICATE-----Generated at Fri Nov 22 15:24:01 2024 by rpki-client on console-fra.rpki-client.org