$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/by6OLMcz3MpIvSnTPTVDFqLv3uk.roa File: by6OLMcz3MpIvSnTPTVDFqLv3uk.roa (raw, json) Hash identifier: oicPciTPsaMarkKhIZIqM7DJEa2vLNDh7NR/AWF/zFg= Subject key identifier: 6F:2E:8E:2C:C7:33:DC:CA:48:BD:29:D3:3D:35:43:16:A2:EF:DE:E9 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0ABD Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/by6OLMcz3MpIvSnTPTVDFqLv3uk.roa Signing time: Wed 31 Jul 2024 01:28:56 +0000 ROA not before: Wed 31 Jul 2024 01:28:56 +0000 ROA not after: Tue 15 Jul 2025 01:30:02 +0000 asID: 9605 IP address blocks: 49.109.64.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 22:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2749 (0xabd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jul 31 01:28:56 2024 GMT Not After : Jul 15 01:30:02 2025 GMT Subject: CN=6F2E8E2CC733DCCA48BD29D33D354316A2EFDEE9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:8d:fa:0e:8e:d5:44:65:14:83:4e:19:b7:b2: c6:28:7c:45:31:2f:48:14:c3:0d:0e:04:bf:58:43: 4c:b8:d9:c4:f8:86:d2:fa:e9:e5:d2:9e:23:de:52: ce:2a:a1:0e:07:7f:bc:ce:3d:8e:b4:3a:27:d8:f9: 6f:da:44:cc:6d:ff:76:51:ce:50:eb:8e:0e:bd:3f: e2:83:92:3f:57:e7:67:e9:c1:1d:db:3a:98:bc:97: 78:61:25:c2:b3:f4:72:1b:35:3e:5e:08:72:cb:59: 67:07:11:08:14:f3:1d:86:0f:74:15:bd:9c:ba:0a: 0e:8a:87:d7:e9:fe:27:ee:45:21:13:c0:d5:ed:ec: e0:ba:51:76:2b:cf:4c:55:63:ff:96:9e:d7:48:0e: c8:04:0b:f4:de:2c:75:92:fb:98:a5:a9:9a:13:d3: e2:e4:cc:07:06:5f:f2:ef:ef:11:ac:a4:65:af:38: 02:e2:26:46:03:cb:20:37:e0:d7:a9:96:2f:30:96: 2c:95:2e:77:8e:21:fc:70:f7:92:1f:69:2f:e1:0b: 4d:fe:b4:65:49:40:51:91:ba:17:e9:23:52:a0:a5: 0d:96:44:4b:db:17:df:19:8a:b2:a9:ff:96:b9:b7: fd:27:1e:d1:ab:89:bc:2c:7b:74:b1:07:84:6b:38: 18:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:2E:8E:2C:C7:33:DC:CA:48:BD:29:D3:3D:35:43:16:A2:EF:DE:E9 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/by6OLMcz3MpIvSnTPTVDFqLv3uk.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.109.64.0/22 Signature Algorithm: sha256WithRSAEncryption 6d:5b:df:12:a3:f2:0e:a2:03:ff:95:a6:9f:9c:b1:1a:de:87: 21:25:30:5f:c0:60:9b:3d:c3:74:a4:a6:b3:21:4b:85:cc:04: 0a:a7:9c:fd:d3:85:91:93:fc:9d:b4:99:70:e8:e1:e9:be:f3: 4e:69:f5:66:b8:be:a1:b2:d2:87:1d:17:b4:70:79:a3:89:86: 95:2a:a7:5c:e4:2b:b5:1f:c4:50:be:00:f0:81:24:2d:ae:56: 78:5a:b5:83:f8:a9:2b:de:b6:86:09:de:e6:db:c1:f0:7e:94: 89:6d:ed:e1:a7:57:d2:e2:5b:ca:11:63:23:3b:8e:25:73:26: d2:d9:9f:9b:10:42:34:29:71:8d:08:34:40:55:08:a1:f5:73: 96:97:88:d4:11:64:4c:85:12:b2:5d:a3:d1:3a:c0:fe:a1:9f: a1:f1:24:d3:dd:74:5e:23:ee:47:a3:54:81:ab:33:fa:af:26: 48:55:46:17:e3:5c:07:67:b6:cd:3e:a1:56:75:6d:e9:68:3d: 18:08:29:05:b1:68:a7:27:8c:28:a9:10:c9:6c:57:35:6b:3f: 71:a3:1b:86:25:76:e8:ab:c0:95:8f:7f:79:33:9a:48:0f:16: e8:1d:9d:d0:fd:0c:2a:eb:4d:24:74:86:97:b7:19:a7:59:d1: 2d:e4:d5:f2 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCr0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA3MzEw MTI4NTZaFw0yNTA3MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDZGMkU4RTJDQzczM0RD Q0E0OEJEMjlEMzNEMzU0MzE2QTJFRkRFRTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDHjfoOjtVEZRSDThm3ssYofEUxL0gUww0OBL9YQ0y42cT4htL6 6eXSniPeUs4qoQ4Hf7zOPY60OifY+W/aRMxt/3ZRzlDrjg69P+KDkj9X52fpwR3b Opi8l3hhJcKz9HIbNT5eCHLLWWcHEQgU8x2GD3QVvZy6Cg6Kh9fp/ifuRSETwNXt 7OC6UXYrz0xVY/+WntdIDsgEC/TeLHWS+5ilqZoT0+LkzAcGX/Lv7xGspGWvOALi JkYDyyA34Nepli8wliyVLneOIfxw95IfaS/hC03+tGVJQFGRuhfpI1KgpQ2WREvb F98ZirKp/5a5t/0nHtGribwse3SxB4RrOBhVAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUby6OLMcz3MpIvSnTPTVDFqLv3ukwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2J5Nk9MTWN6M01wSXZTblRQVFZERnFMdjN1ay5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIxbUAwDQYJKoZIhvcNAQELBQADggEBAG1b3xKj8g6iA/+Vpp+csRrehyEl MF/AYJs9w3SkprMhS4XMBAqnnP3ThZGT/J20mXDo4em+805p9Wa4vqGy0ocdF7Rw eaOJhpUqp1zkK7UfxFC+APCBJC2uVnhatYP4qSvetoYJ3ubbwfB+lIlt7eGnV9Li W8oRYyM7jiVzJtLZn5sQQjQpcY0INEBVCKH1c5aXiNQRZEyFErJdo9E6wP6hn6Hx JNPddF4j7kejVIGrM/qvJkhVRhfjXAdnts0+oVZ1beloPRgIKQWxaKcnjCipEMls VzVrP3GjG4YlduirwJWPf3kzmkgPFugdndD9DCrrTSR0hpe3GadZ0S3k1fI= -----END CERTIFICATE-----Generated at Mon Nov 25 23:54:42 2024 by rpki-client on console-ams.rpki-client.org