$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/cKODFXBm9Dtzqw_OJ1IcNhruyJQ.roa File: cKODFXBm9Dtzqw_OJ1IcNhruyJQ.roa (raw, json) Hash identifier: JDP3he4d7xdDy4UOb3G7tzmeD/qeBDY3KHkVRL7i4sY= Subject key identifier: 70:A3:83:15:70:66:F4:3B:73:AB:0F:CE:27:52:1C:36:1A:EE:C8:94 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 07E9 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/cKODFXBm9Dtzqw_OJ1IcNhruyJQ.roa Signing time: Tue 30 Apr 2024 02:10:33 +0000 ROA not before: Tue 30 Apr 2024 02:10:33 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 1.79.82.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2025 (0x7e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 30 02:10:33 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=70A383157066F43B73AB0FCE27521C361AEEC894 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a7:12:d9:1b:95:de:15:d8:1e:c3:bd:8a:e7: 23:92:1f:a1:2b:56:60:61:9d:e5:ba:03:81:2d:95: b3:71:7d:55:e1:94:82:6a:d2:7b:62:6b:b6:a8:2e: ac:13:35:38:23:8b:d9:ae:96:f2:34:4d:0f:dd:50: 44:97:80:17:4d:24:5f:d5:58:c8:bd:95:15:28:9b: 60:26:a1:4b:96:2e:5e:78:3b:85:0e:b3:80:9d:6f: a0:df:77:92:dd:2b:b6:c5:c4:1e:6a:49:c1:bc:1c: 7a:a9:44:d2:22:76:b2:d0:80:d0:71:66:5b:fd:64: 22:05:c4:a7:67:c7:4c:22:28:10:12:c7:4e:78:af: e4:78:e2:9f:b2:a4:87:72:cb:56:ba:8a:d5:b9:45: 32:9c:7a:1c:d9:ed:e9:de:e7:e4:bb:77:dd:59:32: f7:67:1b:28:ff:6c:46:3f:20:1a:29:e9:58:3c:8e: f0:ae:a9:81:75:6a:ff:1e:12:04:0b:d6:fd:fc:0a: aa:c4:08:16:af:25:d3:73:65:31:3d:c7:d7:2e:90: 39:b4:36:cf:cf:5a:8f:85:15:f7:86:5e:e9:9e:a4: 26:ec:ad:3c:3d:4c:9a:c3:c4:92:48:c5:cc:17:f9: a4:b3:83:4d:83:2f:e6:83:e2:49:7a:95:81:6a:87: fd:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:A3:83:15:70:66:F4:3B:73:AB:0F:CE:27:52:1C:36:1A:EE:C8:94 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/cKODFXBm9Dtzqw_OJ1IcNhruyJQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.79.82.0/24 Signature Algorithm: sha256WithRSAEncryption 52:e3:71:fe:76:58:7e:6a:db:15:f6:e2:da:b0:d5:fe:c4:a4: ec:30:2d:72:67:12:45:94:43:dc:18:9c:56:a6:ed:d5:7b:2d: ec:84:5c:db:0a:e0:ce:50:40:7e:7e:8e:92:f6:2f:07:f1:54: cc:e4:cc:c0:6b:4a:66:47:ae:e7:02:f1:1d:26:bb:2c:2c:c5: f6:b4:cb:88:db:07:35:42:9b:8f:14:fc:e3:43:4a:e0:f0:8d: 72:09:7e:bd:70:6e:f9:0c:80:5c:54:7c:73:50:b0:ac:72:32: f4:ad:4e:3d:68:f2:a2:87:b4:7e:45:68:c3:15:0a:d0:88:e0: ff:9a:bc:bd:1e:71:4a:c9:bd:db:42:ac:0d:a9:ae:6d:55:54: 83:7c:2c:68:2c:a5:47:32:63:b6:0b:09:98:1e:f8:f1:d3:5c: fe:ca:2b:47:88:c3:ed:40:20:ad:ab:89:27:59:99:79:c2:9c: c1:34:20:51:2a:c4:68:28:77:67:a7:5a:8f:3f:bf:ee:09:d7: 83:cb:74:41:49:0a:d8:21:bf:1e:9a:42:cc:3a:09:99:02:4d: eb:cc:7f:40:8a:e8:36:71:08:dd:88:97:75:b7:93:c0:71:95: a5:0c:80:92:ba:64:41:ea:ad:7f:73:b0:84:f8:ed:1e:f5:03: a6:11:6f:61 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICB+kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw MjEwMzNaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDcwQTM4MzE1NzA2NkY0 M0I3M0FCMEZDRTI3NTIxQzM2MUFFRUM4OTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDHpxLZG5XeFdgew72K5yOSH6ErVmBhneW6A4EtlbNxfVXhlIJq 0ntia7aoLqwTNTgji9mulvI0TQ/dUESXgBdNJF/VWMi9lRUom2AmoUuWLl54O4UO s4Cdb6Dfd5LdK7bFxB5qScG8HHqpRNIidrLQgNBxZlv9ZCIFxKdnx0wiKBASx054 r+R44p+ypIdyy1a6itW5RTKcehzZ7ene5+S7d91ZMvdnGyj/bEY/IBop6Vg8jvCu qYF1av8eEgQL1v38CqrECBavJdNzZTE9x9cukDm0Ns/PWo+FFfeGXumepCbsrTw9 TJrDxJJIxcwX+aSzg02DL+aD4kl6lYFqh/3LAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUcKODFXBm9Dtzqw/OJ1IcNhruyJQwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2NLT0RGWEJtOUR0enF3X09KMUljTmhydXlKUS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAABT1IwDQYJKoZIhvcNAQELBQADggEBAFLjcf52WH5q2xX24tqw1f7EpOww LXJnEkWUQ9wYnFam7dV7LeyEXNsK4M5QQH5+jpL2LwfxVMzkzMBrSmZHrucC8R0m uywsxfa0y4jbBzVCm48U/ONDSuDwjXIJfr1wbvkMgFxUfHNQsKxyMvStTj1o8qKH tH5FaMMVCtCI4P+avL0ecUrJvdtCrA2prm1VVIN8LGgspUcyY7YLCZge+PHTXP7K K0eIw+1AIK2riSdZmXnCnME0IFEqxGgod2enWo8/v+4J14PLdEFJCtghvx6aQsw6 CZkCTevMf0CK6DZxCN2Il3W3k8BxlaUMgJK6ZEHqrX9zsIT47R71A6YRb2E= -----END CERTIFICATE-----Generated at Sun Feb 16 22:09:50 2025 by rpki-client