$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/dodnwnj5bdf66r1lcE7-EvRIhJg.roa File: dodnwnj5bdf66r1lcE7-EvRIhJg.roa (raw, json) Hash identifier: AVkSJVQJ7s7w8u0ASDQMUm2/cS09bg4mX75Yj5n27BA= Subject key identifier: 76:87:67:C2:78:F9:6D:D7:FA:EA:BD:65:70:4E:FE:12:F4:48:84:98 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 07EB Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/dodnwnj5bdf66r1lcE7-EvRIhJg.roa Signing time: Tue 30 Apr 2024 02:10:34 +0000 ROA not before: Tue 30 Apr 2024 02:10:34 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 183.72.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 22:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2027 (0x7eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 30 02:10:34 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=768767C278F96DD7FAEABD65704EFE12F4488498 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:88:d9:98:69:df:38:fe:8b:ee:f5:2b:58:34: e6:f3:a5:26:20:0c:e7:0b:a5:0b:29:2e:2f:ae:36: a3:1d:ac:68:db:fd:71:01:30:8b:ef:b6:9c:96:3d: c4:18:5a:3b:59:06:4a:cc:73:c8:ac:2a:d2:26:f6: ef:6f:4b:9b:67:0d:5f:b4:a7:a5:76:6d:52:d1:d5: 57:b6:dd:ee:85:5c:89:a1:17:6c:75:f1:21:0b:3d: 29:96:53:00:b0:c6:1a:6b:17:1f:a2:ce:d2:3f:a2: 3b:e0:02:bf:80:6d:45:4d:99:29:88:ed:54:ba:45: 3c:f2:4c:fd:d9:7d:02:5e:83:9c:56:b4:02:cb:9f: 3d:5d:4c:6d:fc:65:e6:02:3e:d8:78:89:61:94:c1: 09:cf:97:d3:77:67:d8:e2:50:bb:e2:e6:a4:7f:ca: 0c:41:19:a7:e4:b0:a4:b5:78:3c:0b:8c:09:00:93: 97:5e:e5:b9:1d:e9:34:52:b1:c1:64:69:77:18:f0: 2f:45:dc:6e:2b:1c:69:07:4f:a3:98:62:56:38:aa: a8:91:27:d0:62:6e:8e:ed:48:2b:e9:b2:ca:1a:5d: 16:e5:55:55:b2:38:0e:78:a6:70:52:6b:9f:28:fa: 45:50:c9:13:3f:ce:59:48:45:85:ae:de:ee:73:b6: dc:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:87:67:C2:78:F9:6D:D7:FA:EA:BD:65:70:4E:FE:12:F4:48:84:98 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/dodnwnj5bdf66r1lcE7-EvRIhJg.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 183.72.0.0/16 Signature Algorithm: sha256WithRSAEncryption 58:eb:ad:ba:19:0e:8f:5a:9b:1c:01:b9:d4:77:e1:8b:b0:bf: 51:16:50:34:9d:e0:4a:a0:51:03:20:27:d4:e5:3c:cd:14:ef: a4:eb:7c:f6:db:52:59:77:02:c6:3a:0c:89:6f:61:3c:42:f1: 60:b6:90:1a:f2:a3:b3:cf:bf:b5:07:8a:4f:36:10:30:c1:a8: 6b:45:7b:9d:6a:f0:90:4b:e5:44:33:2f:0f:91:b5:2b:98:f3: 1c:15:9b:bb:f4:4e:56:82:28:ba:ab:cf:54:fa:d4:28:be:5c: e1:d2:6d:08:1a:b7:5c:28:1a:00:72:92:10:fa:92:b9:02:f2: f5:d5:bd:3b:ef:3a:74:48:ed:40:15:e7:53:d0:1e:1f:28:74: 4b:48:de:10:a3:8d:e4:da:39:96:44:6a:f0:15:36:78:b6:39: dd:dd:15:51:63:b6:c2:9b:66:13:cf:52:dd:f5:35:8f:9b:a0: be:3d:fc:9d:33:8e:e0:05:a4:4d:f6:0c:39:30:7c:64:5e:97: 91:f7:fb:d5:15:9b:96:1c:3d:3e:d4:02:a6:ee:c9:c8:bf:66: 9a:77:cd:d2:8a:d2:ca:b6:7d:c2:23:45:d7:6b:7c:97:fa:f2: 32:0a:6b:b0:7a:74:37:fe:6f:b2:9f:8f:ba:79:48:70:36:37: d8:35:0b:c0 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgICB+swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw MjEwMzRaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDc2ODc2N0MyNzhGOTZE RDdGQUVBQkQ2NTcwNEVGRTEyRjQ0ODg0OTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC3iNmYad84/ovu9StYNObzpSYgDOcLpQspLi+uNqMdrGjb/XEB MIvvtpyWPcQYWjtZBkrMc8isKtIm9u9vS5tnDV+0p6V2bVLR1Ve23e6FXImhF2x1 8SELPSmWUwCwxhprFx+iztI/ojvgAr+AbUVNmSmI7VS6RTzyTP3ZfQJeg5xWtALL nz1dTG38ZeYCPth4iWGUwQnPl9N3Z9jiULvi5qR/ygxBGafksKS1eDwLjAkAk5de 5bkd6TRSscFkaXcY8C9F3G4rHGkHT6OYYlY4qqiRJ9Bibo7tSCvpssoaXRblVVWy OA54pnBSa58o+kVQyRM/zllIRYWu3u5zttzLAgMBAAGjggIjMIICHzAdBgNVHQ4E FgQUdodnwnj5bdf66r1lcE7+EvRIhJgwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2RvZG53bmo1YmRmNjZyMWxjRTctRXZSSWhKZy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwC3SDANBgkqhkiG9w0BAQsFAAOCAQEAWOutuhkOj1qbHAG51Hfhi7C/URZQ NJ3gSqBRAyAn1OU8zRTvpOt89ttSWXcCxjoMiW9hPELxYLaQGvKjs8+/tQeKTzYQ MMGoa0V7nWrwkEvlRDMvD5G1K5jzHBWbu/ROVoIouqvPVPrUKL5c4dJtCBq3XCga AHKSEPqSuQLy9dW9O+86dEjtQBXnU9AeHyh0S0jeEKON5No5lkRq8BU2eLY53d0V UWO2wptmE89S3fU1j5ugvj38nTOO4AWkTfYMOTB8ZF6Xkff71RWblhw9PtQCpu7J yL9mmnfN0orSyrZ9wiNF12t8l/ryMgprsHp0N/5vsp+PunlIcDY32DULwA== -----END CERTIFICATE-----Generated at Mon Nov 25 23:54:42 2024 by rpki-client on console-ams.rpki-client.org