$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/j4frE-CVCYWwWaUV3fzVJcMYKmQ.roa File: j4frE-CVCYWwWaUV3fzVJcMYKmQ.roa (raw, json) Hash identifier: eVcGyNve9v3K3lXEk/iTisFVwQh7z98V7ZpsT5NpaeM= Subject key identifier: 8F:87:EB:13:E0:95:09:85:B0:59:A5:15:DD:FC:D5:25:C3:18:2A:64 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 08DD Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/j4frE-CVCYWwWaUV3fzVJcMYKmQ.roa Signing time: Tue 30 Apr 2024 02:24:46 +0000 ROA not before: Tue 30 Apr 2024 02:24:46 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 220.159.250.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2269 (0x8dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 30 02:24:46 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=8F87EB13E0950985B059A515DDFCD525C3182A64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:eb:86:3d:84:ac:73:2c:6a:7b:55:8c:ea:d6: f0:e0:dc:b8:4a:af:a8:6f:72:8d:75:10:85:75:01: 3d:df:d4:e1:c4:b3:18:bd:78:c5:20:95:2e:b2:da: ea:86:57:f8:28:c4:c6:97:f0:a7:7b:95:4f:fc:fe: 98:f9:25:00:a2:15:0e:0c:69:52:83:a7:04:56:ea: 38:09:ac:cf:92:4f:68:67:b9:73:7f:de:69:fe:aa: aa:fc:57:81:59:01:24:5b:ca:2b:ef:97:78:cb:1f: 23:62:fb:69:e0:19:96:4f:fd:a9:82:d5:d9:08:55: d7:98:1f:2e:00:e1:15:3c:d0:7c:bb:16:10:6c:10: 11:35:07:9a:f5:e5:90:07:74:0c:bd:b2:ff:1d:fc: 59:31:55:98:f4:47:dc:a8:9b:12:9f:a0:39:ae:d5: 90:64:c4:22:fd:b2:02:d0:b9:be:99:8f:4f:a3:5e: 18:99:15:f7:33:ee:10:69:d9:10:7a:53:94:cf:22: e2:a9:0c:f4:24:3d:69:69:18:b2:2e:58:e9:f2:81: 56:03:1f:74:54:90:de:3e:74:d7:85:c7:81:f8:84: a7:44:9f:4f:7e:56:08:07:bb:f6:05:1c:be:8b:96: f6:6b:c7:b4:78:09:72:67:4a:1e:eb:11:46:f5:28: 96:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:87:EB:13:E0:95:09:85:B0:59:A5:15:DD:FC:D5:25:C3:18:2A:64 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/j4frE-CVCYWwWaUV3fzVJcMYKmQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 220.159.250.0/23 Signature Algorithm: sha256WithRSAEncryption 4d:97:6b:12:e8:b5:c9:c9:f8:8a:29:40:52:4f:d6:5b:3a:62: 56:4c:c7:0e:8a:4a:f6:3f:59:f7:aa:5e:c8:3e:f4:f1:4e:41: 62:54:77:b6:1a:4f:8e:38:5c:37:56:4b:b4:16:19:13:4c:f2: b8:16:40:ad:66:cd:fa:24:44:f9:f6:09:8e:07:30:3a:9d:4a: e5:a0:d7:f6:52:d3:38:59:54:92:44:6c:92:0d:21:68:94:cb: 2b:ab:b0:49:9d:10:6f:ed:ba:fd:82:17:61:4b:d5:4c:42:af: e3:56:85:7e:5c:01:f0:66:c9:ac:a1:95:58:b7:31:70:f7:31: e5:41:1e:c9:9d:77:da:65:1d:a8:4d:d5:92:35:cb:92:8c:4c: d0:17:9c:fc:03:aa:d7:f4:41:4e:de:cb:a2:60:7c:0a:1c:4d: 51:ca:ce:2b:b0:cc:d7:50:22:5c:6d:52:92:94:8b:06:2e:3a: aa:48:b5:9c:98:4c:dd:ea:87:9e:cf:c7:af:5e:50:cc:24:3e: a7:73:9f:d7:c4:a4:9e:70:33:35:a6:61:4b:cd:10:11:03:b6: 1e:7d:ae:f1:7d:e9:22:07:57:16:d9:a2:39:ec:09:99:98:c3: 5e:b8:14:34:8c:cd:c1:c9:3a:6a:e8:33:0d:09:0b:11:e5:3f: 52:b2:7a:0c -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCN0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw MjI0NDZaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDhGODdFQjEzRTA5NTA5 ODVCMDU5QTUxNURERkNENTI1QzMxODJBNjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDE64Y9hKxzLGp7VYzq1vDg3LhKr6hvco11EIV1AT3f1OHEsxi9 eMUglS6y2uqGV/goxMaX8Kd7lU/8/pj5JQCiFQ4MaVKDpwRW6jgJrM+ST2hnuXN/ 3mn+qqr8V4FZASRbyivvl3jLHyNi+2ngGZZP/amC1dkIVdeYHy4A4RU80Hy7FhBs EBE1B5r15ZAHdAy9sv8d/FkxVZj0R9yomxKfoDmu1ZBkxCL9sgLQub6Zj0+jXhiZ Ffcz7hBp2RB6U5TPIuKpDPQkPWlpGLIuWOnygVYDH3RUkN4+dNeFx4H4hKdEn09+ VggHu/YFHL6LlvZrx7R4CXJnSh7rEUb1KJalAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUj4frE+CVCYWwWaUV3fzVJcMYKmQwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2o0ZnJFLUNWQ1lXd1dhVVYzZnpWSmNNWUttUS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAHcn/owDQYJKoZIhvcNAQELBQADggEBAE2XaxLotcnJ+IopQFJP1ls6YlZM xw6KSvY/WfeqXsg+9PFOQWJUd7YaT444XDdWS7QWGRNM8rgWQK1mzfokRPn2CY4H MDqdSuWg1/ZS0zhZVJJEbJINIWiUyyursEmdEG/tuv2CF2FL1UxCr+NWhX5cAfBm yayhlVi3MXD3MeVBHsmdd9plHahN1ZI1y5KMTNAXnPwDqtf0QU7ey6JgfAocTVHK ziuwzNdQIlxtUpKUiwYuOqpItZyYTN3qh57Px69eUMwkPqdzn9fEpJ5wMzWmYUvN EBEDth59rvF96SIHVxbZojnsCZmYw164FDSMzcHJOmroMw0JCxHlP1Kyegw= -----END CERTIFICATE-----Generated at Sat Jun 1 13:38:48 2024 by rpki-client on console-fra.rpki-client.org