$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/jLUdO2QHLzI8ZGNRbbYBU_Ly8uQ.roa File: jLUdO2QHLzI8ZGNRbbYBU_Ly8uQ.roa (raw, json) Hash identifier: qTSRb65TidIqGevgFLdZt6RhrmN+Q2+tHV5Qh7twR00= Subject key identifier: 8C:B5:1D:3B:64:07:2F:32:3C:64:63:51:6D:B6:01:53:F2:F2:F2:E4 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0A46 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/jLUdO2QHLzI8ZGNRbbYBU_Ly8uQ.roa Signing time: Sun 30 Jun 2024 01:48:26 +0000 ROA not before: Sun 30 Jun 2024 01:48:26 +0000 ROA not after: Tue 24 Jun 2025 10:46:45 +0000 asID: 9605 IP address blocks: 220.159.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 22:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2630 (0xa46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 30 01:48:26 2024 GMT Not After : Jun 24 10:46:45 2025 GMT Subject: CN=8CB51D3B64072F323C6463516DB60153F2F2F2E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:8a:95:c8:7c:6b:86:a3:7c:c7:e8:5d:d1:e4: a4:c7:b3:ff:08:43:56:d2:ba:f6:c3:9f:31:10:7d: b4:4f:f6:6b:f8:df:55:a1:e0:5f:41:b5:9e:7d:24: 38:cb:cf:a1:16:a8:82:91:b6:8b:27:45:d7:7f:5f: 7d:ae:a8:2c:2e:55:19:7c:41:26:7f:e2:66:8d:26: b0:dd:db:32:43:ed:8c:a0:cc:7a:f3:d7:48:06:91: ea:ac:ec:ea:79:28:8b:9c:86:0c:e6:5b:3e:12:52: aa:df:14:c1:48:c4:7e:d5:64:20:19:00:0c:58:15: 94:ae:ac:79:1f:6a:9d:f3:61:3b:e1:93:08:87:77: 32:c9:03:02:f5:c4:3d:bd:a3:dd:a6:62:0d:cc:4c: c8:55:5b:74:b9:9a:59:e0:1c:9c:20:49:78:6a:76: 4f:b8:db:8b:63:81:bb:dd:87:ea:36:2f:b4:69:ee: 90:16:cf:ff:cb:51:07:59:e5:74:ef:54:f9:66:14: 0c:c5:69:23:c6:a6:06:83:e3:e7:f3:64:74:f4:1d: c4:a0:a8:14:ba:cf:6c:ac:aa:b8:77:54:ce:83:ae: 4d:1f:98:ce:51:b6:02:60:3d:fe:19:d4:58:4e:57: c6:9e:6a:28:e7:89:89:54:66:1a:af:3f:b9:11:1e: 53:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:B5:1D:3B:64:07:2F:32:3C:64:63:51:6D:B6:01:53:F2:F2:F2:E4 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/jLUdO2QHLzI8ZGNRbbYBU_Ly8uQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 220.159.238.0/24 Signature Algorithm: sha256WithRSAEncryption 5c:ba:3d:0b:2c:9b:bb:23:2c:1f:14:9a:51:49:13:be:cd:55: 81:5d:ea:ea:51:b2:11:54:1a:69:c0:d1:b3:6c:7c:8b:a1:27: f0:3c:7f:b0:0c:5a:74:77:86:37:9b:45:65:63:26:ab:e3:a4: 7c:8e:b5:1f:b7:da:34:af:2a:50:77:24:5b:93:46:99:d1:54: 15:5f:d5:44:2f:a8:28:e4:0c:fc:b1:e0:78:99:38:99:31:eb: 24:5b:1c:4c:cc:cc:2d:38:85:8a:eb:50:bb:0c:8e:19:32:66: b0:83:85:a2:0b:76:a6:61:2e:b2:99:a4:95:d4:a8:be:f1:81: 74:54:88:af:4f:3f:22:2c:42:94:8e:fd:e7:eb:c8:fa:ad:42: e5:aa:11:b8:89:62:0b:2d:c0:d2:9f:5a:aa:18:e8:de:33:9f: 36:9a:3a:98:14:92:90:58:39:50:6d:ae:a2:23:36:f8:b9:8d: 71:ff:59:e1:b9:af:18:f1:30:80:61:6e:94:13:49:d3:6c:3c: 84:f2:55:c0:14:f0:bb:22:39:12:af:7c:5d:1e:9e:9f:61:cb: dd:8e:8a:53:fe:90:12:0d:5e:b4:2f:e6:f4:b9:b5:ad:f9:fd: 57:a1:95:5a:4d:53:1d:9a:e3:af:fe:83:5d:94:ec:92:38:32: 9a:27:9f:9d -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCkYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA2MzAw MTQ4MjZaFw0yNTA2MjQxMDQ2NDVaMDMxMTAvBgNVBAMTKDhDQjUxRDNCNjQwNzJG MzIzQzY0NjM1MTZEQjYwMTUzRjJGMkYyRTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDeipXIfGuGo3zH6F3R5KTHs/8IQ1bSuvbDnzEQfbRP9mv431Wh 4F9BtZ59JDjLz6EWqIKRtosnRdd/X32uqCwuVRl8QSZ/4maNJrDd2zJD7YygzHrz 10gGkeqs7Op5KIuchgzmWz4SUqrfFMFIxH7VZCAZAAxYFZSurHkfap3zYTvhkwiH dzLJAwL1xD29o92mYg3MTMhVW3S5mlngHJwgSXhqdk+424tjgbvdh+o2L7Rp7pAW z//LUQdZ5XTvVPlmFAzFaSPGpgaD4+fzZHT0HcSgqBS6z2ysqrh3VM6Drk0fmM5R tgJgPf4Z1FhOV8aeaijniYlUZhqvP7kRHlNlAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUjLUdO2QHLzI8ZGNRbbYBU/Ly8uQwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2pMVWRPMlFITHpJOFpHTlJiYllCVV9MeTh1US5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADcn+4wDQYJKoZIhvcNAQELBQADggEBAFy6PQssm7sjLB8UmlFJE77NVYFd 6upRshFUGmnA0bNsfIuhJ/A8f7AMWnR3hjebRWVjJqvjpHyOtR+32jSvKlB3JFuT RpnRVBVf1UQvqCjkDPyx4HiZOJkx6yRbHEzMzC04hYrrULsMjhkyZrCDhaILdqZh LrKZpJXUqL7xgXRUiK9PPyIsQpSO/efryPqtQuWqEbiJYgstwNKfWqoY6N4znzaa OpgUkpBYOVBtrqIjNvi5jXH/WeG5rxjxMIBhbpQTSdNsPITyVcAU8LsiORKvfF0e np9hy92OilP+kBINXrQv5vS5ta35/VehlVpNUx2a46/+g12U7JI4Mponn50= -----END CERTIFICATE-----Generated at Mon Nov 25 23:54:42 2024 by rpki-client on console-ams.rpki-client.org