$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/l2IFXjG9DupY7wUVFmwhDhsXczg.roa File: l2IFXjG9DupY7wUVFmwhDhsXczg.roa (raw, json) Hash identifier: hR/bYAg2fDpxH32Lu0Q57qQWYqYVON6VfzJGXPxnLJQ= Subject key identifier: 97:62:05:5E:31:BD:0E:EA:58:EF:05:15:16:6C:21:0E:1B:17:73:38 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0A18 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/l2IFXjG9DupY7wUVFmwhDhsXczg.roa Signing time: Sun 30 Jun 2024 01:44:24 +0000 ROA not before: Sun 30 Jun 2024 01:44:24 +0000 ROA not after: Tue 24 Jun 2025 10:46:45 +0000 asID: 9605 IP address blocks: 1.74.96.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 22:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2584 (0xa18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 30 01:44:24 2024 GMT Not After : Jun 24 10:46:45 2025 GMT Subject: CN=9762055E31BD0EEA58EF0515166C210E1B177338 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:87:71:96:e0:2d:5f:22:e9:a0:f4:43:82:b6: 0f:50:22:be:20:68:4e:50:e9:d3:5b:27:d2:d8:0b: ba:d2:7d:26:d9:a3:4a:f7:93:13:b6:b6:28:80:20: e9:5c:de:ca:0a:2f:ba:a5:50:71:ba:16:6f:53:b2: c6:1e:a0:ea:5c:43:5d:06:c7:02:98:74:59:c4:03: 3d:1c:b0:71:bf:57:1f:02:34:5b:bd:2a:04:3a:1e: 85:2c:c1:c2:60:55:cf:bf:b9:7f:d4:a5:2b:99:58: 0a:6f:7a:21:ef:61:aa:4a:24:5a:a4:ed:08:dc:1e: 90:fd:92:0f:3e:23:d0:55:d5:65:64:ff:02:6f:57: d3:ec:d8:eb:95:d5:ee:6f:e4:31:5f:37:31:a4:b1: b2:50:80:1b:83:72:45:8d:3a:4c:53:ba:09:21:e8: f6:ba:9a:f2:62:39:dd:c4:19:14:bb:a8:05:8b:23: 15:c8:19:cc:33:48:e7:e8:05:1d:4d:21:98:b9:80: 4b:db:51:ee:65:45:d2:2b:44:b3:58:f8:8d:00:ae: f4:2f:c8:ab:5e:7f:59:36:e3:0a:c4:53:41:18:20: d2:bb:4a:9f:10:88:23:a3:ba:81:c4:4e:41:c7:cd: 3f:a6:a9:70:7e:25:f3:9c:41:09:f4:bf:1f:b0:c4: 1a:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:62:05:5E:31:BD:0E:EA:58:EF:05:15:16:6C:21:0E:1B:17:73:38 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/l2IFXjG9DupY7wUVFmwhDhsXczg.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.74.96.0/19 Signature Algorithm: sha256WithRSAEncryption 61:5d:7a:53:f6:4f:39:77:08:8a:93:d9:a9:ca:5d:37:2f:1a: 4b:41:c2:a1:54:1d:bd:4e:ac:de:59:18:a8:d9:1c:ef:d6:e3: 31:70:0f:34:bc:dd:61:6e:68:ab:e7:82:3e:a1:74:ee:cd:44: dc:ea:1b:d5:2e:22:ce:3c:60:28:64:ee:dd:99:d0:b0:d0:1b: c3:e2:94:97:67:f4:34:61:95:1c:f0:01:26:d7:97:fd:dc:0f: f3:6d:3b:a7:0c:b9:0e:b8:bc:15:a2:8c:a5:04:7a:1f:12:29: 8a:d5:6a:7f:c8:99:a5:b3:d4:29:af:c7:ad:6b:5c:15:b6:01: 32:93:58:fb:99:ae:19:c7:96:47:c7:80:7f:f1:86:ea:f8:97: 41:49:29:aa:6f:35:7c:8e:77:ff:76:c6:e3:07:ad:a5:e0:b9: 6c:06:6e:e9:ca:4a:a7:fb:12:b7:6f:91:ca:16:10:c3:a3:0f: 02:e6:92:49:b3:ae:38:e4:20:5f:04:65:c1:30:dc:35:d7:da: 61:fc:e0:19:af:2e:9c:b8:34:e3:54:ca:2a:a5:f2:90:a2:35: d9:35:fc:59:9e:43:87:cc:6c:35:47:72:33:cf:b8:c8:15:21: 4b:b0:49:ad:f8:da:31:23:a8:1c:68:5a:7d:4d:55:b3:5a:3c: 1b:9e:00:0e -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICChgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA2MzAw MTQ0MjRaFw0yNTA2MjQxMDQ2NDVaMDMxMTAvBgNVBAMTKDk3NjIwNTVFMzFCRDBF RUE1OEVGMDUxNTE2NkMyMTBFMUIxNzczMzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC4h3GW4C1fIumg9EOCtg9QIr4gaE5Q6dNbJ9LYC7rSfSbZo0r3 kxO2tiiAIOlc3soKL7qlUHG6Fm9TssYeoOpcQ10GxwKYdFnEAz0csHG/Vx8CNFu9 KgQ6HoUswcJgVc+/uX/UpSuZWApveiHvYapKJFqk7QjcHpD9kg8+I9BV1WVk/wJv V9Ps2OuV1e5v5DFfNzGksbJQgBuDckWNOkxTugkh6Pa6mvJiOd3EGRS7qAWLIxXI GcwzSOfoBR1NIZi5gEvbUe5lRdIrRLNY+I0ArvQvyKtef1k24wrEU0EYINK7Sp8Q iCOjuoHETkHHzT+mqXB+JfOcQQn0vx+wxBrBAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUl2IFXjG9DupY7wUVFmwhDhsXczgwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2wySUZYakc5RHVwWTd3VVZGbXdoRGhzWGN6Zy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAUBSmAwDQYJKoZIhvcNAQELBQADggEBAGFdelP2Tzl3CIqT2anKXTcvGktB wqFUHb1OrN5ZGKjZHO/W4zFwDzS83WFuaKvngj6hdO7NRNzqG9UuIs48YChk7t2Z 0LDQG8PilJdn9DRhlRzwASbXl/3cD/NtO6cMuQ64vBWijKUEeh8SKYrVan/ImaWz 1Cmvx61rXBW2ATKTWPuZrhnHlkfHgH/xhur4l0FJKapvNXyOd/92xuMHraXguWwG bunKSqf7ErdvkcoWEMOjDwLmkkmzrjjkIF8EZcEw3DXX2mH84BmvLpy4NONUyiql 8pCiNdk1/FmeQ4fMbDVHcjPPuMgVIUuwSa342jEjqBxoWn1NVbNaPBueAA4= -----END CERTIFICATE-----Generated at Mon Nov 25 23:54:42 2024 by rpki-client on console-ams.rpki-client.org