$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/mVpJc7XripppFJ1S3wUbZxzbMNE.roa File: mVpJc7XripppFJ1S3wUbZxzbMNE.roa (raw, json) Hash identifier: f9cS18xGJizjn1y3KCHYPZpFwOk1snDIPLx+mLhgcEI= Subject key identifier: 99:5A:49:73:B5:EB:8A:9A:69:14:9D:52:DF:05:1B:67:1C:DB:30:D1 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 06D1 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/mVpJc7XripppFJ1S3wUbZxzbMNE.roa Signing time: Tue 30 Apr 2024 01:47:02 +0000 ROA not before: Tue 30 Apr 2024 01:47:02 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 49.98.78.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1745 (0x6d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 30 01:47:02 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=995A4973B5EB8A9A69149D52DF051B671CDB30D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:69:80:72:05:9b:a8:02:15:94:9e:6f:69:1d: 32:42:19:26:f0:5e:c3:2f:86:d0:e5:7c:f2:a2:14: 4a:38:4a:29:8f:56:a6:6f:d9:85:e3:e2:15:af:56: 86:64:88:db:03:48:bc:c8:b4:16:95:74:b4:76:ff: 69:d7:13:a1:71:b2:4f:b0:19:1b:c6:9b:40:3e:72: 94:7a:f2:94:81:c7:ee:17:b1:2d:56:0f:1a:15:e8: ea:7a:af:44:aa:e3:4f:d9:f4:a9:0d:21:93:23:ab: 9b:4b:47:94:e8:78:2c:68:b3:52:ff:33:22:c4:4e: 0c:a0:33:82:f3:79:1d:1e:29:57:3e:24:87:64:e6: dc:6b:ee:ab:19:7a:dc:d5:46:7a:0a:5f:44:26:d3: 63:70:f0:3d:80:4a:41:6e:00:55:73:8a:36:f4:c7: 8e:ea:43:d7:c2:d6:10:dd:fb:7c:d5:e4:76:0c:74: c1:72:3d:a3:81:af:b8:4e:14:68:23:26:ab:09:db: ec:64:05:bf:07:74:68:00:b7:93:fb:70:a8:88:ff: 2a:bc:45:d5:62:7e:7f:42:f2:68:89:2b:bc:34:83: f6:08:79:31:56:bf:ba:a8:ee:38:84:db:76:f8:b0: a1:6e:ae:66:2f:78:66:36:f6:0d:62:38:2c:4d:6d: 86:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:5A:49:73:B5:EB:8A:9A:69:14:9D:52:DF:05:1B:67:1C:DB:30:D1 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/mVpJc7XripppFJ1S3wUbZxzbMNE.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.98.78.0/23 Signature Algorithm: sha256WithRSAEncryption ae:a9:fe:94:dc:7c:26:63:0b:71:3b:a9:d7:45:71:f7:4f:3f: 94:2d:55:77:37:64:4d:ab:d8:e7:fc:ab:20:30:34:c1:eb:63: fe:f7:28:8e:07:a8:87:59:ea:e6:85:0e:ad:bf:47:17:95:0d: 89:83:d6:8a:7a:0c:7e:ba:71:b4:9f:5d:e9:f2:72:92:ae:0e: a8:ad:4e:9f:f1:b5:45:0c:b9:28:f4:66:c0:91:dd:cc:d3:a9: 46:75:96:0c:7e:f4:9e:e2:ef:6c:3f:e1:a0:40:ab:08:28:9a: e9:9a:d5:d9:af:b8:a4:4e:6a:69:28:0a:9b:a7:08:4c:a5:d2: 71:60:ca:f0:28:b1:e0:27:91:dc:ed:24:74:e8:03:75:1e:41: 17:08:ba:3f:24:fb:28:b3:c7:16:6c:66:6b:4d:b7:0d:10:5f: 6c:73:75:56:f2:45:ae:6e:80:a2:6b:74:4f:5d:7a:c4:6b:fa: 39:17:9c:fd:ad:f6:55:39:09:17:15:00:0e:8d:09:09:ed:7e: bc:e4:42:87:1f:0e:4c:e5:ae:35:8c:15:a5:c1:0a:44:03:54: a7:b0:b8:43:5f:ed:0f:f6:73:9c:92:58:bc:f7:1a:45:d9:3b: 63:6c:71:ee:40:74:7d:7e:ef:38:58:a9:51:b4:0d:07:66:f3: 84:45:5e:9d -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBtEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw MTQ3MDJaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDk5NUE0OTczQjVFQjhB OUE2OTE0OUQ1MkRGMDUxQjY3MUNEQjMwRDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDQaYByBZuoAhWUnm9pHTJCGSbwXsMvhtDlfPKiFEo4SimPVqZv 2YXj4hWvVoZkiNsDSLzItBaVdLR2/2nXE6Fxsk+wGRvGm0A+cpR68pSBx+4XsS1W DxoV6Op6r0Sq40/Z9KkNIZMjq5tLR5ToeCxos1L/MyLETgygM4LzeR0eKVc+JIdk 5txr7qsZetzVRnoKX0Qm02Nw8D2ASkFuAFVzijb0x47qQ9fC1hDd+3zV5HYMdMFy PaOBr7hOFGgjJqsJ2+xkBb8HdGgAt5P7cKiI/yq8RdVifn9C8miJK7w0g/YIeTFW v7qo7jiE23b4sKFurmYveGY29g1iOCxNbYZzAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUmVpJc7XripppFJ1S3wUbZxzbMNEwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L21WcEpjN1hyaXBwcEZKMVMzd1ViWnh6Yk1ORS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExYk4wDQYJKoZIhvcNAQELBQADggEBAK6p/pTcfCZjC3E7qddFcfdPP5Qt VXc3ZE2r2Of8qyAwNMHrY/73KI4HqIdZ6uaFDq2/RxeVDYmD1op6DH66cbSfXeny cpKuDqitTp/xtUUMuSj0ZsCR3czTqUZ1lgx+9J7i72w/4aBAqwgomuma1dmvuKRO amkoCpunCEyl0nFgyvAoseAnkdztJHToA3UeQRcIuj8k+yizxxZsZmtNtw0QX2xz dVbyRa5ugKJrdE9desRr+jkXnP2t9lU5CRcVAA6NCQntfrzkQocfDkzlrjWMFaXB CkQDVKewuENf7Q/2c5ySWLz3GkXZO2Nsce5AdH1+7zhYqVG0DQdm84RFXp0= -----END CERTIFICATE-----Generated at Sun Feb 16 22:15:58 2025 by rpki-client