$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/q18xL0jtyNoV7tmxXaWdh9VF67Y.roa File: q18xL0jtyNoV7tmxXaWdh9VF67Y.roa (raw, json) Hash identifier: 4yfFOYB9zJG4rEYIahTWtiYl0ZMiAstouQ9R+JivnAo= Subject key identifier: AB:5F:31:2F:48:ED:C8:DA:15:EE:D9:B1:5D:A5:9D:87:D5:45:EB:B6 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 09B4 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/q18xL0jtyNoV7tmxXaWdh9VF67Y.roa Signing time: Sun 30 Jun 2024 01:38:21 +0000 ROA not before: Sun 30 Jun 2024 01:38:21 +0000 ROA not after: Tue 24 Jun 2025 10:46:45 +0000 asID: 9605 IP address blocks: 1.74.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2484 (0x9b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 30 01:38:21 2024 GMT Not After : Jun 24 10:46:45 2025 GMT Subject: CN=AB5F312F48EDC8DA15EED9B15DA59D87D545EBB6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:fa:d0:ef:53:01:70:02:4a:a9:c9:fc:dc:1e: e8:00:a8:b5:cb:19:57:1a:2d:28:b6:13:ce:4c:e9: 4f:c2:5b:f7:8e:56:49:31:82:03:23:6c:73:0f:81: 96:ba:87:b5:f4:f1:7a:b0:b3:3d:5e:4c:a0:c6:f3: 3f:ac:85:dd:25:d6:b7:8a:ef:9b:82:a0:e6:cc:de: 58:a6:4e:e9:81:64:cc:e4:7a:82:40:1f:c2:80:57: 7e:0e:fa:ca:ca:7f:7f:b2:bd:41:35:83:b9:fd:1d: 97:36:c9:40:e3:8a:95:1a:26:87:7a:1e:f7:be:3b: e0:ab:e2:ed:66:de:b6:fa:72:72:32:36:c7:f6:c7: 91:c4:9e:8a:00:e3:aa:19:2f:e1:b2:96:8e:8b:f6: 75:8f:75:d7:2d:17:1f:6f:ea:ce:d4:92:73:8c:76: 23:cc:16:b3:e9:9c:d0:78:ec:2e:4a:7d:df:26:26: 83:45:a9:ea:9e:77:b7:34:2f:46:e6:de:66:3a:65: bb:55:6a:89:54:72:6c:a9:59:ef:7b:e1:e3:22:02: 6a:28:27:fd:cd:e5:53:31:12:ee:66:7d:61:a7:a1: 5b:5b:16:a8:82:8f:49:c9:a9:11:96:d8:77:fb:dc: c4:12:2b:ff:34:2a:30:52:09:42:a4:85:0b:2a:5d: 1b:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:5F:31:2F:48:ED:C8:DA:15:EE:D9:B1:5D:A5:9D:87:D5:45:EB:B6 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/q18xL0jtyNoV7tmxXaWdh9VF67Y.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.74.192.0/24 Signature Algorithm: sha256WithRSAEncryption 97:2a:ea:8d:ca:7c:0a:a0:85:77:89:6c:30:4f:02:35:1f:af: 17:de:8d:f7:5d:75:35:60:9b:80:c4:6c:be:80:56:1a:61:37: bc:bc:f8:f6:75:8d:40:d2:56:a2:9e:53:c6:2d:45:06:d1:44: 37:db:0f:3f:3b:65:61:90:28:5b:ae:1b:d0:8b:fe:1f:7c:62: 5d:db:2b:3b:cb:8f:7a:1a:83:f3:b6:43:5e:e0:29:0c:fb:8f: 7b:62:58:db:16:d4:90:6c:95:49:09:33:3e:d9:71:24:d6:fa: c8:41:7a:42:cf:2b:bd:d7:80:84:07:7f:4b:5a:02:90:9f:e9: f0:1f:d5:45:41:79:10:0f:bd:e3:7a:ea:3e:8e:e1:0d:a3:3f: 79:e8:c1:a4:e8:dd:ba:b9:f9:bc:81:f8:85:b3:4e:0a:ce:1a: 37:01:e9:7f:19:eb:67:70:29:5e:3f:0f:14:7b:58:77:d7:4c: 0d:6c:51:1b:d0:9a:62:d1:d8:02:8a:61:09:99:18:5e:e9:13: 45:55:98:21:dd:da:d1:b7:f8:db:c9:7b:06:7b:10:07:dd:54: 06:07:43:52:5a:65:ad:00:84:d1:af:92:f5:94:6e:ca:02:74: 35:be:28:6f:a5:93:c6:e6:38:2f:58:16:0c:b4:9e:70:ca:8f: 10:ab:c7:52 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCbQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA2MzAw MTM4MjFaFw0yNTA2MjQxMDQ2NDVaMDMxMTAvBgNVBAMTKEFCNUYzMTJGNDhFREM4 REExNUVFRDlCMTVEQTU5RDg3RDU0NUVCQjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDW+tDvUwFwAkqpyfzcHugAqLXLGVcaLSi2E85M6U/CW/eOVkkx ggMjbHMPgZa6h7X08Xqwsz1eTKDG8z+shd0l1reK75uCoObM3limTumBZMzkeoJA H8KAV34O+srKf3+yvUE1g7n9HZc2yUDjipUaJod6Hve+O+Cr4u1m3rb6cnIyNsf2 x5HEnooA46oZL+Gylo6L9nWPddctFx9v6s7UknOMdiPMFrPpnNB47C5Kfd8mJoNF qeqed7c0L0bm3mY6ZbtVaolUcmypWe974eMiAmooJ/3N5VMxEu5mfWGnoVtbFqiC j0nJqRGW2Hf73MQSK/80KjBSCUKkhQsqXRulAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUq18xL0jtyNoV7tmxXaWdh9VF67YwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3ExOHhMMGp0eU5vVjd0bXhYYVdkaDlWRjY3WS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAABSsAwDQYJKoZIhvcNAQELBQADggEBAJcq6o3KfAqghXeJbDBPAjUfrxfe jfdddTVgm4DEbL6AVhphN7y8+PZ1jUDSVqKeU8YtRQbRRDfbDz87ZWGQKFuuG9CL /h98Yl3bKzvLj3oag/O2Q17gKQz7j3tiWNsW1JBslUkJMz7ZcSTW+shBekLPK73X gIQHf0taApCf6fAf1UVBeRAPveN66j6O4Q2jP3nowaTo3bq5+byB+IWzTgrOGjcB 6X8Z62dwKV4/DxR7WHfXTA1sURvQmmLR2AKKYQmZGF7pE0VVmCHd2tG3+NvJewZ7 EAfdVAYHQ1JaZa0AhNGvkvWUbsoCdDW+KG+lk8bmOC9YFgy0nnDKjxCrx1I= -----END CERTIFICATE-----Generated at Sun Feb 16 22:13:10 2025 by rpki-client