$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/q3G-tmmqx1jXQFblVCFefEbXCJg.roa File: q3G-tmmqx1jXQFblVCFefEbXCJg.roa (raw, json) Hash identifier: sBNbSn1VWZhVZK8JKC3NA1UZs1cUpxsZTp3a5k6ugh0= Subject key identifier: AB:71:BE:B6:69:AA:C7:58:D7:40:56:E5:54:21:5E:7C:46:D7:08:98 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0A62 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/q3G-tmmqx1jXQFblVCFefEbXCJg.roa Signing time: Sun 30 Jun 2024 01:50:23 +0000 ROA not before: Sun 30 Jun 2024 01:50:23 +0000 ROA not after: Tue 24 Jun 2025 10:46:45 +0000 asID: 9605 IP address blocks: 211.14.88.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:22:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2658 (0xa62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 30 01:50:23 2024 GMT Not After : Jun 24 10:46:45 2025 GMT Subject: CN=AB71BEB669AAC758D74056E554215E7C46D70898 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:98:7b:07:a4:a0:d1:87:60:4e:63:48:98:b4: 54:c9:cf:ea:8e:e7:fa:5b:ad:36:57:bd:ec:b8:dd: db:0c:ba:d7:46:ce:a7:8c:2b:21:fa:f9:ca:be:fb: 0d:9b:e3:2f:6c:61:35:50:73:e0:44:63:16:70:d6: d1:5b:d7:70:10:3d:4e:55:58:84:72:1a:64:70:76: 7f:99:de:e7:ec:8c:e9:c1:02:4f:de:ee:16:2d:eb: 36:a4:84:4a:e4:58:50:12:a2:a9:3c:33:a8:d3:b9: d4:31:4e:16:ff:f9:33:b3:cf:52:14:05:cb:02:24: 6f:34:8d:92:0b:95:05:5e:88:87:31:37:6b:cd:35: 92:d9:6d:55:5e:cb:0c:40:a3:ac:0a:03:0f:96:6e: 8c:76:f9:42:7f:ff:52:ea:ce:ac:13:b7:f0:e6:cf: d1:d0:7c:a6:76:5e:76:b4:4e:7c:60:25:5d:52:4e: f0:31:9c:f2:c8:78:3d:c3:54:db:78:64:dd:44:92: 8d:b6:e9:3b:65:bc:3e:52:59:52:a6:df:5b:ae:5b: d3:71:04:ac:3a:fd:6a:c2:75:51:f2:5f:ef:0f:30: 5a:a2:91:fc:a5:15:82:1a:b0:cb:5a:e7:26:7b:e0: b7:0a:74:48:5b:6e:b9:40:ba:16:10:42:89:a1:a6: f9:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:71:BE:B6:69:AA:C7:58:D7:40:56:E5:54:21:5E:7C:46:D7:08:98 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/q3G-tmmqx1jXQFblVCFefEbXCJg.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 211.14.88.0/23 Signature Algorithm: sha256WithRSAEncryption 2b:bb:12:50:26:ef:50:f9:69:33:9e:bb:1e:cb:52:5a:fb:63: 46:e7:72:89:ff:f0:27:a3:df:3f:2f:a3:8a:25:9a:8a:6b:0a: 5f:2c:6d:d5:21:21:3d:67:95:8c:94:52:55:fb:94:66:7d:c9: 50:65:5d:7c:91:46:44:10:07:c1:f5:2c:83:0c:7b:b3:8d:a9: ca:53:0b:37:4e:72:ae:cc:0c:d6:cf:01:be:e5:0c:ef:7e:15: 49:b7:f8:93:aa:77:d2:1d:bd:e4:9e:2a:01:66:da:79:d7:51: e1:57:d8:9f:53:c7:8d:ab:61:c9:98:53:6e:b2:70:59:88:e7: 4d:14:73:e0:46:29:4f:6c:6c:66:e9:3a:76:8c:00:b1:13:7a: 61:cd:3d:4e:49:42:c7:3e:52:c2:f6:9b:c8:3c:29:50:6c:08: 0a:a5:9b:88:14:5d:48:f5:37:6f:f6:a1:32:59:76:d8:ae:a1: 25:1a:99:b3:2e:92:e9:2d:ee:10:95:fe:93:62:e9:5b:d8:0a: 39:4b:46:53:b4:2f:95:66:8c:5f:02:2c:f5:c2:5e:57:e7:64: 68:8b:30:ce:ed:18:ce:ed:db:81:c4:17:e2:b5:e6:34:ed:0a: e6:55:fc:c8:85:1e:b7:45:1e:fe:ee:83:16:96:fb:66:80:96: 57:6b:62:48 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCmIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA2MzAw MTUwMjNaFw0yNTA2MjQxMDQ2NDVaMDMxMTAvBgNVBAMTKEFCNzFCRUI2NjlBQUM3 NThENzQwNTZFNTU0MjE1RTdDNDZENzA4OTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDRmHsHpKDRh2BOY0iYtFTJz+qO5/pbrTZXvey43dsMutdGzqeM KyH6+cq++w2b4y9sYTVQc+BEYxZw1tFb13AQPU5VWIRyGmRwdn+Z3ufsjOnBAk/e 7hYt6zakhErkWFASoqk8M6jTudQxThb/+TOzz1IUBcsCJG80jZILlQVeiIcxN2vN NZLZbVVeywxAo6wKAw+Wbox2+UJ//1LqzqwTt/Dmz9HQfKZ2Xna0TnxgJV1STvAx nPLIeD3DVNt4ZN1Eko226TtlvD5SWVKm31uuW9NxBKw6/WrCdVHyX+8PMFqikfyl FYIasMta5yZ74LcKdEhbbrlAuhYQQomhpvnZAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUq3G+tmmqx1jXQFblVCFefEbXCJgwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3EzRy10bW1xeDFqWFFGYmxWQ0ZlZkViWENKZy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAHTDlgwDQYJKoZIhvcNAQELBQADggEBACu7ElAm71D5aTOeux7LUlr7Y0bn con/8Cej3z8vo4olmoprCl8sbdUhIT1nlYyUUlX7lGZ9yVBlXXyRRkQQB8H1LIMM e7ONqcpTCzdOcq7MDNbPAb7lDO9+FUm3+JOqd9IdveSeKgFm2nnXUeFX2J9Tx42r YcmYU26ycFmI500Uc+BGKU9sbGbpOnaMALETemHNPU5JQsc+UsL2m8g8KVBsCAql m4gUXUj1N2/2oTJZdtiuoSUambMukukt7hCV/pNi6VvYCjlLRlO0L5VmjF8CLPXC XlfnZGiLMM7tGM7t24HEF+K15jTtCuZV/MiFHrdFHv7ugxaW+2aAlldrYkg= -----END CERTIFICATE-----Generated at Fri Nov 22 16:45:41 2024 by rpki-client on console-ams.rpki-client.org