$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/qYq-52OExx_9OjmKQ6D_yWQKCHs.roa File: qYq-52OExx_9OjmKQ6D_yWQKCHs.roa (raw, json) Hash identifier: /vzqT6H6jMoez7vM2mw9Pousk5zxt6yur+JtIHHkG4E= Subject key identifier: A9:8A:BE:E7:63:84:C7:1F:FD:3A:39:8A:43:A0:FF:C9:64:0A:08:7B Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0991 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/qYq-52OExx_9OjmKQ6D_yWQKCHs.roa Signing time: Sun 30 Jun 2024 01:36:27 +0000 ROA not before: Sun 30 Jun 2024 01:36:27 +0000 ROA not after: Tue 24 Jun 2025 10:46:45 +0000 asID: 9605 IP address blocks: 1.72.160.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:22:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2449 (0x991) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 30 01:36:27 2024 GMT Not After : Jun 24 10:46:45 2025 GMT Subject: CN=A98ABEE76384C71FFD3A398A43A0FFC9640A087B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:30:03:d4:68:c7:fb:cb:49:5b:af:5f:70:aa: 80:7b:f2:27:f5:95:e2:23:76:e8:9f:36:a1:4e:3a: ba:6b:9d:af:2c:71:5c:f1:b1:11:0e:d5:4d:c7:58: 51:d1:df:c4:fe:8e:d0:48:5b:da:90:c4:24:ce:41: 1f:f8:e5:a6:4d:ed:41:49:eb:a7:57:9a:99:dd:de: 6d:d4:ae:64:3d:34:a5:21:de:ae:49:b9:ff:91:26: 13:36:13:70:59:e6:58:fc:59:c0:7b:b3:c4:d1:8e: 5a:b2:a3:74:43:b3:cd:03:34:e9:95:89:11:f0:79: 76:20:1d:11:79:5f:f7:9b:c6:f2:b0:cb:1c:5b:9b: 2d:8e:49:7c:af:46:48:c1:cd:05:6a:5f:3f:87:d4: c5:b4:3a:67:75:cb:e6:64:15:38:f8:df:8e:3e:81: 30:28:52:e9:64:0d:ce:fe:39:7a:c5:2e:62:af:c2: ba:7d:0e:83:7f:9e:5b:c9:37:2d:7a:fb:9d:ec:a0: 13:8c:b1:85:3a:47:2e:9e:08:83:ac:29:3c:57:21: 55:63:0f:47:b0:e2:12:e2:fe:20:04:ba:df:2d:6e: 35:ca:db:d6:e3:ea:76:83:14:7a:32:91:12:88:3b: 68:0e:3c:aa:70:bd:41:c9:12:4c:ca:d6:ac:19:d7: b7:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:8A:BE:E7:63:84:C7:1F:FD:3A:39:8A:43:A0:FF:C9:64:0A:08:7B X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/qYq-52OExx_9OjmKQ6D_yWQKCHs.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.72.160.0/19 Signature Algorithm: sha256WithRSAEncryption 9e:63:bb:a8:97:b1:b0:b6:fd:0b:25:b5:13:15:54:12:f1:37: 0d:c8:8a:87:ea:1a:8c:d1:91:55:58:90:d2:e6:1c:ca:11:2a: db:c5:ef:20:f3:aa:de:77:1e:77:fe:13:43:37:96:4b:1c:03: 55:eb:ee:29:1f:cc:5d:39:47:bc:cb:38:26:a1:37:ad:68:65: b6:c5:1b:47:36:8b:2d:59:14:0e:38:e3:0c:56:62:2c:07:7f: f6:d0:b9:fc:68:09:0e:fa:60:da:31:41:7c:09:ed:43:1c:fc: d5:46:81:e4:80:f6:88:43:17:e5:07:ee:df:97:cb:aa:f4:d2: fa:32:33:72:02:ba:b8:ee:4b:cc:b0:be:f7:7b:3f:d0:b0:0a: 81:84:bd:76:4a:fb:77:e2:60:f9:ea:e2:14:4e:8a:c9:38:9d: b1:a5:d3:92:b7:a1:dc:ea:5c:3c:1f:c6:b8:98:87:34:aa:d7: 0b:44:af:46:6a:3e:71:90:91:1f:e8:a9:e7:3e:b7:0b:19:45: 2f:ea:c1:6c:dd:60:b9:79:a8:25:eb:26:a0:70:0c:21:f7:b0: 23:f3:a5:36:f5:76:ff:c6:6f:92:ea:70:0d:6c:f5:fe:6d:69: 94:fd:06:46:2b:a8:c1:d5:48:ad:bc:0a:40:78:94:80:f2:cc: 26:e7:97:2b -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCZEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA2MzAw MTM2MjdaFw0yNTA2MjQxMDQ2NDVaMDMxMTAvBgNVBAMTKEE5OEFCRUU3NjM4NEM3 MUZGRDNBMzk4QTQzQTBGRkM5NjQwQTA4N0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDBMAPUaMf7y0lbr19wqoB78if1leIjduifNqFOOrprna8scVzx sREO1U3HWFHR38T+jtBIW9qQxCTOQR/45aZN7UFJ66dXmpnd3m3UrmQ9NKUh3q5J uf+RJhM2E3BZ5lj8WcB7s8TRjlqyo3RDs80DNOmViRHweXYgHRF5X/ebxvKwyxxb my2OSXyvRkjBzQVqXz+H1MW0Omd1y+ZkFTj4344+gTAoUulkDc7+OXrFLmKvwrp9 DoN/nlvJNy16+53soBOMsYU6Ry6eCIOsKTxXIVVjD0ew4hLi/iAEut8tbjXK29bj 6naDFHoykRKIO2gOPKpwvUHJEkzK1qwZ17cTAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUqYq+52OExx/9OjmKQ6D/yWQKCHswHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3FZcS01Mk9FeHhfOU9qbUtRNkRfeVdRS0NIcy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAUBSKAwDQYJKoZIhvcNAQELBQADggEBAJ5ju6iXsbC2/QsltRMVVBLxNw3I iofqGozRkVVYkNLmHMoRKtvF7yDzqt53Hnf+E0M3lkscA1Xr7ikfzF05R7zLOCah N61oZbbFG0c2iy1ZFA444wxWYiwHf/bQufxoCQ76YNoxQXwJ7UMc/NVGgeSA9ohD F+UH7t+Xy6r00voyM3ICurjuS8ywvvd7P9CwCoGEvXZK+3fiYPnq4hROisk4nbGl 05K3odzqXDwfxriYhzSq1wtEr0ZqPnGQkR/oqec+twsZRS/qwWzdYLl5qCXrJqBw DCH3sCPzpTb1dv/Gb5LqcA1s9f5taZT9BkYrqMHVSK28CkB4lIDyzCbnlys= -----END CERTIFICATE-----Generated at Fri Nov 22 16:45:41 2024 by rpki-client on console-ams.rpki-client.org