$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/sEJhYsOhJXv2uqXWs51Ud39s47k.roa File: sEJhYsOhJXv2uqXWs51Ud39s47k.roa (raw, json) Hash identifier: Tv0iODj7xL4ozQ8AGX24hVb+tGGHyOnq+JyGLXo0KNk= Subject key identifier: B0:42:61:62:C3:A1:25:7B:F6:BA:A5:D6:B3:9D:54:77:7F:6C:E3:B9 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0904 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/sEJhYsOhJXv2uqXWs51Ud39s47k.roa Signing time: Tue 30 Apr 2024 02:28:38 +0000 ROA not before: Tue 30 Apr 2024 02:28:38 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 1.75.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2308 (0x904) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 30 02:28:38 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=B0426162C3A1257BF6BAA5D6B39D54777F6CE3B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:d5:19:76:91:a5:a8:67:39:ee:13:e9:c3:d3: 5b:0d:02:51:4a:f8:10:1c:b2:bc:8f:1d:cc:ee:33: 2d:f1:be:ac:d6:5b:44:3b:8d:e7:98:c1:90:c4:02: bd:75:e5:b3:92:6d:83:86:e4:62:52:f7:63:c3:7e: c6:80:b4:d5:d4:e3:84:58:8b:ff:49:d6:8d:b7:7e: dc:bd:c5:86:29:1e:a6:27:6d:76:5a:8a:e2:7b:0c: 20:32:74:66:77:9e:b2:cf:f0:b0:b6:d6:5d:ba:98: 6c:7e:7e:a3:49:1a:c3:9e:fb:6d:bc:b8:d8:91:b7: 48:e0:f4:95:6d:0f:09:c1:9a:51:b6:d4:0f:a9:6d: 4d:0a:35:e4:89:22:82:8e:67:bb:8a:6b:ef:84:1f: bb:24:c6:8b:5d:0b:02:22:d0:2c:02:70:d6:0b:c5: 06:1a:e3:f3:32:04:b8:34:95:be:7d:74:cc:14:35: 02:41:26:ae:31:47:f3:f5:b9:00:59:03:83:e2:a6: db:b2:15:a2:11:c5:05:69:4a:4e:95:bc:32:b4:4e: 02:75:82:4b:1a:fb:10:f8:3a:61:e1:03:54:15:fa: 5d:a7:3f:65:87:f4:d1:27:68:b6:38:a4:f2:4e:e4: 2a:db:01:e9:f0:19:73:ab:04:61:43:58:11:39:ba: 14:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:42:61:62:C3:A1:25:7B:F6:BA:A5:D6:B3:9D:54:77:7F:6C:E3:B9 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/sEJhYsOhJXv2uqXWs51Ud39s47k.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.75.240.0/22 Signature Algorithm: sha256WithRSAEncryption 71:07:d0:24:aa:b8:ea:98:56:d9:0f:74:bb:5d:9b:57:af:8b: 18:bf:57:1b:db:e3:23:63:16:00:91:b9:bc:84:28:93:b4:f0: a9:6e:9e:f9:c6:03:f2:2c:7a:f5:10:c5:4b:43:74:2d:9a:3d: 81:cd:a6:67:a0:a4:56:99:24:c9:4a:6f:fa:b9:57:d4:c6:36: 80:99:69:4d:ff:25:4e:2b:4d:7c:1a:5d:93:89:e6:97:41:d8: 94:54:ce:23:85:2c:c7:f4:6e:58:80:62:d9:2f:0f:12:58:dd: 44:f9:09:25:2d:2d:ef:20:72:82:b6:58:62:7d:5b:a2:25:ca: 69:d4:70:b6:14:a8:1f:78:0a:2d:38:72:4c:0a:25:8d:dd:b2: 7c:bf:95:c9:cf:c1:2b:f3:a2:9f:67:a7:ba:62:15:c3:39:0a: 01:ef:83:7a:6a:27:6e:53:d3:d9:c8:72:7e:a8:49:90:96:96: 46:60:50:fd:e9:4a:cb:26:6c:50:d1:6a:9c:02:7f:29:7a:a6: 31:84:4e:14:8f:8f:33:1d:ec:a0:f5:88:c0:35:8e:f2:a8:d2: 66:99:24:f3:f2:c1:d5:92:8b:3d:6a:d9:bf:d8:2e:b7:da:70: d5:cb:25:92:28:87:91:e5:ab:d4:f4:10:24:67:25:d2:d1:86: 09:3c:96:42 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCQQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw MjI4MzhaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEIwNDI2MTYyQzNBMTI1 N0JGNkJBQTVENkIzOUQ1NDc3N0Y2Q0UzQjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDN1Rl2kaWoZznuE+nD01sNAlFK+BAcsryPHczuMy3xvqzWW0Q7 jeeYwZDEAr115bOSbYOG5GJS92PDfsaAtNXU44RYi/9J1o23fty9xYYpHqYnbXZa iuJ7DCAydGZ3nrLP8LC21l26mGx+fqNJGsOe+228uNiRt0jg9JVtDwnBmlG21A+p bU0KNeSJIoKOZ7uKa++EH7skxotdCwIi0CwCcNYLxQYa4/MyBLg0lb59dMwUNQJB Jq4xR/P1uQBZA4PiptuyFaIRxQVpSk6VvDK0TgJ1gksa+xD4OmHhA1QV+l2nP2WH 9NEnaLY4pPJO5CrbAenwGXOrBGFDWBE5uhSjAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUsEJhYsOhJXv2uqXWs51Ud39s47kwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3NFSmhZc09oSlh2MnVxWFdzNTFVZDM5czQ3ay5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIBS/AwDQYJKoZIhvcNAQELBQADggEBAHEH0CSquOqYVtkPdLtdm1evixi/ Vxvb4yNjFgCRubyEKJO08KlunvnGA/IsevUQxUtDdC2aPYHNpmegpFaZJMlKb/q5 V9TGNoCZaU3/JU4rTXwaXZOJ5pdB2JRUziOFLMf0bliAYtkvDxJY3UT5CSUtLe8g coK2WGJ9W6IlymnUcLYUqB94Ci04ckwKJY3dsny/lcnPwSvzop9np7piFcM5CgHv g3pqJ25T09nIcn6oSZCWlkZgUP3pSssmbFDRapwCfyl6pjGEThSPjzMd7KD1iMA1 jvKo0maZJPPywdWSiz1q2b/YLrfacNXLJZIoh5Hlq9T0ECRnJdLRhgk8lkI= -----END CERTIFICATE-----Generated at Sun Feb 16 22:13:58 2025 by rpki-client