$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/sazYUWSDQi5PTh3fSYklN9cGBo0.roa File: sazYUWSDQi5PTh3fSYklN9cGBo0.roa (raw, json) Hash identifier: iqDj1gfbpjAlKa7mR1mF/K/sKt9gXH1/35G3+Ari9BU= Subject key identifier: B1:AC:D8:51:64:83:42:2E:4F:4E:1D:DF:49:89:25:37:D7:06:06:8D Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0A7B Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/sazYUWSDQi5PTh3fSYklN9cGBo0.roa Signing time: Sun 30 Jun 2024 01:52:31 +0000 ROA not before: Sun 30 Jun 2024 01:52:31 +0000 ROA not after: Tue 24 Jun 2025 10:46:45 +0000 asID: 9605 IP address blocks: 220.210.72.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:22:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2683 (0xa7b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 30 01:52:31 2024 GMT Not After : Jun 24 10:46:45 2025 GMT Subject: CN=B1ACD8516483422E4F4E1DDF49892537D706068D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:30:ce:7e:cb:3b:26:e5:34:4d:8d:64:6c:24: 29:a8:6c:00:69:f3:02:35:c0:55:2a:f6:3e:2e:1d: 0a:6a:12:e6:1d:b6:75:0f:1b:1e:06:e1:8f:b8:a2: b9:85:ae:02:ee:18:19:37:85:0a:0f:a4:6f:4d:4b: 20:63:cd:1f:dd:34:86:25:a9:95:22:a4:82:17:e4: 72:79:99:fc:6e:92:cf:d9:1f:f8:a5:8a:5a:0f:0f: 7d:b8:a2:fc:ce:42:71:db:86:42:db:d8:44:7f:5d: a7:13:03:99:86:c9:bc:ce:e6:ea:bc:80:92:e2:4d: ea:d3:e6:24:28:bb:f9:f3:72:d7:60:d9:c1:9e:5b: 3c:c1:e5:7a:22:35:39:ad:cd:84:00:fd:ff:de:5e: 5b:0c:2f:21:57:ae:d4:c9:00:33:8c:88:6a:6b:78: 66:1c:13:af:7d:34:9c:11:99:1a:29:9c:e5:23:53: 82:23:3c:82:50:9f:20:69:95:61:ad:4e:67:1f:fd: 53:55:ca:99:8e:7f:4e:f0:f2:06:e0:25:59:f4:65: 94:f9:7c:58:f6:8f:2c:f2:27:38:49:ab:a1:6a:22: ed:cc:3a:3d:6f:7e:34:1e:c0:04:95:d9:d8:83:c3: 75:38:e1:53:b5:2e:fc:bd:92:04:31:53:16:f6:be: c1:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:AC:D8:51:64:83:42:2E:4F:4E:1D:DF:49:89:25:37:D7:06:06:8D X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/sazYUWSDQi5PTh3fSYklN9cGBo0.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 220.210.72.0/23 Signature Algorithm: sha256WithRSAEncryption c0:3e:8b:33:66:40:93:22:e9:fd:8d:ce:36:a7:21:ca:b2:79: 5b:86:56:1e:67:f9:d0:fc:6c:64:f1:63:a9:7e:a8:11:16:a5: a6:62:4f:a4:a2:c2:01:0b:5d:95:89:65:1d:6a:f8:37:cd:ea: 0d:55:a3:2f:72:3c:a9:5b:c7:64:b9:6a:fd:94:2f:e9:c1:a3: 4c:37:86:41:71:5b:86:cd:24:92:79:df:9f:a8:17:0a:06:58: 92:2f:f8:a5:8c:27:6c:b3:b0:2c:3f:44:dc:d3:2c:69:37:93: f3:6e:4e:db:7b:0c:65:5d:0a:81:25:47:d6:e6:a5:5e:40:97: c6:45:fc:d9:9f:67:ff:33:97:5d:0c:d3:b7:b2:25:06:4d:61: 77:79:f7:b0:23:ef:3a:48:8a:e5:fe:fb:c6:ca:6d:3c:c8:7e: 35:d3:0f:5e:1f:46:58:9b:0a:f2:37:5a:8b:39:a3:df:0d:f1: 85:29:56:a0:e0:ff:db:66:0d:a0:73:9b:e0:e7:83:d4:3f:29: 37:2c:f9:27:2c:d4:2c:99:04:8f:fd:ae:4e:b9:75:63:87:c5: 38:f4:06:dc:5c:39:b1:fe:dd:45:f4:aa:52:3f:fd:cc:e6:bf: 3e:f9:a9:2c:44:a7:2b:7f:49:7a:5e:f6:0e:bf:ca:9b:9b:67: 14:b9:6f:f0 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCnswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA2MzAw MTUyMzFaFw0yNTA2MjQxMDQ2NDVaMDMxMTAvBgNVBAMTKEIxQUNEODUxNjQ4MzQy MkU0RjRFMURERjQ5ODkyNTM3RDcwNjA2OEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDSMM5+yzsm5TRNjWRsJCmobABp8wI1wFUq9j4uHQpqEuYdtnUP Gx4G4Y+4ormFrgLuGBk3hQoPpG9NSyBjzR/dNIYlqZUipIIX5HJ5mfxuks/ZH/il iloPD324ovzOQnHbhkLb2ER/XacTA5mGybzO5uq8gJLiTerT5iQou/nzctdg2cGe WzzB5XoiNTmtzYQA/f/eXlsMLyFXrtTJADOMiGpreGYcE699NJwRmRopnOUjU4Ij PIJQnyBplWGtTmcf/VNVypmOf07w8gbgJVn0ZZT5fFj2jyzyJzhJq6FqIu3MOj1v fjQewASV2diDw3U44VO1Lvy9kgQxUxb2vsE3AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUsazYUWSDQi5PTh3fSYklN9cGBo0wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3NhellVV1NEUWk1UFRoM2ZTWWtsTjljR0JvMC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAHc0kgwDQYJKoZIhvcNAQELBQADggEBAMA+izNmQJMi6f2NzjanIcqyeVuG Vh5n+dD8bGTxY6l+qBEWpaZiT6SiwgELXZWJZR1q+DfN6g1Voy9yPKlbx2S5av2U L+nBo0w3hkFxW4bNJJJ535+oFwoGWJIv+KWMJ2yzsCw/RNzTLGk3k/NuTtt7DGVd CoElR9bmpV5Al8ZF/NmfZ/8zl10M07eyJQZNYXd597Aj7zpIiuX++8bKbTzIfjXT D14fRlibCvI3Wos5o98N8YUpVqDg/9tmDaBzm+Dng9Q/KTcs+Scs1CyZBI/9rk65 dWOHxTj0BtxcObH+3UX0qlI//czmvz75qSxEpyt/SXpe9g6/ypubZxS5b/A= -----END CERTIFICATE-----Generated at Fri Nov 22 16:45:41 2024 by rpki-client on console-ams.rpki-client.org