$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/uVVLQiStOqMibQ4_STtfqr1bOk8.roa File: uVVLQiStOqMibQ4_STtfqr1bOk8.roa (raw, json) Hash identifier: 4dwGbVaBws40zZ/60yJtjl1URwmCm6nXwRML4Xm2k/E= Subject key identifier: B9:55:4B:42:24:AD:3A:A3:22:6D:0E:3F:49:3B:5F:AA:BD:5B:3A:4F Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0934 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/uVVLQiStOqMibQ4_STtfqr1bOk8.roa Signing time: Mon 17 Jun 2024 08:24:12 +0000 ROA not before: Mon 17 Jun 2024 08:24:12 +0000 ROA not after: Sun 15 Jun 2025 01:30:03 +0000 asID: 9605 IP address blocks: 1.75.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 22:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2356 (0x934) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 17 08:24:12 2024 GMT Not After : Jun 15 01:30:03 2025 GMT Subject: CN=B9554B4224AD3AA3226D0E3F493B5FAABD5B3A4F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:99:6c:39:2e:5b:31:ad:ee:f0:a4:8b:8c:60: cb:87:18:e0:85:b0:74:73:8f:fe:ed:19:29:23:73: 6e:7b:96:52:07:1d:59:24:93:7f:53:94:8b:fb:bb: 2b:ab:0f:37:6d:a5:47:24:0a:0b:e1:2a:fa:ea:26: 0a:ee:ba:3b:c2:df:e0:56:6f:35:7d:1b:29:7d:8d: ac:7e:58:51:9f:ea:11:3e:a6:ed:ac:c8:bf:77:f2: b7:c3:db:f5:02:a0:f3:ae:cf:51:8b:0f:6b:81:0e: ab:60:c6:85:5f:08:d2:a4:f7:25:d3:0c:65:c0:cc: 81:ee:6c:01:ea:00:6a:b7:16:79:ad:b1:bd:28:c5: eb:f5:61:f5:40:aa:aa:76:7b:0f:e9:84:e9:e8:0d: 19:52:2b:a1:8a:3c:c8:d6:67:e8:6d:08:f3:21:8f: 89:be:b2:3b:8f:be:9c:e6:a4:09:bd:09:32:29:1e: 96:d6:81:ae:e6:ca:47:e9:f6:aa:fa:c9:06:30:d6: d0:09:2b:2d:28:08:ba:d1:55:21:4f:d8:29:3a:ab: 2f:6a:2c:c3:17:b3:42:24:48:1b:35:0b:dd:c5:e4: d9:dc:98:51:a9:7d:19:8a:d4:83:b7:2e:83:75:40: 99:59:54:50:9e:83:5f:fe:00:b8:e2:9a:7d:3f:32: ba:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:55:4B:42:24:AD:3A:A3:22:6D:0E:3F:49:3B:5F:AA:BD:5B:3A:4F X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/uVVLQiStOqMibQ4_STtfqr1bOk8.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.75.128.0/21 Signature Algorithm: sha256WithRSAEncryption 39:7e:39:a6:9b:65:a1:38:7e:76:d6:2d:71:d8:e5:77:f6:50: 3c:68:79:3e:33:34:f1:a9:c4:db:ce:eb:3a:ac:90:c5:7b:89: 39:5f:be:fd:f4:8f:82:db:d2:e1:8b:c9:ed:8f:7a:81:61:d4: 82:7b:d3:7d:cd:8a:6a:0a:49:09:f5:05:97:f2:d4:8d:4d:8a: aa:3f:e3:34:92:1d:95:fe:5f:28:6b:af:7e:47:d0:63:83:e6: 16:e9:2f:f0:6e:84:6d:f1:38:cc:b2:3d:5c:93:5f:3b:92:b2: 71:65:85:c9:e0:61:4e:74:8a:89:b1:b7:19:2e:8a:cd:0c:0f: d9:01:3d:da:c4:94:5a:57:f7:82:e5:5c:8d:33:48:96:79:03: c1:8a:2d:7b:5a:f0:de:92:56:71:4d:97:f0:f7:3e:39:16:c8: a5:22:47:ce:34:0c:0a:84:9c:bb:a9:0b:01:c9:50:9a:fd:fc: f8:5b:6b:43:5e:ea:6a:a4:67:c5:28:48:41:0a:2e:d3:86:f3: 2a:84:b2:e2:8b:22:be:a6:9e:87:ae:aa:6b:f1:c1:98:6f:85: de:a2:eb:6b:55:6e:bf:8e:10:2c:d5:59:ad:ed:be:1a:f6:75: de:e2:78:94:56:2b:bc:aa:3a:29:ae:03:58:2f:27:a6:f8:65: db:ba:64:e5 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCTQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA2MTcw ODI0MTJaFw0yNTA2MTUwMTMwMDNaMDMxMTAvBgNVBAMTKEI5NTU0QjQyMjRBRDNB QTMyMjZEMEUzRjQ5M0I1RkFBQkQ1QjNBNEYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDhmWw5Llsxre7wpIuMYMuHGOCFsHRzj/7tGSkjc257llIHHVkk k39TlIv7uyurDzdtpUckCgvhKvrqJgruujvC3+BWbzV9Gyl9jax+WFGf6hE+pu2s yL938rfD2/UCoPOuz1GLD2uBDqtgxoVfCNKk9yXTDGXAzIHubAHqAGq3Fnmtsb0o xev1YfVAqqp2ew/phOnoDRlSK6GKPMjWZ+htCPMhj4m+sjuPvpzmpAm9CTIpHpbW ga7mykfp9qr6yQYw1tAJKy0oCLrRVSFP2Ck6qy9qLMMXs0IkSBs1C93F5NncmFGp fRmK1IO3LoN1QJlZVFCeg1/+ALjimn0/MrqPAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUuVVLQiStOqMibQ4/STtfqr1bOk8wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3VWVkxRaVN0T3FNaWJRNF9TVHRmcXIxYk9rOC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMBS4AwDQYJKoZIhvcNAQELBQADggEBADl+OaabZaE4fnbWLXHY5Xf2UDxo eT4zNPGpxNvO6zqskMV7iTlfvv30j4Lb0uGLye2PeoFh1IJ7033NimoKSQn1BZfy 1I1Niqo/4zSSHZX+Xyhrr35H0GOD5hbpL/BuhG3xOMyyPVyTXzuSsnFlhcngYU50 iomxtxkuis0MD9kBPdrElFpX94LlXI0zSJZ5A8GKLXta8N6SVnFNl/D3PjkWyKUi R840DAqEnLupCwHJUJr9/Phba0Ne6mqkZ8UoSEEKLtOG8yqEsuKLIr6mnoeuqmvx wZhvhd6i62tVbr+OECzVWa3tvhr2dd7ieJRWK7yqOimuA1gvJ6b4Zdu6ZOU= -----END CERTIFICATE-----Generated at Mon Nov 25 23:54:43 2024 by rpki-client on console-ams.rpki-client.org