$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/vM2XKFX7Dacq80jDBfHwWImA8Zk.roa File: vM2XKFX7Dacq80jDBfHwWImA8Zk.roa (raw, json) Hash identifier: Ay60IYtulUSfVOpF0oWdL39JadTNU2k7IOBfoSI4tf4= Subject key identifier: BC:CD:97:28:55:FB:0D:A7:2A:F3:48:C3:05:F1:F0:58:89:80:F1:99 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0A45 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/vM2XKFX7Dacq80jDBfHwWImA8Zk.roa Signing time: Sun 30 Jun 2024 01:48:25 +0000 ROA not before: Sun 30 Jun 2024 01:48:25 +0000 ROA not after: Tue 24 Jun 2025 10:46:45 +0000 asID: 9605 IP address blocks: 211.14.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 22:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2629 (0xa45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 30 01:48:25 2024 GMT Not After : Jun 24 10:46:45 2025 GMT Subject: CN=BCCD972855FB0DA72AF348C305F1F0588980F199 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:41:50:22:43:02:1a:7b:87:4b:d2:4b:01:ca: a8:af:a7:c0:fe:3f:29:37:b3:66:b7:49:21:52:1c: 11:d0:9d:b2:a6:9e:1f:5d:1b:51:1a:96:79:65:54: a6:35:cc:31:73:09:76:da:1f:14:cf:39:74:69:81: e3:62:38:42:6c:36:4b:c9:d5:f2:6c:1b:1d:f6:4f: 00:83:98:ee:4a:b3:af:50:be:f2:16:b7:1b:23:33: 5c:a6:6e:84:34:50:1f:e9:b2:38:a7:03:2a:57:39: 48:c4:aa:40:17:ab:b0:01:b1:2b:1f:01:7e:42:12: fd:30:37:e5:ca:d9:6a:64:72:60:66:50:8e:f8:64: 95:c0:cf:53:da:72:73:7b:fc:50:cb:8a:7b:fa:e0: 3c:86:00:ec:e5:c9:ca:56:14:28:46:5c:2d:82:f3: 9f:a3:ca:b2:5d:54:75:c6:75:1c:95:a7:eb:37:8e: e4:11:5f:94:c1:9d:85:0b:bb:32:a5:dd:32:32:cd: 60:c1:77:c1:40:84:54:19:42:17:33:a9:15:af:71: 26:27:5c:22:4e:77:65:53:d8:8d:48:7f:d8:35:c5: 70:fd:d9:af:31:15:8f:51:f2:d5:69:b9:bb:93:d0: 55:52:f4:91:8d:ab:52:c9:fb:c2:08:63:05:2f:72: 94:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:CD:97:28:55:FB:0D:A7:2A:F3:48:C3:05:F1:F0:58:89:80:F1:99 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/vM2XKFX7Dacq80jDBfHwWImA8Zk.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 211.14.75.0/24 Signature Algorithm: sha256WithRSAEncryption 39:e8:50:92:a9:53:e8:3a:a7:87:d8:ab:95:da:a1:d4:d3:62: aa:49:2a:5a:81:ba:55:27:f4:53:9f:e1:98:1d:10:4d:fe:13: 10:ea:72:8e:db:f3:47:a4:e1:1e:45:33:c1:bb:07:8a:b5:83: 38:10:2f:19:40:3a:57:d4:6a:ca:42:3a:40:00:33:13:08:26: 1c:30:03:88:e6:97:89:04:ec:0b:16:1b:48:5e:00:41:61:fa: f6:86:fc:ec:67:96:39:bc:42:58:fc:09:fe:24:47:43:b5:1f: 04:18:94:7b:29:a8:27:13:50:d0:56:0a:be:4a:6c:78:51:8c: cd:20:6d:86:dc:74:71:f4:65:03:67:27:73:0e:dc:9d:22:80: 34:e5:d9:83:a1:29:92:9e:0b:ee:8f:2f:f4:ac:fc:2c:ec:50: f1:50:bb:7a:9b:72:05:61:31:16:9c:1f:8b:60:e5:21:81:42: 54:d4:63:f1:01:4f:45:b6:cf:c3:0a:e4:7a:d9:60:04:39:c8: d2:4a:61:ce:ad:e1:8d:b8:0b:a8:2d:e0:8d:e0:8a:42:2d:97: d5:66:ec:45:52:80:fc:80:9d:e6:15:87:72:66:a6:3f:46:b6: d8:e6:17:8d:c8:de:e9:51:bf:03:f9:22:05:25:fe:6f:3c:b1: 66:2f:d9:ed -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCkUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA2MzAw MTQ4MjVaFw0yNTA2MjQxMDQ2NDVaMDMxMTAvBgNVBAMTKEJDQ0Q5NzI4NTVGQjBE QTcyQUYzNDhDMzA1RjFGMDU4ODk4MEYxOTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDbQVAiQwIae4dL0ksByqivp8D+Pyk3s2a3SSFSHBHQnbKmnh9d G1EalnllVKY1zDFzCXbaHxTPOXRpgeNiOEJsNkvJ1fJsGx32TwCDmO5Ks69QvvIW txsjM1ymboQ0UB/psjinAypXOUjEqkAXq7ABsSsfAX5CEv0wN+XK2WpkcmBmUI74 ZJXAz1PacnN7/FDLinv64DyGAOzlycpWFChGXC2C85+jyrJdVHXGdRyVp+s3juQR X5TBnYULuzKl3TIyzWDBd8FAhFQZQhczqRWvcSYnXCJOd2VT2I1If9g1xXD92a8x FY9R8tVpubuT0FVS9JGNq1LJ+8IIYwUvcpT1AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUvM2XKFX7Dacq80jDBfHwWImA8ZkwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3ZNMlhLRlg3RGFjcTgwakRCZkh3V0ltQThaay5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADTDkswDQYJKoZIhvcNAQELBQADggEBADnoUJKpU+g6p4fYq5XaodTTYqpJ KlqBulUn9FOf4ZgdEE3+ExDqco7b80ek4R5FM8G7B4q1gzgQLxlAOlfUaspCOkAA MxMIJhwwA4jml4kE7AsWG0heAEFh+vaG/Oxnljm8Qlj8Cf4kR0O1HwQYlHspqCcT UNBWCr5KbHhRjM0gbYbcdHH0ZQNnJ3MO3J0igDTl2YOhKZKeC+6PL/Ss/CzsUPFQ u3qbcgVhMRacH4tg5SGBQlTUY/EBT0W2z8MK5HrZYAQ5yNJKYc6t4Y24C6gt4I3g ikItl9Vm7EVSgPyAneYVh3Jmpj9GttjmF43I3ulRvwP5IgUl/m88sWYv2e0= -----END CERTIFICATE-----Generated at Mon Nov 25 23:59:12 2024 by rpki-client on console-fra.rpki-client.org