$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/wTRIW73cdgaOp1i9-kuw2_BD5e0.roa File: wTRIW73cdgaOp1i9-kuw2_BD5e0.roa (raw, json) Hash identifier: iDj4dkwTGMc2sjAQRTV78096OBufl442R4N0wveSya0= Subject key identifier: C1:34:48:5B:BD:DC:76:06:8E:A7:58:BD:FA:4B:B0:DB:F0:43:E5:ED Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0A65 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/wTRIW73cdgaOp1i9-kuw2_BD5e0.roa Signing time: Sun 30 Jun 2024 01:50:24 +0000 ROA not before: Sun 30 Jun 2024 01:50:24 +0000 ROA not after: Tue 24 Jun 2025 10:46:45 +0000 asID: 9605 IP address blocks: 219.114.180.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2661 (0xa65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 30 01:50:24 2024 GMT Not After : Jun 24 10:46:45 2025 GMT Subject: CN=C134485BBDDC76068EA758BDFA4BB0DBF043E5ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:06:81:62:0e:ea:6b:31:72:bd:a5:00:ab:cc: 6c:74:40:8a:e1:ba:81:2d:4c:6e:88:de:38:bf:86: f5:5c:9a:ba:77:41:1f:8a:d2:95:86:c1:22:b6:9b: 7c:48:f6:60:54:bc:fc:dd:10:80:80:29:86:63:a1: ce:e2:06:08:3b:de:35:cd:75:bd:3f:4a:c5:e7:0a: 05:e7:80:e3:cf:3e:33:1a:25:48:e8:8b:f2:ab:32: b9:64:e4:e2:ed:23:4d:ff:3e:d0:c9:38:f0:9a:b4: 87:4e:54:51:7f:f8:1c:23:02:a1:78:fa:d3:4e:ac: 3d:1f:b5:29:78:4c:16:63:e2:ce:f4:63:90:e2:30: b9:ab:17:09:7b:ba:8c:10:1e:e2:a4:5d:42:8a:d2: f0:b2:e4:01:92:f9:4b:b3:d2:aa:9b:94:cc:63:25: 7a:c2:c7:55:02:61:b5:52:db:ef:56:0b:7f:f0:c1: 16:60:e3:37:86:64:6f:d4:ec:98:5e:a3:fe:00:9d: 8f:a3:d5:1b:cf:57:ac:19:40:93:30:d6:c5:86:c9: b4:8c:21:92:30:ef:a1:9f:da:9a:58:12:a9:17:56: 80:7e:10:78:aa:20:9d:f5:af:94:05:ac:51:31:8d: 45:90:92:27:2e:84:61:fa:cf:04:b0:a1:2c:b0:93: ef:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:34:48:5B:BD:DC:76:06:8E:A7:58:BD:FA:4B:B0:DB:F0:43:E5:ED X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/wTRIW73cdgaOp1i9-kuw2_BD5e0.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 219.114.180.0/22 Signature Algorithm: sha256WithRSAEncryption 42:ab:dc:b9:29:54:c8:e6:ec:61:af:d0:d5:8c:9c:b7:95:f3: c7:f4:26:c4:93:07:0c:fe:8c:68:d5:b0:81:e5:b2:d0:d5:3c: 63:42:67:8e:c0:c8:00:55:bf:e1:83:99:a7:bc:b7:72:bb:78: 6a:fc:0f:84:e5:9a:b6:47:35:2d:fb:c1:c1:b2:7b:82:a2:b7: ac:76:f5:26:7d:b3:92:dd:f8:81:b4:04:e2:76:ef:aa:55:a2: 08:bb:78:68:cf:d7:f1:65:61:bf:80:74:c5:1a:9c:34:9d:65: 40:21:38:10:26:35:82:12:80:33:49:a4:28:00:5a:b5:42:f9: ff:f3:32:8b:7f:7a:30:b0:0e:52:d1:7c:b7:ff:b9:98:fc:2d: 8f:ed:4f:52:94:d6:cb:63:ab:4a:2a:dc:ba:26:75:24:ac:36: aa:70:aa:30:dc:be:a5:d7:7b:93:12:bb:53:1f:f6:eb:b2:72: b0:13:41:c0:5c:f6:ea:06:a9:26:03:2f:16:73:59:1d:cb:0a: 49:85:31:cc:7b:83:69:3e:8e:f4:03:fb:67:29:80:6f:64:b5: fb:f7:f3:9c:9c:c7:31:4f:54:82:fa:62:29:98:f8:13:e4:c9: 7d:c0:8d:6d:aa:1e:d0:a4:58:f6:2f:53:85:e7:0a:76:e9:54: 29:d4:78:eb -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCmUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA2MzAw MTUwMjRaFw0yNTA2MjQxMDQ2NDVaMDMxMTAvBgNVBAMTKEMxMzQ0ODVCQkREQzc2 MDY4RUE3NThCREZBNEJCMERCRjA0M0U1RUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCdBoFiDuprMXK9pQCrzGx0QIrhuoEtTG6I3ji/hvVcmrp3QR+K 0pWGwSK2m3xI9mBUvPzdEICAKYZjoc7iBgg73jXNdb0/SsXnCgXngOPPPjMaJUjo i/KrMrlk5OLtI03/PtDJOPCatIdOVFF/+BwjAqF4+tNOrD0ftSl4TBZj4s70Y5Di MLmrFwl7uowQHuKkXUKK0vCy5AGS+Uuz0qqblMxjJXrCx1UCYbVS2+9WC3/wwRZg 4zeGZG/U7Jheo/4AnY+j1RvPV6wZQJMw1sWGybSMIZIw76Gf2ppYEqkXVoB+EHiq IJ31r5QFrFExjUWQkicuhGH6zwSwoSywk+9jAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUwTRIW73cdgaOp1i9+kuw2/BD5e0wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3dUUklXNzNjZGdhT3AxaTkta3V3Ml9CRDVlMC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBALbcrQwDQYJKoZIhvcNAQELBQADggEBAEKr3LkpVMjm7GGv0NWMnLeV88f0 JsSTBwz+jGjVsIHlstDVPGNCZ47AyABVv+GDmae8t3K7eGr8D4TlmrZHNS37wcGy e4Kit6x29SZ9s5Ld+IG0BOJ276pVogi7eGjP1/FlYb+AdMUanDSdZUAhOBAmNYIS gDNJpCgAWrVC+f/zMot/ejCwDlLRfLf/uZj8LY/tT1KU1stjq0oq3LomdSSsNqpw qjDcvqXXe5MSu1Mf9uuycrATQcBc9uoGqSYDLxZzWR3LCkmFMcx7g2k+jvQD+2cp gG9ktfv385ycxzFPVIL6YimY+BPkyX3AjW2qHtCkWPYvU4XnCnbpVCnUeOs= -----END CERTIFICATE-----Generated at Sun Feb 16 22:24:51 2025 by rpki-client