$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/we8nUvMngce4iA75hqjinGD_q_k.roa File: we8nUvMngce4iA75hqjinGD_q_k.roa (raw, json) Hash identifier: Wy/Six4SMYhnP5/u65qwhKgEny+n+hrnpfb5J7l+LtQ= Subject key identifier: C1:EF:27:52:F3:27:81:C7:B8:88:0E:F9:86:A8:E2:9C:60:FF:AB:F9 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0A43 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/we8nUvMngce4iA75hqjinGD_q_k.roa Signing time: Sun 30 Jun 2024 01:48:24 +0000 ROA not before: Sun 30 Jun 2024 01:48:24 +0000 ROA not after: Tue 24 Jun 2025 10:46:45 +0000 asID: 9605 IP address blocks: 110.161.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:41:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2627 (0xa43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 30 01:48:24 2024 GMT Not After : Jun 24 10:46:45 2025 GMT Subject: CN=C1EF2752F32781C7B8880EF986A8E29C60FFABF9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ac:10:47:99:f4:4c:50:31:50:5a:54:6e:e7: 2f:4b:80:b4:b8:1b:15:b7:08:ce:12:ac:40:21:4d: 42:bb:78:04:31:07:bb:2c:1b:df:6f:6c:7e:fe:7c: 41:e8:1a:97:7f:86:bd:83:a1:dc:40:05:45:aa:d9: 4a:cd:b5:7e:26:84:c9:b8:be:89:2f:fa:cf:ad:5e: 39:6f:aa:2b:5b:dc:b0:a6:31:b0:62:ea:6f:9c:fe: 00:33:aa:93:56:7f:5f:d2:13:fa:b2:45:0f:d7:66: a2:ad:b2:39:7b:6c:7e:3d:72:75:2b:fb:f5:5f:05: e8:33:eb:12:1c:1e:17:5e:2a:db:65:d8:e7:72:46: 34:24:71:2d:ac:bd:92:88:6c:37:88:ea:d5:54:d6: 05:44:96:ac:d4:0b:a2:31:3b:8e:13:22:ae:69:51: 5d:f8:9a:f5:3b:60:1c:7c:22:b2:e7:84:49:f5:a4: ca:cd:b8:a7:1c:57:15:80:69:35:c7:b7:cc:e3:64: 86:84:b3:17:3b:1a:ae:f3:fe:12:6a:b3:6d:c0:57: 4b:49:77:46:db:09:3b:c8:21:b6:17:df:49:bc:5a: 98:aa:07:07:15:93:de:79:81:d8:07:58:6f:37:28: 23:5e:0a:54:57:8d:2d:e5:5a:c9:7f:94:86:67:36: 21:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:EF:27:52:F3:27:81:C7:B8:88:0E:F9:86:A8:E2:9C:60:FF:AB:F9 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/we8nUvMngce4iA75hqjinGD_q_k.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 110.161.128.0/19 Signature Algorithm: sha256WithRSAEncryption 9b:e8:71:b5:df:d8:ef:fe:bc:4a:8b:f1:17:be:1b:2b:fe:11: d5:68:0f:8c:4f:ab:7e:cd:41:40:54:fe:a2:24:77:d4:e8:62: d4:ea:3c:1e:46:c6:c0:bc:c6:79:27:05:14:cc:6d:cd:e9:94: 9d:74:3d:1c:bd:b0:94:ec:25:15:c3:0b:2e:2e:e1:f9:e9:38: 85:12:c0:d5:41:1a:1c:81:de:87:cd:36:18:6d:f5:72:74:d6: fc:01:f3:58:e9:2a:cd:d8:7e:da:ac:f3:54:4d:d3:e1:6c:29: c9:d9:8b:c2:b6:51:bf:95:9b:5c:4f:21:32:ae:0c:c6:80:b9: 88:4e:e0:1f:b3:37:73:12:32:84:a4:70:2f:3f:63:08:8a:4d: fe:e8:c7:09:d7:06:f1:46:5e:06:ac:9e:b7:82:2d:ec:1f:f2: 20:5d:4b:08:8d:2b:eb:07:55:14:d0:40:0e:2e:61:e3:f5:0d: 1f:20:f6:29:ca:17:ea:a6:8b:f3:77:60:16:e9:9d:db:97:5d: b2:52:fe:1b:b3:1c:d9:a2:17:4c:e5:d8:cb:b8:2d:ee:1c:a5: a9:b5:e3:57:ef:26:44:e7:bc:15:8a:96:d9:7d:77:8b:97:f1: 82:0e:4c:57:7f:4a:68:71:e8:c2:60:60:e4:c5:e4:db:65:3f: 57:63:d5:42 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCkMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA2MzAw MTQ4MjRaFw0yNTA2MjQxMDQ2NDVaMDMxMTAvBgNVBAMTKEMxRUYyNzUyRjMyNzgx QzdCODg4MEVGOTg2QThFMjlDNjBGRkFCRjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+rBBHmfRMUDFQWlRu5y9LgLS4GxW3CM4SrEAhTUK7eAQxB7ss G99vbH7+fEHoGpd/hr2DodxABUWq2UrNtX4mhMm4vokv+s+tXjlvqitb3LCmMbBi 6m+c/gAzqpNWf1/SE/qyRQ/XZqKtsjl7bH49cnUr+/VfBegz6xIcHhdeKttl2Ody RjQkcS2svZKIbDeI6tVU1gVElqzUC6IxO44TIq5pUV34mvU7YBx8IrLnhEn1pMrN uKccVxWAaTXHt8zjZIaEsxc7Gq7z/hJqs23AV0tJd0bbCTvIIbYX30m8WpiqBwcV k955gdgHWG83KCNeClRXjS3lWsl/lIZnNiHTAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUwe8nUvMngce4iA75hqjinGD/q/kwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3dlOG5Vdk1uZ2NlNGlBNzVocWppbkdEX3Ffay5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAVuoYAwDQYJKoZIhvcNAQELBQADggEBAJvocbXf2O/+vEqL8Re+Gyv+EdVo D4xPq37NQUBU/qIkd9ToYtTqPB5GxsC8xnknBRTMbc3plJ10PRy9sJTsJRXDCy4u 4fnpOIUSwNVBGhyB3ofNNhht9XJ01vwB81jpKs3Yftqs81RN0+FsKcnZi8K2Ub+V m1xPITKuDMaAuYhO4B+zN3MSMoSkcC8/YwiKTf7oxwnXBvFGXgasnreCLewf8iBd SwiNK+sHVRTQQA4uYeP1DR8g9inKF+qmi/N3YBbpnduXXbJS/huzHNmiF0zl2Mu4 Le4cpam141fvJkTnvBWKltl9d4uX8YIOTFd/Smhx6MJgYOTF5NtlP1dj1UI= -----END CERTIFICATE-----Generated at Fri Nov 22 15:24:03 2024 by rpki-client on console-fra.rpki-client.org