$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/xmjFgU5oFBGhMyrE4d2KshE2gtw.roa File: xmjFgU5oFBGhMyrE4d2KshE2gtw.roa (raw, json) Hash identifier: gMny8FBJ7NMGt5Ap+Tnzpv3O5JfujQYfGBXgwwE+Ytk= Subject key identifier: C6:68:C5:81:4E:68:14:11:A1:33:2A:C4:E1:DD:8A:B2:11:36:82:DC Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 094F Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/xmjFgU5oFBGhMyrE4d2KshE2gtw.roa Signing time: Sun 30 Jun 2024 01:29:36 +0000 ROA not before: Sun 30 Jun 2024 01:29:36 +0000 ROA not after: Tue 24 Jun 2025 10:46:45 +0000 asID: 9605 IP address blocks: 220.159.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2383 (0x94f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 30 01:29:36 2024 GMT Not After : Jun 24 10:46:45 2025 GMT Subject: CN=C668C5814E681411A1332AC4E1DD8AB2113682DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e4:00:82:f2:16:db:5a:e1:c9:2e:e9:c0:6f: 9f:5a:83:61:34:66:97:3c:48:60:7e:8d:f4:d2:37: a6:a5:7a:f0:1e:d7:6d:0c:03:4a:3e:67:bc:13:4a: 45:79:6f:d1:0d:43:2f:e5:c2:57:8b:ad:69:ba:0a: 01:41:ec:77:f9:4e:29:76:c5:13:b4:b8:46:9a:c9: 51:97:66:af:46:ff:9d:55:ae:a2:19:43:ef:3b:fa: 1f:e9:81:84:29:7f:28:f5:a3:0d:24:10:ab:3b:28: a6:91:ac:bd:89:af:8c:eb:65:72:8a:2c:37:95:18: 95:8d:2c:6c:09:e4:4a:e9:57:2c:a1:0a:05:00:54: 2b:f5:70:30:38:4c:ee:b3:96:6f:c2:bd:8f:54:0c: 65:b2:c3:60:e0:c7:c3:8c:b8:df:09:6e:11:9b:29: ea:a1:25:d2:b9:75:03:df:48:fe:cc:0d:d6:eb:68: 6c:2a:30:9b:97:f2:a4:a4:59:ca:b8:73:3a:52:b2: 5f:27:7c:7d:08:23:3f:4a:da:09:0d:6f:e8:cb:81: b9:ad:63:40:f3:2f:65:03:8a:56:2e:49:20:2d:de: 4d:26:5c:6f:f4:62:c3:4f:4f:c5:84:bf:ca:2e:a7: f8:68:9c:f1:16:09:79:16:08:61:12:e8:1f:e7:ad: c8:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:68:C5:81:4E:68:14:11:A1:33:2A:C4:E1:DD:8A:B2:11:36:82:DC X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/xmjFgU5oFBGhMyrE4d2KshE2gtw.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 220.159.239.0/24 Signature Algorithm: sha256WithRSAEncryption db:38:70:e4:ad:50:00:60:64:ca:40:55:7d:f5:f8:e7:98:ad: 1f:ca:c3:9b:ad:8d:7a:e6:5b:f7:18:b5:c0:df:db:50:dc:ee: 40:38:1e:b3:6e:a5:b7:eb:8d:7c:70:f0:b5:3e:d1:49:11:30: a3:ed:be:a9:98:fb:bb:e0:d2:d9:eb:0b:7e:63:de:d7:b5:38: 12:bc:e8:b5:71:35:97:30:33:e5:58:dd:40:47:86:2f:f9:36: fc:d8:99:d6:5d:98:e8:85:a0:79:89:95:2b:83:c9:b9:aa:d4: 33:db:f7:52:6f:ee:cc:1c:27:60:bc:82:b4:26:f5:0b:1e:db: 72:0f:37:01:c6:2f:af:ee:bf:aa:e5:79:be:de:4b:77:df:86: 2d:6e:e6:2a:5f:3e:6f:11:de:ed:a1:2d:ed:bb:a8:df:7b:b1: 08:e1:0a:27:77:6a:f4:26:41:11:50:e3:97:d8:01:02:aa:f4: ec:45:6c:07:a5:d8:5d:ad:b3:ae:cd:8d:99:3c:1c:36:53:d0: 65:15:73:53:97:ad:b3:c1:92:49:8a:1e:5e:2a:e8:6b:3b:05: ec:29:54:93:8d:df:48:22:aa:bf:e3:62:45:32:e4:97:0d:44: b9:b9:8d:67:9f:24:5b:36:ef:01:32:d9:53:61:c3:60:1f:86: f2:92:4c:f2 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCU8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA2MzAw MTI5MzZaFw0yNTA2MjQxMDQ2NDVaMDMxMTAvBgNVBAMTKEM2NjhDNTgxNEU2ODE0 MTFBMTMzMkFDNEUxREQ4QUIyMTEzNjgyREMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC75ACC8hbbWuHJLunAb59ag2E0Zpc8SGB+jfTSN6alevAe120M A0o+Z7wTSkV5b9ENQy/lwleLrWm6CgFB7Hf5Til2xRO0uEaayVGXZq9G/51VrqIZ Q+87+h/pgYQpfyj1ow0kEKs7KKaRrL2Jr4zrZXKKLDeVGJWNLGwJ5ErpVyyhCgUA VCv1cDA4TO6zlm/CvY9UDGWyw2Dgx8OMuN8JbhGbKeqhJdK5dQPfSP7MDdbraGwq MJuX8qSkWcq4czpSsl8nfH0IIz9K2gkNb+jLgbmtY0DzL2UDilYuSSAt3k0mXG/0 YsNPT8WEv8oup/honPEWCXkWCGES6B/nrchzAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUxmjFgU5oFBGhMyrE4d2KshE2gtwwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3htakZnVTVvRkJHaE15ckU0ZDJLc2hFMmd0dy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADcn+8wDQYJKoZIhvcNAQELBQADggEBANs4cOStUABgZMpAVX31+OeYrR/K w5utjXrmW/cYtcDf21Dc7kA4HrNupbfrjXxw8LU+0UkRMKPtvqmY+7vg0tnrC35j 3te1OBK86LVxNZcwM+VY3UBHhi/5NvzYmdZdmOiFoHmJlSuDybmq1DPb91Jv7swc J2C8grQm9Qse23IPNwHGL6/uv6rleb7eS3ffhi1u5ipfPm8R3u2hLe27qN97sQjh Cid3avQmQRFQ45fYAQKq9OxFbAel2F2ts67NjZk8HDZT0GUVc1OXrbPBkkmKHl4q 6Gs7BewpVJON30giqr/jYkUy5JcNRLm5jWefJFs27wEy2VNhw2AfhvKSTPI= -----END CERTIFICATE-----Generated at Sun Feb 16 22:25:40 2025 by rpki-client