$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/xyKXp6ysckIvz3IWSgPFmUBWSV8.roa File: xyKXp6ysckIvz3IWSgPFmUBWSV8.roa (raw, json) Hash identifier: 8+lnwbSwNAt3lbV6iDOdtDj8fZF4FirkJ7pDPkXCHxw= Subject key identifier: C7:22:97:A7:AC:AC:72:42:2F:CF:72:16:4A:03:C5:99:40:56:49:5F Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0652 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/xyKXp6ysckIvz3IWSgPFmUBWSV8.roa Signing time: Tue 30 Apr 2024 01:31:34 +0000 ROA not before: Tue 30 Apr 2024 01:31:34 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 27.230.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1618 (0x652) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 30 01:31:34 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=C72297A7ACAC72422FCF72164A03C5994056495F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:5c:c9:8b:83:04:92:60:6f:da:75:97:f5:4d: 0a:d3:68:1e:bd:39:b7:a5:34:23:bb:de:f6:ac:4d: 55:00:70:d6:23:eb:7d:06:e1:f0:25:0d:59:e8:97: 4b:c0:d4:ee:a8:5e:06:ef:d5:71:ab:b6:09:92:6d: 6a:3e:3f:be:09:06:fa:0f:3a:88:e7:9b:60:ac:cc: db:fd:ff:09:2a:db:bc:04:96:f8:1e:f9:c9:f5:fd: 2c:72:24:bc:56:0e:90:7a:50:54:3f:d4:f0:bf:02: a1:e5:99:0a:38:4e:4c:90:8b:5c:15:da:6b:2a:0d: 8d:35:e6:03:43:71:9c:01:dd:2d:0a:39:00:fb:b7: e5:12:7c:e0:0e:6a:56:15:10:b7:47:d2:64:79:b6: c7:9b:e1:34:77:f5:0a:d9:03:66:a8:c6:a2:bd:3d: 31:8a:28:0d:46:30:78:e9:55:a1:13:c8:30:f5:6d: 3c:fe:d3:f7:6d:98:07:99:f6:4d:8d:11:1e:4f:57: 53:5b:93:e0:fd:1a:88:ad:0a:b5:e8:14:56:44:3e: 89:5d:2e:02:d8:1c:ce:11:c7:44:65:9e:6f:2d:74: 58:c2:e9:e8:25:fa:bf:5e:12:91:40:4a:5a:59:cc: 2e:d9:ed:c3:2f:cd:f6:c6:57:1a:a0:3f:62:d2:57: 47:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:22:97:A7:AC:AC:72:42:2F:CF:72:16:4A:03:C5:99:40:56:49:5F X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/xyKXp6ysckIvz3IWSgPFmUBWSV8.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.230.52.0/24 Signature Algorithm: sha256WithRSAEncryption 31:a1:90:0e:44:e4:06:0e:fb:cf:ae:e6:43:c9:ef:b9:2d:05: f0:8c:16:80:4a:c7:5e:89:e6:de:48:11:66:3e:68:e5:94:67: 0e:a0:0a:e0:64:aa:93:b5:26:99:c6:ed:2b:08:01:10:46:e8: 7a:7c:dc:f8:e0:1c:f7:ea:79:ce:c9:c9:c4:5c:b5:48:49:6b: 86:5d:4f:4e:2c:0b:df:41:34:8c:3f:6d:7a:91:51:04:b6:66: 58:02:fb:6d:bd:2c:fa:41:01:3a:87:87:f7:14:95:87:31:bc: f6:4f:c6:d2:40:5d:c0:1c:fb:f6:03:65:1c:95:57:53:56:79: 3e:2d:cc:8c:2e:da:28:55:57:ab:2b:73:c2:ea:a3:c1:f7:46: f6:d9:e2:07:85:26:84:ea:37:85:0c:fe:7e:d9:9f:df:39:09: 5f:0f:d9:de:8b:4a:76:ee:fd:ee:07:da:99:f6:19:85:89:58: 23:00:19:48:2d:ff:6a:30:12:20:81:98:a5:d1:48:17:5b:82: dd:49:15:50:26:17:2a:b3:be:a9:12:21:56:af:1e:94:d9:36: 96:57:87:8e:bf:49:3b:16:a8:0b:93:01:b3:72:c1:ad:17:24: 4e:fa:c9:3f:bf:6a:82:fa:f2:b5:40:c4:6f:00:fb:6c:fb:90: 36:03:9d:a8 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBlIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw MTMxMzRaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEM3MjI5N0E3QUNBQzcy NDIyRkNGNzIxNjRBMDNDNTk5NDA1NjQ5NUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC5XMmLgwSSYG/adZf1TQrTaB69ObelNCO73vasTVUAcNYj630G 4fAlDVnol0vA1O6oXgbv1XGrtgmSbWo+P74JBvoPOojnm2CszNv9/wkq27wElvge +cn1/SxyJLxWDpB6UFQ/1PC/AqHlmQo4TkyQi1wV2msqDY015gNDcZwB3S0KOQD7 t+USfOAOalYVELdH0mR5tseb4TR39QrZA2aoxqK9PTGKKA1GMHjpVaETyDD1bTz+ 0/dtmAeZ9k2NER5PV1Nbk+D9GoitCrXoFFZEPoldLgLYHM4Rx0Rlnm8tdFjC6egl +r9eEpFASlpZzC7Z7cMvzfbGVxqgP2LSV0fXAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUxyKXp6ysckIvz3IWSgPFmUBWSV8wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3h5S1hwNnlzY2tJdnozSVdTZ1BGbVVCV1NWOC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAb5jQwDQYJKoZIhvcNAQELBQADggEBADGhkA5E5AYO+8+u5kPJ77ktBfCM FoBKx16J5t5IEWY+aOWUZw6gCuBkqpO1JpnG7SsIARBG6Hp83PjgHPfqec7JycRc tUhJa4ZdT04sC99BNIw/bXqRUQS2ZlgC+229LPpBATqHh/cUlYcxvPZPxtJAXcAc +/YDZRyVV1NWeT4tzIwu2ihVV6src8Lqo8H3RvbZ4geFJoTqN4UM/n7Zn985CV8P 2d6LSnbu/e4H2pn2GYWJWCMAGUgt/2owEiCBmKXRSBdbgt1JFVAmFyqzvqkSIVav HpTZNpZXh46/STsWqAuTAbNywa0XJE76yT+/aoL68rVAxG8A+2z7kDYDnag= -----END CERTIFICATE-----Generated at Sat Jun 1 15:54:38 2024 by rpki-client on console-ams.rpki-client.org