$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/y03kwoil2RjDDDfma3ncHVMX9qs.roa File: y03kwoil2RjDDDfma3ncHVMX9qs.roa (raw, json) Hash identifier: /pcIjKJu8zSFQ1bQxU5YgChZetLEalAZ/OjVNccm9P8= Subject key identifier: CB:4D:E4:C2:88:A5:D9:18:C3:0C:37:E6:6B:79:DC:1D:53:17:F6:AB Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0A6E Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/y03kwoil2RjDDDfma3ncHVMX9qs.roa Signing time: Sun 30 Jun 2024 01:50:28 +0000 ROA not before: Sun 30 Jun 2024 01:50:28 +0000 ROA not after: Tue 24 Jun 2025 10:46:45 +0000 asID: 9605 IP address blocks: 220.210.96.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 12:58:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2670 (0xa6e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 30 01:50:28 2024 GMT Not After : Jun 24 10:46:45 2025 GMT Subject: CN=CB4DE4C288A5D918C30C37E66B79DC1D5317F6AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e9:15:72:20:b4:e2:76:b1:60:fa:c1:c2:a3: 19:0b:3b:04:a7:6d:23:2e:a3:57:d0:97:a1:10:a5: f7:c1:d1:04:5f:0a:77:e2:c6:c7:21:e0:69:72:e9: f6:05:58:dd:df:9c:45:b6:0f:3b:a5:71:9b:d8:ee: fc:da:de:ae:7f:b9:f6:69:81:90:68:4d:63:93:09: 6c:33:0b:29:68:34:49:5c:ee:46:0d:d7:47:ae:4d: bf:3c:9e:90:23:26:c7:91:01:53:74:7f:72:2f:63: 69:1a:e4:9a:cb:52:e8:b2:c9:e4:70:20:63:46:a0: 6d:ea:c7:ff:52:84:5b:9c:d8:5f:5f:88:d9:5a:4d: c4:0e:8d:69:d9:b1:66:29:a1:70:8b:75:44:cb:6d: bf:42:84:45:63:39:46:14:4a:59:35:44:0f:c3:0d: 75:2f:bc:fc:e0:cd:8e:92:3a:11:6f:b0:5a:b7:a8: 34:23:84:6c:d8:09:11:16:2e:69:26:44:6a:85:83: c2:ae:f3:c6:26:b7:3e:d0:a5:9e:4a:53:06:ba:0a: 01:87:16:b7:a6:d7:1f:52:7c:78:77:68:56:e5:ec: a2:dd:1d:2f:5b:74:af:1f:43:72:45:da:c6:eb:a4: 2e:89:89:d5:df:18:3d:cd:68:08:02:28:f6:a3:51: a9:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:4D:E4:C2:88:A5:D9:18:C3:0C:37:E6:6B:79:DC:1D:53:17:F6:AB X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/y03kwoil2RjDDDfma3ncHVMX9qs.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 220.210.96.0/22 Signature Algorithm: sha256WithRSAEncryption 18:50:d2:55:c9:33:df:66:59:88:20:c5:29:a1:f0:bb:ce:af: 10:94:f3:a7:f6:91:b0:4a:6c:1c:b0:a5:61:07:7c:fd:7a:65: 90:4a:73:19:f2:9a:9d:f2:03:c4:af:6c:ac:81:89:a8:90:83: 68:36:59:50:c7:37:4c:c2:7c:35:40:af:2c:8d:f7:b6:bc:c2: 62:14:8a:ab:a9:1d:9f:b7:35:29:c8:9f:98:d9:3e:03:63:1f: 3b:df:49:03:b1:34:32:1e:84:d0:0e:15:a2:97:94:11:09:32: ce:8f:5a:45:da:f0:f5:f8:76:36:55:9a:e7:16:df:9c:8c:29: 4b:b6:20:1b:f8:40:3f:f2:50:83:40:c1:ab:ce:41:51:67:d8: 40:7d:fc:be:61:3d:34:aa:27:9f:66:be:48:b6:b7:45:b4:e3: 9c:e3:d9:8d:f6:e6:79:db:90:5e:79:db:0a:75:ba:c4:85:b8: 4b:48:48:9d:d5:be:52:c1:39:bd:02:6b:81:6c:46:aa:60:95: 93:23:c3:48:85:60:1a:ed:6b:33:48:3b:bb:af:90:d3:0d:5f: 7c:dc:34:ad:7f:8c:7b:c7:d7:d6:f2:4a:85:8c:38:a3:64:c1: e6:cc:a6:4e:a4:89:97:19:52:ab:e2:06:99:a1:e8:c9:01:88: f3:fc:a3:27 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCm4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA2MzAw MTUwMjhaFw0yNTA2MjQxMDQ2NDVaMDMxMTAvBgNVBAMTKENCNERFNEMyODhBNUQ5 MThDMzBDMzdFNjZCNzlEQzFENTMxN0Y2QUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC26RVyILTidrFg+sHCoxkLOwSnbSMuo1fQl6EQpffB0QRfCnfi xsch4Gly6fYFWN3fnEW2DzulcZvY7vza3q5/ufZpgZBoTWOTCWwzCyloNElc7kYN 10euTb88npAjJseRAVN0f3IvY2ka5JrLUuiyyeRwIGNGoG3qx/9ShFuc2F9fiNla TcQOjWnZsWYpoXCLdUTLbb9ChEVjOUYUSlk1RA/DDXUvvPzgzY6SOhFvsFq3qDQj hGzYCREWLmkmRGqFg8Ku88Ymtz7QpZ5KUwa6CgGHFrem1x9SfHh3aFbl7KLdHS9b dK8fQ3JF2sbrpC6JidXfGD3NaAgCKPajUanLAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUy03kwoil2RjDDDfma3ncHVMX9qswHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3kwM2t3b2lsMlJqREREZm1hM25jSFZNWDlxcy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBALc0mAwDQYJKoZIhvcNAQELBQADggEBABhQ0lXJM99mWYggxSmh8LvOrxCU 86f2kbBKbBywpWEHfP16ZZBKcxnymp3yA8SvbKyBiaiQg2g2WVDHN0zCfDVAryyN 97a8wmIUiqupHZ+3NSnIn5jZPgNjHzvfSQOxNDIehNAOFaKXlBEJMs6PWkXa8PX4 djZVmucW35yMKUu2IBv4QD/yUINAwavOQVFn2EB9/L5hPTSqJ59mvki2t0W045zj 2Y325nnbkF552wp1usSFuEtISJ3VvlLBOb0Ca4FsRqpglZMjw0iFYBrtazNIO7uv kNMNX3zcNK1/jHvH19bySoWMOKNkwebMpk6kiZcZUqviBpmh6MkBiPP8oyc= -----END CERTIFICATE-----Generated at Fri Nov 22 14:21:25 2024 by rpki-client on console-ams.rpki-client.org