$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/y9h-f1LuXvwucMFvZhULRQ17b1M.roa File: y9h-f1LuXvwucMFvZhULRQ17b1M.roa (raw, json) Hash identifier: eVvfQGvhm+QsJZtbXOegB0D+iFjYuczaEcWpxEpagV8= Subject key identifier: CB:D8:7E:7F:52:EE:5E:FC:2E:70:C1:6F:66:15:0B:45:0D:7B:6F:53 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0997 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/y9h-f1LuXvwucMFvZhULRQ17b1M.roa Signing time: Sun 30 Jun 2024 01:36:29 +0000 ROA not before: Sun 30 Jun 2024 01:36:29 +0000 ROA not after: Tue 24 Jun 2025 10:46:45 +0000 asID: 9605 IP address blocks: 1.76.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2455 (0x997) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 30 01:36:29 2024 GMT Not After : Jun 24 10:46:45 2025 GMT Subject: CN=CBD87E7F52EE5EFC2E70C16F66150B450D7B6F53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:25:77:83:16:60:b1:be:0f:1d:ad:71:ed:1d: 97:8f:d8:32:67:36:98:18:de:79:ab:a0:7e:45:a0: c8:1e:ed:04:3f:39:22:d0:95:91:03:02:63:27:d1: bd:f4:3d:f0:0d:b4:d4:92:b3:34:d5:c0:4e:f7:3a: e9:3d:48:77:a6:fa:a2:e4:41:1a:d9:73:4b:6a:e0: 1c:c5:7e:4a:5c:b8:58:57:ee:b9:e4:ea:7f:30:4b: a4:ca:5c:0c:ea:3a:e0:a9:95:89:99:b2:f4:a5:0f: 69:66:d1:e2:71:ea:98:06:62:07:9e:64:1b:3b:32: 06:af:a2:35:00:49:b8:fd:56:2c:b5:97:09:8c:68: f9:9f:a0:50:6a:c6:fa:7f:03:bf:85:1c:a2:9c:a1: e0:69:be:46:d1:32:f6:7f:bf:46:61:5f:a7:be:e2: 06:77:52:46:b0:a8:5b:ee:a5:de:60:f5:65:2b:95: ec:4c:30:01:33:4b:74:ac:1f:37:e7:02:7f:47:d0: 2d:3f:77:12:a6:ef:c0:89:18:ef:51:d8:da:39:a4: cd:fd:80:6c:77:61:08:0c:ae:d9:de:0b:66:f0:05: e3:39:c2:fe:56:d1:c6:fd:2e:e8:60:c5:90:9c:b2: 84:67:bb:0f:cb:31:96:75:16:1f:63:1a:8b:91:df: a7:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:D8:7E:7F:52:EE:5E:FC:2E:70:C1:6F:66:15:0B:45:0D:7B:6F:53 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/y9h-f1LuXvwucMFvZhULRQ17b1M.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.76.32.0/20 Signature Algorithm: sha256WithRSAEncryption 3e:26:6b:1b:7e:2a:45:ac:98:36:78:29:b0:43:8c:fd:9a:9c: 06:71:be:ac:0b:ba:64:79:d8:6a:4a:5e:73:56:7a:88:e1:02: 4f:74:78:68:56:1f:68:2b:b8:b0:8d:9a:4d:7b:50:bb:4a:15: 4a:6c:c8:da:f6:b0:ba:44:2e:05:cd:4d:a3:a2:35:a8:e7:9f: 67:88:af:8a:04:0b:6c:3a:f5:36:79:dd:d9:22:69:3f:79:cc: 48:53:84:f4:e1:95:40:4c:dd:8b:b0:b2:dd:ca:4d:f1:16:72: 1c:56:d2:3e:3c:f7:d8:dd:33:0e:d4:fe:83:4b:5d:57:8d:17: 8c:b7:58:a1:c3:8e:dc:2d:86:a4:6e:aa:fe:b1:87:e7:f9:b3: 7d:25:92:3e:22:e1:66:86:ec:23:26:b4:97:0b:5e:47:ad:f4: 52:f6:6b:ac:1b:a9:e1:28:51:c2:c6:ed:25:68:4d:33:bd:1a: 01:9f:34:e0:19:82:c4:6a:c8:99:03:04:e1:a7:88:34:e7:1e: bb:4c:8f:c8:a3:1a:98:c3:36:95:d4:2a:b1:2b:4f:3b:1f:04: 81:a5:9d:f9:48:f0:e3:23:6b:6c:4d:3e:9d:e0:a7:1e:15:15: 91:be:11:93:30:13:b9:c8:18:66:b3:04:67:9e:e0:12:f5:f5: 60:31:0c:5c -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCZcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA2MzAw MTM2MjlaFw0yNTA2MjQxMDQ2NDVaMDMxMTAvBgNVBAMTKENCRDg3RTdGNTJFRTVF RkMyRTcwQzE2RjY2MTUwQjQ1MEQ3QjZGNTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDHJXeDFmCxvg8drXHtHZeP2DJnNpgY3nmroH5FoMge7QQ/OSLQ lZEDAmMn0b30PfANtNSSszTVwE73Ouk9SHem+qLkQRrZc0tq4BzFfkpcuFhX7rnk 6n8wS6TKXAzqOuCplYmZsvSlD2lm0eJx6pgGYgeeZBs7MgavojUASbj9Viy1lwmM aPmfoFBqxvp/A7+FHKKcoeBpvkbRMvZ/v0ZhX6e+4gZ3UkawqFvupd5g9WUrlexM MAEzS3SsHzfnAn9H0C0/dxKm78CJGO9R2No5pM39gGx3YQgMrtneC2bwBeM5wv5W 0cb9LuhgxZCcsoRnuw/LMZZ1Fh9jGouR36edAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUy9h+f1LuXvwucMFvZhULRQ17b1MwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3k5aC1mMUx1WHZ3dWNNRnZaaFVMUlExN2IxTS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQBTCAwDQYJKoZIhvcNAQELBQADggEBAD4maxt+KkWsmDZ4KbBDjP2anAZx vqwLumR52GpKXnNWeojhAk90eGhWH2gruLCNmk17ULtKFUpsyNr2sLpELgXNTaOi Najnn2eIr4oEC2w69TZ53dkiaT95zEhThPThlUBM3Yuwst3KTfEWchxW0j4899jd Mw7U/oNLXVeNF4y3WKHDjtwthqRuqv6xh+f5s30lkj4i4WaG7CMmtJcLXket9FL2 a6wbqeEoUcLG7SVoTTO9GgGfNOAZgsRqyJkDBOGniDTnHrtMj8ijGpjDNpXUKrEr TzsfBIGlnflI8OMja2xNPp3gpx4VFZG+EZMwE7nIGGazBGee4BL19WAxDFw= -----END CERTIFICATE-----Generated at Sun Feb 16 22:23:53 2025 by rpki-client