$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/zRE7gxMS8QVEFAvXHnumfmsaRRQ.roa File: zRE7gxMS8QVEFAvXHnumfmsaRRQ.roa (raw, json) Hash identifier: a9LVD2inLcpKP6oTFNS+eWH5piNTZQavmU4e4buySpY= Subject key identifier: CD:11:3B:83:13:12:F1:05:44:14:0B:D7:1E:7B:A6:7E:6B:1A:45:14 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0931 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/zRE7gxMS8QVEFAvXHnumfmsaRRQ.roa Signing time: Mon 17 Jun 2024 08:16:01 +0000 ROA not before: Mon 17 Jun 2024 08:16:01 +0000 ROA not after: Sun 15 Jun 2025 01:30:03 +0000 asID: 9605 IP address blocks: 1.75.64.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 22:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2353 (0x931) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 17 08:16:01 2024 GMT Not After : Jun 15 01:30:03 2025 GMT Subject: CN=CD113B831312F10544140BD71E7BA67E6B1A4514 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:4e:e7:d5:0f:61:4b:ff:de:99:0f:cc:8b:96: 75:91:0c:0c:76:bc:81:9a:0f:81:d2:09:a5:80:33: bb:c7:6a:41:94:a6:09:0a:c9:46:14:67:7d:f2:ee: 0b:6c:51:56:4f:9e:d7:c9:a3:03:81:ee:5c:45:93: f3:3b:3d:57:a8:4c:cf:89:5b:ad:98:bb:cf:a0:09: 5f:1b:ce:bd:41:80:6a:fb:c3:0f:b2:71:c0:4c:95: 01:5a:db:66:f9:cf:7c:3f:3f:9f:6a:ac:ed:66:02: 36:71:f3:8d:ba:59:6b:e9:5f:fe:fa:ae:67:6d:67: 2c:47:56:69:04:4a:e7:e7:d8:3a:24:ab:07:c1:ee: fc:32:7d:2f:64:42:27:5f:3e:3a:0e:6c:25:dd:21: 87:10:a5:c0:ba:72:1c:96:ea:9d:cd:fb:f3:82:02: 81:db:96:59:d2:41:96:a9:d7:bd:4d:a5:9b:83:13: b5:13:fa:d4:75:4e:cc:c4:ab:17:4e:44:fe:10:5f: 73:75:3d:89:7d:4f:da:9f:2e:3e:ed:e3:ed:70:d0: 7a:70:b3:ac:b5:1d:46:80:6c:c6:e8:90:11:6c:a2: 6c:0d:3b:c0:2f:72:23:03:b0:60:4e:63:02:8d:e2: 30:77:67:b6:05:65:dc:8a:38:26:48:e7:e8:30:46: a3:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:11:3B:83:13:12:F1:05:44:14:0B:D7:1E:7B:A6:7E:6B:1A:45:14 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/zRE7gxMS8QVEFAvXHnumfmsaRRQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.75.64.0/19 Signature Algorithm: sha256WithRSAEncryption 37:71:c9:dc:1f:54:e9:ec:56:9b:74:6f:48:91:06:97:ca:7f: 17:51:fb:30:50:5f:ba:30:19:aa:e2:81:5c:64:45:7b:20:ba: 3b:cc:cf:2b:05:5e:8e:2b:e9:89:83:ad:27:f0:16:6b:1b:15: 57:20:99:4e:39:9c:a0:2d:f7:1c:f5:fe:16:3d:be:00:c6:2a: 09:92:b1:d3:a4:c1:43:5b:ee:9d:7f:1f:3d:e7:35:6e:87:0a: ad:9c:67:75:d9:cb:b8:6e:46:7e:e3:3a:6e:39:7f:5d:c7:46: fd:69:65:0e:20:76:12:ca:30:71:97:7b:7f:42:4b:7a:b1:4c: a8:3b:3a:de:1b:e6:2b:eb:0b:dc:11:de:46:d7:25:99:39:26: bf:fd:21:7f:6e:28:ae:41:7b:90:ac:4b:bb:a5:5f:21:6d:e8: ef:81:e4:5e:d7:e3:3e:0e:c5:08:aa:7e:d2:d5:f3:f9:18:62: a6:59:a5:86:ab:06:a6:ce:40:b0:b3:a6:4d:01:d1:a4:1b:42: 3b:cd:45:62:f5:ee:61:c7:c7:47:34:81:db:a2:13:f0:53:25: 3f:34:ac:5e:f8:7b:e8:78:24:6d:95:0b:1b:b6:ef:71:81:23: bf:e5:6b:8c:55:c1:4e:12:32:50:97:44:6e:9e:42:af:51:3e: a2:ab:1b:78 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCTEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA2MTcw ODE2MDFaFw0yNTA2MTUwMTMwMDNaMDMxMTAvBgNVBAMTKENEMTEzQjgzMTMxMkYx MDU0NDE0MEJENzFFN0JBNjdFNkIxQTQ1MTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDzTufVD2FL/96ZD8yLlnWRDAx2vIGaD4HSCaWAM7vHakGUpgkK yUYUZ33y7gtsUVZPntfJowOB7lxFk/M7PVeoTM+JW62Yu8+gCV8bzr1BgGr7ww+y ccBMlQFa22b5z3w/P59qrO1mAjZx8426WWvpX/76rmdtZyxHVmkESufn2DokqwfB 7vwyfS9kQidfPjoObCXdIYcQpcC6chyW6p3N+/OCAoHbllnSQZap171NpZuDE7UT +tR1TszEqxdORP4QX3N1PYl9T9qfLj7t4+1w0Hpws6y1HUaAbMbokBFsomwNO8Av ciMDsGBOYwKN4jB3Z7YFZdyKOCZI5+gwRqNnAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUzRE7gxMS8QVEFAvXHnumfmsaRRQwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3pSRTdneE1TOFFWRUZBdlhIbnVtZm1zYVJSUS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAUBS0AwDQYJKoZIhvcNAQELBQADggEBADdxydwfVOnsVpt0b0iRBpfKfxdR +zBQX7owGarigVxkRXsgujvMzysFXo4r6YmDrSfwFmsbFVcgmU45nKAt9xz1/hY9 vgDGKgmSsdOkwUNb7p1/Hz3nNW6HCq2cZ3XZy7huRn7jOm45f13HRv1pZQ4gdhLK MHGXe39CS3qxTKg7Ot4b5ivrC9wR3kbXJZk5Jr/9IX9uKK5Be5CsS7ulXyFt6O+B 5F7X4z4OxQiqftLV8/kYYqZZpYarBqbOQLCzpk0B0aQbQjvNRWL17mHHx0c0gdui E/BTJT80rF74e+h4JG2VCxu273GBI7/la4xVwU4SMlCXRG6eQq9RPqKrG3g= -----END CERTIFICATE-----Generated at Mon Nov 25 23:54:43 2024 by rpki-client on console-ams.rpki-client.org