$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/373/zq8fwbptaOqbloIUGZbhKoX0bFA.roa File: zq8fwbptaOqbloIUGZbhKoX0bFA.roa (raw, json) Hash identifier: xvKoqCkgZbn2Yp0P5YIdaVLqaoh8z3fBkQbpvZgGlk8= Subject key identifier: CE:AF:1F:C1:BA:6D:68:EA:9B:96:82:14:19:96:E1:2A:85:F4:6C:50 Certificate issuer: /CN=89CF5C2AFA5B576577351C4199018D44CDC2D6DA Certificate serial: 2F Authority key identifier: 89:CF:5C:2A:FA:5B:57:65:77:35:1C:41:99:01:8D:44:CD:C2:D6:DA Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ic9cKvpbV2V3NRxBmQGNRM3C1to.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/zq8fwbptaOqbloIUGZbhKoX0bFA.roa Signing time: Sun 30 Jun 2024 01:32:29 +0000 ROA not before: Sun 30 Jun 2024 01:32:29 +0000 ROA not after: Tue 24 Jun 2025 10:46:45 +0000 asID: 9615 IP address blocks: 182.255.64.0/20 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/ic9cKvpbV2V3NRxBmQGNRM3C1to.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/ic9cKvpbV2V3NRxBmQGNRM3C1to.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ic9cKvpbV2V3NRxBmQGNRM3C1to.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47 (0x2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89CF5C2AFA5B576577351C4199018D44CDC2D6DA Validity Not Before: Jun 30 01:32:29 2024 GMT Not After : Jun 24 10:46:45 2025 GMT Subject: CN=CEAF1FC1BA6D68EA9B9682141996E12A85F46C50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:3b:ea:b0:16:21:db:05:ea:49:6f:31:ed:14: 6b:f1:b2:c2:67:4b:d6:81:d9:9c:ac:37:ea:46:7a: 09:c8:d8:36:4a:df:a8:3e:16:ab:37:b2:5d:8b:10: ef:b7:b5:4a:d5:16:26:5b:af:99:8e:0a:5d:dd:e9: 08:cb:79:27:d8:55:82:ab:80:84:ac:8e:23:0b:c2: a4:1c:46:1b:18:b1:60:1c:d1:d8:ed:22:e2:a4:f0: 5d:7c:25:67:c1:43:10:25:0f:26:23:65:e5:31:5a: d3:c8:54:b1:93:de:2b:fd:b8:31:62:93:96:ff:2a: b9:7a:36:f1:e4:66:9d:0e:7e:7b:50:00:72:94:04: e5:3d:48:84:12:80:80:c1:70:11:77:4b:e7:8c:79: f1:83:8a:fd:33:96:e6:e3:d2:6a:1f:76:b5:e7:96: 15:24:ff:50:3b:1d:0c:6a:2e:38:a3:a4:2c:d7:78: 10:e6:ba:e9:d5:63:c0:b0:64:da:d2:3e:a6:8b:e3: 87:62:b8:91:47:68:87:d5:90:16:19:3b:fd:1c:a7: a7:64:26:68:19:28:72:32:0a:44:51:7f:87:a0:b7: 0c:f5:23:d6:b5:62:10:e9:75:de:46:8a:ee:3a:b2: 94:04:0e:bb:fe:da:f4:1e:a1:a4:22:74:ef:92:d8: 06:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:AF:1F:C1:BA:6D:68:EA:9B:96:82:14:19:96:E1:2A:85:F4:6C:50 X509v3 Authority Key Identifier: keyid:89:CF:5C:2A:FA:5B:57:65:77:35:1C:41:99:01:8D:44:CD:C2:D6:DA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/ic9cKvpbV2V3NRxBmQGNRM3C1to.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ic9cKvpbV2V3NRxBmQGNRM3C1to.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/zq8fwbptaOqbloIUGZbhKoX0bFA.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 182.255.64.0/20 Signature Algorithm: sha256WithRSAEncryption 6c:00:b7:18:09:2e:a9:01:2f:5b:59:19:d1:9a:36:f6:73:d2: d9:99:23:22:34:8f:ce:5f:1b:f4:db:2e:a5:95:3a:cf:4b:50: c0:e7:bc:3f:2c:2e:c1:5c:69:12:26:bd:f5:8c:c2:4d:52:f9: e0:e6:9d:b6:28:83:38:eb:93:0e:9e:3e:16:29:e5:e8:71:e3: f2:44:0a:3d:df:97:af:f3:d8:c2:bd:a0:1d:3a:ff:1f:a8:0d: eb:39:32:26:74:27:e0:7a:f5:a1:40:1f:6e:57:c3:e5:a0:d1: 3d:7e:29:5b:f2:f4:7e:7f:57:41:a7:f2:96:31:f0:90:00:6a: dd:60:16:92:bb:a1:76:d4:d4:7e:ad:ef:c8:b5:dd:96:84:12: dd:d7:d0:27:c7:02:6a:55:4b:c9:8e:d6:4d:fc:1a:7b:e5:e0: d0:19:83:02:e0:aa:b6:88:ed:fa:45:f9:0a:54:de:e2:65:fe: 97:68:71:4d:ba:15:d7:a0:51:37:79:21:62:58:9e:42:60:ab: 17:59:32:ea:1f:aa:ec:f0:25:0e:32:ad:f8:aa:39:bc:03:18: 17:88:4a:b4:5b:9f:1f:28:3b:9e:d3:d8:44:b6:aa:db:ed:8d: 19:52:a6:9b:3e:5d:f1:10:7e:fe:c6:8d:19:f5:8f:fb:c1:f9: b4:03:4e:cb -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBLzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4OUNG NUMyQUZBNUI1NzY1NzczNTFDNDE5OTAxOEQ0NENEQzJENkRBMB4XDTI0MDYzMDAx MzIyOVoXDTI1MDYyNDEwNDY0NVowMzExMC8GA1UEAxMoQ0VBRjFGQzFCQTZENjhF QTlCOTY4MjE0MTk5NkUxMkE4NUY0NkM1MDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANg76rAWIdsF6klvMe0Ua/GywmdL1oHZnKw36kZ6CcjYNkrfqD4W qzeyXYsQ77e1StUWJluvmY4KXd3pCMt5J9hVgquAhKyOIwvCpBxGGxixYBzR2O0i 4qTwXXwlZ8FDECUPJiNl5TFa08hUsZPeK/24MWKTlv8quXo28eRmnQ5+e1AAcpQE 5T1IhBKAgMFwEXdL54x58YOK/TOW5uPSah92teeWFST/UDsdDGouOKOkLNd4EOa6 6dVjwLBk2tI+povjh2K4kUdoh9WQFhk7/Rynp2QmaBkocjIKRFF/h6C3DPUj1rVi EOl13kaK7jqylAQOu/7a9B6hpCJ075LYBgsCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBTOrx/Bum1o6puWghQZluEqhfRsUDAfBgNVHSMEGDAWgBSJz1wq+ltXZXc1HEGZ AY1EzcLW2jAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzczL2ljOWNLdnBiVjJWM05SeEJtUUdOUk0zQzF0by5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2ljOWNLdnBiVjJWM05SeEJtUUdOUk0z QzF0by5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8zNzMvenE4ZndicHRhT3FibG9JVUdaYmhLb1gwYkZBLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBLb/QDANBgkqhkiG9w0BAQsFAAOCAQEAbAC3GAkuqQEvW1kZ0Zo29nPS2Zkj IjSPzl8b9NsupZU6z0tQwOe8PywuwVxpEia99YzCTVL54OadtiiDOOuTDp4+Finl 6HHj8kQKPd+Xr/PYwr2gHTr/H6gN6zkyJnQn4Hr1oUAfblfD5aDRPX4pW/L0fn9X QafyljHwkABq3WAWkruhdtTUfq3vyLXdloQS3dfQJ8cCalVLyY7WTfwae+Xg0BmD AuCqtojt+kX5ClTe4mX+l2hxTboV16BRN3khYlieQmCrF1ky6h+q7PAlDjKt+Ko5 vAMYF4hKtFufHyg7ntPYRLaq2+2NGVKmmz5d8RB+/saNGfWP+8H5tANOyw== -----END CERTIFICATE-----Generated at Sun Feb 16 22:22:01 2025 by rpki-client