$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/KDpZj6QmLt8MUAGmWaSP540NfIM.roa File: KDpZj6QmLt8MUAGmWaSP540NfIM.roa (raw, json) Hash identifier: MBPFRD7RjUKvpErdDfeCRHkGrAtO/j1+luqxBpKC6Rk= Subject key identifier: 28:3A:59:8F:A4:26:2E:DF:0C:50:01:A6:59:A4:8F:E7:8D:0D:7C:83 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0992 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/KDpZj6QmLt8MUAGmWaSP540NfIM.roa Signing time: Sun 30 Jun 2024 01:36:27 +0000 ROA not before: Sun 30 Jun 2024 01:36:27 +0000 ROA not after: Tue 24 Jun 2025 10:46:45 +0000 asID: 9605 IP address blocks: 211.14.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 16:57:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2450 (0x992) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 30 01:36:27 2024 GMT Not After : Jun 24 10:46:45 2025 GMT Subject: CN=283A598FA4262EDF0C5001A659A48FE78D0D7C83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:23:89:95:a8:bf:c4:65:3a:02:6c:fd:62:f1: df:1a:7a:ea:5f:9d:4f:b6:96:28:dc:11:63:f4:12: 29:dc:4d:8c:d8:ab:0d:bd:71:fc:51:a2:53:61:98: 8c:1b:7a:fd:12:b9:2f:92:3d:d7:c2:d5:88:3b:70: e2:65:80:09:f0:8d:2d:98:0c:b1:c2:36:d1:63:59: 9d:a1:16:03:cd:b7:90:54:38:b8:ca:38:40:77:7e: 88:90:42:fb:4e:75:cb:75:33:4a:89:bb:ea:b7:75: c6:c7:e8:c1:7a:e2:b3:2e:69:de:d0:bf:a0:8a:b4: 51:a3:d0:bd:39:0e:fa:a5:03:77:4d:df:80:fc:5a: 4e:a5:58:77:f8:85:4f:81:eb:99:ab:bf:b7:2e:bb: 88:e6:d0:e9:12:39:90:48:57:e8:a9:f4:a8:70:57: fb:94:e3:69:56:cb:e9:9b:c2:b9:cf:f5:fb:cd:f5: 7b:cb:e4:1f:bd:7c:83:55:0f:e3:bf:0b:8c:75:1a: 63:44:76:95:e2:2d:49:92:73:cc:2b:3f:99:42:77: 5f:fb:24:d4:1b:0c:91:e9:63:08:95:19:40:ee:34: f2:50:b6:ce:0d:fe:66:ef:68:16:85:13:7a:ef:b8: 1f:1b:4d:bb:cf:fb:a0:2b:77:ef:aa:51:c1:f3:48: ac:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:3A:59:8F:A4:26:2E:DF:0C:50:01:A6:59:A4:8F:E7:8D:0D:7C:83 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/KDpZj6QmLt8MUAGmWaSP540NfIM.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 211.14.116.0/24 Signature Algorithm: sha256WithRSAEncryption 5f:5f:d0:f3:7e:b6:33:9d:02:45:c9:be:6c:f4:52:a0:c9:0d: 9f:04:d9:16:55:bc:53:3f:7f:29:9a:bb:b0:55:5a:45:e5:d3: 7d:eb:73:09:9a:e4:cd:7e:b9:60:36:94:2c:43:05:ca:3b:38: ab:f7:22:23:7f:e7:96:c4:a4:c6:db:d1:dc:c1:a7:5a:cc:73: 70:0c:b4:74:81:0c:ac:0b:3e:7e:61:f2:df:52:f4:df:b9:65: 7c:08:e9:b9:40:7d:cd:20:6c:33:53:3b:2c:fb:5d:bf:6a:3c: fe:2b:39:4e:08:e0:25:bf:9f:0d:ba:f0:68:b9:d3:39:ea:ba: 15:76:53:59:c7:ae:bc:a2:2d:63:2c:82:08:33:b8:65:fa:5f: 21:7b:9f:72:15:96:8e:4e:ff:d5:8e:0f:08:28:80:f8:6c:8e: bb:14:dc:53:d9:0f:0c:16:00:e9:ca:57:bb:05:d6:ec:30:9e: cd:d1:1a:33:69:1e:f2:1a:52:bf:75:94:32:cd:4d:e0:f0:df: 11:8a:97:aa:5d:bb:cf:96:51:f1:4a:f0:c0:df:6e:4e:69:d8: 31:4d:d0:c0:77:0c:c2:1f:6e:a3:6a:30:41:1d:e1:d4:49:f6: 34:0d:dc:4a:ee:d2:92:b5:ab:53:6d:0d:56:f1:b8:77:e4:e9: c6:48:d9:5a -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCZIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA2MzAw MTM2MjdaFw0yNTA2MjQxMDQ2NDVaMDMxMTAvBgNVBAMTKDI4M0E1OThGQTQyNjJF REYwQzUwMDFBNjU5QTQ4RkU3OEQwRDdDODMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCpI4mVqL/EZToCbP1i8d8aeupfnU+2lijcEWP0EincTYzYqw29 cfxRolNhmIwbev0SuS+SPdfC1Yg7cOJlgAnwjS2YDLHCNtFjWZ2hFgPNt5BUOLjK OEB3foiQQvtOdct1M0qJu+q3dcbH6MF64rMuad7Qv6CKtFGj0L05DvqlA3dN34D8 Wk6lWHf4hU+B65mrv7cuu4jm0OkSOZBIV+ip9KhwV/uU42lWy+mbwrnP9fvN9XvL 5B+9fINVD+O/C4x1GmNEdpXiLUmSc8wrP5lCd1/7JNQbDJHpYwiVGUDuNPJQts4N /mbvaBaFE3rvuB8bTbvP+6Ard++qUcHzSKwrAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUKDpZj6QmLt8MUAGmWaSP540NfIMwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0tEcFpqNlFtTHQ4TVVBR21XYVNQNTQwTmZJTS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADTDnQwDQYJKoZIhvcNAQELBQADggEBAF9f0PN+tjOdAkXJvmz0UqDJDZ8E 2RZVvFM/fymau7BVWkXl033rcwma5M1+uWA2lCxDBco7OKv3IiN/55bEpMbb0dzB p1rMc3AMtHSBDKwLPn5h8t9S9N+5ZXwI6blAfc0gbDNTOyz7Xb9qPP4rOU4I4CW/ nw268Gi50znquhV2U1nHrryiLWMsgggzuGX6XyF7n3IVlo5O/9WODwgogPhsjrsU 3FPZDwwWAOnKV7sF1uwwns3RGjNpHvIaUr91lDLNTeDw3xGKl6pdu8+WUfFK8MDf bk5p2DFN0MB3DMIfbqNqMEEd4dRJ9jQN3Eru0pK1q1NtDVbxuHfk6cZI2Vo= -----END CERTIFICATE-----Generated at Sat Apr 26 19:43:31 2025 by rpki-client