$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/mK43-lGiOKGqDEswO2kKv_FxPxY.roa File: mK43-lGiOKGqDEswO2kKv_FxPxY.roa (raw, json) Hash identifier: BTEEok2xxsXPLymNeb82yHuzIZjXm6lL2VBXVNUvULU= Subject key identifier: 98:AE:37:FA:51:A2:38:A1:AA:0C:4B:30:3B:69:0A:BF:F1:71:3F:16 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0948 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/mK43-lGiOKGqDEswO2kKv_FxPxY.roa Signing time: Sun 30 Jun 2024 01:29:33 +0000 ROA not before: Sun 30 Jun 2024 01:29:33 +0000 ROA not after: Tue 24 Jun 2025 10:46:45 +0000 asID: 9605 IP address blocks: 110.158.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 18:34:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2376 (0x948) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 30 01:29:33 2024 GMT Not After : Jun 24 10:46:45 2025 GMT Subject: CN=98AE37FA51A238A1AA0C4B303B690ABFF1713F16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:1c:d8:9d:fb:fc:38:d8:a7:f6:db:bb:98:75: 8c:b9:7a:54:c9:3b:e1:4d:54:b6:fc:92:9e:ec:bc: 44:3f:e7:b8:09:a2:08:f6:86:57:cd:af:7b:ae:e7: ad:2e:98:8e:2b:25:9b:53:d6:92:18:11:da:c1:42: e9:4f:cc:32:27:ef:f2:e5:7a:f3:ff:ae:b7:f2:04: dc:9c:8b:b0:2d:90:b6:a7:48:d7:2f:e9:a2:50:ea: e5:07:90:bc:8e:fd:dc:30:2b:aa:b1:9c:d0:3f:90: 0a:d1:a8:c4:b1:d4:c5:4c:94:3b:8d:65:d8:d5:1f: 41:e8:0a:f1:38:9e:f3:c8:90:9c:69:e7:f6:d1:48: 99:e9:37:57:2d:ec:78:48:f7:58:3f:26:72:da:5d: 21:04:75:70:30:64:4d:49:58:1a:50:04:6f:90:86: 2d:7c:63:15:c9:4a:a4:12:49:7e:9b:91:6c:48:60: 35:d4:21:70:b8:c9:e7:77:6b:9c:2b:1b:1b:36:0b: d1:8f:14:3c:9c:03:18:4a:a2:b7:21:62:cc:b9:bb: b2:ad:2d:f3:ca:13:59:a1:91:34:7e:1a:3e:34:b4: 08:fa:54:bc:c0:4f:c3:0e:31:e4:53:ec:b2:27:af: 8b:4c:ed:ba:7b:90:d6:c2:fe:cf:f5:45:35:b0:a5: 0a:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:AE:37:FA:51:A2:38:A1:AA:0C:4B:30:3B:69:0A:BF:F1:71:3F:16 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/mK43-lGiOKGqDEswO2kKv_FxPxY.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 110.158.64.0/18 Signature Algorithm: sha256WithRSAEncryption bb:e0:44:58:ea:42:7b:c5:50:4e:02:da:24:c9:08:b0:ea:2e: e4:05:5d:6d:86:47:b1:87:ab:86:2c:00:97:00:79:56:61:ad: 74:3f:c2:04:d4:1a:86:38:5a:13:00:34:27:df:30:df:0f:bb: 36:f0:59:6d:1b:e3:b2:a5:97:46:75:e8:a7:95:67:cb:42:7e: 2d:f4:fa:51:dc:82:99:6d:72:45:bd:e0:22:2a:aa:65:3c:77: eb:e1:71:61:d7:9b:96:3c:5d:27:6e:1f:ca:8b:03:29:8e:55: 81:8d:ef:ac:4b:b2:0f:13:8b:c5:51:ee:d8:61:32:a2:c8:bd: 10:5e:a3:a5:c5:ad:bb:e3:0a:c0:9d:c4:97:5c:a7:b0:4f:09: 4c:f6:fd:f2:3c:fc:f9:50:3c:31:43:6d:4b:f1:88:8e:14:48: a7:b3:f4:54:78:b3:a4:bd:0b:6e:61:e0:04:3d:7f:e2:fd:a2: 75:ff:c0:c2:12:ca:3c:25:2d:3e:76:f8:47:e8:1e:29:48:7a: bc:e8:f7:86:7a:24:e1:1b:75:51:32:53:7e:af:98:68:3e:29: 74:69:ca:ae:7f:07:57:89:ac:70:c4:65:62:46:22:62:d9:ec: aa:40:55:42:02:c5:eb:1c:3b:db:28:4e:17:6a:22:ef:31:08: 73:46:9b:31 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCUgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA2MzAw MTI5MzNaFw0yNTA2MjQxMDQ2NDVaMDMxMTAvBgNVBAMTKDk4QUUzN0ZBNTFBMjM4 QTFBQTBDNEIzMDNCNjkwQUJGRjE3MTNGMTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDGHNid+/w42Kf227uYdYy5elTJO+FNVLb8kp7svEQ/57gJogj2 hlfNr3uu560umI4rJZtT1pIYEdrBQulPzDIn7/LlevP/rrfyBNyci7AtkLanSNcv 6aJQ6uUHkLyO/dwwK6qxnNA/kArRqMSx1MVMlDuNZdjVH0HoCvE4nvPIkJxp5/bR SJnpN1ct7HhI91g/JnLaXSEEdXAwZE1JWBpQBG+Qhi18YxXJSqQSSX6bkWxIYDXU IXC4yed3a5wrGxs2C9GPFDycAxhKorchYsy5u7KtLfPKE1mhkTR+Gj40tAj6VLzA T8MOMeRT7LInr4tM7bp7kNbC/s/1RTWwpQo5AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUmK43+lGiOKGqDEswO2kKv/FxPxYwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L21LNDMtbEdpT0tHcURFc3dPMmtLdl9GeFB4WS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAZunkAwDQYJKoZIhvcNAQELBQADggEBALvgRFjqQnvFUE4C2iTJCLDqLuQF XW2GR7GHq4YsAJcAeVZhrXQ/wgTUGoY4WhMANCffMN8PuzbwWW0b47Kll0Z16KeV Z8tCfi30+lHcgpltckW94CIqqmU8d+vhcWHXm5Y8XSduH8qLAymOVYGN76xLsg8T i8VR7thhMqLIvRBeo6XFrbvjCsCdxJdcp7BPCUz2/fI8/PlQPDFDbUvxiI4USKez 9FR4s6S9C25h4AQ9f+L9onX/wMISyjwlLT52+EfoHilIerzo94Z6JOEbdVEyU36v mGg+KXRpyq5/B1eJrHDEZWJGImLZ7KpAVUICxescO9soThdqIu8xCHNGmzE= -----END CERTIFICATE-----Generated at Sat Apr 26 20:14:04 2025 by rpki-client