$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/wmx3sArpwOwxYIqG3OCq1NnmS1Y.roa File: wmx3sArpwOwxYIqG3OCq1NnmS1Y.roa (raw, json) Hash identifier: JQq+OYTnAV6nmAPcWtFSl2R92R0e146RUT1+ASGKyb0= Subject key identifier: C2:6C:77:B0:0A:E9:C0:EC:31:60:8A:86:DC:E0:AA:D4:D9:E6:4B:56 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0AB4 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/wmx3sArpwOwxYIqG3OCq1NnmS1Y.roa Signing time: Sun 30 Jun 2024 01:54:32 +0000 ROA not before: Sun 30 Jun 2024 01:54:32 +0000 ROA not after: Tue 24 Jun 2025 10:46:45 +0000 asID: 9605 IP address blocks: 1.67.232.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 18:34:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2740 (0xab4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 30 01:54:32 2024 GMT Not After : Jun 24 10:46:45 2025 GMT Subject: CN=C26C77B00AE9C0EC31608A86DCE0AAD4D9E64B56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:53:c9:5b:c0:2b:26:fe:30:f2:2d:5f:f1:87: 79:16:58:12:ad:9d:3d:8a:5c:c3:1a:5f:4a:65:09: 46:3a:b1:ac:0f:e7:aa:cf:f0:e6:d3:ba:3c:3e:b0: f7:19:e5:05:76:79:74:f1:fe:3d:8a:34:cd:2b:22: 93:08:e0:12:f4:58:95:2f:bf:bb:ef:44:5f:bc:2d: ec:c8:c3:f3:02:59:8b:e3:1e:44:21:45:65:16:6d: 2d:d2:26:0e:a4:7c:9c:49:63:b3:50:ea:72:18:22: e2:1b:be:73:01:c6:a0:50:fe:14:11:3b:69:1e:19: fb:99:80:69:d1:d9:f4:7c:a2:ef:62:8d:13:00:2f: ea:5d:f2:39:e4:f0:ce:4b:c3:78:00:16:91:d0:e1: 91:27:ed:54:4b:a8:4a:2a:28:14:a7:47:71:dc:a6: 37:d3:64:eb:cb:93:3a:a9:e4:1a:9d:45:03:83:64: c7:3b:fa:51:ea:f9:ad:ef:84:32:dd:1d:63:2c:89: 8b:4d:11:99:0e:2d:37:38:60:98:e5:0d:45:de:da: ac:9b:2a:c1:09:c2:d8:c5:ca:a9:9d:16:10:9e:33: d4:82:6b:79:5c:67:f9:2d:8d:80:24:06:21:ed:6a: 43:e4:74:e0:2e:a2:85:65:96:0d:99:42:25:12:e3: 8c:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:6C:77:B0:0A:E9:C0:EC:31:60:8A:86:DC:E0:AA:D4:D9:E6:4B:56 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/wmx3sArpwOwxYIqG3OCq1NnmS1Y.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.67.232.0/23 Signature Algorithm: sha256WithRSAEncryption df:32:f5:e6:28:12:ea:f5:d4:fa:f7:9d:6d:67:62:df:8f:8c: 15:bd:50:6b:0a:3b:51:40:4b:e2:9c:70:f1:ef:14:c0:95:29: 30:d6:45:5b:8c:0f:fa:62:23:05:c6:a5:91:a2:a9:1e:90:01: f1:27:6e:2e:31:e6:a5:f2:42:e6:aa:11:75:4f:42:a5:00:0d: 91:27:97:c2:51:52:76:0a:3e:9d:86:85:5d:76:23:c6:2c:64: d7:c9:67:4f:de:b8:98:5a:2c:68:12:fb:82:21:4e:91:ec:4b: 2b:f0:e5:0a:65:f1:1c:5e:5d:23:53:de:fb:98:32:d9:0b:0a: ee:f5:bb:f1:c0:4d:55:a3:57:75:d6:40:54:a2:b7:58:f4:53: 82:df:aa:60:6d:75:47:48:63:05:d0:ca:e2:ef:2f:ba:87:3a: 62:b2:bb:2f:2c:ea:bf:01:d6:9a:7e:b8:40:20:56:e6:a9:9c: 62:ff:36:74:c1:e2:b1:27:4a:c8:d3:d8:a6:9f:a3:35:77:ff: f2:4b:3b:7d:c0:3f:2b:52:86:7a:f4:5e:c8:95:b8:18:4d:3c: b0:24:dc:40:d6:6f:f3:ee:a5:49:38:f9:5e:ed:88:6f:eb:68: 0a:2b:b7:54:ff:30:84:27:03:71:e9:82:85:95:1a:1d:05:cd: 2a:fd:7a:69 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCrQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA2MzAw MTU0MzJaFw0yNTA2MjQxMDQ2NDVaMDMxMTAvBgNVBAMTKEMyNkM3N0IwMEFFOUMw RUMzMTYwOEE4NkRDRTBBQUQ0RDlFNjRCNTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDLU8lbwCsm/jDyLV/xh3kWWBKtnT2KXMMaX0plCUY6sawP56rP 8ObTujw+sPcZ5QV2eXTx/j2KNM0rIpMI4BL0WJUvv7vvRF+8LezIw/MCWYvjHkQh RWUWbS3SJg6kfJxJY7NQ6nIYIuIbvnMBxqBQ/hQRO2keGfuZgGnR2fR8ou9ijRMA L+pd8jnk8M5Lw3gAFpHQ4ZEn7VRLqEoqKBSnR3HcpjfTZOvLkzqp5BqdRQODZMc7 +lHq+a3vhDLdHWMsiYtNEZkOLTc4YJjlDUXe2qybKsEJwtjFyqmdFhCeM9SCa3lc Z/ktjYAkBiHtakPkdOAuooVllg2ZQiUS44xPAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUwmx3sArpwOwxYIqG3OCq1NnmS1YwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3dteDNzQXJwd093eFlJcUczT0NxMU5ubVMxWS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEBQ+gwDQYJKoZIhvcNAQELBQADggEBAN8y9eYoEur11Pr3nW1nYt+PjBW9 UGsKO1FAS+KccPHvFMCVKTDWRVuMD/piIwXGpZGiqR6QAfEnbi4x5qXyQuaqEXVP QqUADZEnl8JRUnYKPp2GhV12I8YsZNfJZ0/euJhaLGgS+4IhTpHsSyvw5Qpl8Rxe XSNT3vuYMtkLCu71u/HATVWjV3XWQFSit1j0U4LfqmBtdUdIYwXQyuLvL7qHOmKy uy8s6r8B1pp+uEAgVuapnGL/NnTB4rEnSsjT2KafozV3//JLO33APytShnr0XsiV uBhNPLAk3EDWb/PupUk4+V7tiG/raAort1T/MIQnA3HpgoWVGh0FzSr9emk= -----END CERTIFICATE-----Generated at Sat Apr 26 20:14:02 2025 by rpki-client