$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/440/CSfnftx7z1HK_hy4T6fS6ugevD8.roa File: CSfnftx7z1HK_hy4T6fS6ugevD8.roa (raw, json) Hash identifier: BZQVATzXhyiODOu58GYW4HOVPhH9yO2K1q6/IQrQAL8= Subject key identifier: 09:27:E7:7E:DC:7B:CF:51:CA:FE:1C:B8:4F:A7:D2:EA:E8:1E:BC:3F Certificate issuer: /CN=E62338DE332C6F4B9E2596EE5DC379A25EFE58CF Certificate serial: 6F Authority key identifier: E6:23:38:DE:33:2C:6F:4B:9E:25:96:EE:5D:C3:79:A2:5E:FE:58:CF Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/CSfnftx7z1HK_hy4T6fS6ugevD8.roa Signing time: Sat 30 Nov 2024 01:31:47 +0000 ROA not before: Sat 30 Nov 2024 01:31:47 +0000 ROA not after: Sat 15 Nov 2025 01:30:03 +0000 asID: 17676 IP address blocks: 61.193.160.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/5iM43jMsb0ueJZbuXcN5ol7-WM8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/5iM43jMsb0ueJZbuXcN5ol7-WM8.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 20:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 111 (0x6f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E62338DE332C6F4B9E2596EE5DC379A25EFE58CF Validity Not Before: Nov 30 01:31:47 2024 GMT Not After : Nov 15 01:30:03 2025 GMT Subject: CN=0927E77EDC7BCF51CAFE1CB84FA7D2EAE81EBC3F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:87:2d:23:6a:c3:0e:e2:e7:3b:3f:98:05:65: 37:c5:6e:3a:00:18:23:de:0e:0e:7a:0c:01:48:f7: e1:53:d4:c3:f8:0f:03:26:5b:e3:fc:d3:1c:3a:8a: 77:3a:7b:97:03:6b:0e:9e:f3:44:dd:69:1c:f0:26: bc:04:49:2d:6e:1a:3d:44:36:f6:7d:7e:f4:03:63: 24:09:36:38:36:99:8a:2f:40:03:68:22:6b:c1:ad: 45:c0:81:d0:08:49:2d:71:80:52:63:e3:6d:90:9f: 23:d2:f0:d6:b8:be:2c:ff:c8:d9:bf:40:9a:c6:00: 80:d4:13:b9:44:36:cc:19:2e:a0:73:5a:5d:5d:f7: 04:e1:55:1d:23:8b:3d:d5:e8:2f:05:24:6a:df:b5: 38:dc:15:05:cd:59:b6:9b:7e:d4:6e:f2:ea:fe:4b: e7:a2:6c:dd:09:1f:c5:45:2b:79:5b:4e:07:fe:49: ff:ea:93:42:e4:07:64:2e:2a:b2:83:c1:d5:22:2b: fd:ba:80:e8:9e:5f:c3:25:76:af:78:bb:e3:d0:e5: 2e:d4:a1:04:c4:00:9a:82:1f:1d:bd:97:62:3f:4f: ac:d4:e3:7c:6e:a2:cf:fa:9f:1f:bb:6d:44:e7:ea: 96:cf:be:73:9a:9b:5e:62:19:10:fc:49:c3:94:09: 8f:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:27:E7:7E:DC:7B:CF:51:CA:FE:1C:B8:4F:A7:D2:EA:E8:1E:BC:3F X509v3 Authority Key Identifier: keyid:E6:23:38:DE:33:2C:6F:4B:9E:25:96:EE:5D:C3:79:A2:5E:FE:58:CF X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/5iM43jMsb0ueJZbuXcN5ol7-WM8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/CSfnftx7z1HK_hy4T6fS6ugevD8.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 61.193.160.0/19 Signature Algorithm: sha256WithRSAEncryption 29:d2:9e:cc:7a:42:9e:2c:17:1b:f8:a5:61:37:db:15:a4:c0: 0f:4d:3d:8f:7b:d6:a2:b9:3a:81:fc:44:46:e7:d2:dd:14:0c: 42:ff:6d:b6:f4:43:cc:b9:e4:e3:a9:f4:ed:92:84:ab:13:02: 37:d3:60:17:ae:fa:a4:21:7b:89:13:d7:6a:e9:64:da:69:cc: 0a:44:f8:77:c9:3a:f6:6e:0b:95:fb:6f:74:cc:80:c1:d0:b6: 99:52:96:af:e3:b7:1c:ab:47:4c:95:ca:2b:d9:8d:e8:0d:1a: d2:57:44:53:69:a9:ac:aa:87:dd:f5:d6:8c:72:9a:9d:99:0e: 6f:c3:5b:49:ae:30:77:92:d7:05:96:6a:f5:9c:f1:2b:c0:6c: c1:dc:c3:59:04:04:b5:ab:49:ea:1f:ee:51:b1:60:9f:d5:9c: 4f:6e:d8:64:ae:c5:9e:ea:f7:f5:c8:18:38:8e:be:55:40:88: 6f:15:56:4f:58:45:c2:3e:5c:f4:81:13:e0:f4:4a:e8:4d:5f: a3:4b:94:58:03:70:7b:1b:7e:48:2a:ea:fe:b3:f2:1b:dc:9a: 9b:a8:c8:c5:d2:e3:bc:d3:b9:e2:cd:16:8e:29:2d:95:92:32: c9:fa:8a:ad:4a:b5:44:b4:2e:cc:71:5e:ec:0e:2e:69:cb:b9: 8f:12:88:b8 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBbzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFNjIz MzhERTMzMkM2RjRCOUUyNTk2RUU1REMzNzlBMjVFRkU1OENGMB4XDTI0MTEzMDAx MzE0N1oXDTI1MTExNTAxMzAwM1owMzExMC8GA1UEAxMoMDkyN0U3N0VEQzdCQ0Y1 MUNBRkUxQ0I4NEZBN0QyRUFFODFFQkMzRjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMiHLSNqww7i5zs/mAVlN8VuOgAYI94ODnoMAUj34VPUw/gPAyZb 4/zTHDqKdzp7lwNrDp7zRN1pHPAmvARJLW4aPUQ29n1+9ANjJAk2ODaZii9AA2gi a8GtRcCB0AhJLXGAUmPjbZCfI9Lw1ri+LP/I2b9AmsYAgNQTuUQ2zBkuoHNaXV33 BOFVHSOLPdXoLwUkat+1ONwVBc1Ztpt+1G7y6v5L56Js3QkfxUUreVtOB/5J/+qT QuQHZC4qsoPB1SIr/bqA6J5fwyV2r3i749DlLtShBMQAmoIfHb2XYj9PrNTjfG6i z/qfH7ttROfqls++c5qbXmIZEPxJw5QJj7ECAwEAAaOCAiQwggIgMB0GA1UdDgQW BBQJJ+d+3HvPUcr+HLhPp9Lq6B68PzAfBgNVHSMEGDAWgBTmIzjeMyxvS54llu5d w3miXv5YzzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNDQwLzVpTTQzak1zYjB1ZUpaYnVYY041b2w3LVdNOC5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzVpTTQzak1zYjB1ZUpaYnVYY041b2w3 LVdNOC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC80NDAvQ1NmbmZ0eDd6MUhLX2h5NFQ2ZlM2dWdldkQ4LnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBT3BoDANBgkqhkiG9w0BAQsFAAOCAQEAKdKezHpCniwXG/ilYTfbFaTAD009 j3vWork6gfxERufS3RQMQv9ttvRDzLnk46n07ZKEqxMCN9NgF676pCF7iRPXaulk 2mnMCkT4d8k69m4LlftvdMyAwdC2mVKWr+O3HKtHTJXKK9mN6A0a0ldEU2mprKqH 3fXWjHKanZkOb8NbSa4wd5LXBZZq9ZzxK8BswdzDWQQEtatJ6h/uUbFgn9WcT27Y ZK7Fnur39cgYOI6+VUCIbxVWT1hFwj5c9IET4PRK6E1fo0uUWANwext+SCrq/rPy G9yam6jIxdLjvNO54s0WjiktlZIyyfqKrUq1RLQuzHFe7A4uacu5jxKIuA== -----END CERTIFICATE-----Generated at Mon Apr 28 22:52:39 2025 by rpki-client on console.sobornost.net