$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/-vnTczptIUo6pXKDFD-glEGpK1w.roa File: -vnTczptIUo6pXKDFD-glEGpK1w.roa (raw, json) Hash identifier: xWJsr4QIl0VaX+BebownynBOXtUceQRsNlQNs7i0EVg= Subject key identifier: FA:F9:D3:73:3A:6D:21:4A:3A:A5:72:83:14:3F:A0:94:41:A9:2B:5C Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0ACD Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-vnTczptIUo6pXKDFD-glEGpK1w.roa Signing time: Tue 31 Dec 2024 01:28:51 +0000 ROA not before: Tue 31 Dec 2024 01:28:51 +0000 ROA not after: Mon 15 Dec 2025 01:30:03 +0000 asID: 9605 IP address blocks: 49.109.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Apr 2025 17:33:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2765 (0xacd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Dec 31 01:28:51 2024 GMT Not After : Dec 15 01:30:03 2025 GMT Subject: CN=FAF9D3733A6D214A3AA57283143FA09441A92B5C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:5b:27:c9:f1:28:68:f6:41:d5:23:ae:45:86: 05:08:2c:d7:af:90:fa:3c:c5:4a:1b:16:02:88:53: e0:4e:3b:39:89:81:ff:e1:a1:dc:a1:f9:9c:70:05: b4:65:cf:8b:a4:fd:9a:39:32:95:af:58:73:e9:97: 0f:f8:90:36:30:34:13:b9:8c:16:62:30:f2:e4:ba: c3:5f:f9:b1:5d:9f:0c:9f:1a:3a:b6:99:cf:3c:49: df:4a:df:12:d2:86:61:64:5e:55:72:46:05:e7:fd: fd:d0:b9:e0:d6:63:86:9a:0d:ba:e5:5f:5c:8e:d8: 6c:de:5d:b8:76:91:df:5a:27:3b:2d:81:ed:5f:1d: 91:28:86:ca:3d:15:f0:6d:b8:55:6e:54:f1:79:ed: e8:16:1f:ef:74:f2:8f:81:9d:04:33:eb:45:15:a4: c5:2c:b2:ae:06:39:c7:f8:2b:93:2f:17:20:a3:af: e2:1e:5d:7f:d8:49:ee:0e:f7:e5:c6:e6:24:78:44: 80:ff:a8:50:b4:d0:44:7b:1f:66:04:0b:2d:bf:7e: 2f:e1:40:56:60:55:1a:d2:76:c4:fc:31:0b:3c:42: 7e:3a:38:af:94:eb:5a:04:12:67:5d:98:e0:d1:9a: cb:52:8d:31:4f:b0:80:05:50:9d:26:29:e6:c0:b1: 52:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:F9:D3:73:3A:6D:21:4A:3A:A5:72:83:14:3F:A0:94:41:A9:2B:5C X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-vnTczptIUo6pXKDFD-glEGpK1w.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.109.128.0/18 Signature Algorithm: sha256WithRSAEncryption 64:c5:4b:00:cc:0a:ab:5b:66:a5:61:82:59:0c:80:40:b9:92: 4b:99:c1:a7:12:69:19:ba:4a:64:84:7f:d4:d4:d2:b2:14:2d: 2a:f6:e9:cb:d5:7b:e3:76:37:02:41:67:5c:c6:18:a8:1b:c5: 16:79:dd:c5:e1:46:4d:a0:18:71:dd:90:68:ca:49:c4:73:5a: 9e:b1:65:ae:4c:9a:d2:f4:c9:29:4d:7e:fb:6c:42:94:c9:41: 3f:5c:52:3e:69:dc:6f:1e:78:39:3b:6e:09:de:b3:96:57:c0: ac:a5:47:b5:ea:fd:c6:06:38:40:ac:2b:84:67:04:4d:fe:b4: 3a:c6:80:c6:4f:b0:ca:7d:e0:99:e5:8b:cd:37:16:91:f5:b3: b3:be:97:3f:1c:88:99:b6:71:69:9f:5c:71:8a:2d:51:1f:d1: ce:d4:f0:7b:cf:81:ce:10:c9:b6:63:ba:71:31:ad:07:8f:e0: 1a:e2:9f:bc:ab:7f:11:78:13:96:cc:2f:d6:1b:31:01:d2:8a: 00:93:59:1c:c6:00:cf:10:a5:02:62:27:b2:df:48:69:6e:38: 73:5f:4a:ea:53:ad:cb:69:b2:4e:6e:ea:db:8a:49:3b:a7:fb: ec:d7:7a:8a:88:31:ef:14:a5:85:e4:81:60:ae:30:89:ae:6e: 3e:af:15:a9 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCs0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDEyMzEw MTI4NTFaFw0yNTEyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEZBRjlEMzczM0E2RDIx NEEzQUE1NzI4MzE0M0ZBMDk0NDFBOTJCNUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCbWyfJ8Sho9kHVI65FhgUILNevkPo8xUobFgKIU+BOOzmJgf/h odyh+ZxwBbRlz4uk/Zo5MpWvWHPplw/4kDYwNBO5jBZiMPLkusNf+bFdnwyfGjq2 mc88Sd9K3xLShmFkXlVyRgXn/f3QueDWY4aaDbrlX1yO2GzeXbh2kd9aJzstge1f HZEohso9FfBtuFVuVPF57egWH+908o+BnQQz60UVpMUssq4GOcf4K5MvFyCjr+Ie XX/YSe4O9+XG5iR4RID/qFC00ER7H2YECy2/fi/hQFZgVRrSdsT8MQs8Qn46OK+U 61oEEmddmODRmstSjTFPsIAFUJ0mKebAsVKdAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU+vnTczptIUo6pXKDFD+glEGpK1wwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5Ly12blRjenB0SVVvNnBYS0RGRC1nbEVHcEsxdy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAYxbYAwDQYJKoZIhvcNAQELBQADggEBAGTFSwDMCqtbZqVhglkMgEC5kkuZ wacSaRm6SmSEf9TU0rIULSr26cvVe+N2NwJBZ1zGGKgbxRZ53cXhRk2gGHHdkGjK ScRzWp6xZa5MmtL0ySlNfvtsQpTJQT9cUj5p3G8eeDk7bgnes5ZXwKylR7Xq/cYG OECsK4RnBE3+tDrGgMZPsMp94Jnli803FpH1s7O+lz8ciJm2cWmfXHGKLVEf0c7U 8HvPgc4QybZjunExrQeP4Brin7yrfxF4E5bML9YbMQHSigCTWRzGAM8QpQJiJ7Lf SGluOHNfSupTrctpsk5u6tuKSTun++zXeoqIMe8UpYXkgWCuMImubj6vFak= -----END CERTIFICATE-----Generated at Thu Apr 17 19:40:42 2025 by rpki-client