$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/457ffp6zjkpd9kzi_BUDRkPfhNE.roa File: 457ffp6zjkpd9kzi_BUDRkPfhNE.roa (raw, json) Hash identifier: Et9ir2WhTstCeDIz3eOSJsZzz/fALltEph+UHk0j65I= Subject key identifier: E3:9E:DF:7E:9E:B3:8E:4A:5D:F6:4C:E2:FC:15:03:46:43:DF:84:D1 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 093D Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/457ffp6zjkpd9kzi_BUDRkPfhNE.roa Signing time: Sun 30 Jun 2024 01:29:28 +0000 ROA not before: Sun 30 Jun 2024 01:29:28 +0000 ROA not after: Tue 24 Jun 2025 10:46:45 +0000 asID: 9605 IP address blocks: 1.76.224.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2365 (0x93d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 30 01:29:28 2024 GMT Not After : Jun 24 10:46:45 2025 GMT Subject: CN=E39EDF7E9EB38E4A5DF64CE2FC15034643DF84D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:de:37:bf:45:10:b1:14:69:7a:c3:5b:e8:c0: 27:48:69:8d:52:ad:11:8e:2c:fd:b5:49:d7:81:1d: 87:a8:d7:3a:9e:fb:14:ac:93:ee:1a:2a:cd:ba:76: a7:93:c7:2b:e4:03:52:dd:05:9a:39:61:16:11:6d: 17:82:f5:20:d8:45:68:10:06:5a:d5:87:0f:70:a8: b2:9d:7c:99:e9:8f:1f:22:00:2f:1b:4f:69:0b:2b: b7:7b:87:9c:0e:df:69:a2:da:56:84:76:1f:6d:66: 73:90:f3:43:63:e6:b4:01:9a:6d:a5:15:a8:5a:ee: 55:51:fc:8f:e5:5e:98:4f:d0:f9:5e:68:35:7c:42: 37:84:6b:49:15:32:9e:58:0d:5d:16:0f:f0:d1:cc: eb:df:5c:7e:ea:7d:03:55:34:63:16:58:7f:b6:9c: d8:9a:33:d9:60:6e:17:fe:1a:24:d0:a8:52:49:0d: 21:54:c1:f5:bd:9a:8a:c2:ae:83:ad:e5:38:02:3f: f6:44:4b:8f:b9:94:3e:68:e6:b6:42:22:bb:c4:dd: 2c:bc:95:8f:1f:2f:e9:e5:b9:dc:44:c5:93:22:16: 39:cf:1f:fd:91:87:3b:dd:49:a1:0e:cc:41:1d:c8: 97:e8:d1:eb:6b:5c:ae:eb:05:65:ff:b5:a8:25:59: 5d:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:9E:DF:7E:9E:B3:8E:4A:5D:F6:4C:E2:FC:15:03:46:43:DF:84:D1 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/457ffp6zjkpd9kzi_BUDRkPfhNE.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.76.224.0/23 Signature Algorithm: sha256WithRSAEncryption 0c:8c:e6:29:f5:ee:84:61:17:83:d7:3c:c1:f9:a2:5c:fb:1d: e4:76:87:83:d9:d6:e6:20:f6:34:5a:10:3e:8b:86:41:0b:0d: 89:59:f4:c1:37:a4:db:06:9f:c8:59:b2:96:37:ec:cf:78:d9: 30:ef:69:4d:64:b6:08:29:bb:24:5b:84:18:81:dd:4e:51:53: a7:ab:f2:79:0b:0d:24:86:26:f1:5b:be:34:33:8b:e1:0b:4d: 07:4d:38:e3:6f:3f:e6:62:f4:d0:53:4e:59:4e:a3:cb:3a:ed: f0:3a:1f:a4:68:16:db:3c:89:2a:ac:28:86:cb:7c:a8:80:84: 6c:01:72:f9:43:a1:2f:c9:0e:e5:12:d7:68:52:f7:de:6b:d3: 40:27:f6:e2:c7:9d:08:16:f0:b8:58:7d:b1:52:a1:db:47:ed: ad:23:02:d0:ae:e9:b1:92:f4:d0:ad:1d:6d:35:c3:39:e8:cd: 38:0a:c3:36:24:0b:12:24:fd:4b:6c:f1:4b:a6:72:1c:24:b3: 46:86:72:43:8b:3f:e6:10:19:fc:13:2a:e0:2b:18:97:ed:e1: 98:d0:16:9b:b0:2f:48:59:49:84:e9:cd:e5:2f:3f:2f:60:fa: c9:d7:94:51:50:83:7f:77:f5:b6:5a:dc:20:6d:c0:bd:f3:05: fd:f0:c4:15 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCT0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA2MzAw MTI5MjhaFw0yNTA2MjQxMDQ2NDVaMDMxMTAvBgNVBAMTKEUzOUVERjdFOUVCMzhF NEE1REY2NENFMkZDMTUwMzQ2NDNERjg0RDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC03je/RRCxFGl6w1vowCdIaY1SrRGOLP21SdeBHYeo1zqe+xSs k+4aKs26dqeTxyvkA1LdBZo5YRYRbReC9SDYRWgQBlrVhw9wqLKdfJnpjx8iAC8b T2kLK7d7h5wO32mi2laEdh9tZnOQ80Nj5rQBmm2lFaha7lVR/I/lXphP0PleaDV8 QjeEa0kVMp5YDV0WD/DRzOvfXH7qfQNVNGMWWH+2nNiaM9lgbhf+GiTQqFJJDSFU wfW9morCroOt5TgCP/ZES4+5lD5o5rZCIrvE3Sy8lY8fL+nludxExZMiFjnPH/2R hzvdSaEOzEEdyJfo0etrXK7rBWX/taglWV0FAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU457ffp6zjkpd9kzi/BUDRkPfhNEwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5LzQ1N2ZmcDZ6amtwZDlremlfQlVEUmtQZmhORS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEBTOAwDQYJKoZIhvcNAQELBQADggEBAAyM5in17oRhF4PXPMH5olz7HeR2 h4PZ1uYg9jRaED6LhkELDYlZ9ME3pNsGn8hZspY37M942TDvaU1ktggpuyRbhBiB 3U5RU6er8nkLDSSGJvFbvjQzi+ELTQdNOONvP+Zi9NBTTllOo8s67fA6H6RoFts8 iSqsKIbLfKiAhGwBcvlDoS/JDuUS12hS995r00An9uLHnQgW8LhYfbFSodtH7a0j AtCu6bGS9NCtHW01wznozTgKwzYkCxIk/Uts8Uumchwks0aGckOLP+YQGfwTKuAr GJft4ZjQFpuwL0hZSYTpzeUvPy9g+snXlFFQg3939bZa3CBtwL3zBf3wxBU= -----END CERTIFICATE-----Generated at Sat Apr 5 17:35:16 2025 by rpki-client