$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/5jv3ri4l5PkJJVj5BJcmm18UJHU.roa File: 5jv3ri4l5PkJJVj5BJcmm18UJHU.roa (raw, json) Hash identifier: kk8jc424TOhoxu57MbUH9Mr/2LTlfQmxh3ZVBxaI758= Subject key identifier: E6:3B:F7:AE:2E:25:E4:F9:09:25:58:F9:04:97:26:9B:5F:14:24:75 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 09B6 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/5jv3ri4l5PkJJVj5BJcmm18UJHU.roa Signing time: Sun 30 Jun 2024 01:38:22 +0000 ROA not before: Sun 30 Jun 2024 01:38:22 +0000 ROA not after: Tue 24 Jun 2025 10:46:45 +0000 asID: 9605 IP address blocks: 1.74.248.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2486 (0x9b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 30 01:38:22 2024 GMT Not After : Jun 24 10:46:45 2025 GMT Subject: CN=E63BF7AE2E25E4F9092558F90497269B5F142475 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:0c:0a:9e:af:d6:d8:f0:01:b8:3f:0a:0a:39: 89:44:40:22:87:b3:a1:b5:73:d1:36:3d:04:84:ce: 06:f9:1d:f2:0e:77:d9:a5:af:e3:5f:79:c1:62:15: 0e:11:c6:3b:3b:b6:c3:08:4a:13:fe:ee:f8:a4:d4: 7d:53:bc:fe:9e:83:c5:60:3b:9f:42:f7:37:8e:42: 78:75:01:bf:c0:38:db:f0:aa:4a:b0:22:e9:e4:82: 79:01:5c:a3:3b:9b:f4:7f:b0:bb:4f:46:72:af:43: cd:13:70:a3:eb:ed:dd:0c:be:93:a9:ba:6f:30:ae: 61:81:4f:38:56:c3:60:54:de:47:e9:b7:cf:36:52: 8b:a9:10:ad:16:bc:b3:17:1a:5a:76:f6:5c:9d:50: b5:21:d7:78:be:4b:9e:59:a3:d3:c0:d2:87:42:41: 9b:b7:7d:5f:0f:e1:3a:71:ff:90:a3:8b:d1:31:de: 22:50:2a:c0:d5:9d:b8:60:fd:89:68:32:5b:5d:39: 18:76:37:e9:e6:29:94:77:4d:38:fb:05:b2:83:27: 53:95:92:33:b9:1f:10:9f:1f:e6:69:6f:c5:2a:35: 76:5e:55:19:f8:21:07:d2:8a:e6:1d:66:fa:79:6c: 18:3d:7e:56:42:34:fc:c5:df:c2:1f:40:4e:23:cd: 0d:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:3B:F7:AE:2E:25:E4:F9:09:25:58:F9:04:97:26:9B:5F:14:24:75 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/5jv3ri4l5PkJJVj5BJcmm18UJHU.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.74.248.0/21 Signature Algorithm: sha256WithRSAEncryption 9f:99:03:79:75:65:60:1d:ff:99:5f:5f:f4:61:d5:95:f6:dd: d6:de:a1:3c:f9:cf:8d:d4:6a:f5:9e:c2:c5:70:75:19:c4:79: 84:21:a4:1d:4f:30:46:61:04:dc:14:a8:10:1f:6f:ce:e5:b4: db:55:05:17:d6:4e:03:bd:da:a6:aa:00:79:4d:6b:c8:fc:f7: fa:3d:ce:15:5b:a9:07:f1:f8:30:90:fe:ee:fc:99:37:49:dc: 8c:c5:1d:2e:b2:f9:23:69:0f:a3:9d:5c:27:88:bf:32:90:be: 81:ed:05:68:88:f1:14:f0:bd:15:a2:4d:07:d1:37:b4:d3:d9: 36:1d:2a:8a:8c:e4:d1:3c:5e:f4:c1:00:28:7d:51:d4:8b:3e: e6:e6:d6:ef:5c:ed:bf:3d:f7:dc:ef:18:2a:a8:78:c7:9b:ae: be:26:d0:95:b9:f1:8b:c8:4d:12:5f:34:dd:6f:e0:78:35:32: 53:0d:4d:73:c1:c6:88:64:bd:84:7a:43:e3:d1:fd:51:8e:85: 1b:19:6f:e4:3b:50:cf:f3:24:a5:14:f5:e4:fc:08:3f:7a:fd: e4:46:c2:ae:e8:e3:b8:91:1d:cd:73:b2:22:9a:32:f6:8d:d2: 4d:90:f8:59:07:ff:1e:ec:c6:93:88:bc:4b:5f:20:da:21:5e: 4e:60:95:e4 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCbYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA2MzAw MTM4MjJaFw0yNTA2MjQxMDQ2NDVaMDMxMTAvBgNVBAMTKEU2M0JGN0FFMkUyNUU0 RjkwOTI1NThGOTA0OTcyNjlCNUYxNDI0NzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDBDAqer9bY8AG4PwoKOYlEQCKHs6G1c9E2PQSEzgb5HfIOd9ml r+NfecFiFQ4Rxjs7tsMIShP+7vik1H1TvP6eg8VgO59C9zeOQnh1Ab/AONvwqkqw IunkgnkBXKM7m/R/sLtPRnKvQ80TcKPr7d0MvpOpum8wrmGBTzhWw2BU3kfpt882 UoupEK0WvLMXGlp29lydULUh13i+S55Zo9PA0odCQZu3fV8P4Tpx/5Cji9Ex3iJQ KsDVnbhg/YloMltdORh2N+nmKZR3TTj7BbKDJ1OVkjO5HxCfH+Zpb8UqNXZeVRn4 IQfSiuYdZvp5bBg9flZCNPzF38IfQE4jzQ1jAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU5jv3ri4l5PkJJVj5BJcmm18UJHUwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5LzVqdjNyaTRsNVBrSkpWajVCSmNtbTE4VUpIVS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMBSvgwDQYJKoZIhvcNAQELBQADggEBAJ+ZA3l1ZWAd/5lfX/Rh1ZX23dbe oTz5z43UavWewsVwdRnEeYQhpB1PMEZhBNwUqBAfb87ltNtVBRfWTgO92qaqAHlN a8j89/o9zhVbqQfx+DCQ/u78mTdJ3IzFHS6y+SNpD6OdXCeIvzKQvoHtBWiI8RTw vRWiTQfRN7TT2TYdKoqM5NE8XvTBACh9UdSLPubm1u9c7b8999zvGCqoeMebrr4m 0JW58YvITRJfNN1v4Hg1MlMNTXPBxohkvYR6Q+PR/VGOhRsZb+Q7UM/zJKUU9eT8 CD96/eRGwq7o47iRHc1zsiKaMvaN0k2Q+FkH/x7sxpOIvEtfINohXk5gleQ= -----END CERTIFICATE-----Generated at Sat Apr 5 17:40:10 2025 by rpki-client