$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Bw5r6vjPNro80ILDURmK0bVdAX0.roa File: Bw5r6vjPNro80ILDURmK0bVdAX0.roa (raw, json) Hash identifier: rjGU5sy5UlFPrYP2Nqwwvfv12+1+8Y45TEindTOcx3c= Subject key identifier: 07:0E:6B:EA:F8:CF:36:BA:3C:D0:82:C3:51:19:8A:D1:B5:5D:01:7D Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 09F0 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Bw5r6vjPNro80ILDURmK0bVdAX0.roa Signing time: Sun 30 Jun 2024 01:42:25 +0000 ROA not before: Sun 30 Jun 2024 01:42:25 +0000 ROA not after: Tue 24 Jun 2025 10:46:45 +0000 asID: 9605 IP address blocks: 1.72.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2544 (0x9f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 30 01:42:25 2024 GMT Not After : Jun 24 10:46:45 2025 GMT Subject: CN=070E6BEAF8CF36BA3CD082C351198AD1B55D017D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a6:9d:6b:07:ee:f2:c2:98:d7:48:a1:8a:1e: aa:7f:76:44:7a:a4:ff:fc:0b:71:90:70:04:96:9d: f4:9b:28:24:a9:a5:49:dc:ef:f2:0d:3d:0e:f0:d5: 52:8e:c1:bf:29:2e:a5:88:cb:be:9e:6a:6e:41:f8: 47:a0:5d:1a:9f:b0:7e:6c:1d:d7:a0:26:23:0e:26: 64:3e:67:84:de:08:c2:59:b9:3d:54:8f:3a:b9:cf: f8:4a:38:2f:f8:b0:59:83:54:c7:c8:66:fe:9c:95: 1c:7f:bb:b9:03:db:9c:88:fb:3b:59:81:99:ff:dd: c3:9d:39:35:3d:ba:51:1e:8c:7f:65:f7:64:19:e3: 59:65:27:0b:76:cb:01:ed:88:ec:b6:a4:53:10:ac: ca:45:cd:8b:c2:94:4e:88:aa:15:68:af:4b:e8:7a: c8:dd:b8:0a:ed:d5:b1:6f:d4:e5:24:d4:c6:12:30: d5:41:a5:13:d9:78:38:92:01:73:d2:ac:83:22:5d: 3f:3c:7a:81:63:84:23:e6:8f:46:c5:92:94:1c:28: e4:75:10:f8:78:d6:68:2b:9f:3c:f5:44:93:0e:90: b3:25:4c:d0:d6:65:58:9b:ad:5d:a7:01:95:07:48: f7:3b:39:53:98:07:e8:d8:a7:2f:63:0d:6e:75:25: 9a:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:0E:6B:EA:F8:CF:36:BA:3C:D0:82:C3:51:19:8A:D1:B5:5D:01:7D X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Bw5r6vjPNro80ILDURmK0bVdAX0.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.72.32.0/20 Signature Algorithm: sha256WithRSAEncryption 65:40:eb:aa:fc:a3:ad:70:fc:21:5c:87:8d:29:5d:30:d0:2c: 43:76:67:da:1c:2c:dc:65:97:43:40:3f:93:d8:6c:92:14:ae: 96:8b:69:c3:cc:a3:f2:7e:bf:06:21:b4:81:83:48:82:d9:a8: 58:62:4e:9a:f0:2d:41:37:c5:b2:59:8b:f3:f3:dc:da:95:06: 7c:d8:13:5e:d4:61:ca:db:ce:27:e6:38:0e:a7:99:ef:71:7a: c3:a0:9b:8f:eb:92:1d:19:5e:e3:95:d3:03:f7:a6:b1:25:d5: 31:32:9a:c7:c5:92:c3:b5:a2:eb:ee:db:91:7c:23:94:b1:fe: 18:82:5d:86:80:c4:85:4b:f4:6b:f5:ff:e5:f4:23:c5:8d:9b: 6a:61:e7:b5:b7:69:90:d4:57:2b:b5:7b:93:76:2b:4d:af:ea: 66:c0:28:26:a7:99:b2:eb:40:0c:c1:8c:65:a3:91:19:ac:cd: 07:ef:a2:42:58:5f:fd:2c:8e:42:54:ed:38:d7:ec:33:02:83: 22:4f:ad:29:6e:5b:8f:0f:0f:0a:29:ad:fd:d0:2a:e5:2d:dd: e3:2c:ec:fc:a2:67:7a:d8:80:db:cd:62:d8:9e:79:a0:1f:85: 17:89:d3:d8:56:01:37:7e:b8:6e:f5:07:6f:51:c8:6b:d1:b7: 6f:3d:6b:78 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCfAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA2MzAw MTQyMjVaFw0yNTA2MjQxMDQ2NDVaMDMxMTAvBgNVBAMTKDA3MEU2QkVBRjhDRjM2 QkEzQ0QwODJDMzUxMTk4QUQxQjU1RDAxN0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDFpp1rB+7ywpjXSKGKHqp/dkR6pP/8C3GQcASWnfSbKCSppUnc 7/INPQ7w1VKOwb8pLqWIy76eam5B+EegXRqfsH5sHdegJiMOJmQ+Z4TeCMJZuT1U jzq5z/hKOC/4sFmDVMfIZv6clRx/u7kD25yI+ztZgZn/3cOdOTU9ulEejH9l92QZ 41llJwt2ywHtiOy2pFMQrMpFzYvClE6IqhVor0voesjduArt1bFv1OUk1MYSMNVB pRPZeDiSAXPSrIMiXT88eoFjhCPmj0bFkpQcKOR1EPh41mgrnzz1RJMOkLMlTNDW ZVibrV2nAZUHSPc7OVOYB+jYpy9jDW51JZr1AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUBw5r6vjPNro80ILDURmK0bVdAX0wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0J3NXI2dmpQTnJvODBJTERVUm1LMGJWZEFYMC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQBSCAwDQYJKoZIhvcNAQELBQADggEBAGVA66r8o61w/CFch40pXTDQLEN2 Z9ocLNxll0NAP5PYbJIUrpaLacPMo/J+vwYhtIGDSILZqFhiTprwLUE3xbJZi/Pz 3NqVBnzYE17UYcrbzifmOA6nme9xesOgm4/rkh0ZXuOV0wP3prEl1TEymsfFksO1 ouvu25F8I5Sx/hiCXYaAxIVL9Gv1/+X0I8WNm2ph57W3aZDUVyu1e5N2K02v6mbA KCanmbLrQAzBjGWjkRmszQfvokJYX/0sjkJU7TjX7DMCgyJPrSluW48PDwoprf3Q KuUt3eMs7PyiZ3rYgNvNYtieeaAfhReJ09hWATd+uG71B29RyGvRt289a3g= -----END CERTIFICATE-----Generated at Sat Apr 5 17:38:17 2025 by rpki-client