$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/LPNncs5OUJLU5QTFkFMgdrJi1-U.roa File: LPNncs5OUJLU5QTFkFMgdrJi1-U.roa (raw, json) Hash identifier: y71S9woxycC881ZZG673ef0Wy49mWn2hrJ6D8JijPZc= Subject key identifier: 2C:F3:67:72:CE:4E:50:92:D4:E5:04:C5:90:53:20:76:B2:62:D7:E5 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 099D Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/LPNncs5OUJLU5QTFkFMgdrJi1-U.roa Signing time: Sun 30 Jun 2024 01:38:12 +0000 ROA not before: Sun 30 Jun 2024 01:38:12 +0000 ROA not after: Tue 24 Jun 2025 10:46:45 +0000 asID: 9605 IP address blocks: 220.210.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2461 (0x99d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 30 01:38:12 2024 GMT Not After : Jun 24 10:46:45 2025 GMT Subject: CN=2CF36772CE4E5092D4E504C590532076B262D7E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:21:f5:74:f1:a6:3e:64:8a:75:20:3a:2a:86: bf:02:19:03:6d:8d:f4:73:c5:1e:00:fa:4e:5a:9f: 4a:d4:9f:59:78:72:06:36:1e:83:dc:ea:52:cb:7d: f4:bd:30:5e:4e:f0:aa:38:e2:f7:a9:5c:de:19:91: 2c:d4:b7:e8:47:da:fe:c2:4f:77:71:4d:6d:37:cf: 91:3e:bc:17:1d:d8:86:fc:e3:bb:19:52:08:45:4f: ab:4d:51:b6:ea:ca:d2:0a:0a:9b:53:55:30:cf:8e: c3:47:15:3c:b4:b0:29:dc:03:0e:4a:11:be:c9:8e: c0:fb:84:15:88:ef:75:24:6e:88:24:91:19:1d:06: e6:d1:61:ea:15:e2:f8:c5:46:07:65:6d:7c:97:39: e1:45:36:be:eb:34:55:e3:d3:73:f5:83:99:9c:3b: 61:6e:bb:8f:04:d2:00:c4:3c:ef:15:31:05:5b:0d: e7:83:45:1f:c2:80:af:ec:4b:ce:c5:7b:54:b5:03: 5a:5e:2d:5a:08:13:1d:72:17:63:e4:f6:65:b2:92: ca:f5:94:a9:64:92:5a:cd:14:c4:c4:02:67:e2:b3: 40:ea:9d:25:fd:af:a2:98:4f:d0:25:76:23:b9:5b: ea:75:45:b3:4e:e1:e1:28:ba:2c:35:51:b7:78:eb: 72:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:F3:67:72:CE:4E:50:92:D4:E5:04:C5:90:53:20:76:B2:62:D7:E5 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/LPNncs5OUJLU5QTFkFMgdrJi1-U.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 220.210.120.0/21 Signature Algorithm: sha256WithRSAEncryption 6a:1b:97:7b:b2:62:0d:07:fe:66:d8:a9:07:9b:f2:f5:fd:6b: d8:bb:8f:57:6b:1e:4f:e5:bf:fa:28:1d:e4:5a:2e:a6:fb:99: bd:a9:15:e0:f2:d4:1f:78:ab:de:14:92:5a:65:0f:5d:fe:ae: fc:47:2c:76:9e:32:73:c7:6a:96:6b:69:f6:96:b4:2a:b1:64: dc:61:7c:ce:c4:54:c0:f7:14:07:89:5c:54:f3:e9:01:50:15: a2:1e:3d:70:d8:a6:c6:5b:86:07:80:2e:bc:cd:01:17:ef:2e: 4a:1d:d9:3a:f6:2e:9a:b5:2a:b9:cf:80:b7:61:bb:56:5d:6c: 71:80:a9:d1:6b:59:40:74:b7:c2:eb:d6:57:fb:eb:69:0f:17: ac:71:56:14:d9:ef:d4:dd:a4:d3:6f:ba:e1:f4:6b:c9:ae:d5: 74:95:47:dd:54:01:12:8d:b8:9c:57:91:bb:76:06:53:d4:83: 8b:b2:e6:06:f5:1a:89:c3:7e:3f:ac:ee:43:b4:d0:f0:54:3e: e0:e8:2a:2d:f9:64:3b:a9:09:b3:0d:e4:a0:8e:27:30:83:bd: 3b:17:d3:61:e2:91:d3:15:03:17:35:75:bb:aa:5b:66:a0:5f: 71:ad:b8:8a:78:96:ba:2b:27:7d:52:58:b5:1d:17:0d:84:7f: 22:1f:f0:6d -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCZ0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA2MzAw MTM4MTJaFw0yNTA2MjQxMDQ2NDVaMDMxMTAvBgNVBAMTKDJDRjM2NzcyQ0U0RTUw OTJENEU1MDRDNTkwNTMyMDc2QjI2MkQ3RTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCfIfV08aY+ZIp1IDoqhr8CGQNtjfRzxR4A+k5an0rUn1l4cgY2 HoPc6lLLffS9MF5O8Ko44vepXN4ZkSzUt+hH2v7CT3dxTW03z5E+vBcd2Ib847sZ UghFT6tNUbbqytIKCptTVTDPjsNHFTy0sCncAw5KEb7JjsD7hBWI73UkbogkkRkd BubRYeoV4vjFRgdlbXyXOeFFNr7rNFXj03P1g5mcO2Fuu48E0gDEPO8VMQVbDeeD RR/CgK/sS87Fe1S1A1peLVoIEx1yF2Pk9mWyksr1lKlkklrNFMTEAmfis0DqnSX9 r6KYT9AldiO5W+p1RbNO4eEouiw1Ubd463KxAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQULPNncs5OUJLU5QTFkFMgdrJi1+UwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0xQTm5jczVPVUpMVTVRVEZrRk1nZHJKaTEtVS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAPc0ngwDQYJKoZIhvcNAQELBQADggEBAGobl3uyYg0H/mbYqQeb8vX9a9i7 j1drHk/lv/ooHeRaLqb7mb2pFeDy1B94q94UklplD13+rvxHLHaeMnPHapZrafaW tCqxZNxhfM7EVMD3FAeJXFTz6QFQFaIePXDYpsZbhgeALrzNARfvLkod2Tr2Lpq1 KrnPgLdhu1ZdbHGAqdFrWUB0t8Lr1lf762kPF6xxVhTZ79TdpNNvuuH0a8mu1XSV R91UARKNuJxXkbt2BlPUg4uy5gb1GonDfj+s7kO00PBUPuDoKi35ZDupCbMN5KCO JzCDvTsX02HikdMVAxc1dbuqW2agX3GtuIp4lrorJ31SWLUdFw2EfyIf8G0= -----END CERTIFICATE-----Generated at Sat Apr 5 17:25:05 2025 by rpki-client