$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/NuifoSmWlFeE6QA_HqpDYTMHokE.roa File: NuifoSmWlFeE6QA_HqpDYTMHokE.roa (raw, json) Hash identifier: M/TK4VpXX0XQaErZWUFf4qDwRXOQ9ApMeGGx1ldWE5A= Subject key identifier: 36:E8:9F:A1:29:96:94:57:84:E9:00:3F:1E:AA:43:61:33:07:A2:41 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0979 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/NuifoSmWlFeE6QA_HqpDYTMHokE.roa Signing time: Sun 30 Jun 2024 01:33:43 +0000 ROA not before: Sun 30 Jun 2024 01:33:43 +0000 ROA not after: Tue 24 Jun 2025 10:46:45 +0000 asID: 9605 IP address blocks: 1.79.164.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2425 (0x979) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 30 01:33:43 2024 GMT Not After : Jun 24 10:46:45 2025 GMT Subject: CN=36E89FA12996945784E9003F1EAA43613307A241 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:09:93:98:76:a9:38:b3:1e:96:c3:63:e3:1f: 6a:f0:ce:6f:c1:f2:22:3a:fe:ae:16:73:4b:95:f8: 3b:8e:85:89:21:21:b5:73:f7:d6:5c:2f:58:99:c2: 30:18:c8:16:4b:64:b4:fe:da:fb:fe:01:08:f1:42: ce:98:41:bf:a4:89:5f:f0:c1:9f:ef:4d:a4:39:01: dd:32:e2:9c:c3:fa:26:51:c0:a4:be:a7:e6:95:c8: 9d:b0:20:5d:3f:5a:a4:bc:49:82:61:e4:92:7c:2e: 31:ce:7a:7c:32:5b:e3:66:7b:e8:2b:c8:9e:ef:3f: 01:ca:87:5d:d3:9c:6c:43:99:06:a3:41:a2:7c:d2: ef:5e:b7:f1:e7:ea:00:65:54:24:39:ea:43:64:0f: b3:9f:a3:3d:e1:20:f2:f6:e9:2a:08:fd:fb:a1:19: 47:33:cb:12:ff:54:02:78:07:3e:7a:6d:48:53:09: 3d:60:35:5e:57:b8:06:74:c4:35:ad:38:01:62:e8: 4a:28:70:8b:c7:67:ae:f2:1b:4c:b4:37:a4:56:00: 6a:c0:59:07:d1:c6:60:56:e2:dd:23:53:b7:17:5a: 87:71:8f:e9:36:59:6d:d1:2e:59:77:e0:4a:9a:e6: e6:a6:1e:5f:32:89:49:55:22:1f:61:d6:26:50:69: 0a:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:E8:9F:A1:29:96:94:57:84:E9:00:3F:1E:AA:43:61:33:07:A2:41 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/NuifoSmWlFeE6QA_HqpDYTMHokE.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.79.164.0/22 Signature Algorithm: sha256WithRSAEncryption 05:87:b5:34:55:14:40:fc:f1:10:1e:05:d9:a4:f0:37:42:fb: 58:35:dd:f3:bd:ed:60:05:f7:88:61:3f:7c:10:25:ba:b4:a0: 85:88:2d:b5:a6:86:9e:f3:35:59:10:93:94:db:e3:ff:64:fd: 5a:df:06:a1:e4:70:b1:72:d9:06:d4:40:07:f3:ac:29:2e:f5: fa:89:35:a2:fc:0f:d6:07:c2:84:42:66:a2:bf:1d:a2:14:84: 70:42:3f:83:65:05:d7:ac:d6:52:37:ab:2c:68:9e:d8:e2:5f: 43:36:33:b5:a5:c8:e6:a8:a1:e3:d0:6d:6b:15:dd:bc:76:b7: 2e:a8:2f:57:20:26:59:d1:75:bc:d5:a2:7e:00:a4:19:a6:b1: 5b:cc:e9:ad:ad:f8:19:66:50:2f:e0:7d:29:ae:d7:de:0a:b3: cd:b3:3d:cb:41:73:3b:00:af:02:4e:1a:a9:9c:55:ee:0e:ee: 29:f1:e2:12:79:de:d0:ce:66:8d:20:8b:db:f4:f0:3c:f2:e4: 51:0c:cc:8e:bb:f9:14:61:8b:c2:d4:b0:db:d1:13:3b:a7:dc: a9:4f:55:80:46:c8:1b:6c:86:58:cc:a7:27:a7:14:5e:65:81: 50:19:fe:97:42:67:98:a7:a4:ba:20:6f:3f:04:13:8e:e1:68: fb:b0:4e:7b -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCXkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA2MzAw MTMzNDNaFw0yNTA2MjQxMDQ2NDVaMDMxMTAvBgNVBAMTKDM2RTg5RkExMjk5Njk0 NTc4NEU5MDAzRjFFQUE0MzYxMzMwN0EyNDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDJCZOYdqk4sx6Ww2PjH2rwzm/B8iI6/q4Wc0uV+DuOhYkhIbVz 99ZcL1iZwjAYyBZLZLT+2vv+AQjxQs6YQb+kiV/wwZ/vTaQ5Ad0y4pzD+iZRwKS+ p+aVyJ2wIF0/WqS8SYJh5JJ8LjHOenwyW+Nme+gryJ7vPwHKh13TnGxDmQajQaJ8 0u9et/Hn6gBlVCQ56kNkD7Ofoz3hIPL26SoI/fuhGUczyxL/VAJ4Bz56bUhTCT1g NV5XuAZ0xDWtOAFi6EoocIvHZ67yG0y0N6RWAGrAWQfRxmBW4t0jU7cXWodxj+k2 WW3RLll34Eqa5uamHl8yiUlVIh9h1iZQaQozAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUNuifoSmWlFeE6QA/HqpDYTMHokEwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L051aWZvU21XbEZlRTZRQV9IcXBEWVRNSG9rRS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIBT6QwDQYJKoZIhvcNAQELBQADggEBAAWHtTRVFED88RAeBdmk8DdC+1g1 3fO97WAF94hhP3wQJbq0oIWILbWmhp7zNVkQk5Tb4/9k/VrfBqHkcLFy2QbUQAfz rCku9fqJNaL8D9YHwoRCZqK/HaIUhHBCP4NlBdes1lI3qyxontjiX0M2M7WlyOao oePQbWsV3bx2ty6oL1cgJlnRdbzVon4ApBmmsVvM6a2t+BlmUC/gfSmu194Ks82z PctBczsArwJOGqmcVe4O7inx4hJ53tDOZo0gi9v08Dzy5FEMzI67+RRhi8LUsNvR Ezun3KlPVYBGyBtshljMpyenFF5lgVAZ/pdCZ5inpLogbz8EE47haPuwTns= -----END CERTIFICATE-----Generated at Sat Apr 5 17:30:24 2025 by rpki-client