$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/zmLXvb_0epPm4MLK7O-RuAYiKV8.roa File: zmLXvb_0epPm4MLK7O-RuAYiKV8.roa (raw, json) Hash identifier: fytjaG6oaGEKF1MIoNfL5vfH8/Z7nAjX5/9552Z070A= Subject key identifier: CE:62:D7:BD:BF:F4:7A:93:E6:E0:C2:CA:EC:EF:91:B8:06:22:29:5F Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0998 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/zmLXvb_0epPm4MLK7O-RuAYiKV8.roa Signing time: Sun 30 Jun 2024 01:36:29 +0000 ROA not before: Sun 30 Jun 2024 01:36:29 +0000 ROA not after: Tue 24 Jun 2025 10:46:45 +0000 asID: 9605 IP address blocks: 49.110.0.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 14 Apr 2025 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2456 (0x998) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 30 01:36:29 2024 GMT Not After : Jun 24 10:46:45 2025 GMT Subject: CN=CE62D7BDBFF47A93E6E0C2CAECEF91B80622295F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:28:d9:60:4a:9c:0d:d6:f7:39:3f:36:fa:4d: 42:ec:7f:ae:3a:5c:ec:7b:f6:c0:75:68:ba:16:c1: 0c:ea:c0:91:db:6f:0e:90:34:7c:41:1d:15:32:3c: b0:66:84:d4:19:82:37:70:ae:bd:86:ec:79:10:44: f9:ae:63:9d:9f:57:bc:e1:0c:6e:46:9c:ef:33:66: 44:44:60:2a:ff:3c:40:40:d4:00:6f:91:05:bd:51: 25:6b:5b:73:9b:41:9b:4f:d3:e1:43:c1:14:d7:c1: 7e:a8:4d:6f:50:55:93:ca:3b:50:ee:30:49:f9:2c: 3d:61:fb:09:29:59:63:0d:aa:f9:48:a5:de:50:b8: d8:68:af:a4:cd:c6:07:d7:d2:ea:58:3f:ed:53:b3: 8a:ea:f1:8c:c9:9c:a6:3d:88:85:2d:ee:94:3b:ba: 6c:6d:4f:09:a5:1a:7b:5d:2b:8c:48:57:af:5a:27: 9f:af:69:b0:79:5c:7d:69:f6:dd:43:e0:8f:63:4d: b2:53:4b:67:c7:28:d4:14:a2:8e:d3:df:6d:dc:91: 79:0a:a7:b4:85:6a:e9:a6:3f:1d:9a:95:68:29:0f: 09:cb:31:88:ee:26:d2:27:1e:63:35:a2:cc:6d:53: 91:f4:af:b7:3d:c2:3e:a6:7f:aa:86:47:78:9d:2e: 23:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:62:D7:BD:BF:F4:7A:93:E6:E0:C2:CA:EC:EF:91:B8:06:22:29:5F X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/zmLXvb_0epPm4MLK7O-RuAYiKV8.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.110.0.0/19 Signature Algorithm: sha256WithRSAEncryption 8f:fb:6f:2d:f5:ac:69:46:80:16:47:4a:4c:12:15:30:96:a3: 4f:73:99:be:f0:64:4e:78:f5:8d:57:e7:1f:30:2a:59:ae:5e: 2b:95:8b:96:f9:2e:a4:88:9b:83:12:c8:2e:b2:78:da:61:37: 43:c6:b4:d3:63:70:72:80:59:3f:c6:4e:96:0b:7d:b1:cf:4f: f9:07:9c:3a:2f:8e:23:1f:8d:cd:c5:6d:98:12:18:24:e0:10: 7d:a1:28:f5:59:1b:06:8e:d2:20:22:10:08:e6:48:82:dd:47: 60:94:31:49:ae:86:52:47:84:a9:a8:1d:42:8b:91:19:c7:c9: b4:b0:b4:ff:26:85:d4:bb:e0:8d:19:ed:d7:b6:d5:c6:d0:21: 67:4a:db:5b:8b:e1:a5:5a:cf:80:fe:1b:9e:57:b7:03:41:3f: de:6c:ac:10:6a:4f:d0:97:80:56:9a:31:5c:4f:ab:a6:0d:1a: 57:6c:67:de:90:48:ff:65:03:6d:75:f1:6d:cb:38:17:d6:c5: fb:ab:cc:51:e5:c5:b8:ae:d6:ce:21:da:9b:ef:d2:a3:07:1a: 78:97:2e:bd:85:1f:2c:f0:81:33:cb:ee:9c:c6:b9:6e:63:a1: 54:1b:9d:e2:84:f9:44:e9:68:13:85:11:d4:59:bc:4e:67:05: ed:db:02:17 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCZgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA2MzAw MTM2MjlaFw0yNTA2MjQxMDQ2NDVaMDMxMTAvBgNVBAMTKENFNjJEN0JEQkZGNDdB OTNFNkUwQzJDQUVDRUY5MUI4MDYyMjI5NUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+KNlgSpwN1vc5Pzb6TULsf646XOx79sB1aLoWwQzqwJHbbw6Q NHxBHRUyPLBmhNQZgjdwrr2G7HkQRPmuY52fV7zhDG5GnO8zZkREYCr/PEBA1ABv kQW9USVrW3ObQZtP0+FDwRTXwX6oTW9QVZPKO1DuMEn5LD1h+wkpWWMNqvlIpd5Q uNhor6TNxgfX0upYP+1Ts4rq8YzJnKY9iIUt7pQ7umxtTwmlGntdK4xIV69aJ5+v abB5XH1p9t1D4I9jTbJTS2fHKNQUoo7T323ckXkKp7SFaummPx2alWgpDwnLMYju JtInHmM1osxtU5H0r7c9wj6mf6qGR3idLiPXAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUzmLXvb/0epPm4MLK7O+RuAYiKV8wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3ptTFh2Yl8wZXBQbTRNTEs3Ty1SdUFZaUtWOC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAUxbgAwDQYJKoZIhvcNAQELBQADggEBAI/7by31rGlGgBZHSkwSFTCWo09z mb7wZE549Y1X5x8wKlmuXiuVi5b5LqSIm4MSyC6yeNphN0PGtNNjcHKAWT/GTpYL fbHPT/kHnDovjiMfjc3FbZgSGCTgEH2hKPVZGwaO0iAiEAjmSILdR2CUMUmuhlJH hKmoHUKLkRnHybSwtP8mhdS74I0Z7de21cbQIWdK21uL4aVaz4D+G55XtwNBP95s rBBqT9CXgFaaMVxPq6YNGldsZ96QSP9lA2118W3LOBfWxfurzFHlxbiu1s4h2pvv 0qMHGniXLr2FHyzwgTPL7pzGuW5joVQbneKE+UTpaBOFEdRZvE5nBe3bAhc= -----END CERTIFICATE-----Generated at Mon Apr 7 05:03:10 2025 by rpki-client