$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/gnQjCsFxtyLcyuiVpb1XOxYtlV8.roa File: gnQjCsFxtyLcyuiVpb1XOxYtlV8.roa (raw, json) Hash identifier: 5iVg0+8uAxuJTMXcU3+1zgIkugEW8W5y/S2d8cllMrQ= Subject key identifier: 82:74:23:0A:C1:71:B7:22:DC:CA:E8:95:A5:BD:57:3B:16:2D:95:5F Certificate issuer: /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A Certificate serial: 0205 Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/gnQjCsFxtyLcyuiVpb1XOxYtlV8.roa Signing time: Mon 30 Sep 2024 01:29:58 +0000 ROA not before: Mon 30 Sep 2024 01:29:58 +0000 ROA not after: Mon 15 Sep 2025 01:30:03 +0000 asID: 7684 IP address blocks: 49.212.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 517 (0x205) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A Validity Not Before: Sep 30 01:29:58 2024 GMT Not After : Sep 15 01:30:03 2025 GMT Subject: CN=8274230AC171B722DCCAE895A5BD573B162D955F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:bc:b1:b2:70:61:69:4e:bd:55:d1:84:fa:2e: c4:ce:48:ac:95:a5:05:4c:b4:2f:40:d1:23:9d:d0: 88:9c:b5:82:81:f8:9e:99:f1:6f:0f:34:54:8c:80: 55:f7:9a:90:62:27:2b:5f:b9:63:a9:a0:1a:bd:45: 67:40:19:72:35:36:14:6c:37:9f:48:7c:a0:e0:8f: 61:2e:05:2a:7a:33:9c:3a:87:a6:4e:b2:56:08:4d: f7:a0:f5:85:10:55:59:b5:40:93:40:35:0b:26:2b: 8c:3c:17:29:40:19:cd:47:6f:06:70:66:2f:42:69: aa:a2:47:34:ac:0d:28:c4:02:14:23:dc:54:4d:77: 4d:d6:db:05:b7:c9:c2:14:2e:6d:85:f6:09:85:bb: 28:c9:2d:c1:b8:a9:b2:1c:8c:fb:b1:fe:f6:af:79: 9c:63:9d:9a:1f:3e:58:00:e3:2a:e7:be:3c:e7:b6: a8:f8:86:05:b9:e7:48:59:f5:75:46:a9:aa:98:d4: 9e:d8:68:ab:98:42:fb:26:a5:8a:e4:21:7d:ff:bf: 3f:41:41:73:d8:10:75:46:9b:67:ac:33:6c:0c:5f: ab:c4:90:de:d4:f3:64:a6:34:93:52:82:07:b1:08: 9f:50:a4:b9:75:f7:de:24:a4:95:39:a0:eb:55:64: 49:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:74:23:0A:C1:71:B7:22:DC:CA:E8:95:A5:BD:57:3B:16:2D:95:5F X509v3 Authority Key Identifier: keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/gnQjCsFxtyLcyuiVpb1XOxYtlV8.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.212.239.0/24 Signature Algorithm: sha256WithRSAEncryption 3e:c8:d5:db:f6:5f:f3:90:4f:d4:9f:97:57:08:a7:8a:07:7b: fe:c4:c9:22:1d:50:e5:ef:06:f9:88:8d:32:05:74:c9:6f:da: aa:ec:0f:f3:31:a9:5c:b8:f2:71:53:7a:7e:21:02:45:2c:df: ee:61:19:87:2a:82:0c:1e:77:91:a8:6a:9a:58:91:d2:e2:58: 82:3a:e8:60:a4:6f:af:c3:36:be:ac:8a:f9:80:f1:0f:c1:78: 32:62:07:2a:4b:2f:36:40:39:0d:5a:ba:51:b1:53:d0:2f:dc: fc:6c:c4:3d:5e:12:48:3b:1c:2d:77:94:4d:ee:bd:52:01:6d: 77:70:12:d9:fe:e4:05:c4:d8:7a:17:53:3b:09:c9:0f:b0:08: b1:93:97:26:c2:44:61:b1:a4:76:65:2a:ec:ec:aa:d3:13:b5: 2f:e1:3f:99:85:d4:a7:b8:0d:f3:ef:f1:96:23:73:2e:ae:09: c8:84:5e:5a:84:a1:7a:94:13:ef:b0:3f:f4:bd:c6:c9:ef:22: 7c:47:21:bf:63:a4:43:1a:6e:aa:89:a4:23:f6:e2:07:e8:59: 0f:6e:10:a3:c8:32:7c:3a:d3:1f:5d:d9:02:80:2d:82:9a:1c: a5:05:10:98:01:7e:4c:5b:95:58:86:14:b7:17:01:69:bd:8a: 55:c9:f5:c8 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgICAgUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjAz MjBGNkQwOURCMThDMEY3MEIzNTRBM0Q4NzQ1MEY3MEU2RDcxQTAeFw0yNDA5MzAw MTI5NThaFw0yNTA5MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDgyNzQyMzBBQzE3MUI3 MjJEQ0NBRTg5NUE1QkQ1NzNCMTYyRDk1NUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC3vLGycGFpTr1V0YT6LsTOSKyVpQVMtC9A0SOd0IictYKB+J6Z 8W8PNFSMgFX3mpBiJytfuWOpoBq9RWdAGXI1NhRsN59IfKDgj2EuBSp6M5w6h6ZO slYITfeg9YUQVVm1QJNANQsmK4w8FylAGc1HbwZwZi9CaaqiRzSsDSjEAhQj3FRN d03W2wW3ycIULm2F9gmFuyjJLcG4qbIcjPux/vaveZxjnZofPlgA4yrnvjzntqj4 hgW550hZ9XVGqaqY1J7YaKuYQvsmpYrkIX3/vz9BQXPYEHVGm2esM2wMX6vEkN7U 82SmNJNSggexCJ9QpLl1994kpJU5oOtVZEkDAgMBAAGjggIoMIICJDAdBgNVHQ4E FgQUgnQjCsFxtyLcyuiVpb1XOxYtlV8wHwYDVR0jBBgwFoAUIDIPbQnbGMD3CzVK PYdFD3Dm1xowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzEwMjQ3L0lESVBiUW5iR01EM0N6VktQWWRGRDNEbTF4by5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0lESVBiUW5iR01EM0N6VktQWWRG RDNEbTF4by5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8xMDI0Ny9nblFqQ3NGeHR5TGN5dWlWcGIxWE94WXRsVjgu cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAMdTvMA0GCSqGSIb3DQEBCwUAA4IBAQA+yNXb9l/zkE/Un5dXCKeK B3v+xMkiHVDl7wb5iI0yBXTJb9qq7A/zMalcuPJxU3p+IQJFLN/uYRmHKoIMHneR qGqaWJHS4liCOuhgpG+vwza+rIr5gPEPwXgyYgcqSy82QDkNWrpRsVPQL9z8bMQ9 XhJIOxwtd5RN7r1SAW13cBLZ/uQFxNh6F1M7CckPsAixk5cmwkRhsaR2ZSrs7KrT E7Uv4T+ZhdSnuA3z7/GWI3MurgnIhF5ahKF6lBPvsD/0vcbJ7yJ8RyG/Y6RDGm6q iaQj9uIH6FkPbhCjyDJ8OtMfXdkCgC2CmhylBRCYAX5MW5VYhhS3FwFpvYpVyfXI -----END CERTIFICATE-----Generated at Sun Feb 16 22:21:26 2025 by rpki-client