$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/06a37INR9kxXNlVTeCWTLNqbY0s.roa File: 06a37INR9kxXNlVTeCWTLNqbY0s.roa (raw, json) Hash identifier: QTjHm46UIqiwwIndn6PQ25gf6sFyU6Zm3MlbfdCoNIU= Subject key identifier: D3:A6:B7:EC:83:51:F6:4C:57:36:55:53:78:25:93:2C:DA:9B:63:4B Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 08CF Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/06a37INR9kxXNlVTeCWTLNqbY0s.roa Signing time: Tue 30 Apr 2024 02:24:40 +0000 ROA not before: Tue 30 Apr 2024 02:24:40 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 110.163.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2255 (0x8cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 30 02:24:40 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=D3A6B7EC8351F64C573655537825932CDA9B634B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:12:8b:a4:8c:cf:0f:1e:da:ee:d8:d1:00:77: ca:6c:aa:0a:5d:c6:ab:d9:bd:73:b6:f9:00:9c:72: e8:d9:11:e9:fe:35:fb:3f:14:90:9b:28:ce:73:f9: 0f:c4:37:58:65:7d:89:19:b8:8d:29:76:5e:91:90: 5e:b7:d2:3d:55:10:11:e8:0c:18:d2:e0:34:73:cd: 65:03:fa:c2:f9:41:19:ac:57:bb:0a:a1:63:25:9e: 0b:c8:cd:a7:a2:58:f1:8b:4a:d1:8a:df:46:66:c1: e0:36:d7:9e:2c:9f:1a:39:5c:21:38:4c:79:a0:92: e5:9b:9e:e6:40:04:81:5f:4c:d3:e8:2c:bb:bc:c6: de:03:6f:31:13:f9:a0:bc:3a:e2:2a:fa:60:3a:20: 0b:70:22:3c:9b:04:be:33:f1:6b:eb:a8:0e:0d:1d: e0:95:c1:82:09:76:86:14:77:6a:9a:ba:0b:9c:f8: b1:66:bc:b0:d9:57:1f:c7:0d:a1:41:42:de:b6:95: b6:f3:66:5d:55:93:19:af:70:a6:e7:8f:85:f1:fd: 46:36:d3:ee:4d:22:11:c1:ee:0f:29:e2:02:70:ae: 1a:12:3a:61:a5:2d:4a:4d:05:df:29:52:4c:8c:fa: 0a:78:4f:5b:74:7b:50:af:91:fd:65:f5:f0:3f:b7: f2:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:A6:B7:EC:83:51:F6:4C:57:36:55:53:78:25:93:2C:DA:9B:63:4B X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/06a37INR9kxXNlVTeCWTLNqbY0s.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 110.163.18.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:ad:da:c5:b1:4f:a5:ae:e6:c9:ac:8c:99:b7:c6:88:79:ec: c6:9e:26:b3:e4:a8:f9:7e:66:02:4c:cd:52:e9:e0:d6:ec:44: 41:c8:5a:88:a8:78:d0:d0:38:01:96:4b:8d:43:6f:5e:70:72: d3:6f:24:2f:6a:e7:fe:33:48:6e:32:a8:0d:27:ec:85:3f:80: 05:62:56:ec:74:da:d0:86:65:d7:3a:c4:f2:f5:7a:9a:c6:57: f7:17:36:e1:23:a8:2b:2a:7d:eb:a1:8d:be:04:23:87:3d:25: f6:5f:6e:1e:eb:48:70:f3:23:c2:20:13:1e:93:89:7a:8b:f1: 4a:ab:cc:42:9e:9f:00:ef:b3:7f:c9:1c:80:f3:39:cb:c7:85: a7:78:52:0a:48:cb:cc:98:a8:ca:8a:32:43:b7:cb:2f:17:65: 09:5d:45:0d:df:59:62:90:5d:ae:87:44:a1:6a:fe:f9:e0:2d: 22:26:e5:5e:08:5d:5d:bb:5a:e2:04:64:73:d9:18:08:1b:a0: 97:a4:51:62:e4:57:92:dc:42:7b:df:73:3d:07:dc:50:44:c8: 03:ad:47:f4:fc:1b:81:1d:2e:77:4a:75:62:86:c5:75:dd:ed: 1a:8a:3d:0f:bd:87:40:93:a7:30:f5:6a:58:6a:9f:b5:64:1e: c9:3b:f6:91 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCM8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw MjI0NDBaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEQzQTZCN0VDODM1MUY2 NEM1NzM2NTU1Mzc4MjU5MzJDREE5QjYzNEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDNEoukjM8PHtru2NEAd8psqgpdxqvZvXO2+QCccujZEen+Nfs/ FJCbKM5z+Q/EN1hlfYkZuI0pdl6RkF630j1VEBHoDBjS4DRzzWUD+sL5QRmsV7sK oWMlngvIzaeiWPGLStGK30ZmweA2154snxo5XCE4THmgkuWbnuZABIFfTNPoLLu8 xt4DbzET+aC8OuIq+mA6IAtwIjybBL4z8WvrqA4NHeCVwYIJdoYUd2qauguc+LFm vLDZVx/HDaFBQt62lbbzZl1VkxmvcKbnj4Xx/UY20+5NIhHB7g8p4gJwrhoSOmGl LUpNBd8pUkyM+gp4T1t0e1Cvkf1l9fA/t/J1AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU06a37INR9kxXNlVTeCWTLNqbY0swHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5LzA2YTM3SU5SOWt4WE5sVlRlQ1dUTE5xYlkwcy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABuoxIwDQYJKoZIhvcNAQELBQADggEBAJqt2sWxT6Wu5smsjJm3xoh57Mae JrPkqPl+ZgJMzVLp4NbsREHIWoioeNDQOAGWS41Db15wctNvJC9q5/4zSG4yqA0n 7IU/gAViVux02tCGZdc6xPL1eprGV/cXNuEjqCsqfeuhjb4EI4c9JfZfbh7rSHDz I8IgEx6TiXqL8UqrzEKenwDvs3/JHIDzOcvHhad4UgpIy8yYqMqKMkO3yy8XZQld RQ3fWWKQXa6HRKFq/vngLSIm5V4IXV27WuIEZHPZGAgboJekUWLkV5LcQnvfcz0H 3FBEyAOtR/T8G4EdLndKdWKGxXXd7RqKPQ+9h0CTpzD1alhqn7VkHsk79pE= -----END CERTIFICATE-----Generated at Sun Feb 16 22:11:30 2025 by rpki-client