$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/1AU7MA--4LhaXqPxlUG-NRi_cqw.roa File: 1AU7MA--4LhaXqPxlUG-NRi_cqw.roa (raw, json) Hash identifier: CYWpv7RQWurcTDLiwqAJ+sZx/jZvRZk4FDj6a1Gjelc= Subject key identifier: D4:05:3B:30:0F:BE:E0:B8:5A:5E:A3:F1:95:41:BE:35:18:BF:72:AC Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0AED Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/1AU7MA--4LhaXqPxlUG-NRi_cqw.roa Signing time: Fri 31 Jan 2025 01:28:31 +0000 ROA not before: Fri 31 Jan 2025 01:28:31 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.97.96.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2797 (0xaed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jan 31 01:28:31 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=D4053B300FBEE0B85A5EA3F19541BE3518BF72AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:66:bc:31:0c:e3:b1:1c:4b:9e:bb:dc:4d:e9: 06:bc:5b:58:04:cb:70:2f:54:5e:69:9e:0b:70:0b: d2:69:86:c8:fd:af:ac:83:84:ad:2b:36:09:55:16: 54:d3:00:33:eb:69:64:b2:c5:a0:d8:a0:56:c4:bc: 84:6a:c7:76:9a:5e:99:f3:6c:89:17:1b:ea:ce:89: 06:09:fc:53:b2:21:a1:b9:13:58:f1:b8:7e:84:82: d1:2d:80:f5:8e:58:b4:ec:2f:af:a1:f3:2a:95:b1: ad:bf:f0:34:c9:6f:ef:1c:60:67:8d:ed:20:56:5b: 35:9c:2e:c9:9c:a2:07:05:a0:b7:75:b7:31:f1:c1: d7:78:7b:ff:ec:12:97:b3:2c:bb:a1:41:6d:f4:fe: a7:72:98:4a:da:ea:d4:17:c4:c2:de:f7:0d:fb:b9: a0:2f:b2:c2:45:e4:0d:0f:40:48:5c:13:1d:fd:e9: 7a:28:dc:81:f8:8d:c5:63:84:56:6a:25:16:ed:58: 80:9a:b7:4b:ca:84:88:1b:a0:26:b2:6a:ea:93:f1: 95:3b:4b:2b:af:41:58:3f:a2:71:d5:4b:14:c4:7f: 64:63:50:2a:44:74:e4:c1:04:9c:54:67:38:09:44: a0:f5:b7:3c:7f:ae:c9:d6:9d:a8:c5:6b:e1:0e:5f: d4:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:05:3B:30:0F:BE:E0:B8:5A:5E:A3:F1:95:41:BE:35:18:BF:72:AC X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/1AU7MA--4LhaXqPxlUG-NRi_cqw.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.97.96.0/23 Signature Algorithm: sha256WithRSAEncryption 89:bd:c1:ec:10:9a:df:ab:9c:98:f8:4a:bf:c7:90:a8:db:7a: 40:ad:6f:27:43:a8:8e:41:f8:bb:3c:2e:f2:04:b8:0a:50:f3: cc:3d:2c:df:f5:53:bf:13:ed:d2:42:14:6d:3e:f8:a3:e4:c8: 9d:ea:6e:0c:44:25:80:6d:ed:22:4a:80:1a:93:fc:40:da:f8: 2e:0f:f8:e9:bd:4c:dc:e5:3d:3a:f0:c2:04:46:43:57:ae:b5: 73:65:f4:30:a3:c3:0c:2e:60:c2:56:b2:4b:8f:05:77:46:28: 36:7f:11:cd:91:02:9d:5f:96:56:88:2c:de:12:b3:fe:f8:75: 39:47:04:d7:02:9c:ea:1b:0c:60:c6:3b:89:01:e1:10:aa:bf: 38:ad:31:c6:bb:d1:c2:49:15:72:dd:28:0e:35:67:3c:f4:1a: 57:53:7f:e0:b5:f1:8f:c6:88:4a:62:99:79:1c:57:51:f0:fb: 22:55:38:b8:49:5f:ac:a3:5c:11:d6:2c:e2:e8:aa:a3:17:89: 62:88:83:bc:22:73:37:c8:eb:2c:fe:20:3f:fb:40:ed:ce:40: 33:7d:a8:f8:4a:7d:ac:df:84:bf:86:39:c6:32:f5:10:8e:76: cb:36:d9:88:61:3f:90:75:cb:28:91:05:b7:30:50:f6:33:53: 4e:b8:02:01 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCu0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTAxMzEw MTI4MzFaFw0yNjAxMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEQ0MDUzQjMwMEZCRUUw Qjg1QTVFQTNGMTk1NDFCRTM1MThCRjcyQUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDYZrwxDOOxHEueu9xN6Qa8W1gEy3AvVF5pngtwC9Jphsj9r6yD hK0rNglVFlTTADPraWSyxaDYoFbEvIRqx3aaXpnzbIkXG+rOiQYJ/FOyIaG5E1jx uH6EgtEtgPWOWLTsL6+h8yqVsa2/8DTJb+8cYGeN7SBWWzWcLsmcogcFoLd1tzHx wdd4e//sEpezLLuhQW30/qdymEra6tQXxMLe9w37uaAvssJF5A0PQEhcEx396Xoo 3IH4jcVjhFZqJRbtWICat0vKhIgboCayauqT8ZU7SyuvQVg/onHVSxTEf2RjUCpE dOTBBJxUZzgJRKD1tzx/rsnWnajFa+EOX9RFAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU1AU7MA++4LhaXqPxlUG+NRi/cqwwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5LzFBVTdNQS0tNExoYVhxUHhsVUctTlJpX2Nxdy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExYWAwDQYJKoZIhvcNAQELBQADggEBAIm9wewQmt+rnJj4Sr/HkKjbekCt bydDqI5B+Ls8LvIEuApQ88w9LN/1U78T7dJCFG0++KPkyJ3qbgxEJYBt7SJKgBqT /EDa+C4P+Om9TNzlPTrwwgRGQ1eutXNl9DCjwwwuYMJWskuPBXdGKDZ/Ec2RAp1f llaILN4Ss/74dTlHBNcCnOobDGDGO4kB4RCqvzitMca70cJJFXLdKA41Zzz0GldT f+C18Y/GiEpimXkcV1Hw+yJVOLhJX6yjXBHWLOLoqqMXiWKIg7wiczfI6yz+ID/7 QO3OQDN9qPhKfazfhL+GOcYy9RCOdss22YhhP5B1yyiRBbcwUPYzU064AgE= -----END CERTIFICATE-----Generated at Wed Feb 19 22:44:22 2025 by rpki-client