$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/1NTGpj_UyoSXCly_M0mappTNsrM.roa File: 1NTGpj_UyoSXCly_M0mappTNsrM.roa (raw, json) Hash identifier: u3/sXYuRIp8BPzpIpR30/6OK1fQoeScmQkgNjVzJf+g= Subject key identifier: D4:D4:C6:A6:3F:D4:CA:84:97:0A:5C:BF:33:49:9A:A6:94:CD:B2:B3 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 087D Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/1NTGpj_UyoSXCly_M0mappTNsrM.roa Signing time: Tue 30 Apr 2024 02:18:37 +0000 ROA not before: Tue 30 Apr 2024 02:18:37 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 49.96.30.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2173 (0x87d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 30 02:18:37 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=D4D4C6A63FD4CA84970A5CBF33499AA694CDB2B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:de:27:e1:8d:3d:27:58:c4:27:11:60:31:ec: 7b:b8:90:de:31:d2:32:8b:65:9b:33:09:8e:29:cf: 5b:e6:cc:72:11:13:10:68:02:75:12:31:08:27:d2: 40:3d:4d:5a:5e:ce:9e:15:3f:52:22:57:05:ed:6b: 0d:ee:b3:6e:7f:a6:d1:49:4b:7b:d5:79:48:65:ed: b4:ee:d3:7b:15:b5:51:1e:2f:26:78:01:be:4d:26: 17:1b:5e:d5:df:ff:d6:be:1f:66:5b:6e:ef:f0:7a: 62:05:21:3a:e1:44:ba:6d:85:f9:f2:4f:08:b8:ed: eb:27:23:c0:2d:7d:d9:1c:ea:5d:23:10:de:83:af: aa:f6:30:3f:67:3e:65:cb:dd:a5:89:e0:75:0d:82: a2:67:c9:b3:c9:c7:b2:9f:f9:a6:61:a5:f8:ef:8b: 0f:3d:35:c5:f9:dd:cb:d0:03:19:b2:25:d7:5c:da: b8:20:18:ae:10:fa:0c:b9:f1:9f:17:fd:9d:e2:b0: 03:18:18:27:f7:f5:0d:36:8c:5a:0b:bb:ea:e6:a2: 7f:c4:cf:f1:58:3c:a3:93:e6:15:79:82:96:d6:28: ec:1e:47:01:0b:12:b7:f0:15:6e:97:5d:9f:d1:96: 53:d7:91:ca:92:0c:17:52:88:eb:51:bd:62:96:3a: 3a:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:D4:C6:A6:3F:D4:CA:84:97:0A:5C:BF:33:49:9A:A6:94:CD:B2:B3 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/1NTGpj_UyoSXCly_M0mappTNsrM.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.96.30.0/23 Signature Algorithm: sha256WithRSAEncryption 07:3a:cb:cf:7e:ee:df:8c:57:1d:11:c4:88:58:ac:00:e5:e5: 3c:ca:70:a9:4e:d5:0c:11:2b:40:65:d8:83:09:2c:cb:dc:c8: cd:31:fa:40:07:45:aa:c5:f7:d7:d9:96:b7:49:60:f9:01:aa: 28:da:9b:a1:c4:d6:f4:c2:6d:f6:67:e5:65:2a:1a:d3:39:65: fc:f2:64:ea:ec:63:f1:60:76:c4:cf:be:eb:d5:89:b4:f9:9b: e4:1f:db:d9:8d:38:85:c6:48:12:0d:b1:83:3e:82:93:05:42: 0d:e7:df:81:e1:0d:ef:63:c2:7d:6f:be:51:ba:a6:54:ea:55: d7:9b:d0:47:3f:7e:81:84:6f:df:0e:7b:51:40:94:02:63:0f: 07:8d:2b:da:cc:2c:8a:a3:2c:bb:c6:1a:ce:08:d5:bd:0e:88: 3a:ac:27:60:46:a7:e3:28:45:36:39:80:a9:9f:18:c9:e0:0c: ee:f1:8e:f7:51:cd:c5:4e:36:be:db:bf:9e:27:2d:3b:42:7d: d8:9c:17:08:1e:52:db:0e:5e:4b:fe:08:c2:31:39:28:64:d9: f7:e9:88:d9:e3:81:ce:8a:88:bf:15:a0:f4:56:c7:90:fb:9e: 91:a1:7d:75:0d:95:fd:07:2e:9f:fe:e4:06:9b:3a:0f:f8:ae: d3:d1:fb:39 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCH0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw MjE4MzdaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEQ0RDRDNkE2M0ZENENB ODQ5NzBBNUNCRjMzNDk5QUE2OTRDREIyQjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDN3ifhjT0nWMQnEWAx7Hu4kN4x0jKLZZszCY4pz1vmzHIRExBo AnUSMQgn0kA9TVpezp4VP1IiVwXtaw3us25/ptFJS3vVeUhl7bTu03sVtVEeLyZ4 Ab5NJhcbXtXf/9a+H2Zbbu/wemIFITrhRLpthfnyTwi47esnI8Atfdkc6l0jEN6D r6r2MD9nPmXL3aWJ4HUNgqJnybPJx7Kf+aZhpfjviw89NcX53cvQAxmyJddc2rgg GK4Q+gy58Z8X/Z3isAMYGCf39Q02jFoLu+rmon/Ez/FYPKOT5hV5gpbWKOweRwEL ErfwFW6XXZ/RllPXkcqSDBdSiOtRvWKWOjpBAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU1NTGpj/UyoSXCly/M0mappTNsrMwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5LzFOVEdwal9VeW9TWENseV9NMG1hcHBUTnNyTS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExYB4wDQYJKoZIhvcNAQELBQADggEBAAc6y89+7t+MVx0RxIhYrADl5TzK cKlO1QwRK0Bl2IMJLMvcyM0x+kAHRarF99fZlrdJYPkBqijam6HE1vTCbfZn5WUq GtM5ZfzyZOrsY/FgdsTPvuvVibT5m+Qf29mNOIXGSBINsYM+gpMFQg3n34HhDe9j wn1vvlG6plTqVdeb0Ec/foGEb98Oe1FAlAJjDweNK9rMLIqjLLvGGs4I1b0OiDqs J2BGp+MoRTY5gKmfGMngDO7xjvdRzcVONr7bv54nLTtCfdicFwgeUtsOXkv+CMIx OShk2ffpiNnjgc6KiL8VoPRWx5D7npGhfXUNlf0HLp/+5AabOg/4rtPR+zk= -----END CERTIFICATE-----Generated at Sun Feb 16 22:22:43 2025 by rpki-client