$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/1ORntJpQOJf3ZxyuS49dWdcoyp4.roa File: 1ORntJpQOJf3ZxyuS49dWdcoyp4.roa (raw, json) Hash identifier: YAxFIFGJz/kRP8qUrifMrF93PG+SSLckfavO+PoBfLA= Subject key identifier: D4:E4:67:B4:9A:50:38:97:F7:67:1C:AE:4B:8F:5D:59:D7:28:CA:9E Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0715 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/1ORntJpQOJf3ZxyuS49dWdcoyp4.roa Signing time: Tue 30 Apr 2024 01:53:00 +0000 ROA not before: Tue 30 Apr 2024 01:53:00 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 49.98.88.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1813 (0x715) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 30 01:53:00 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=D4E467B49A503897F7671CAE4B8F5D59D728CA9E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:2a:0c:e5:b2:63:40:d0:73:9e:91:7b:5f:ec: 97:66:e6:3a:d7:d1:77:f5:4b:40:2e:c2:ff:09:58: 55:70:20:fe:14:e4:53:fc:0d:24:b1:8b:80:1c:9a: 35:98:d7:ca:85:4c:e7:74:0d:ed:21:9e:9a:29:6a: b7:94:32:cb:19:f6:07:f2:7d:92:14:f0:81:f2:82: a7:62:62:e5:38:8b:e7:f5:c8:6d:97:7c:2d:17:ef: 2f:01:11:4d:cf:b2:86:10:5c:dc:1e:e8:41:18:dd: 87:ee:fa:ec:68:c4:0f:b6:0c:07:c7:07:1c:8f:ca: 9c:d9:61:75:39:2d:d4:23:04:40:7d:17:73:62:fd: e8:78:ba:bc:48:6c:28:40:47:8b:33:24:ec:af:06: fe:04:84:8a:e2:80:71:ea:86:b5:d8:ba:43:f8:b5: cd:d0:1b:10:6d:07:23:5a:83:50:b0:a6:82:41:e4: 73:b8:15:56:1f:85:5c:1d:4b:46:fa:8d:05:a0:f8: 7d:69:38:2d:8d:f1:6f:dc:8b:42:e3:d3:6a:b6:67: b2:06:a4:5a:8b:45:d7:6b:b0:16:a5:59:ed:1d:4d: 92:83:d1:ad:4b:46:68:d7:f9:98:a6:42:a9:47:6d: e9:24:02:ff:8f:13:ab:a4:f8:96:2c:4f:3f:ad:c8: 4c:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:E4:67:B4:9A:50:38:97:F7:67:1C:AE:4B:8F:5D:59:D7:28:CA:9E X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/1ORntJpQOJf3ZxyuS49dWdcoyp4.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.98.88.0/22 Signature Algorithm: sha256WithRSAEncryption a4:7b:62:51:cc:66:4c:d7:ba:9e:f3:4e:3c:9c:49:05:a0:a7: 48:29:5a:53:01:6d:8a:3c:52:49:6f:36:69:da:1f:06:a8:cf: d2:ff:6c:0e:64:5e:f0:94:5b:cc:e1:e3:11:89:9f:83:ca:39: 40:1a:24:eb:6d:9e:66:62:e3:70:f3:b6:a3:ee:b3:73:ab:41: ce:94:cd:d5:7e:4c:4c:00:8b:d4:08:84:7e:91:31:ca:36:f5: 70:c5:56:63:ad:43:4f:62:a0:17:9e:c3:43:8a:9a:21:5a:ed: 7b:62:c2:68:fa:ee:8b:05:a2:a3:7f:aa:3e:74:f4:5b:13:46: ee:6b:2d:07:41:ae:43:c5:98:93:23:2b:be:fa:2b:3d:b2:69: fa:f1:c7:2e:4e:c9:df:58:f1:05:42:d7:7a:2f:59:0a:96:2e: 88:84:8f:d4:ac:66:db:57:ec:a1:ac:2e:c5:35:06:31:7f:e7: b9:81:a8:4c:84:1f:d9:14:40:f1:46:ae:9e:f8:7a:e4:b2:cf: 19:fe:9a:48:14:8d:f2:db:b1:79:4b:9e:d9:9e:8d:05:59:86: a6:f9:8b:a0:7b:0d:11:6d:13:7a:c0:9d:76:2c:65:28:82:9e: 60:c4:fd:50:4e:50:bb:36:d5:29:5c:d6:49:d6:e7:10:25:3f: 33:66:63:62 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBxUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw MTUzMDBaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEQ0RTQ2N0I0OUE1MDM4 OTdGNzY3MUNBRTRCOEY1RDU5RDcyOENBOUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDYKgzlsmNA0HOekXtf7Jdm5jrX0Xf1S0Auwv8JWFVwIP4U5FP8 DSSxi4AcmjWY18qFTOd0De0hnpopareUMssZ9gfyfZIU8IHygqdiYuU4i+f1yG2X fC0X7y8BEU3PsoYQXNwe6EEY3Yfu+uxoxA+2DAfHBxyPypzZYXU5LdQjBEB9F3Ni /eh4urxIbChAR4szJOyvBv4EhIrigHHqhrXYukP4tc3QGxBtByNag1CwpoJB5HO4 FVYfhVwdS0b6jQWg+H1pOC2N8W/ci0Lj02q2Z7IGpFqLRddrsBalWe0dTZKD0a1L RmjX+ZimQqlHbekkAv+PE6uk+JYsTz+tyEwzAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU1ORntJpQOJf3ZxyuS49dWdcoyp4wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5LzFPUm50SnBRT0pmM1p4eXVTNDlkV2Rjb3lwNC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIxYlgwDQYJKoZIhvcNAQELBQADggEBAKR7YlHMZkzXup7zTjycSQWgp0gp WlMBbYo8UklvNmnaHwaoz9L/bA5kXvCUW8zh4xGJn4PKOUAaJOttnmZi43DztqPu s3OrQc6UzdV+TEwAi9QIhH6RMco29XDFVmOtQ09ioBeew0OKmiFa7Xtiwmj67osF oqN/qj509FsTRu5rLQdBrkPFmJMjK776Kz2yafrxxy5Oyd9Y8QVC13ovWQqWLoiE j9SsZttX7KGsLsU1BjF/57mBqEyEH9kUQPFGrp74euSyzxn+mkgUjfLbsXlLntme jQVZhqb5i6B7DRFtE3rAnXYsZSiCnmDE/VBOULs21Slc1knW5xAlPzNmY2I= -----END CERTIFICATE-----Generated at Sun Feb 16 22:24:04 2025 by rpki-client