$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/1zJaH9hNlWNSuN16NO_w-Bf0oGE.roa File: 1zJaH9hNlWNSuN16NO_w-Bf0oGE.roa (raw, json) Hash identifier: ikVcHuFR87c/YPBaojM9kExYDcNKI4uDRZRwcdgJjg0= Subject key identifier: D7:32:5A:1F:D8:4D:95:63:52:B8:DD:7A:34:EF:F0:F8:17:F4:A0:61 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0806 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/1zJaH9hNlWNSuN16NO_w-Bf0oGE.roa Signing time: Tue 30 Apr 2024 02:12:22 +0000 ROA not before: Tue 30 Apr 2024 02:12:22 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 49.110.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2054 (0x806) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 30 02:12:22 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=D7325A1FD84D956352B8DD7A34EFF0F817F4A061 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:75:cc:d2:19:5d:ae:6b:50:ef:2a:e9:db:e7: 2e:09:d4:72:f5:d6:99:40:15:56:2d:15:3d:e0:8b: 0b:67:0c:97:0f:61:31:77:e1:ea:1c:1c:22:01:0f: 4d:12:d3:71:8c:94:9d:d4:94:a4:eb:c9:cc:5e:3c: 2e:62:fe:47:ee:2b:ba:7a:99:f3:68:6b:89:c8:8f: b7:88:5f:60:9f:00:cf:03:22:9a:ee:37:58:e9:99: 24:fc:8c:a1:6d:16:da:ba:54:99:6e:6b:92:f4:05: 57:4a:bc:dc:af:ca:af:72:2e:23:6b:63:29:22:c2: 45:49:09:8c:bb:57:f0:fa:05:af:4c:35:7d:46:c6: 11:fd:27:3d:3e:f9:33:a9:89:d0:28:ee:80:9c:6c: 2f:30:c2:f8:bb:fb:e3:ae:06:62:06:7b:f8:60:b3: 76:92:a5:11:55:c9:df:6a:04:51:56:70:aa:73:75: 78:ce:53:04:60:08:e5:33:56:d1:ed:3b:64:50:dd: 86:29:1a:76:14:a0:25:a0:33:dd:2a:1e:91:ee:cf: 99:ba:ed:99:82:46:a0:fd:80:2f:f9:b9:b1:b5:05: 14:8b:c4:0d:45:ad:85:bd:34:0b:0b:3c:fe:0a:46: 80:27:f8:fe:8e:4b:5d:04:58:1f:b7:f7:49:e8:9a: 9f:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:32:5A:1F:D8:4D:95:63:52:B8:DD:7A:34:EF:F0:F8:17:F4:A0:61 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/1zJaH9hNlWNSuN16NO_w-Bf0oGE.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.110.0.0/18 Signature Algorithm: sha256WithRSAEncryption bf:c9:dc:74:79:96:d2:5d:f8:2c:24:ca:64:dc:73:9f:3a:ff: 8b:bb:63:f4:f8:fc:c3:46:d1:ea:e5:b9:37:66:05:88:ea:46: f9:e3:4b:80:57:aa:e8:16:40:97:04:8a:9d:7f:34:2e:1d:20: e9:6d:dd:48:bb:8c:a0:c3:46:30:64:e4:30:4f:f7:52:4f:9e: ae:bf:bb:85:77:48:04:67:47:4b:9b:3c:cf:08:45:e1:47:ea: 77:20:62:1f:45:17:6c:d6:be:a2:bf:f8:d5:75:96:2d:0b:ca: ee:e0:0b:a2:82:13:de:85:66:6a:97:5f:a7:31:ec:ad:9a:76: 00:4b:a9:8d:e7:8a:d4:b8:28:95:e0:31:37:4a:05:c1:98:bf: 6c:f1:ac:b2:1d:17:c7:aa:68:a4:70:00:7b:06:12:32:23:2a: 85:11:ac:ae:5e:c9:13:66:8e:c2:5e:38:1e:03:e1:8c:88:2a: 91:66:5f:d0:fe:a1:80:a5:f8:ff:b7:b7:3a:b3:61:f4:07:19: f8:55:fe:e7:d2:40:e3:9a:be:85:ff:af:47:db:47:56:1b:af: 65:23:d4:7d:4e:d5:8b:66:28:78:28:db:f8:c7:a4:ec:2b:43: ff:04:cc:a6:7e:6d:f3:10:59:1a:cd:47:79:98:af:d4:69:10: bd:bc:48:d5 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCAYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw MjEyMjJaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEQ3MzI1QTFGRDg0RDk1 NjM1MkI4REQ3QTM0RUZGMEY4MTdGNEEwNjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDPdczSGV2ua1DvKunb5y4J1HL11plAFVYtFT3giwtnDJcPYTF3 4eocHCIBD00S03GMlJ3UlKTrycxePC5i/kfuK7p6mfNoa4nIj7eIX2CfAM8DIpru N1jpmST8jKFtFtq6VJlua5L0BVdKvNyvyq9yLiNrYykiwkVJCYy7V/D6Ba9MNX1G xhH9Jz0++TOpidAo7oCcbC8wwvi7++OuBmIGe/hgs3aSpRFVyd9qBFFWcKpzdXjO UwRgCOUzVtHtO2RQ3YYpGnYUoCWgM90qHpHuz5m67ZmCRqD9gC/5ubG1BRSLxA1F rYW9NAsLPP4KRoAn+P6OS10EWB+390nomp+XAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU1zJaH9hNlWNSuN16NO/w+Bf0oGEwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5LzF6SmFIOWhObFdOU3VOMTZOT193LUJmMG9HRS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAYxbgAwDQYJKoZIhvcNAQELBQADggEBAL/J3HR5ltJd+CwkymTcc586/4u7 Y/T4/MNG0erluTdmBYjqRvnjS4BXqugWQJcEip1/NC4dIOlt3Ui7jKDDRjBk5DBP 91JPnq6/u4V3SARnR0ubPM8IReFH6ncgYh9FF2zWvqK/+NV1li0Lyu7gC6KCE96F ZmqXX6cx7K2adgBLqY3nitS4KJXgMTdKBcGYv2zxrLIdF8eqaKRwAHsGEjIjKoUR rK5eyRNmjsJeOB4D4YyIKpFmX9D+oYCl+P+3tzqzYfQHGfhV/ufSQOOavoX/r0fb R1Ybr2Uj1H1O1YtmKHgo2/jHpOwrQ/8EzKZ+bfMQWRrNR3mYr9RpEL28SNU= -----END CERTIFICATE-----Generated at Sun Feb 16 22:22:38 2025 by rpki-client