$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/2Gm2difdGUGyNjRSUA76Nf4k5Mo.roa File: 2Gm2difdGUGyNjRSUA76Nf4k5Mo.roa (raw, json) Hash identifier: lqMUhH7Qreosd6P4GinuXbr7wuEPPZzgm/F38akcR80= Subject key identifier: D8:69:B6:76:27:DD:19:41:B2:36:34:52:50:0E:FA:35:FE:24:E4:CA Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0AAA Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/2Gm2difdGUGyNjRSUA76Nf4k5Mo.roa Signing time: Sun 30 Jun 2024 01:54:27 +0000 ROA not before: Sun 30 Jun 2024 01:54:27 +0000 ROA not after: Tue 24 Jun 2025 10:46:45 +0000 asID: 9605 IP address blocks: 49.98.20.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2730 (0xaaa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 30 01:54:27 2024 GMT Not After : Jun 24 10:46:45 2025 GMT Subject: CN=D869B67627DD1941B2363452500EFA35FE24E4CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ae:72:f0:0e:98:72:66:02:a7:45:9a:07:30: d4:85:0f:06:a1:25:37:d7:ad:57:70:03:b3:85:7b: b4:54:f3:35:25:f7:86:ad:93:b5:dd:ed:b8:e0:9d: c2:6e:d3:c1:3b:42:1c:3e:7f:56:05:5e:c4:cd:03: 88:42:64:b8:e5:a1:56:61:07:f7:5f:a0:a1:07:37: a3:ee:e5:7f:fb:72:2d:1f:13:a2:31:fe:99:f6:8d: a5:90:f6:ab:90:6a:83:92:9d:3d:11:49:52:5b:36: 91:1c:5a:02:d6:d7:8d:88:5b:27:ff:53:ab:cc:de: 80:05:9d:d7:2f:8e:43:e0:63:1a:11:35:a2:96:0a: 3e:a9:73:7b:91:cd:c2:03:93:ea:90:7a:f5:f6:56: 55:2f:0b:c8:b0:8b:41:06:de:d0:cf:0d:a2:6b:4c: 30:56:07:8e:c0:af:b9:32:00:9e:99:c0:a1:eb:41: 94:fe:64:84:88:e0:e3:e3:76:52:68:e5:4c:ca:6e: 80:63:2d:ad:f2:03:ef:b7:56:7b:a1:85:25:50:d6: 86:18:86:90:73:9e:bc:69:92:a5:7b:62:63:02:a0: 36:90:2e:36:cb:5e:ec:85:3d:7d:5b:13:96:f6:19: 3b:16:4e:0c:b5:97:d1:2f:07:b7:32:c9:89:cc:97: 93:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:69:B6:76:27:DD:19:41:B2:36:34:52:50:0E:FA:35:FE:24:E4:CA X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/2Gm2difdGUGyNjRSUA76Nf4k5Mo.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.98.20.0/23 Signature Algorithm: sha256WithRSAEncryption 1d:7e:29:d5:5c:b4:dd:e9:71:59:df:f6:59:e8:19:e4:e1:12: 0a:2f:46:00:21:78:c5:d7:a5:d3:a6:21:06:8f:6a:f6:dc:7f: 95:ac:2c:d9:fb:ea:c9:3b:d8:39:44:25:9d:4b:a5:dc:bb:9f: 08:15:5d:88:5c:9c:76:32:f2:1f:41:5e:5d:6a:2a:1a:6e:f3: 3b:a4:31:79:68:e3:d4:d3:08:9d:64:e9:93:b4:3a:78:72:f5: 91:23:48:62:14:cc:9c:7f:bc:3a:0d:75:bb:51:a6:96:26:dc: f1:0f:c4:34:6a:8a:e5:b6:fb:04:bf:00:d4:af:9d:a2:57:43: 2b:50:76:e8:2d:44:d2:45:56:b9:fa:36:90:47:94:16:85:0a: 4d:cf:4e:16:b5:48:db:b3:2a:fc:65:fa:63:a3:60:5f:1c:fb: e8:b8:e0:e4:11:5e:e3:f6:4b:e2:55:e1:d1:c6:6a:fa:f0:51: 9d:09:4e:12:55:92:49:8e:08:2e:b0:ac:a2:d8:b7:c7:67:25: ca:8d:3e:69:82:7e:3b:b2:55:00:5f:ae:a7:9e:59:9e:b0:04: 81:52:22:90:bd:22:e9:b8:6d:23:3f:24:a6:31:7f:72:55:ca: 6a:aa:42:3f:79:74:8c:d5:0e:55:7a:df:17:d7:a5:7b:27:1c: 49:a8:60:3c -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCqowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA2MzAw MTU0MjdaFw0yNTA2MjQxMDQ2NDVaMDMxMTAvBgNVBAMTKEQ4NjlCNjc2MjdERDE5 NDFCMjM2MzQ1MjUwMEVGQTM1RkUyNEU0Q0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC7rnLwDphyZgKnRZoHMNSFDwahJTfXrVdwA7OFe7RU8zUl94at k7Xd7bjgncJu08E7Qhw+f1YFXsTNA4hCZLjloVZhB/dfoKEHN6Pu5X/7ci0fE6Ix /pn2jaWQ9quQaoOSnT0RSVJbNpEcWgLW142IWyf/U6vM3oAFndcvjkPgYxoRNaKW Cj6pc3uRzcIDk+qQevX2VlUvC8iwi0EG3tDPDaJrTDBWB47Ar7kyAJ6ZwKHrQZT+ ZISI4OPjdlJo5UzKboBjLa3yA++3VnuhhSVQ1oYYhpBznrxpkqV7YmMCoDaQLjbL XuyFPX1bE5b2GTsWTgy1l9EvB7cyyYnMl5MvAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU2Gm2difdGUGyNjRSUA76Nf4k5MowHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5LzJHbTJkaWZkR1VHeU5qUlNVQTc2TmY0azVNby5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExYhQwDQYJKoZIhvcNAQELBQADggEBAB1+KdVctN3pcVnf9lnoGeThEgov RgAheMXXpdOmIQaPavbcf5WsLNn76sk72DlEJZ1Lpdy7nwgVXYhcnHYy8h9BXl1q Khpu8zukMXlo49TTCJ1k6ZO0Onhy9ZEjSGIUzJx/vDoNdbtRppYm3PEPxDRqiuW2 +wS/ANSvnaJXQytQdugtRNJFVrn6NpBHlBaFCk3PTha1SNuzKvxl+mOjYF8c++i4 4OQRXuP2S+JV4dHGavrwUZ0JThJVkkmOCC6wrKLYt8dnJcqNPmmCfjuyVQBfrqee WZ6wBIFSIpC9Ium4bSM/JKYxf3JVymqqQj95dIzVDlV63xfXpXsnHEmoYDw= -----END CERTIFICATE-----Generated at Sun Feb 16 22:28:02 2025 by rpki-client