$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/2ZDtk1i0zKFEemwd9hRC2_b9EAE.roa File: 2ZDtk1i0zKFEemwd9hRC2_b9EAE.roa (raw, json) Hash identifier: CQ+Cm4UU/3UXbsayf2KgvxZSTdfryYxed0ni3/TmZoQ= Subject key identifier: D9:90:ED:93:58:B4:CC:A1:44:7A:6C:1D:F6:14:42:DB:F6:FD:10:01 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0AD2 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/2ZDtk1i0zKFEemwd9hRC2_b9EAE.roa Signing time: Fri 24 Jan 2025 04:45:12 +0000 ROA not before: Fri 24 Jan 2025 04:45:12 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.109.68.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2770 (0xad2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jan 24 04:45:12 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=D990ED9358B4CCA1447A6C1DF61442DBF6FD1001 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c3:12:0e:b8:e2:65:fa:8f:f7:81:08:e8:65: 2c:19:97:d7:35:3f:5c:f2:b8:0c:27:81:90:56:4b: 8a:3f:3b:b3:77:f7:d5:9f:c2:e0:fd:1f:2d:5a:39: cc:88:ab:f4:b5:40:c3:20:c8:c2:35:d1:49:87:d3: b7:31:3a:41:4c:6f:85:68:4d:ba:d0:f3:37:2b:60: ea:04:81:f2:d7:d8:6b:56:33:7f:28:6d:ab:64:70: cd:f6:34:de:68:3e:e8:5b:03:1e:ff:ed:f6:40:c6: bd:eb:7a:ad:9e:d0:02:62:7e:5f:7d:28:24:c0:21: e8:d4:22:6a:aa:e4:3c:bd:a9:ad:c1:48:20:33:ec: 89:0d:69:da:7c:88:3c:21:08:d5:eb:5d:77:2d:43: 0b:2c:c4:5c:86:58:fa:7f:39:a6:ee:ea:1b:77:8e: ff:77:39:5f:13:0c:35:36:46:d2:ee:af:68:f9:ca: 05:bf:9f:21:39:dd:10:63:80:55:db:e5:0a:01:f2: 66:1f:50:70:54:97:09:77:52:70:e0:22:c3:d4:37: c4:f7:a1:b5:2d:e0:2c:2c:dd:c7:24:27:76:f8:3d: b6:24:41:7a:99:fd:09:bc:9e:fd:ed:24:ee:9c:5f: 55:f5:71:a6:be:e0:99:76:80:ec:37:48:47:6e:fa: 66:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:90:ED:93:58:B4:CC:A1:44:7A:6C:1D:F6:14:42:DB:F6:FD:10:01 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/2ZDtk1i0zKFEemwd9hRC2_b9EAE.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.109.68.0/22 Signature Algorithm: sha256WithRSAEncryption ce:a5:70:33:55:b6:26:50:b1:12:cf:a1:0b:d4:45:88:23:8c: c2:d6:dd:4f:8c:43:94:b3:ab:2e:97:7b:62:40:6a:82:64:6c: fc:5c:d2:25:41:7d:a7:b2:33:f9:a7:09:41:45:85:6e:a1:98: 6a:95:2c:a6:29:11:56:21:ce:1a:24:ad:60:bf:d9:f6:af:95: ab:66:a4:50:9d:e3:d7:b6:1f:44:1f:a2:c5:a4:2c:dc:8c:fe: 66:38:19:44:fc:d2:aa:33:b7:c5:cd:f6:cc:1e:4e:61:14:93: e5:f4:cb:db:f2:21:c6:40:58:6d:2e:56:8f:08:f8:e8:ad:29: 50:8a:37:a5:b2:c3:b0:86:2b:27:a9:e7:99:00:a2:de:f1:77: 66:f5:ee:b1:1d:8d:72:16:0d:9d:aa:54:f0:e3:12:65:4f:f1: 6e:0a:c8:3e:82:79:c5:73:bf:e7:d6:54:85:41:14:e4:91:24: 1b:1a:e1:3b:71:59:05:f1:e9:53:67:98:5e:02:69:5c:94:83: 95:0e:ee:f6:5e:78:50:03:db:79:13:db:ed:45:e9:27:20:2d: be:cc:fa:bd:21:f6:a9:62:16:2a:da:ce:81:50:dc:02:fb:0c: 97:47:00:6c:ad:69:30:2a:fd:6f:dc:6e:99:c6:7f:64:f3:58: 89:fe:25:6e -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCtIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTAxMjQw NDQ1MTJaFw0yNjAxMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEQ5OTBFRDkzNThCNEND QTE0NDdBNkMxREY2MTQ0MkRCRjZGRDEwMDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC0wxIOuOJl+o/3gQjoZSwZl9c1P1zyuAwngZBWS4o/O7N399Wf wuD9Hy1aOcyIq/S1QMMgyMI10UmH07cxOkFMb4VoTbrQ8zcrYOoEgfLX2GtWM38o batkcM32NN5oPuhbAx7/7fZAxr3req2e0AJifl99KCTAIejUImqq5Dy9qa3BSCAz 7IkNadp8iDwhCNXrXXctQwssxFyGWPp/Oabu6ht3jv93OV8TDDU2RtLur2j5ygW/ nyE53RBjgFXb5QoB8mYfUHBUlwl3UnDgIsPUN8T3obUt4Cws3cckJ3b4PbYkQXqZ /Qm8nv3tJO6cX1X1caa+4Jl2gOw3SEdu+ma9AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU2ZDtk1i0zKFEemwd9hRC2/b9EAEwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5LzJaRHRrMWkwektGRWVtd2Q5aFJDMl9iOUVBRS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIxbUQwDQYJKoZIhvcNAQELBQADggEBAM6lcDNVtiZQsRLPoQvURYgjjMLW 3U+MQ5Szqy6Xe2JAaoJkbPxc0iVBfaeyM/mnCUFFhW6hmGqVLKYpEVYhzhokrWC/ 2favlatmpFCd49e2H0QfosWkLNyM/mY4GUT80qozt8XN9sweTmEUk+X0y9vyIcZA WG0uVo8I+OitKVCKN6Wyw7CGKyep55kAot7xd2b17rEdjXIWDZ2qVPDjEmVP8W4K yD6CecVzv+fWVIVBFOSRJBsa4TtxWQXx6VNnmF4CaVyUg5UO7vZeeFAD23kT2+1F 6ScgLb7M+r0h9qliFirazoFQ3AL7DJdHAGytaTAq/W/cbpnGf2TzWIn+JW4= -----END CERTIFICATE-----Generated at Wed Feb 19 22:43:12 2025 by rpki-client