$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/2rkQNIuNau35kkTrElBGwMAdGI8.roa File: 2rkQNIuNau35kkTrElBGwMAdGI8.roa (raw, json) Hash identifier: qnOnfwe5DTuAwVBcec8oeiMl8Bl9EFHNwmHo8cDo5Kg= Subject key identifier: DA:B9:10:34:8B:8D:6A:ED:F9:92:44:EB:12:50:46:C0:C0:1D:18:8F Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0A09 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/2rkQNIuNau35kkTrElBGwMAdGI8.roa Signing time: Sun 30 Jun 2024 01:44:15 +0000 ROA not before: Sun 30 Jun 2024 01:44:15 +0000 ROA not after: Tue 24 Jun 2025 10:46:45 +0000 asID: 9605 IP address blocks: 220.210.80.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2569 (0xa09) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 30 01:44:15 2024 GMT Not After : Jun 24 10:46:45 2025 GMT Subject: CN=DAB910348B8D6AEDF99244EB125046C0C01D188F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:5f:71:7b:f3:a5:3b:5b:87:89:cc:e9:54:4e: 1e:b1:ed:be:50:6d:ba:31:85:50:54:ca:4d:99:b5: 1d:ff:50:fe:c2:f4:e8:96:9c:dc:4e:5d:9d:29:6a: 8d:d8:28:9d:2b:8d:a0:ba:6c:92:21:17:84:d2:df: 6e:b8:4f:bb:cb:5a:cb:91:ed:4a:f5:7d:d0:eb:34: 91:bf:08:39:9d:b4:35:84:8c:f4:7d:05:c7:1e:fa: 4d:15:f9:f8:8e:9c:42:64:3e:81:4b:4f:72:72:00: fa:ac:66:ee:3c:f1:12:ce:67:25:24:80:97:b9:f2: 44:f9:90:0b:da:55:99:11:f9:2d:0d:d8:57:c6:c0: fc:36:e0:d0:18:40:1b:8f:2f:72:69:aa:92:02:28: 25:be:f4:6c:1a:20:ee:93:90:04:33:89:6d:e4:1a: f1:b1:09:0f:a2:50:0d:0f:12:c2:fe:b8:42:f1:ea: ca:f6:1e:5b:1c:90:ed:b3:c6:a4:71:e4:39:68:9c: 0f:2e:85:72:05:5d:7b:7e:24:20:99:bd:4c:63:3d: 81:3b:0b:43:3f:db:65:6b:cd:9e:ce:4e:9b:2f:81: b5:49:97:1e:10:f3:0f:59:79:b4:06:43:10:af:3d: f6:86:a7:71:96:c0:8a:dd:8c:74:fb:ec:fb:ba:b2: d7:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:B9:10:34:8B:8D:6A:ED:F9:92:44:EB:12:50:46:C0:C0:1D:18:8F X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/2rkQNIuNau35kkTrElBGwMAdGI8.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 220.210.80.0/23 Signature Algorithm: sha256WithRSAEncryption 89:6c:1b:1d:0f:a5:34:ce:e8:ee:d7:82:e7:18:0a:da:51:89: 75:0e:c1:64:35:b5:2d:99:d2:19:6c:40:bf:51:f8:8b:7f:88: bf:85:61:e0:b5:ee:ed:88:20:7d:c1:cb:e6:f4:a3:eb:f4:6e: 4b:90:17:28:e9:61:8d:fb:c0:3e:d0:85:63:44:e8:c0:57:3f: 7a:9c:cb:66:76:34:ba:78:8f:a0:57:d9:50:59:3f:18:25:38: 4a:75:fd:a1:4e:01:8b:9d:2c:43:47:ab:51:51:57:f0:8f:0d: 1c:a4:da:ff:4e:d4:dd:e3:c2:c6:11:ac:dd:28:da:3f:40:6f: 33:95:92:ae:ab:a6:c4:d0:49:b6:aa:8d:4e:6a:b6:64:52:3c: d2:f5:ac:f0:d8:c1:df:bf:76:66:c8:24:26:0a:a9:98:e2:3c: 14:89:d5:57:d2:fb:1c:e2:b2:62:ad:3c:41:ef:74:25:a9:ab: c7:93:dd:36:d2:44:e2:ba:74:77:8d:ad:06:72:1c:9f:a2:b3: 10:b9:c0:de:98:09:b6:6e:90:9e:8d:36:4e:15:96:1f:a2:68: 8f:1d:2d:7a:27:3f:f2:b4:19:98:83:3d:aa:79:27:2b:01:88: 05:83:8a:41:47:c7:88:c3:b5:5e:a7:37:21:0e:29:79:fb:65: 46:8b:5b:40 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCgkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA2MzAw MTQ0MTVaFw0yNTA2MjQxMDQ2NDVaMDMxMTAvBgNVBAMTKERBQjkxMDM0OEI4RDZB RURGOTkyNDRFQjEyNTA0NkMwQzAxRDE4OEYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCdX3F786U7W4eJzOlUTh6x7b5QbboxhVBUyk2ZtR3/UP7C9OiW nNxOXZ0pao3YKJ0rjaC6bJIhF4TS3264T7vLWsuR7Ur1fdDrNJG/CDmdtDWEjPR9 Bcce+k0V+fiOnEJkPoFLT3JyAPqsZu488RLOZyUkgJe58kT5kAvaVZkR+S0N2FfG wPw24NAYQBuPL3JpqpICKCW+9GwaIO6TkAQziW3kGvGxCQ+iUA0PEsL+uELx6sr2 HlsckO2zxqRx5DlonA8uhXIFXXt+JCCZvUxjPYE7C0M/22VrzZ7OTpsvgbVJlx4Q 8w9ZebQGQxCvPfaGp3GWwIrdjHT77Pu6steNAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU2rkQNIuNau35kkTrElBGwMAdGI8wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5LzJya1FOSXVOYXUzNWtrVHJFbEJHd01BZEdJOC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAHc0lAwDQYJKoZIhvcNAQELBQADggEBAIlsGx0PpTTO6O7XgucYCtpRiXUO wWQ1tS2Z0hlsQL9R+It/iL+FYeC17u2IIH3By+b0o+v0bkuQFyjpYY37wD7QhWNE 6MBXP3qcy2Z2NLp4j6BX2VBZPxglOEp1/aFOAYudLENHq1FRV/CPDRyk2v9O1N3j wsYRrN0o2j9AbzOVkq6rpsTQSbaqjU5qtmRSPNL1rPDYwd+/dmbIJCYKqZjiPBSJ 1VfS+xzismKtPEHvdCWpq8eT3TbSROK6dHeNrQZyHJ+isxC5wN6YCbZukJ6NNk4V lh+iaI8dLXonP/K0GZiDPap5JysBiAWDikFHx4jDtV6nNyEOKXn7ZUaLW0A= -----END CERTIFICATE-----Generated at Sun Feb 16 22:11:40 2025 by rpki-client