$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/72h60nt0G9rj9Bc-pNTe28-uGW4.roa File: 72h60nt0G9rj9Bc-pNTe28-uGW4.roa (raw, json) Hash identifier: Y2VIW26xJlDnPqbIcZiQa4uNxZ4gAC61ujs8n3qndEw= Subject key identifier: EF:68:7A:D2:7B:74:1B:DA:E3:F4:17:3E:A4:D4:DE:DB:CF:AE:19:6E Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 09C9 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/72h60nt0G9rj9Bc-pNTe28-uGW4.roa Signing time: Sun 30 Jun 2024 01:40:27 +0000 ROA not before: Sun 30 Jun 2024 01:40:27 +0000 ROA not after: Tue 24 Jun 2025 10:46:45 +0000 asID: 9605 IP address blocks: 220.210.64.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2505 (0x9c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 30 01:40:27 2024 GMT Not After : Jun 24 10:46:45 2025 GMT Subject: CN=EF687AD27B741BDAE3F4173EA4D4DEDBCFAE196E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:5d:dc:13:9f:30:a8:c6:a5:6d:08:cb:21:33: 78:4e:0e:ee:64:2b:ce:ff:d1:f3:77:44:29:55:10: 66:50:15:11:90:62:05:c2:fc:10:ec:a5:14:1e:ea: 42:39:25:65:34:3a:76:a5:4a:ca:a6:66:11:34:9a: f7:cb:c0:78:aa:66:87:4d:5d:23:56:1c:3c:6d:90: 51:fb:cb:65:b9:7e:ab:15:65:cc:a9:ad:45:ec:f6: b3:d1:4a:72:0c:11:c6:e4:d1:cc:81:f5:2c:45:3e: cc:27:09:d6:ad:d5:63:fa:8e:d2:25:6f:5d:3c:7b: 41:02:84:b4:74:fd:97:f6:dd:5a:10:4c:30:ee:8b: 12:e7:11:51:00:65:b5:73:a6:ca:df:96:ae:02:b8: 83:30:d9:6c:c1:b4:c1:43:6c:df:62:78:9d:d4:3c: 3d:ea:56:98:67:b4:bd:51:d2:51:ec:96:8c:9a:b8: 40:d5:bb:ac:4e:c8:8e:2d:87:d0:4f:69:20:7d:42: 6c:63:03:20:b8:01:a9:3e:1d:8e:2b:8c:56:14:3f: b1:c9:67:fd:d0:9e:da:4e:d3:ed:68:b3:6a:f4:fe: 9c:ca:06:51:88:9d:60:6b:5d:53:a9:48:1c:72:2d: a0:31:a8:d2:54:26:df:e2:5e:40:57:73:a6:44:77: 27:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:68:7A:D2:7B:74:1B:DA:E3:F4:17:3E:A4:D4:DE:DB:CF:AE:19:6E X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/72h60nt0G9rj9Bc-pNTe28-uGW4.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 220.210.64.0/23 Signature Algorithm: sha256WithRSAEncryption 4e:ca:6c:d9:a2:6c:49:e1:65:2b:8e:72:c2:45:f0:35:35:17: 7e:13:6a:7e:fc:41:c1:8a:52:6b:1a:d4:b7:e3:70:76:7c:d7: 91:92:66:04:38:09:bc:ff:77:fd:35:21:7e:c0:3b:f0:88:a2: 12:bf:a2:bc:2b:65:17:b9:b1:93:cc:71:6b:1e:7b:8d:cc:38: 28:d8:b6:20:d4:54:f4:e5:61:d7:3c:44:47:63:14:51:b4:5e: 48:b6:d5:4a:69:76:47:29:af:57:47:99:7f:2c:6f:64:10:52: 18:5e:44:93:29:c8:9a:ed:33:86:5f:2a:43:71:37:35:70:29: 6d:45:ed:c9:41:f6:2d:48:bb:36:ed:ba:ee:70:c0:ce:ea:a5: 57:20:25:68:cc:5d:ca:d7:ab:1b:fe:08:a8:7d:ad:a6:9b:ad: 58:75:c1:a2:37:18:c4:1d:cf:2c:6a:95:2e:00:d9:85:a6:79: 28:0e:d5:e5:08:66:e6:64:90:f5:fe:98:ce:f9:d1:b9:8e:6e: 8b:56:1d:41:f9:3b:1b:bb:67:88:4e:23:7b:d0:e7:ef:bd:f4: 94:51:ad:5c:fc:02:d2:0b:58:53:21:16:81:4b:19:80:ec:4f: 64:6e:78:45:c5:ac:ae:58:70:7c:80:a7:81:0a:4b:e9:d7:cf: 39:94:f2:8f -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCckwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA2MzAw MTQwMjdaFw0yNTA2MjQxMDQ2NDVaMDMxMTAvBgNVBAMTKEVGNjg3QUQyN0I3NDFC REFFM0Y0MTczRUE0RDRERURCQ0ZBRTE5NkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDmXdwTnzCoxqVtCMshM3hODu5kK87/0fN3RClVEGZQFRGQYgXC /BDspRQe6kI5JWU0OnalSsqmZhE0mvfLwHiqZodNXSNWHDxtkFH7y2W5fqsVZcyp rUXs9rPRSnIMEcbk0cyB9SxFPswnCdat1WP6jtIlb108e0EChLR0/Zf23VoQTDDu ixLnEVEAZbVzpsrflq4CuIMw2WzBtMFDbN9ieJ3UPD3qVphntL1R0lHsloyauEDV u6xOyI4th9BPaSB9QmxjAyC4Aak+HY4rjFYUP7HJZ/3QntpO0+1os2r0/pzKBlGI nWBrXVOpSBxyLaAxqNJUJt/iXkBXc6ZEdydpAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU72h60nt0G9rj9Bc+pNTe28+uGW4wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5LzcyaDYwbnQwRzlyajlCYy1wTlRlMjgtdUdXNC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAHc0kAwDQYJKoZIhvcNAQELBQADggEBAE7KbNmibEnhZSuOcsJF8DU1F34T an78QcGKUmsa1LfjcHZ815GSZgQ4Cbz/d/01IX7AO/CIohK/orwrZRe5sZPMcWse e43MOCjYtiDUVPTlYdc8REdjFFG0Xki21Uppdkcpr1dHmX8sb2QQUhheRJMpyJrt M4ZfKkNxNzVwKW1F7clB9i1Iuzbtuu5wwM7qpVcgJWjMXcrXqxv+CKh9raabrVh1 waI3GMQdzyxqlS4A2YWmeSgO1eUIZuZkkPX+mM750bmObotWHUH5Oxu7Z4hOI3vQ 5++99JRRrVz8AtILWFMhFoFLGYDsT2RueEXFrK5YcHyAp4EKS+nXzzmU8o8= -----END CERTIFICATE-----Generated at Sun Feb 16 22:31:48 2025 by rpki-client