$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/8CxwNs-zisH56PPzivKt6UlFGRE.roa File: 8CxwNs-zisH56PPzivKt6UlFGRE.roa (raw, json) Hash identifier: 0SH97tn7TpRmGKi/7EGP47IrXHGt9+UpJG2yx/ckocg= Subject key identifier: F0:2C:70:36:CF:B3:8A:C1:F9:E8:F3:F3:8A:F2:AD:E9:49:45:19:11 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0A03 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/8CxwNs-zisH56PPzivKt6UlFGRE.roa Signing time: Sun 30 Jun 2024 01:44:12 +0000 ROA not before: Sun 30 Jun 2024 01:44:12 +0000 ROA not after: Tue 24 Jun 2025 10:46:45 +0000 asID: 9605 IP address blocks: 110.158.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2563 (0xa03) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 30 01:44:12 2024 GMT Not After : Jun 24 10:46:45 2025 GMT Subject: CN=F02C7036CFB38AC1F9E8F3F38AF2ADE949451911 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:2c:d3:96:76:2d:86:f4:6e:83:09:6f:87:9a: 49:60:21:db:04:3f:99:97:28:b1:6e:0e:17:69:33: d9:0e:46:94:9f:f8:36:00:f1:f6:16:70:8c:28:1b: d5:4e:d4:dd:01:85:51:4d:32:81:f2:3c:93:c8:6a: e0:0f:bf:02:f5:79:e8:b9:9c:b1:ea:f1:67:94:f4: c4:bb:b6:db:4c:95:fe:4f:55:f5:00:3f:d5:d7:5f: a0:d7:ac:06:a4:30:2b:0e:14:aa:7a:c4:59:a5:b3: 98:c9:e4:8b:14:9b:b2:0a:81:f6:e4:87:d7:50:f3: e7:61:73:90:ff:af:a1:65:28:3e:c0:29:c5:da:ec: 85:2e:9f:52:51:13:64:62:43:72:b6:6a:42:5b:40: 80:39:1c:e0:0b:1a:1a:8f:fa:4c:bf:a7:89:73:e0: f8:89:83:d5:4a:0c:cb:1b:6e:84:91:2d:7a:1e:a8: f0:43:6e:8c:0c:78:a1:e0:12:c7:32:7d:14:2e:06: d0:0b:c7:99:d3:60:33:be:de:5e:c4:37:11:d5:b1: 49:c7:aa:1e:08:15:a0:d7:db:01:e4:f3:fa:f2:70: eb:e1:e6:ca:e7:d7:46:ca:9a:5b:fc:cd:0c:74:65: 84:d7:4f:0b:74:d1:1d:33:25:25:e3:20:03:35:c3: f3:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:2C:70:36:CF:B3:8A:C1:F9:E8:F3:F3:8A:F2:AD:E9:49:45:19:11 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/8CxwNs-zisH56PPzivKt6UlFGRE.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 110.158.136.0/22 Signature Algorithm: sha256WithRSAEncryption 71:68:a3:57:5d:b3:af:25:05:b8:94:61:d7:fa:1e:76:3b:32: 0c:9a:8e:25:bd:7d:31:29:60:0d:cc:2d:9a:5e:69:4f:de:cf: 71:e2:6d:a2:c1:c4:c3:32:e3:f4:c8:fc:6f:0d:c4:27:17:f0: 4f:0e:d1:a7:53:59:90:3c:a8:2a:3a:ad:13:ee:2d:90:70:9f: fb:1f:b5:4f:73:78:35:04:0b:33:a0:57:65:fc:cb:19:2f:f6: a7:db:2f:84:05:91:77:8d:87:9b:7e:2f:4f:66:d1:0c:55:85: 1c:bf:ea:2b:d4:a8:17:11:24:42:12:ea:44:2e:5c:1b:05:f2: f2:4c:9d:41:a1:48:8c:ec:0d:aa:bd:56:75:71:8d:fb:ab:6d: ff:79:a1:e0:76:05:58:12:e1:f5:99:91:07:b0:46:f0:e5:33: de:4a:c2:63:00:47:3c:cd:6d:8a:0f:39:32:c1:df:62:f5:e0: 61:fb:16:bd:67:b4:f9:09:05:ff:33:91:77:a3:be:0e:67:95: 29:db:9f:90:98:20:33:8c:57:05:76:dc:1b:3e:1a:96:d5:c7: cb:b7:c7:66:c2:a9:62:e9:13:84:d5:ec:7c:78:55:a3:60:73: a4:1f:17:ae:5b:02:e9:da:14:23:a6:41:63:89:4a:2a:a2:1a: 54:b9:35:48 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCgMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA2MzAw MTQ0MTJaFw0yNTA2MjQxMDQ2NDVaMDMxMTAvBgNVBAMTKEYwMkM3MDM2Q0ZCMzhB QzFGOUU4RjNGMzhBRjJBREU5NDk0NTE5MTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDHLNOWdi2G9G6DCW+HmklgIdsEP5mXKLFuDhdpM9kORpSf+DYA 8fYWcIwoG9VO1N0BhVFNMoHyPJPIauAPvwL1eei5nLHq8WeU9MS7tttMlf5PVfUA P9XXX6DXrAakMCsOFKp6xFmls5jJ5IsUm7IKgfbkh9dQ8+dhc5D/r6FlKD7AKcXa 7IUun1JRE2RiQ3K2akJbQIA5HOALGhqP+ky/p4lz4PiJg9VKDMsbboSRLXoeqPBD bowMeKHgEscyfRQuBtALx5nTYDO+3l7ENxHVsUnHqh4IFaDX2wHk8/rycOvh5srn 10bKmlv8zQx0ZYTXTwt00R0zJSXjIAM1w/OzAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU8CxwNs+zisH56PPzivKt6UlFGREwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5LzhDeHdOcy16aXNINTZQUHppdkt0NlVsRkdSRS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAJunogwDQYJKoZIhvcNAQELBQADggEBAHFoo1dds68lBbiUYdf6HnY7Mgya jiW9fTEpYA3MLZpeaU/ez3HibaLBxMMy4/TI/G8NxCcX8E8O0adTWZA8qCo6rRPu LZBwn/sftU9zeDUECzOgV2X8yxkv9qfbL4QFkXeNh5t+L09m0QxVhRy/6ivUqBcR JEIS6kQuXBsF8vJMnUGhSIzsDaq9VnVxjfurbf95oeB2BVgS4fWZkQewRvDlM95K wmMARzzNbYoPOTLB32L14GH7Fr1ntPkJBf8zkXejvg5nlSnbn5CYIDOMVwV23Bs+ GpbVx8u3x2bCqWLpE4TV7Hx4VaNgc6QfF65bAunaFCOmQWOJSiqiGlS5NUg= -----END CERTIFICATE-----Generated at Sun Feb 16 22:28:43 2025 by rpki-client