$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/A4YusqkoMmx2vPb6WcYXup6HzlI.roa File: A4YusqkoMmx2vPb6WcYXup6HzlI.roa (raw, json) Hash identifier: RzTLEfwQAu2VWip2KB082HiWLkkW+lF0laBS+Am9QaU= Subject key identifier: 03:86:2E:B2:A9:28:32:6C:76:BC:F6:FA:59:C6:17:BA:9E:87:CE:52 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 065C Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/A4YusqkoMmx2vPb6WcYXup6HzlI.roa Signing time: Tue 30 Apr 2024 01:34:48 +0000 ROA not before: Tue 30 Apr 2024 01:34:48 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 49.106.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Mar 2025 20:25:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1628 (0x65c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 30 01:34:48 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=03862EB2A928326C76BCF6FA59C617BA9E87CE52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:2a:30:4a:2c:10:29:0f:74:62:8d:8e:f9:97: 16:bd:c8:a2:f7:98:97:50:bd:de:3d:52:4d:6c:74: 11:42:e7:03:e9:98:10:17:c2:20:8a:3c:ff:e4:b3: 6d:0a:a1:00:31:67:2d:60:6c:a3:00:c3:ab:fb:b0: b1:e0:d8:8c:00:d5:3c:3a:45:23:96:19:73:af:af: 90:09:fe:c0:df:89:28:ae:60:b0:16:a4:ae:4a:98: 51:87:d5:9b:54:ee:a3:9e:7b:2c:7c:b6:8a:83:d0: 32:f4:3b:f3:01:eb:a1:d9:93:3a:c1:4f:cb:67:4c: f2:4f:62:0f:b8:b5:38:70:96:5c:99:2f:6f:4c:34: e3:92:93:ed:b5:75:77:b9:ff:ab:b4:1c:6d:35:82: 31:d1:83:31:b3:32:07:f3:3b:b8:9c:b4:81:ea:32: 02:6c:58:b1:23:22:37:31:39:31:cb:6e:c1:5c:90: 62:4c:77:68:61:bb:68:44:49:ec:d7:db:85:ca:b9: 72:cf:9d:a7:dd:e2:8d:c9:52:f9:30:49:b2:3e:e7: f1:41:43:2e:6a:9c:15:74:4f:3f:71:a8:0e:f0:1c: 3e:1c:d8:7e:38:9c:42:fc:d1:db:d5:ff:60:fc:2d: b5:d4:46:e4:0c:a0:99:db:a5:b1:72:7a:ab:af:07: 42:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:86:2E:B2:A9:28:32:6C:76:BC:F6:FA:59:C6:17:BA:9E:87:CE:52 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/A4YusqkoMmx2vPb6WcYXup6HzlI.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.106.214.0/24 Signature Algorithm: sha256WithRSAEncryption df:c0:9d:34:2e:96:2a:35:3e:dc:3b:27:81:01:89:c2:3a:dd: 2e:00:a0:30:1b:22:fa:78:44:39:94:28:cb:fd:8e:de:fd:a6: df:c4:5d:7e:16:67:42:af:a6:59:e7:4b:73:1c:31:d8:0c:7b: 2c:29:02:71:08:90:dc:17:7c:50:36:ff:ac:0d:a7:5e:64:d5: 7a:7e:ab:6b:e7:dc:83:4b:c2:05:6c:01:57:0e:70:74:68:38: 50:35:5c:6e:67:35:cc:47:f6:25:3b:43:bb:33:29:46:5c:65: 31:a5:af:b5:3a:94:19:d5:c4:fe:7e:62:f4:00:a4:c6:f6:d6: 7a:56:3a:73:10:41:01:c9:8d:98:80:16:2f:8c:87:52:c8:b0: 6e:8b:0b:40:a3:05:6d:19:79:6c:7d:16:c3:9d:c3:0f:db:7a: 51:01:4b:a8:b0:67:1c:4e:0c:d8:6e:51:2d:c5:57:bb:77:76: 42:3a:c0:f4:12:a7:e6:2a:69:e0:00:48:fd:91:30:db:38:2d: 00:d0:61:54:08:06:90:2f:60:75:6a:06:4f:f1:58:26:06:ce: a9:5c:0e:82:b2:0f:77:9b:0c:9a:34:ba:a8:6e:4b:4f:e8:17: ef:18:81:95:21:a9:8e:3b:26:61:69:a2:8e:17:a4:f7:da:31: 2b:5d:06:d5 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBlwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw MTM0NDhaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDAzODYyRUIyQTkyODMy NkM3NkJDRjZGQTU5QzYxN0JBOUU4N0NFNTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDHKjBKLBApD3RijY75lxa9yKL3mJdQvd49Uk1sdBFC5wPpmBAX wiCKPP/ks20KoQAxZy1gbKMAw6v7sLHg2IwA1Tw6RSOWGXOvr5AJ/sDfiSiuYLAW pK5KmFGH1ZtU7qOeeyx8toqD0DL0O/MB66HZkzrBT8tnTPJPYg+4tThwllyZL29M NOOSk+21dXe5/6u0HG01gjHRgzGzMgfzO7ictIHqMgJsWLEjIjcxOTHLbsFckGJM d2hhu2hESezX24XKuXLPnafd4o3JUvkwSbI+5/FBQy5qnBV0Tz9xqA7wHD4c2H44 nEL80dvV/2D8LbXURuQMoJnbpbFyequvB0K7AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUA4YusqkoMmx2vPb6WcYXup6HzlIwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0E0WXVzcWtvTW14MnZQYjZXY1lYdXA2SHpsSS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAxatYwDQYJKoZIhvcNAQELBQADggEBAN/AnTQulio1Ptw7J4EBicI63S4A oDAbIvp4RDmUKMv9jt79pt/EXX4WZ0KvplnnS3McMdgMeywpAnEIkNwXfFA2/6wN p15k1Xp+q2vn3INLwgVsAVcOcHRoOFA1XG5nNcxH9iU7Q7szKUZcZTGlr7U6lBnV xP5+YvQApMb21npWOnMQQQHJjZiAFi+Mh1LIsG6LC0CjBW0ZeWx9FsOdww/belEB S6iwZxxODNhuUS3FV7t3dkI6wPQSp+YqaeAASP2RMNs4LQDQYVQIBpAvYHVqBk/x WCYGzqlcDoKyD3ebDJo0uqhuS0/oF+8YgZUhqY47JmFpoo4XpPfaMStdBtU= -----END CERTIFICATE-----Generated at Thu Mar 13 01:48:31 2025 by rpki-client