$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ABLXjGuVIigK7V2YtOF8NZuqVEI.roa File: ABLXjGuVIigK7V2YtOF8NZuqVEI.roa (raw, json) Hash identifier: 44DEr1D/xNudJrOK7jJ0vIfOt2lj/EOgQq26dGVOimY= Subject key identifier: 00:12:D7:8C:6B:95:22:28:0A:ED:5D:98:B4:E1:7C:35:9B:AA:54:42 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0B07 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ABLXjGuVIigK7V2YtOF8NZuqVEI.roa Signing time: Fri 31 Jan 2025 01:34:21 +0000 ROA not before: Fri 31 Jan 2025 01:34:21 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.97.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2823 (0xb07) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jan 31 01:34:21 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=0012D78C6B9522280AED5D98B4E17C359BAA5442 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b4:17:f5:5e:93:5e:b4:0f:31:df:98:af:3f: e2:e3:67:83:e1:cf:ba:9f:32:6f:d9:c6:15:5d:dc: 2d:30:7e:8a:bb:d4:2b:55:bf:ee:a4:6d:d9:a5:16: a9:c1:73:8c:fa:41:a2:76:58:5b:78:60:3c:a8:21: 52:ba:67:91:1b:f7:29:0e:a1:e0:9f:55:9b:ea:0c: 7f:cf:58:06:4c:71:f8:9f:34:ea:68:ee:4e:32:6e: c7:83:c2:f1:f8:e3:de:35:0e:80:13:79:e3:64:39: 37:da:c7:6f:49:42:4e:2f:8b:7f:3c:20:8a:ca:26: c2:44:8f:8e:d3:b5:fe:92:45:cf:eb:11:6b:c0:27: 04:76:73:b6:03:05:a4:d8:10:0f:51:0f:e9:dc:76: 72:9c:bb:55:16:20:25:21:14:01:22:da:ef:4d:60: c5:b8:55:f5:1e:e0:65:de:7e:84:4b:7c:d4:80:db: a0:2b:be:71:1a:24:8a:5f:85:aa:d1:ae:43:9a:71: 3d:f3:b2:85:72:4b:10:97:d6:cf:19:cd:f8:7e:a7: 9d:63:09:f3:87:67:45:32:51:1d:f1:5e:72:a5:c0: 8c:04:a1:f3:80:54:31:10:dc:72:7a:c1:09:2a:fe: 82:76:97:99:d4:1c:79:b1:99:3d:1d:f8:f5:84:35: 88:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:12:D7:8C:6B:95:22:28:0A:ED:5D:98:B4:E1:7C:35:9B:AA:54:42 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ABLXjGuVIigK7V2YtOF8NZuqVEI.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.97.111.0/24 Signature Algorithm: sha256WithRSAEncryption 0d:1b:17:6f:ba:84:0c:c7:e3:06:5f:19:e8:3e:c5:5d:94:84: dc:d8:78:40:32:c8:8d:e8:bf:df:f8:0e:54:73:8c:19:91:1a: cb:8f:9f:3b:a3:aa:93:f3:7d:e3:0b:ba:65:af:6b:87:58:ba: 6b:5c:7a:ba:c4:bf:6b:48:1b:00:19:25:fb:37:34:82:d8:da: 74:72:ff:fd:f9:c0:16:e3:8b:d9:14:41:ba:f1:dd:16:94:e5: 44:4b:84:be:fd:85:cf:d4:59:a5:2a:41:e3:21:29:c7:7f:63: 16:59:ec:13:2d:55:20:01:6c:9e:3b:57:50:d2:33:5a:0d:ea: 77:76:10:7a:94:d4:df:f1:79:f6:27:07:f7:d0:10:55:2c:3d: a5:bd:a7:ab:50:43:01:d1:b7:31:1f:55:f5:db:c4:ae:e9:9b: f4:4a:3e:5f:4a:74:3a:37:f5:e7:4e:d5:90:d4:06:ad:c3:45: 68:82:3a:4a:56:f2:24:5d:c4:f0:97:77:4f:3a:24:9d:b5:5e: c8:6e:86:88:bd:12:e5:3e:15:1a:fb:0a:15:5a:00:0e:12:d2: b2:58:54:33:f3:c2:ca:06:e6:d9:2a:1c:e3:af:dd:78:95:ea: f8:d4:d3:c8:86:a0:11:36:da:2f:5a:c0:7c:2c:22:28:33:19: d1:c7:ce:57 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCwcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTAxMzEw MTM0MjFaFw0yNjAxMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDAwMTJENzhDNkI5NTIy MjgwQUVENUQ5OEI0RTE3QzM1OUJBQTU0NDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCttBf1XpNetA8x35ivP+LjZ4Phz7qfMm/ZxhVd3C0wfoq71CtV v+6kbdmlFqnBc4z6QaJ2WFt4YDyoIVK6Z5Eb9ykOoeCfVZvqDH/PWAZMcfifNOpo 7k4ybseDwvH44941DoATeeNkOTfax29JQk4vi388IIrKJsJEj47Ttf6SRc/rEWvA JwR2c7YDBaTYEA9RD+ncdnKcu1UWICUhFAEi2u9NYMW4VfUe4GXefoRLfNSA26Ar vnEaJIpfharRrkOacT3zsoVySxCX1s8Zzfh+p51jCfOHZ0UyUR3xXnKlwIwEofOA VDEQ3HJ6wQkq/oJ2l5nUHHmxmT0d+PWENYi/AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUABLXjGuVIigK7V2YtOF8NZuqVEIwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0FCTFhqR3VWSWlnSzdWMll0T0Y4Tlp1cVZFSS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAxYW8wDQYJKoZIhvcNAQELBQADggEBAA0bF2+6hAzH4wZfGeg+xV2UhNzY eEAyyI3ov9/4DlRzjBmRGsuPnzujqpPzfeMLumWva4dYumtcerrEv2tIGwAZJfs3 NILY2nRy//35wBbji9kUQbrx3RaU5URLhL79hc/UWaUqQeMhKcd/YxZZ7BMtVSAB bJ47V1DSM1oN6nd2EHqU1N/xefYnB/fQEFUsPaW9p6tQQwHRtzEfVfXbxK7pm/RK Pl9KdDo39edO1ZDUBq3DRWiCOkpW8iRdxPCXd086JJ21Xshuhoi9EuU+FRr7ChVa AA4S0rJYVDPzwsoG5tkqHOOv3XiV6vjU08iGoBE22i9awHwsIigzGdHHzlc= -----END CERTIFICATE-----Generated at Wed Feb 19 22:35:26 2025 by rpki-client