$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/BP_tmaNx-dNI4rQgPafHIbQdlnQ.roa File: BP_tmaNx-dNI4rQgPafHIbQdlnQ.roa (raw, json) Hash identifier: d+/yl77kgoUTOWp0rb4QZkKM3gJulMfWYAu7XcFsLMk= Subject key identifier: 04:FF:ED:99:A3:71:F9:D3:48:E2:B4:20:3D:A7:C7:21:B4:1D:96:74 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 07A5 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/BP_tmaNx-dNI4rQgPafHIbQdlnQ.roa Signing time: Tue 30 Apr 2024 02:06:31 +0000 ROA not before: Tue 30 Apr 2024 02:06:31 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 49.104.8.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1957 (0x7a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 30 02:06:31 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=04FFED99A371F9D348E2B4203DA7C721B41D9674 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:fc:c8:55:a0:79:a4:78:3b:9e:c0:dc:d3:99: 5f:a5:94:91:c0:c6:9d:46:36:39:6e:14:83:03:10: 60:e8:e0:21:a8:c9:dd:7b:33:e7:91:ec:d9:64:7c: 6b:ec:8e:11:8a:b9:d2:fc:46:8c:d7:d8:59:29:ef: 83:ac:b6:96:3e:d7:a4:12:6b:b0:6a:81:37:2a:f7: de:47:80:63:19:af:0a:aa:30:60:8b:35:0c:a2:d8: b1:c9:da:8a:95:13:ce:70:25:36:3b:86:72:3f:da: ff:79:da:1e:07:67:ec:32:20:9d:d7:82:17:2b:6c: c8:ec:a1:e6:51:49:b7:ad:f4:cd:08:11:ea:1d:23: 39:19:c9:f5:9c:c8:f6:92:eb:e1:de:48:e9:23:5f: ed:68:57:c7:03:fe:d8:c5:46:b2:f4:90:8d:19:16: dd:9c:ab:cc:fd:25:15:0c:64:e8:78:e6:8b:b8:10: ef:9c:a3:23:3d:67:99:a3:f3:6f:f1:ce:18:5b:77: b3:78:95:05:d7:31:8d:8c:83:b7:5d:db:46:c7:a9: 33:e7:a4:98:3e:d3:7f:7b:5a:ec:de:de:c3:e5:bb: e4:a6:e0:41:ee:a7:75:c1:8a:2c:5b:c7:1c:af:60: 75:f3:74:73:be:67:79:a2:1b:21:f5:ce:01:8d:ba: f3:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:FF:ED:99:A3:71:F9:D3:48:E2:B4:20:3D:A7:C7:21:B4:1D:96:74 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/BP_tmaNx-dNI4rQgPafHIbQdlnQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.104.8.0/23 Signature Algorithm: sha256WithRSAEncryption 88:b2:14:42:95:db:4d:89:d2:6e:8e:cc:d1:2d:cf:6b:22:01: 5e:44:be:b7:4b:5c:10:46:fb:af:8d:56:9d:78:1c:25:7d:1e: c6:79:79:26:5d:89:ed:0a:90:1c:77:9d:2c:3b:74:31:fc:3e: 5f:a6:ac:92:ac:f1:ac:08:84:96:89:ce:a2:68:93:dd:2a:df: 5e:17:20:8b:f8:2b:5d:7d:8d:f0:10:1e:e5:91:b1:ae:61:7c: b0:cc:8c:62:7e:87:6e:6a:21:db:7e:8d:16:7c:1a:dc:50:84: 6e:ca:c3:db:de:ea:2b:d0:82:d0:4b:a7:67:69:35:10:5f:38: 7f:8d:de:f1:a6:6d:c5:3b:dd:0d:80:b7:3a:73:8c:89:bc:ea: bd:2c:b7:23:0d:ed:91:34:72:99:bf:27:91:da:c3:b6:41:45: 80:52:f0:eb:89:28:b1:81:bd:d1:9e:ee:9b:06:56:e7:c5:8f: a3:d1:89:54:5e:e7:23:7a:f0:7d:1e:cf:d9:63:da:27:4a:7f: 2c:6d:cf:4f:6a:bb:22:bb:99:64:3f:48:bf:c4:ab:2f:fb:d0: a1:f0:72:04:a2:d4:f4:d2:85:88:73:a2:ea:68:a9:4e:b2:61: 2c:05:50:73:ad:7d:51:f7:e6:85:44:b9:9d:46:af:82:fb:53: ab:7b:1b:97 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICB6UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw MjA2MzFaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDA0RkZFRDk5QTM3MUY5 RDM0OEUyQjQyMDNEQTdDNzIxQjQxRDk2NzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDT/MhVoHmkeDuewNzTmV+llJHAxp1GNjluFIMDEGDo4CGoyd17 M+eR7NlkfGvsjhGKudL8RozX2Fkp74OstpY+16QSa7BqgTcq995HgGMZrwqqMGCL NQyi2LHJ2oqVE85wJTY7hnI/2v952h4HZ+wyIJ3XghcrbMjsoeZRSbet9M0IEeod IzkZyfWcyPaS6+HeSOkjX+1oV8cD/tjFRrL0kI0ZFt2cq8z9JRUMZOh45ou4EO+c oyM9Z5mj82/xzhhbd7N4lQXXMY2Mg7dd20bHqTPnpJg+0397Wuze3sPlu+Sm4EHu p3XBiixbxxyvYHXzdHO+Z3miGyH1zgGNuvO9AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUBP/tmaNx+dNI4rQgPafHIbQdlnQwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0JQX3RtYU54LWROSTRyUWdQYWZISWJRZGxuUS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExaAgwDQYJKoZIhvcNAQELBQADggEBAIiyFEKV202J0m6OzNEtz2siAV5E vrdLXBBG+6+NVp14HCV9HsZ5eSZdie0KkBx3nSw7dDH8Pl+mrJKs8awIhJaJzqJo k90q314XIIv4K119jfAQHuWRsa5hfLDMjGJ+h25qIdt+jRZ8GtxQhG7Kw9ve6ivQ gtBLp2dpNRBfOH+N3vGmbcU73Q2AtzpzjIm86r0styMN7ZE0cpm/J5Haw7ZBRYBS 8OuJKLGBvdGe7psGVufFj6PRiVRe5yN68H0ez9lj2idKfyxtz09quyK7mWQ/SL/E qy/70KHwcgSi1PTShYhzoupoqU6yYSwFUHOtfVH35oVEuZ1Gr4L7U6t7G5c= -----END CERTIFICATE-----Generated at Sun Feb 16 22:10:05 2025 by rpki-client