$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/BbYHZaLCS0sLjp43qIsKdXJSYWI.roa File: BbYHZaLCS0sLjp43qIsKdXJSYWI.roa (raw, json) Hash identifier: 0EyWHE+bJJuchyO2+iroZizh501V4dn6PJ6zenhQkiQ= Subject key identifier: 05:B6:07:65:A2:C2:4B:4B:0B:8E:9E:37:A8:8B:0A:75:72:52:61:62 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 09CC Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/BbYHZaLCS0sLjp43qIsKdXJSYWI.roa Signing time: Sun 30 Jun 2024 01:40:28 +0000 ROA not before: Sun 30 Jun 2024 01:40:28 +0000 ROA not after: Tue 24 Jun 2025 10:46:45 +0000 asID: 9605 IP address blocks: 49.108.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2508 (0x9cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 30 01:40:28 2024 GMT Not After : Jun 24 10:46:45 2025 GMT Subject: CN=05B60765A2C24B4B0B8E9E37A88B0A7572526162 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:9c:d1:0d:0f:fb:93:fe:47:5c:91:7a:23:0d: c2:ca:42:35:a3:b8:df:d5:1a:d4:78:78:f4:87:fb: d2:7b:b5:77:65:75:e6:cc:80:4e:07:bd:2a:1d:b8: de:c3:05:97:3b:fe:3e:a5:23:69:3b:9a:ab:fd:d4: 70:7a:76:77:de:1a:38:8e:0b:8a:9e:72:74:c2:b7: c5:bb:68:46:a1:7f:f8:60:f0:6d:82:fc:ed:4f:0a: 86:3a:e4:3d:a4:28:db:d2:dd:e9:d2:5c:9b:c4:81: 63:f0:fe:03:6c:8a:10:fe:4a:90:6c:ac:8f:fe:dc: 09:2a:ca:5e:d7:28:b1:c2:cf:86:e4:23:5a:d2:85: 8a:ff:7b:8e:14:b3:23:16:4a:30:d2:17:22:5a:fc: d2:f7:00:36:a5:8e:3e:60:ad:2e:91:50:04:16:34: fe:53:2e:be:32:21:91:86:34:59:07:04:32:fc:e6: 27:94:cb:c2:d6:fe:de:4e:cc:53:2d:41:1a:be:aa: b3:44:6b:b2:a8:ea:db:1a:e9:72:9d:7d:c7:0b:b0: 54:16:6c:c3:31:0e:fb:1c:0f:7b:26:36:6b:b6:a6: db:7a:bf:c9:aa:e3:d7:2a:2c:80:6a:53:e1:42:fd: 4c:60:6d:e8:92:d0:22:99:ff:d7:63:e0:82:1e:60: 12:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:B6:07:65:A2:C2:4B:4B:0B:8E:9E:37:A8:8B:0A:75:72:52:61:62 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/BbYHZaLCS0sLjp43qIsKdXJSYWI.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.108.192.0/20 Signature Algorithm: sha256WithRSAEncryption 23:df:98:62:0d:c9:03:e5:1b:75:87:2e:0c:67:97:2e:8d:a5: 11:3c:f6:46:98:8e:15:b3:1f:98:ab:c9:d1:10:5e:4f:cc:10: e8:5f:a9:73:2d:7f:e7:81:e4:e4:63:11:25:09:9c:39:c1:ac: bc:c3:d0:42:a7:89:9a:5b:6a:88:65:57:1b:8a:e8:59:b6:b5: d0:d6:3d:54:67:ef:6d:23:3c:45:d8:66:bf:af:1d:38:4f:e1: b4:0b:ae:bc:f5:e3:0e:0a:2d:07:75:b7:13:a2:84:18:da:df: bc:c2:82:85:e6:2f:d6:8d:a6:61:ba:6a:ed:ff:aa:1b:0a:a7: ad:05:fc:3a:b3:03:21:8b:b8:74:bd:ce:16:c0:ab:2b:7e:66: 68:01:82:4b:b6:d6:cf:e9:28:e5:cf:0a:59:bc:95:64:ba:aa: 72:ae:e5:dd:bb:aa:84:d4:67:e5:08:c8:a0:70:b6:d9:ed:80: 09:f3:32:48:d0:0c:fc:54:f6:10:52:a7:3e:ad:6f:67:2d:f7: ca:3f:c9:3a:e3:d6:38:a4:6a:1f:30:23:00:0f:4a:a4:3a:c2: 1c:22:4d:71:3a:ea:eb:6a:a4:b5:8d:5e:7d:25:d2:42:8c:d5: 27:55:ce:2e:62:6d:62:48:b8:4a:be:40:3f:32:bd:0b:96:74: 0c:64:66:2c -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCcwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA2MzAw MTQwMjhaFw0yNTA2MjQxMDQ2NDVaMDMxMTAvBgNVBAMTKDA1QjYwNzY1QTJDMjRC NEIwQjhFOUUzN0E4OEIwQTc1NzI1MjYxNjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCmnNEND/uT/kdckXojDcLKQjWjuN/VGtR4ePSH+9J7tXdldebM gE4HvSoduN7DBZc7/j6lI2k7mqv91HB6dnfeGjiOC4qecnTCt8W7aEahf/hg8G2C /O1PCoY65D2kKNvS3enSXJvEgWPw/gNsihD+SpBsrI/+3Akqyl7XKLHCz4bkI1rS hYr/e44UsyMWSjDSFyJa/NL3ADaljj5grS6RUAQWNP5TLr4yIZGGNFkHBDL85ieU y8LW/t5OzFMtQRq+qrNEa7Ko6tsa6XKdfccLsFQWbMMxDvscD3smNmu2ptt6v8mq 49cqLIBqU+FC/UxgbeiS0CKZ/9dj4IIeYBIxAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUBbYHZaLCS0sLjp43qIsKdXJSYWIwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0JiWUhaYUxDUzBzTGpwNDNxSXNLZFhKU1lXSS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQxbMAwDQYJKoZIhvcNAQELBQADggEBACPfmGINyQPlG3WHLgxnly6NpRE8 9kaYjhWzH5irydEQXk/MEOhfqXMtf+eB5ORjESUJnDnBrLzD0EKniZpbaohlVxuK 6Fm2tdDWPVRn720jPEXYZr+vHThP4bQLrrz14w4KLQd1txOihBja37zCgoXmL9aN pmG6au3/qhsKp60F/DqzAyGLuHS9zhbAqyt+ZmgBgku21s/pKOXPClm8lWS6qnKu 5d27qoTUZ+UIyKBwttntgAnzMkjQDPxU9hBSpz6tb2ct98o/yTrj1jikah8wIwAP SqQ6whwiTXE66utqpLWNXn0l0kKM1SdVzi5ibWJIuEq+QD8yvQuWdAxkZiw= -----END CERTIFICATE-----Generated at Sun Feb 16 22:03:49 2025 by rpki-client