$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Bju2Zz8D5uDYTxolzOH1EiJX7RI.roa File: Bju2Zz8D5uDYTxolzOH1EiJX7RI.roa (raw, json) Hash identifier: 07bF48kvEJ1BLq2/s7czakw5Jz1w94+AFNMwj7pktf0= Subject key identifier: 06:3B:B6:67:3F:03:E6:E0:D8:4F:1A:25:CC:E1:F5:12:22:57:ED:12 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0B2D Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Bju2Zz8D5uDYTxolzOH1EiJX7RI.roa Signing time: Fri 31 Jan 2025 01:38:04 +0000 ROA not before: Fri 31 Jan 2025 01:38:04 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.98.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2861 (0xb2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jan 31 01:38:04 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=063BB6673F03E6E0D84F1A25CCE1F5122257ED12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b8:4f:4d:af:12:17:9c:98:2c:14:34:b5:7e: 26:42:49:15:1e:10:ec:23:c3:0b:43:0c:2a:27:c9: d3:c0:94:07:9d:bc:3d:0c:58:5a:9c:99:6f:74:3c: 26:c1:6b:ec:a5:69:36:1c:61:b1:7c:74:07:4b:42: 54:2f:65:7f:db:6b:e9:01:27:ff:a9:d1:39:e7:8f: d5:12:b9:d9:6a:3f:11:7e:62:34:2e:b0:1c:9b:48: 89:0d:dd:fb:f4:41:4d:22:b3:1e:43:16:2e:bf:2e: 34:ae:7d:8a:a2:03:d9:bc:51:34:39:c5:d5:9c:4f: 5b:65:f3:72:21:16:69:c8:a5:2d:e5:f4:c0:2d:ae: 8a:0c:43:08:aa:08:a0:fb:b3:ca:9e:45:62:48:82: c8:b0:d2:1a:af:3a:c9:13:b8:76:ad:8f:37:9a:d2: a0:48:60:22:dd:95:62:41:77:be:aa:d9:92:11:ed: 9e:79:c9:1c:13:7e:5c:8c:53:18:f2:a9:29:22:fa: 7a:2e:51:a0:08:74:83:e4:92:aa:24:ba:04:c8:08: 2a:3d:5c:3c:67:fd:28:4e:f8:c8:b2:4e:c6:a3:fb: fe:82:79:d2:1b:d4:fd:b3:a6:a6:3b:4c:6a:c5:a5: ff:1c:87:97:3e:fa:67:db:ab:a5:f0:e8:1c:44:46: 5a:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:3B:B6:67:3F:03:E6:E0:D8:4F:1A:25:CC:E1:F5:12:22:57:ED:12 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Bju2Zz8D5uDYTxolzOH1EiJX7RI.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.98.22.0/24 Signature Algorithm: sha256WithRSAEncryption 84:f9:db:6b:43:e9:44:c4:4d:18:27:9e:a4:96:82:9c:11:ae: 9b:f3:a6:f2:db:e4:58:05:b2:0d:7f:65:4c:ea:a4:6a:7d:38: e6:ab:77:c7:80:35:b4:7a:34:a9:e3:36:2e:29:6a:16:1c:7c: 80:22:6b:56:b8:b4:95:13:7d:73:d0:fb:50:ce:05:31:88:fa: 06:46:20:be:6b:8d:fa:2d:b3:a7:9e:c5:25:84:24:d5:2d:ce: 56:92:8e:bc:d4:04:16:2e:9a:97:be:e3:82:93:de:d5:f7:9c: 3c:db:38:f9:86:cb:94:22:b4:69:e4:6f:6f:13:0f:6e:58:c4: 3a:77:e3:19:2a:f3:de:65:20:ea:76:02:0d:ae:29:12:dd:61: 52:b9:ee:0a:ea:cc:11:88:ff:07:5e:dc:2d:04:d7:83:30:b1: e5:32:85:4a:0d:96:7f:16:83:8a:74:9e:5a:ad:d6:7c:f3:f5: 3b:8c:db:9a:40:b1:39:d0:1b:2d:7d:a8:fc:eb:fb:b7:a1:d5: 44:4a:b5:c2:9f:2a:f4:64:6c:ea:e9:12:c1:ba:e4:08:56:34: 55:57:a0:23:f7:b7:e0:8b:73:b0:bb:63:74:3c:45:1a:b2:ed: 5b:f4:6a:4b:b7:3e:2a:03:b6:7c:a2:44:83:e6:de:54:d1:82: bc:4a:07:47 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCy0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTAxMzEw MTM4MDRaFw0yNjAxMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDA2M0JCNjY3M0YwM0U2 RTBEODRGMUEyNUNDRTFGNTEyMjI1N0VEMTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCyuE9NrxIXnJgsFDS1fiZCSRUeEOwjwwtDDConydPAlAedvD0M WFqcmW90PCbBa+ylaTYcYbF8dAdLQlQvZX/ba+kBJ/+p0Tnnj9USudlqPxF+YjQu sBybSIkN3fv0QU0isx5DFi6/LjSufYqiA9m8UTQ5xdWcT1tl83IhFmnIpS3l9MAt rooMQwiqCKD7s8qeRWJIgsiw0hqvOskTuHatjzea0qBIYCLdlWJBd76q2ZIR7Z55 yRwTflyMUxjyqSki+nouUaAIdIPkkqokugTICCo9XDxn/ShO+MiyTsaj+/6CedIb 1P2zpqY7TGrFpf8ch5c++mfbq6Xw6BxERlq9AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUBju2Zz8D5uDYTxolzOH1EiJX7RIwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0JqdTJaejhENXVEWVR4b2x6T0gxRWlKWDdSSS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAxYhYwDQYJKoZIhvcNAQELBQADggEBAIT522tD6UTETRgnnqSWgpwRrpvz pvLb5FgFsg1/ZUzqpGp9OOard8eANbR6NKnjNi4pahYcfIAia1a4tJUTfXPQ+1DO BTGI+gZGIL5rjfots6eexSWEJNUtzlaSjrzUBBYumpe+44KT3tX3nDzbOPmGy5Qi tGnkb28TD25YxDp34xkq895lIOp2Ag2uKRLdYVK57grqzBGI/wde3C0E14MwseUy hUoNln8Wg4p0nlqt1nzz9TuM25pAsTnQGy19qPzr+7eh1URKtcKfKvRkbOrpEsG6 5AhWNFVXoCP3t+CLc7C7Y3Q8RRqy7Vv0aku3PioDtnyiRIPm3lTRgrxKB0c= -----END CERTIFICATE-----Generated at Wed Feb 19 22:35:54 2025 by rpki-client