$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Bx9sc-qHUoSk-MOP4Bn3SHCkXUc.roa File: Bx9sc-qHUoSk-MOP4Bn3SHCkXUc.roa (raw, json) Hash identifier: JJE2N6Ng9ZfpFTTH/x9Nf+cMSBIMerjWNW+KL4D2wMI= Subject key identifier: 07:1F:6C:73:EA:87:52:84:A4:F8:C3:8F:E0:19:F7:48:70:A4:5D:47 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0A02 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Bx9sc-qHUoSk-MOP4Bn3SHCkXUc.roa Signing time: Sun 30 Jun 2024 01:42:32 +0000 ROA not before: Sun 30 Jun 2024 01:42:32 +0000 ROA not after: Tue 24 Jun 2025 10:46:45 +0000 asID: 9605 IP address blocks: 49.106.92.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2562 (0xa02) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 30 01:42:32 2024 GMT Not After : Jun 24 10:46:45 2025 GMT Subject: CN=071F6C73EA875284A4F8C38FE019F74870A45D47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:09:a7:54:cc:86:e3:d3:d7:30:14:d9:67:3f: a4:4d:36:24:09:49:71:06:47:c3:cc:8f:20:b6:ed: 4d:30:fe:6d:96:6a:d4:e9:2a:5e:71:85:7e:e8:90: dc:45:c4:c1:b3:24:19:bd:d0:a7:2d:81:47:88:92: 1e:26:1d:3a:60:92:4a:2e:83:d2:20:a0:88:f6:78: 40:4b:57:88:c7:10:33:d7:4a:11:88:e0:8b:55:59: 9e:48:96:bb:fe:28:ec:cb:6a:4f:5d:ee:7b:88:f9: 05:44:66:9f:bf:52:3c:04:fb:7b:ab:ec:e9:ec:8e: 40:df:c0:72:09:35:01:f6:09:57:5c:fc:53:6e:9f: ee:3f:ff:07:89:91:0e:cb:c7:d0:18:b2:e7:74:b3: 62:12:06:f8:c4:39:9a:b7:ae:ad:4c:ed:70:be:46: 05:0a:34:21:7d:9f:3d:cd:dc:93:dc:28:fa:eb:86: fd:b6:5b:e1:3a:73:db:b4:3e:8f:a9:d8:f1:26:d3: 4a:61:19:93:f3:9b:20:84:5d:9d:80:08:45:74:2d: d8:5c:7d:a9:7f:23:82:e8:83:2b:af:4d:bd:58:eb: c9:ef:6f:cc:e1:82:61:87:c0:e4:0d:0e:44:45:54: f2:ce:90:f8:b1:31:80:e8:a7:28:93:86:26:e1:ad: 2f:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:1F:6C:73:EA:87:52:84:A4:F8:C3:8F:E0:19:F7:48:70:A4:5D:47 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Bx9sc-qHUoSk-MOP4Bn3SHCkXUc.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.106.92.0/23 Signature Algorithm: sha256WithRSAEncryption 13:a8:bc:59:95:e2:e2:64:2f:ff:74:82:bb:5e:8b:46:7d:1c: 9e:c1:f8:a4:b6:a5:29:a0:69:b0:b7:bc:19:49:3e:ca:ac:f0: 7f:d2:1d:86:59:be:5b:e6:a0:49:3a:03:4e:9b:b9:1f:39:6c: 2c:1d:ba:f8:15:99:fb:3e:d2:53:f9:b2:97:56:88:03:7d:88: 5b:21:50:a7:37:79:6e:9a:5a:fd:47:b4:bb:aa:3d:d2:c1:75: d0:00:fd:f7:ce:77:73:ed:94:25:44:ce:b1:81:50:d2:a6:e7: f5:97:4f:c2:64:29:1b:6a:6d:37:52:4b:3c:2c:a5:82:3d:69: 1b:02:7e:79:04:84:f5:2f:b6:9a:b2:29:d6:65:a8:98:6b:45: 0b:64:ff:c3:9b:89:af:d7:03:26:8b:e3:fa:5c:6d:67:af:a1: e3:6c:42:60:01:83:02:ca:a6:40:b6:c8:be:3b:b0:4a:cf:d8: 65:30:80:92:f6:77:6c:79:f1:b9:85:5f:c1:03:1e:0b:54:a7: 14:83:a5:6f:e2:ca:85:09:eb:2e:29:78:d5:96:e4:7c:fb:f2: 44:e1:84:c0:bd:cd:34:da:a8:c8:ff:a3:f3:a6:8d:6a:bf:ac: 9a:a3:2e:f9:b7:db:80:8b:8e:a6:93:38:d1:ce:2f:1e:d6:ef: 5b:01:b9:fb -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCgIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA2MzAw MTQyMzJaFw0yNTA2MjQxMDQ2NDVaMDMxMTAvBgNVBAMTKDA3MUY2QzczRUE4NzUy ODRBNEY4QzM4RkUwMTlGNzQ4NzBBNDVENDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDOCadUzIbj09cwFNlnP6RNNiQJSXEGR8PMjyC27U0w/m2WatTp Kl5xhX7okNxFxMGzJBm90KctgUeIkh4mHTpgkkoug9IgoIj2eEBLV4jHEDPXShGI 4ItVWZ5Ilrv+KOzLak9d7nuI+QVEZp+/UjwE+3ur7OnsjkDfwHIJNQH2CVdc/FNu n+4//weJkQ7Lx9AYsud0s2ISBvjEOZq3rq1M7XC+RgUKNCF9nz3N3JPcKPrrhv22 W+E6c9u0Po+p2PEm00phGZPzmyCEXZ2ACEV0Ldhcfal/I4LogyuvTb1Y68nvb8zh gmGHwOQNDkRFVPLOkPixMYDopyiThibhrS/TAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUBx9sc+qHUoSk+MOP4Bn3SHCkXUcwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0J4OXNjLXFIVW9Tay1NT1A0Qm4zU0hDa1hVYy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExalwwDQYJKoZIhvcNAQELBQADggEBABOovFmV4uJkL/90grtei0Z9HJ7B +KS2pSmgabC3vBlJPsqs8H/SHYZZvlvmoEk6A06buR85bCwduvgVmfs+0lP5spdW iAN9iFshUKc3eW6aWv1HtLuqPdLBddAA/ffOd3PtlCVEzrGBUNKm5/WXT8JkKRtq bTdSSzwspYI9aRsCfnkEhPUvtpqyKdZlqJhrRQtk/8Obia/XAyaL4/pcbWevoeNs QmABgwLKpkC2yL47sErP2GUwgJL2d2x58bmFX8EDHgtUpxSDpW/iyoUJ6y4peNWW 5Hz78kThhMC9zTTaqMj/o/OmjWq/rJqjLvm324CLjqaTONHOLx7W71sBufs= -----END CERTIFICATE-----Generated at Sun Feb 16 22:20:25 2025 by rpki-client