$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/CA332KLqeg2KMuznMbn_5xnwb-Y.roa File: CA332KLqeg2KMuznMbn_5xnwb-Y.roa (raw, json) Hash identifier: 3Cd9l4ot1Qmy1u5B/nsycrIaPomfKn2woKGd9z4IEoU= Subject key identifier: 08:0D:F7:D8:A2:EA:7A:0D:8A:32:EC:E7:31:B9:FF:E7:19:F0:6F:E6 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0842 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/CA332KLqeg2KMuznMbn_5xnwb-Y.roa Signing time: Tue 30 Apr 2024 02:16:21 +0000 ROA not before: Tue 30 Apr 2024 02:16:21 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 1.66.106.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2114 (0x842) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 30 02:16:21 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=080DF7D8A2EA7A0D8A32ECE731B9FFE719F06FE6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:de:51:f2:5e:ee:18:c6:8f:a6:30:ad:82:88: e8:01:36:6a:c2:0d:83:a2:e8:a0:56:1b:02:0c:25: 09:a4:2b:70:21:89:41:c4:4e:5a:af:56:41:ec:0e: a5:b8:22:41:ba:2d:57:b4:82:73:41:28:ba:fd:78: 80:0e:74:fe:c5:61:f8:16:4d:4a:a0:d5:90:47:28: d6:03:f1:07:0b:f2:41:39:d5:10:09:b3:92:c7:df: 4f:f0:1c:f6:e5:da:a6:74:36:e8:ba:c2:7d:22:da: 43:da:b4:9f:e3:fc:73:e0:bd:26:43:01:bf:91:db: 1e:5a:8c:c6:d5:95:e3:25:e1:2d:cb:73:a4:f8:48: 48:0a:31:a0:56:11:4d:50:3b:e6:f2:1a:cf:f6:e7: da:5d:fd:0b:15:1b:05:ac:69:9e:80:37:78:8e:d9: 03:c2:bf:42:7a:66:4f:dc:05:98:19:46:f3:56:dd: 7b:ed:00:be:12:7e:b6:47:0b:16:b0:24:1c:40:61: f0:8f:62:88:b0:69:47:96:75:76:fa:82:e9:7b:07: 90:c4:6f:d6:3d:8a:39:79:22:b5:97:51:ab:b8:02: b9:7d:5b:f3:4a:1e:81:5d:f1:26:2f:98:df:e9:1a: 78:ee:a6:1f:56:9b:09:e0:67:63:34:2a:5c:d6:7f: a7:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:0D:F7:D8:A2:EA:7A:0D:8A:32:EC:E7:31:B9:FF:E7:19:F0:6F:E6 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/CA332KLqeg2KMuznMbn_5xnwb-Y.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.66.106.0/23 Signature Algorithm: sha256WithRSAEncryption bd:4f:d4:43:42:5e:20:71:89:77:b1:07:c9:f1:3a:de:0e:da: fe:3c:8e:97:28:a3:1c:89:3b:cc:b0:bb:3e:b9:7e:26:4f:7c: e7:83:8f:37:4a:ea:30:85:de:ea:5c:99:8b:3d:d3:d9:67:1f: ea:7c:9e:e9:dc:55:d9:0f:8d:3a:75:ac:e8:89:66:39:87:0a: 6d:4f:b9:99:25:c5:a4:23:53:ff:8b:98:00:eb:e3:a3:f9:e9: ef:49:7a:95:27:aa:c6:a6:67:50:37:b9:11:c6:5b:44:6f:78: 1e:fb:17:47:b1:a2:10:77:40:88:dc:5c:b3:24:82:e9:78:0a: c8:58:b8:dc:90:93:45:18:cc:2a:a8:88:90:22:7b:0f:c4:50: bc:ef:f2:46:18:77:85:98:8e:a9:dd:0f:46:06:75:a4:32:77: f4:55:3f:6a:71:da:30:ad:f9:b1:40:78:27:9f:9f:2f:e3:63: 66:7f:2a:14:6c:04:f5:5b:1e:99:f9:25:b4:6c:7e:c6:36:0c: 66:29:92:ba:a9:91:1a:9f:eb:58:f9:e3:b8:0e:a1:92:9c:a0: 15:07:1d:d7:89:c6:d6:5f:5e:4e:de:f9:a3:3d:38:1c:24:0e: c9:2b:12:13:5d:60:29:88:44:04:c1:ee:52:fd:d9:db:22:33: 9f:d1:fe:c9 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCEIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw MjE2MjFaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDA4MERGN0Q4QTJFQTdB MEQ4QTMyRUNFNzMxQjlGRkU3MTlGMDZGRTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCt3lHyXu4Yxo+mMK2CiOgBNmrCDYOi6KBWGwIMJQmkK3AhiUHE TlqvVkHsDqW4IkG6LVe0gnNBKLr9eIAOdP7FYfgWTUqg1ZBHKNYD8QcL8kE51RAJ s5LH30/wHPbl2qZ0Nui6wn0i2kPatJ/j/HPgvSZDAb+R2x5ajMbVleMl4S3Lc6T4 SEgKMaBWEU1QO+byGs/259pd/QsVGwWsaZ6AN3iO2QPCv0J6Zk/cBZgZRvNW3Xvt AL4SfrZHCxawJBxAYfCPYoiwaUeWdXb6gul7B5DEb9Y9ijl5IrWXUau4Arl9W/NK HoFd8SYvmN/pGnjuph9WmwngZ2M0KlzWf6dpAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUCA332KLqeg2KMuznMbn/5xnwb+YwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0NBMzMyS0xxZWcyS011em5NYm5fNXhud2ItWS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEBQmowDQYJKoZIhvcNAQELBQADggEBAL1P1ENCXiBxiXexB8nxOt4O2v48 jpcooxyJO8ywuz65fiZPfOeDjzdK6jCF3upcmYs909lnH+p8nuncVdkPjTp1rOiJ ZjmHCm1PuZklxaQjU/+LmADr46P56e9JepUnqsamZ1A3uRHGW0RveB77F0exohB3 QIjcXLMkgul4CshYuNyQk0UYzCqoiJAiew/EULzv8kYYd4WYjqndD0YGdaQyd/RV P2px2jCt+bFAeCefny/jY2Z/KhRsBPVbHpn5JbRsfsY2DGYpkrqpkRqf61j547gO oZKcoBUHHdeJxtZfXk7e+aM9OBwkDskrEhNdYCmIRATB7lL92dsiM5/R/sk= -----END CERTIFICATE-----Generated at Sun Feb 16 22:23:09 2025 by rpki-client