$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/CIvX8p5GFX92-YKAbdjf-V7_wg4.roa File: CIvX8p5GFX92-YKAbdjf-V7_wg4.roa (raw, json) Hash identifier: jkz/vVg2BrEla//UgVltybsWwMFWrCkHiTBXwmG8h7Q= Subject key identifier: 08:8B:D7:F2:9E:46:15:7F:76:F9:82:80:6D:D8:DF:F9:5E:FF:C2:0E Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0982 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/CIvX8p5GFX92-YKAbdjf-V7_wg4.roa Signing time: Sun 30 Jun 2024 01:36:21 +0000 ROA not before: Sun 30 Jun 2024 01:36:21 +0000 ROA not after: Tue 24 Jun 2025 10:46:45 +0000 asID: 9605 IP address blocks: 1.72.192.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2434 (0x982) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 30 01:36:21 2024 GMT Not After : Jun 24 10:46:45 2025 GMT Subject: CN=088BD7F29E46157F76F982806DD8DFF95EFFC20E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:2c:d9:55:df:c5:29:be:1f:93:9d:2b:fc:b2: b9:2d:62:1f:57:e9:89:81:f3:be:db:00:f2:2d:d0: 75:bb:ae:94:1f:f2:1c:fa:55:d5:3a:0b:a6:49:65: 95:3b:9e:3d:4a:2e:81:8b:2e:fe:39:ae:87:75:2a: dd:04:12:79:a6:36:87:ad:82:3c:e5:f4:eb:3f:9f: ad:dd:ee:1e:44:fa:66:f4:d9:5c:9e:42:6b:73:49: 34:8e:49:0a:2f:ee:1f:89:2a:e0:b3:61:50:cb:0c: f8:9b:e7:87:61:e7:26:e5:9c:c2:2e:f0:23:52:4e: 06:79:83:f6:8e:19:ed:b8:b3:c6:01:8a:9e:53:c7: 97:7c:86:c1:ef:2b:de:e1:2c:41:e7:b6:01:57:5c: f6:72:b6:0f:32:1d:d8:7a:1d:c5:e8:c9:e1:f4:5a: 24:57:de:4e:d0:54:de:98:f3:a6:3e:c5:90:40:80: ff:f1:16:59:bd:0b:f2:73:d9:96:37:1e:3e:23:f0: 7f:b7:0c:23:2e:76:1c:55:90:d3:fc:99:fe:63:31: ce:ba:ac:72:cd:d0:75:7a:d8:08:dc:50:ff:f7:72: 85:d7:4d:3c:bf:f4:0b:17:e5:b8:5b:85:e9:27:a9: de:9a:75:3d:bc:ff:e3:fa:69:b9:57:1e:ad:0c:4c: eb:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:8B:D7:F2:9E:46:15:7F:76:F9:82:80:6D:D8:DF:F9:5E:FF:C2:0E X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/CIvX8p5GFX92-YKAbdjf-V7_wg4.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.72.192.0/19 Signature Algorithm: sha256WithRSAEncryption 09:76:9f:fc:27:fd:5b:26:1e:30:64:8d:82:fe:09:66:03:0f: da:b2:07:52:d6:dc:18:89:5a:82:48:77:98:45:f5:24:89:05: 26:c9:c1:a8:50:4b:42:53:c0:98:51:26:cb:38:93:fd:77:89: 0f:a1:f6:cd:8e:72:5a:96:f4:a6:37:74:b5:97:53:47:03:c1: 10:d0:57:51:fa:d4:37:25:83:4a:1c:6c:43:04:9c:b8:a1:79: ee:c5:9e:58:f0:7d:11:29:ce:96:98:ab:47:cd:8d:b8:81:6e: b6:9a:7b:25:3f:fa:46:74:51:3f:28:cd:5c:3b:03:30:a1:da: 4e:24:5f:12:e0:41:03:51:3f:2a:f2:db:32:d3:8e:fd:f0:a0: b3:b7:ff:83:15:64:ca:b7:e9:3c:d5:93:44:30:bb:5d:c2:63: dd:f1:cd:2f:54:96:6f:dc:69:db:eb:8a:23:9c:c0:28:97:91: 23:96:4e:4e:5b:86:ed:34:2a:11:83:18:ab:3d:4f:f7:86:10: 03:1b:41:57:98:18:60:eb:5e:e6:e5:95:07:f7:26:be:69:78: e9:40:11:06:ea:8f:ef:27:13:f4:06:d7:2b:75:09:3f:4d:f6: c2:bf:5d:5d:2f:cf:98:79:04:7a:0b:a5:9f:e3:f1:26:07:23: 79:43:d6:2d -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCYIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA2MzAw MTM2MjFaFw0yNTA2MjQxMDQ2NDVaMDMxMTAvBgNVBAMTKDA4OEJEN0YyOUU0NjE1 N0Y3NkY5ODI4MDZERDhERkY5NUVGRkMyMEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC1LNlV38Upvh+TnSv8srktYh9X6YmB877bAPIt0HW7rpQf8hz6 VdU6C6ZJZZU7nj1KLoGLLv45rod1Kt0EEnmmNoetgjzl9Os/n63d7h5E+mb02Vye QmtzSTSOSQov7h+JKuCzYVDLDPib54dh5yblnMIu8CNSTgZ5g/aOGe24s8YBip5T x5d8hsHvK97hLEHntgFXXPZytg8yHdh6HcXoyeH0WiRX3k7QVN6Y86Y+xZBAgP/x Flm9C/Jz2ZY3Hj4j8H+3DCMudhxVkNP8mf5jMc66rHLN0HV62AjcUP/3coXXTTy/ 9AsX5bhbheknqd6adT28/+P6ablXHq0MTOvBAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUCIvX8p5GFX92+YKAbdjf+V7/wg4wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0NJdlg4cDVHRlg5Mi1ZS0FiZGpmLVY3X3dnNC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAUBSMAwDQYJKoZIhvcNAQELBQADggEBAAl2n/wn/VsmHjBkjYL+CWYDD9qy B1LW3BiJWoJId5hF9SSJBSbJwahQS0JTwJhRJss4k/13iQ+h9s2OclqW9KY3dLWX U0cDwRDQV1H61Dclg0ocbEMEnLihee7FnljwfREpzpaYq0fNjbiBbraaeyU/+kZ0 UT8ozVw7AzCh2k4kXxLgQQNRPyry2zLTjv3woLO3/4MVZMq36TzVk0Qwu13CY93x zS9Ulm/cadvriiOcwCiXkSOWTk5bhu00KhGDGKs9T/eGEAMbQVeYGGDrXubllQf3 Jr5peOlAEQbqj+8nE/QG1yt1CT9N9sK/XV0vz5h5BHoLpZ/j8SYHI3lD1i0= -----END CERTIFICATE-----Generated at Sun Feb 16 22:06:53 2025 by rpki-client