$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/DGcRjL9w6PXaqrEk3d2ihaUSe2U.roa File: DGcRjL9w6PXaqrEk3d2ihaUSe2U.roa (raw, json) Hash identifier: OhuPLciCTw0HybVYNnguh7jZqRlG6WW5P0ieSOVFUEQ= Subject key identifier: 0C:67:11:8C:BF:70:E8:F5:DA:AA:B1:24:DD:DD:A2:85:A5:12:7B:65 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0973 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/DGcRjL9w6PXaqrEk3d2ihaUSe2U.roa Signing time: Sun 30 Jun 2024 01:33:41 +0000 ROA not before: Sun 30 Jun 2024 01:33:41 +0000 ROA not after: Tue 24 Jun 2025 10:46:45 +0000 asID: 9605 IP address blocks: 49.102.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 22:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2419 (0x973) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 30 01:33:41 2024 GMT Not After : Jun 24 10:46:45 2025 GMT Subject: CN=0C67118CBF70E8F5DAAAB124DDDDA285A5127B65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:ff:f3:dd:72:e2:12:3e:17:16:fb:c6:08:ed: d1:bc:61:84:a5:cb:98:33:80:5e:0a:4e:da:87:f4: 1a:cb:16:d4:e4:ec:68:8d:19:14:87:33:86:a0:47: f5:ab:73:64:11:d8:79:ad:6e:e9:f6:20:9d:b0:33: 06:ae:c5:14:db:82:38:14:85:0f:3e:1f:54:e1:ca: 31:7d:04:62:a3:dc:d7:eb:2b:73:bf:a8:e3:42:81: 1f:bf:78:02:dd:fb:11:16:37:67:62:6b:53:05:d6: a9:55:9b:0d:cc:0b:d4:94:fe:1e:3d:8b:53:2a:b5: 87:d9:e2:74:d0:62:92:66:68:35:1c:16:f7:2d:c6: 2a:de:85:e9:fa:39:af:11:83:6f:0c:1e:73:7e:48: 54:73:c6:7b:86:8a:2e:0c:be:35:61:0c:48:63:46: bc:d4:7a:40:fa:da:96:0c:a8:71:02:3e:39:c7:27: b7:da:40:ba:63:46:96:e1:48:1c:28:dd:cf:4f:15: 9c:51:c7:d5:2e:cb:f8:75:44:95:c0:b9:c3:2b:68: 0b:61:a1:86:f4:a5:d1:98:bf:59:a2:54:e4:5a:48: 35:a0:68:83:34:98:e3:b3:73:1f:c2:29:ff:e0:5a: 22:83:da:f4:db:90:11:73:14:9d:05:bc:31:fa:68: 98:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:67:11:8C:BF:70:E8:F5:DA:AA:B1:24:DD:DD:A2:85:A5:12:7B:65 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/DGcRjL9w6PXaqrEk3d2ihaUSe2U.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.102.157.0/24 Signature Algorithm: sha256WithRSAEncryption 6b:fa:60:88:29:4f:96:76:b0:f3:c1:20:bb:59:d0:65:91:62: e6:45:c2:e7:04:02:18:5c:64:4e:7e:75:f3:81:0c:f9:3b:2b: d8:22:a4:91:7a:06:77:f3:76:79:45:ee:2c:62:4e:da:ab:9a: 55:e2:fd:7d:69:ea:fd:c5:e0:7d:5c:15:eb:01:0d:23:be:cd: fc:1a:45:4f:9a:f2:92:94:51:76:1d:54:33:e5:90:7b:bf:f7: 8a:14:43:49:0f:18:a9:18:56:ce:26:11:79:69:24:c0:ac:d8: 01:2a:5f:b3:8e:f2:24:5a:d3:97:c1:dc:8c:de:11:9f:d6:d7: 3b:d4:ee:86:0b:b7:ca:9b:d2:8e:18:fa:6c:2e:1b:44:41:bc: d3:04:39:57:4f:b4:52:aa:45:76:69:38:59:d0:98:f8:a6:cc: 54:16:71:ff:bf:a6:51:f1:2e:76:68:c9:a8:a3:66:e2:1b:cf: 08:0f:e3:16:de:6d:a9:d5:89:50:70:fe:d6:3c:9f:a2:3b:bd: c7:1e:fb:d8:c0:54:e1:52:c4:a2:a7:97:16:05:d7:01:68:bd: aa:b7:39:36:f7:2f:e5:46:16:65:45:e8:d0:79:e4:16:65:af: c8:56:d8:c5:13:fc:ec:73:da:2c:5a:ae:fe:c7:54:48:7c:ea: f6:ba:25:d6 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCXMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA2MzAw MTMzNDFaFw0yNTA2MjQxMDQ2NDVaMDMxMTAvBgNVBAMTKDBDNjcxMThDQkY3MEU4 RjVEQUFBQjEyNERERERBMjg1QTUxMjdCNjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD0//PdcuISPhcW+8YI7dG8YYSly5gzgF4KTtqH9BrLFtTk7GiN GRSHM4agR/Wrc2QR2Hmtbun2IJ2wMwauxRTbgjgUhQ8+H1ThyjF9BGKj3NfrK3O/ qONCgR+/eALd+xEWN2dia1MF1qlVmw3MC9SU/h49i1MqtYfZ4nTQYpJmaDUcFvct xirehen6Oa8Rg28MHnN+SFRzxnuGii4MvjVhDEhjRrzUekD62pYMqHECPjnHJ7fa QLpjRpbhSBwo3c9PFZxRx9Uuy/h1RJXAucMraAthoYb0pdGYv1miVORaSDWgaIM0 mOOzcx/CKf/gWiKD2vTbkBFzFJ0FvDH6aJgTAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUDGcRjL9w6PXaqrEk3d2ihaUSe2UwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0RHY1JqTDl3NlBYYXFyRWszZDJpaGFVU2UyVS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAxZp0wDQYJKoZIhvcNAQELBQADggEBAGv6YIgpT5Z2sPPBILtZ0GWRYuZF wucEAhhcZE5+dfOBDPk7K9gipJF6BnfzdnlF7ixiTtqrmlXi/X1p6v3F4H1cFesB DSO+zfwaRU+a8pKUUXYdVDPlkHu/94oUQ0kPGKkYVs4mEXlpJMCs2AEqX7OO8iRa 05fB3IzeEZ/W1zvU7oYLt8qb0o4Y+mwuG0RBvNMEOVdPtFKqRXZpOFnQmPimzFQW cf+/plHxLnZoyaijZuIbzwgP4xbebanViVBw/tY8n6I7vcce+9jAVOFSxKKnlxYF 1wFovaq3OTb3L+VGFmVF6NB55BZlr8hW2MUT/Oxz2ixarv7HVEh86va6JdY= -----END CERTIFICATE-----Generated at Mon Nov 25 23:59:09 2024 by rpki-client on console-fra.rpki-client.org