$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/DjeFoVu_gIkhn_Fkzlp6XuZbCuk.roa File: DjeFoVu_gIkhn_Fkzlp6XuZbCuk.roa (raw, json) Hash identifier: YqoOPIVPv91SuvDSUaHPihibvkYMSpOkVTLp+zl04VQ= Subject key identifier: 0E:37:85:A1:5B:BF:80:89:21:9F:F1:64:CE:5A:7A:5E:E6:5B:0A:E9 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0AE1 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/DjeFoVu_gIkhn_Fkzlp6XuZbCuk.roa Signing time: Fri 31 Jan 2025 01:28:27 +0000 ROA not before: Fri 31 Jan 2025 01:28:27 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.109.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Feb 2025 20:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2785 (0xae1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jan 31 01:28:27 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=0E3785A15BBF8089219FF164CE5A7A5EE65B0AE9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:1a:71:91:68:80:d3:7e:15:a6:cf:47:a2:fb: 8c:05:ff:c3:3e:4e:0a:a9:bb:a3:62:54:02:a3:b2: c7:7c:59:e6:30:0a:35:52:f7:6c:56:81:4e:83:60: 9c:92:d6:4f:29:9c:0d:8e:b8:98:20:df:c2:46:fd: aa:8d:c8:b3:2b:89:d5:a1:e1:32:3c:12:8f:2b:96: 34:65:cf:06:8a:e7:11:66:3c:38:b4:9e:3b:51:b7: 21:66:23:26:c3:15:9f:73:d0:93:56:23:d2:90:93: ec:bd:70:d3:5e:0d:3b:2e:27:37:dd:fb:c6:75:c2: 29:59:7a:a1:9f:b0:ea:d4:8a:f1:cd:e1:3d:ad:82: bb:3a:e9:3c:7f:c4:18:c7:74:fc:1e:43:36:b2:69: 7d:f0:c6:9a:21:8d:1c:d0:37:3d:52:61:c4:b0:db: a9:d5:14:0a:11:03:fa:a7:2d:4c:ab:79:b3:72:2d: 01:d4:6c:1e:01:b2:4e:24:f9:31:a7:63:32:6b:8f: 35:19:2e:19:0b:f1:f4:06:ca:44:c5:8e:2b:f0:db: 9b:63:2b:e8:38:3e:0a:b7:aa:72:3c:39:94:16:f2: b0:fc:28:0d:a1:a3:3f:c1:2c:43:e0:da:cd:e0:37: ee:8a:2a:8d:84:06:7d:6b:37:39:4f:b9:bc:bb:cf: c6:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:37:85:A1:5B:BF:80:89:21:9F:F1:64:CE:5A:7A:5E:E6:5B:0A:E9 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/DjeFoVu_gIkhn_Fkzlp6XuZbCuk.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.109.0.0/21 Signature Algorithm: sha256WithRSAEncryption 9a:8a:e0:f0:03:f9:b6:f7:02:8d:d2:08:7d:e9:74:42:b5:47: c8:d9:ad:55:d6:38:e9:2a:22:17:c7:5d:c1:8e:fa:ef:27:5b: 78:b0:e3:fb:7c:3c:d9:2a:b2:7e:8b:20:0f:14:91:cd:82:e8: 62:23:d3:be:4a:49:3b:d8:73:be:d9:32:05:9d:e0:4f:2b:f8: 57:24:41:2d:36:db:61:51:fd:43:28:f1:5b:7d:51:7d:f6:11: c5:e9:47:bf:06:af:88:81:73:61:4e:b8:49:a0:04:1b:8f:c1: 9b:82:05:e9:db:b4:28:af:3d:3e:08:78:aa:ed:43:96:56:85: a9:c5:19:ac:c8:6b:72:a5:a6:cf:0b:08:8b:c8:78:e8:2e:2e: 60:a2:42:65:8e:1a:a4:1b:d6:19:96:bc:52:19:24:8d:97:78: 07:5e:00:b0:ea:03:b9:b0:a4:a0:45:fc:9b:9e:5f:f6:bd:ea: ea:e9:dd:c0:5d:0c:cd:a7:1c:62:88:d9:4d:5d:c2:fe:fa:d3: ab:ff:38:6e:24:21:8a:c6:47:a9:c3:6e:34:6f:06:44:ad:e2: 7b:de:a6:4a:d0:4a:8b:37:4b:78:e9:fb:0d:86:e8:f5:7d:13: b4:85:a3:f0:c4:75:d6:cb:ed:6d:c2:64:93:59:68:3d:f0:08: 70:e2:7a:7b -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCuEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTAxMzEw MTI4MjdaFw0yNjAxMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDBFMzc4NUExNUJCRjgw ODkyMTlGRjE2NENFNUE3QTVFRTY1QjBBRTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCiGnGRaIDTfhWmz0ei+4wF/8M+Tgqpu6NiVAKjssd8WeYwCjVS 92xWgU6DYJyS1k8pnA2OuJgg38JG/aqNyLMridWh4TI8Eo8rljRlzwaK5xFmPDi0 njtRtyFmIybDFZ9z0JNWI9KQk+y9cNNeDTsuJzfd+8Z1wilZeqGfsOrUivHN4T2t grs66Tx/xBjHdPweQzayaX3wxpohjRzQNz1SYcSw26nVFAoRA/qnLUyrebNyLQHU bB4Bsk4k+TGnYzJrjzUZLhkL8fQGykTFjivw25tjK+g4Pgq3qnI8OZQW8rD8KA2h oz/BLEPg2s3gN+6KKo2EBn1rNzlPuby7z8YzAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUDjeFoVu/gIkhn/Fkzlp6XuZbCukwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0RqZUZvVnVfZ0lraG5fRmt6bHA2WHVaYkN1ay5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMxbQAwDQYJKoZIhvcNAQELBQADggEBAJqK4PAD+bb3Ao3SCH3pdEK1R8jZ rVXWOOkqIhfHXcGO+u8nW3iw4/t8PNkqsn6LIA8Ukc2C6GIj075KSTvYc77ZMgWd 4E8r+FckQS0222FR/UMo8Vt9UX32EcXpR78Gr4iBc2FOuEmgBBuPwZuCBenbtCiv PT4IeKrtQ5ZWhanFGazIa3Klps8LCIvIeOguLmCiQmWOGqQb1hmWvFIZJI2XeAde ALDqA7mwpKBF/JueX/a96urp3cBdDM2nHGKI2U1dwv7606v/OG4kIYrGR6nDbjRv BkSt4nvepkrQSos3S3jp+w2G6PV9E7SFo/DEddbL7W3CZJNZaD3wCHDiens= -----END CERTIFICATE-----Generated at Wed Feb 19 22:42:49 2025 by rpki-client