$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/FD_4NR5ghe9IrEQLrEFsI-WDMio.roa File: FD_4NR5ghe9IrEQLrEFsI-WDMio.roa (raw, json) Hash identifier: ZRxMe+/DoJqLejWJIkE9XZNm9wmCOyjyafw9BXd0RvY= Subject key identifier: 14:3F:F8:35:1E:60:85:EF:48:AC:44:0B:AC:41:6C:23:E5:83:32:2A Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 07E8 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/FD_4NR5ghe9IrEQLrEFsI-WDMio.roa Signing time: Tue 30 Apr 2024 02:10:33 +0000 ROA not before: Tue 30 Apr 2024 02:10:33 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 49.98.160.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2024 (0x7e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 30 02:10:33 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=143FF8351E6085EF48AC440BAC416C23E583322A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:e0:fc:52:9b:26:a6:6e:ae:22:e6:41:13:3e: 38:c6:1f:ea:19:36:6d:ec:21:c8:e9:6d:69:6e:3d: 5b:99:48:6b:4f:cc:ab:94:7c:cf:4e:24:04:38:2b: 7d:9b:78:8b:03:c2:e2:c3:23:c2:7b:07:20:ec:5f: cd:92:8a:65:09:d3:27:d2:df:08:57:ba:30:68:9c: 98:1f:cf:ef:20:9e:c1:f3:b9:de:1f:51:6e:26:90: 82:aa:c7:ee:e8:8d:6a:8d:a8:be:f7:9d:4b:52:bb: 6a:d1:bf:73:b1:5f:11:15:c2:9b:f4:93:29:6e:1e: 5f:7d:10:55:0e:6c:57:fc:cc:b8:08:a5:61:c0:e2: 5f:1b:89:ba:d5:06:2d:2f:96:8d:dd:80:87:9c:48: 83:18:8d:a8:fc:88:90:f4:2a:d0:6d:5e:ce:d7:a4: 74:29:3a:ff:69:05:4a:b8:80:4b:6b:7c:33:fb:8e: a9:55:eb:f0:b8:d5:5e:4d:aa:15:8e:bb:ed:e0:04: 9a:18:a6:94:72:92:12:0b:71:77:36:0d:cc:8e:62: ec:80:24:b3:36:d1:b9:f8:9b:61:cc:38:d4:42:53: de:97:71:ec:26:f6:53:94:89:ed:bc:16:68:01:f1: 92:3b:6a:93:8b:97:7f:bb:50:7d:56:1e:d8:c4:c3: 92:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:3F:F8:35:1E:60:85:EF:48:AC:44:0B:AC:41:6C:23:E5:83:32:2A X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/FD_4NR5ghe9IrEQLrEFsI-WDMio.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.98.160.0/23 Signature Algorithm: sha256WithRSAEncryption 89:42:9a:f8:ee:bc:23:51:52:a3:9f:da:c6:93:a6:0d:5d:81: 19:94:e4:5f:73:bc:3e:93:11:28:01:ab:c5:18:d6:45:0f:f6: e2:72:24:ec:df:b6:ea:e3:96:1e:5b:6b:dd:68:ee:89:96:58: 89:c4:81:2f:ac:e7:75:96:85:3a:dc:b0:4d:d0:ec:25:66:2a: dc:b6:d3:08:42:6e:d1:55:4c:fa:3e:48:1b:1c:92:02:74:b8: 09:c6:f2:af:72:d9:f3:35:b0:d9:ec:1e:a4:76:bb:53:bf:07: d4:50:57:d4:93:57:ce:67:35:19:a5:ec:2b:f6:25:66:ff:90: b8:02:3d:5e:91:f7:b2:ad:ed:c3:92:72:97:69:9f:09:57:4a: 68:52:1a:86:fc:87:a1:28:d8:0a:b1:05:15:1b:11:5f:9d:ec: 0d:80:7e:d5:d8:f8:43:17:98:f0:64:ed:2a:65:7e:9d:d9:bb: 69:61:e7:45:6d:ca:2d:6a:7d:01:ef:43:de:41:d5:2a:69:5f: ef:e3:25:92:73:d5:0c:0b:be:ae:b5:a7:55:26:61:23:95:ec: 4b:bf:43:d9:80:4f:b3:d8:33:ae:08:7c:5b:b7:25:99:7a:40: 5d:66:84:9f:45:d9:c2:2f:31:5f:43:7e:72:02:bb:00:94:28: da:84:51:dc -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICB+gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw MjEwMzNaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDE0M0ZGODM1MUU2MDg1 RUY0OEFDNDQwQkFDNDE2QzIzRTU4MzMyMkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDa4PxSmyambq4i5kETPjjGH+oZNm3sIcjpbWluPVuZSGtPzKuU fM9OJAQ4K32beIsDwuLDI8J7ByDsX82SimUJ0yfS3whXujBonJgfz+8gnsHzud4f UW4mkIKqx+7ojWqNqL73nUtSu2rRv3OxXxEVwpv0kyluHl99EFUObFf8zLgIpWHA 4l8bibrVBi0vlo3dgIecSIMYjaj8iJD0KtBtXs7XpHQpOv9pBUq4gEtrfDP7jqlV 6/C41V5NqhWOu+3gBJoYppRykhILcXc2DcyOYuyAJLM20bn4m2HMONRCU96Xcewm 9lOUie28FmgB8ZI7apOLl3+7UH1WHtjEw5IfAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUFD/4NR5ghe9IrEQLrEFsI+WDMiowHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0ZEXzROUjVnaGU5SXJFUUxyRUZzSS1XRE1pby5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExYqAwDQYJKoZIhvcNAQELBQADggEBAIlCmvjuvCNRUqOf2saTpg1dgRmU 5F9zvD6TESgBq8UY1kUP9uJyJOzfturjlh5ba91o7omWWInEgS+s53WWhTrcsE3Q 7CVmKty20whCbtFVTPo+SBsckgJ0uAnG8q9y2fM1sNnsHqR2u1O/B9RQV9STV85n NRml7Cv2JWb/kLgCPV6R97Kt7cOScpdpnwlXSmhSGob8h6Eo2AqxBRUbEV+d7A2A ftXY+EMXmPBk7Splfp3Zu2lh50Vtyi1qfQHvQ95B1SppX+/jJZJz1QwLvq61p1Um YSOV7Eu/Q9mAT7PYM64IfFu3JZl6QF1mhJ9F2cIvMV9DfnICuwCUKNqEUdw= -----END CERTIFICATE-----Generated at Sun Feb 16 22:32:23 2025 by rpki-client