$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Fbm4Ab0OmciTijVC14LrS5lp_04.roa File: Fbm4Ab0OmciTijVC14LrS5lp_04.roa (raw, json) Hash identifier: RjbbJbKOgXIEUn7cRa3JkVKFrA7JgnBNdd/nIKSJHR4= Subject key identifier: 15:B9:B8:01:BD:0E:99:C8:93:8A:35:42:D7:82:EB:4B:99:69:FF:4E Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0B05 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Fbm4Ab0OmciTijVC14LrS5lp_04.roa Signing time: Fri 31 Jan 2025 01:34:20 +0000 ROA not before: Fri 31 Jan 2025 01:34:20 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 9605 IP address blocks: 220.159.54.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2821 (0xb05) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jan 31 01:34:20 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=15B9B801BD0E99C8938A3542D782EB4B9969FF4E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:d6:85:36:6d:67:4f:6b:6e:97:fc:00:0b:7d: a2:01:a5:af:0d:c5:e3:24:21:66:1b:b2:6c:f2:ad: 16:8e:8f:9d:2f:e9:8e:43:63:32:87:cb:8d:a2:bf: 3a:96:f8:bb:25:92:9e:41:0d:bb:c9:9c:f0:5a:f6: 11:13:f6:f1:a1:1d:fb:d3:c6:da:38:12:0e:70:76: 1c:32:ff:19:86:50:95:95:e2:0c:20:f4:d2:80:53: 29:a2:1a:d5:6d:46:7b:b5:2c:5d:e3:9c:c7:2f:72: 9f:37:17:32:e1:0b:df:d2:2d:dc:34:d8:31:ab:af: 74:d6:3b:65:74:18:cb:88:3f:7a:e2:59:24:66:a3: 46:b9:81:97:62:ff:55:4f:1b:2a:ad:a1:15:fb:e5: 6a:fe:89:62:e0:11:d0:95:b0:3d:4a:b7:07:f0:03: 7f:65:d8:3b:90:05:b4:45:03:23:3b:3b:d0:7c:77: 32:ab:53:2f:c1:75:28:cf:e5:80:67:1f:bd:c1:12: ba:04:1c:41:1c:28:be:93:5b:e8:7d:fc:72:b0:c9: 1e:fa:00:d7:25:66:ed:8d:24:86:13:22:27:c0:ff: 10:ae:9c:9e:4e:7a:29:c6:18:48:f3:bb:cb:0a:3b: a6:5f:88:8b:ef:be:0d:04:72:88:d0:13:83:ed:57: 84:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:B9:B8:01:BD:0E:99:C8:93:8A:35:42:D7:82:EB:4B:99:69:FF:4E X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Fbm4Ab0OmciTijVC14LrS5lp_04.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 220.159.54.0/23 Signature Algorithm: sha256WithRSAEncryption a2:b7:3c:2e:c8:8b:d8:d7:98:7f:1b:d9:86:45:cd:69:cf:56: f0:d2:c8:7b:94:59:c2:f1:8a:73:4d:55:26:aa:16:ae:b0:14: d8:31:c5:9f:ec:bd:31:8d:37:c2:1c:5b:25:0f:f0:8a:9c:40: aa:88:6e:27:49:06:66:7e:b6:5c:17:c7:1e:28:52:8a:4f:d1: 0d:d5:d2:35:09:29:f9:de:75:85:49:6a:42:d2:a7:5a:4b:8d: 71:cc:b2:e1:5b:d4:1e:07:3f:a8:b9:ae:c9:ec:dd:f2:cf:f1: 62:90:05:38:2f:d8:47:37:15:9b:5a:c2:30:b2:86:72:15:9a: d0:72:9c:f0:e1:a8:74:af:cf:d5:6f:a4:be:2f:bf:97:57:90: 0c:91:0c:96:1d:89:92:43:43:3a:74:49:26:ba:78:48:ea:44: 43:d8:c6:e5:18:12:7d:1e:94:5e:7a:16:48:13:1b:24:24:ef: e8:58:07:24:9e:da:ce:e2:a5:52:70:1a:bf:d5:c8:48:42:b1: 01:fa:35:3a:38:42:6a:cf:12:4d:53:4a:2e:e7:ae:74:71:f4: ee:bc:3a:e3:8d:24:4d:ff:87:5b:fe:61:09:95:c0:84:22:1a: 05:67:b8:c6:fa:89:64:f9:dd:2a:cf:03:8a:2b:be:dc:47:7c: 90:cd:a8:72 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCwUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTAxMzEw MTM0MjBaFw0yNjAxMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDE1QjlCODAxQkQwRTk5 Qzg5MzhBMzU0MkQ3ODJFQjRCOTk2OUZGNEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDS1oU2bWdPa26X/AALfaIBpa8NxeMkIWYbsmzyrRaOj50v6Y5D YzKHy42ivzqW+Lslkp5BDbvJnPBa9hET9vGhHfvTxto4Eg5wdhwy/xmGUJWV4gwg 9NKAUymiGtVtRnu1LF3jnMcvcp83FzLhC9/SLdw02DGrr3TWO2V0GMuIP3riWSRm o0a5gZdi/1VPGyqtoRX75Wr+iWLgEdCVsD1KtwfwA39l2DuQBbRFAyM7O9B8dzKr Uy/BdSjP5YBnH73BEroEHEEcKL6TW+h9/HKwyR76ANclZu2NJIYTIifA/xCunJ5O einGGEjzu8sKO6ZfiIvvvg0EcojQE4PtV4RxAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUFbm4Ab0OmciTijVC14LrS5lp/04wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0ZibTRBYjBPbWNpVGlqVkMxNExyUzVscF8wNC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAHcnzYwDQYJKoZIhvcNAQELBQADggEBAKK3PC7Ii9jXmH8b2YZFzWnPVvDS yHuUWcLxinNNVSaqFq6wFNgxxZ/svTGNN8IcWyUP8IqcQKqIbidJBmZ+tlwXxx4o UopP0Q3V0jUJKfnedYVJakLSp1pLjXHMsuFb1B4HP6i5rsns3fLP8WKQBTgv2Ec3 FZtawjCyhnIVmtBynPDhqHSvz9VvpL4vv5dXkAyRDJYdiZJDQzp0SSa6eEjqREPY xuUYEn0elF56FkgTGyQk7+hYBySe2s7ipVJwGr/VyEhCsQH6NTo4QmrPEk1TSi7n rnRx9O68OuONJE3/h1v+YQmVwIQiGgVnuMb6iWT53SrPA4orvtxHfJDNqHI= -----END CERTIFICATE-----Generated at Wed Feb 19 22:36:16 2025 by rpki-client