$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/GQoF6hxBWGTT2nYaWVyiuCx6CjA.roa File: GQoF6hxBWGTT2nYaWVyiuCx6CjA.roa (raw, json) Hash identifier: 7hrG7ZoxHCK9QVTecllqWOQSE6lfXuLQ3PixDfF20ZQ= Subject key identifier: 19:0A:05:EA:1C:41:58:64:D3:DA:76:1A:59:5C:A2:B8:2C:7A:0A:30 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0A92 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/GQoF6hxBWGTT2nYaWVyiuCx6CjA.roa Signing time: Sun 30 Jun 2024 01:52:41 +0000 ROA not before: Sun 30 Jun 2024 01:52:41 +0000 ROA not after: Tue 24 Jun 2025 10:46:45 +0000 asID: 9605 IP address blocks: 220.210.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2706 (0xa92) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 30 01:52:41 2024 GMT Not After : Jun 24 10:46:45 2025 GMT Subject: CN=190A05EA1C415864D3DA761A595CA2B82C7A0A30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:3d:5c:14:ae:ff:c6:48:67:87:cc:c3:a6:e3: bd:b0:dc:5a:90:0d:e4:3e:0f:18:65:dd:98:15:4c: bf:06:9e:f3:75:ac:bc:84:03:dd:d6:6c:89:a1:e7: 06:fc:c0:83:ec:fb:f6:4d:33:d8:75:ca:57:4c:03: b8:26:40:2d:62:51:de:b4:57:0d:0c:c8:7d:1f:6f: 0a:d0:c1:a7:c0:ed:63:62:80:56:8c:c6:a9:ed:65: 2d:95:e5:ad:d8:d2:80:ce:aa:d4:9b:d4:4c:a0:31: b0:26:88:1d:f5:76:80:25:f1:50:7d:6a:c4:40:a0: ff:59:36:55:6b:2c:a9:41:3c:90:9b:14:4a:94:c3: 84:9a:ef:2a:81:aa:34:ba:f4:5c:d9:ea:4b:dc:63: 5a:11:81:b9:de:de:43:03:7a:eb:00:f7:09:c2:ad: 97:7a:ea:03:4c:e5:d2:89:eb:d6:38:d8:63:75:74: ea:62:f5:00:63:dc:5d:49:8b:24:cd:d8:c6:04:90: a0:5b:4f:e7:a2:20:45:f5:89:4b:e2:44:86:fd:3b: 77:72:f5:9b:e2:7d:b6:a5:05:61:a4:1e:a0:69:36: 4e:4d:7a:10:3a:2c:c8:0f:0a:40:d4:b6:94:69:26: 13:fc:5e:12:da:1f:bc:4f:c7:bb:2a:d8:bb:51:9f: 39:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:0A:05:EA:1C:41:58:64:D3:DA:76:1A:59:5C:A2:B8:2C:7A:0A:30 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/GQoF6hxBWGTT2nYaWVyiuCx6CjA.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 220.210.105.0/24 Signature Algorithm: sha256WithRSAEncryption 76:36:67:50:5e:e5:10:19:bc:92:0a:b1:f4:9d:9f:ba:28:e7: 96:48:a7:93:c9:49:75:d1:22:c6:5e:65:16:07:3c:62:e4:44: c5:94:00:3c:01:57:05:3d:09:c1:42:80:04:68:c0:3a:aa:7c: c3:24:dc:cc:89:22:fb:fd:c9:95:cb:89:85:02:0d:a0:69:cc: c3:75:0a:6a:56:8e:d0:0b:0e:74:be:fd:27:39:bc:3c:43:92: fa:0f:1d:82:e6:ad:18:0f:2b:df:60:4d:4e:60:6d:b9:30:80: ce:a5:2c:6b:5e:ae:28:b7:73:7d:aa:76:c7:a3:7c:c4:2e:fc: 1a:9a:3f:82:ad:02:9e:83:10:bb:62:16:bd:28:61:98:ef:b2: ee:e0:61:cf:36:b1:57:2c:94:2e:f4:00:a5:1b:03:c4:79:02: a8:55:e7:bf:48:2e:de:35:2e:4b:a4:67:8c:69:17:8c:43:ce: ae:0f:62:8a:f5:75:91:81:ac:c7:da:fa:2b:65:1c:a1:7f:5f: a5:51:e2:8f:a9:bc:61:d0:fc:d9:37:cc:3c:e8:af:f9:c5:bf: 74:cc:88:6d:3c:67:d9:77:35:7e:d8:7e:83:21:bf:cd:b7:4b: 69:5e:c3:28:e4:5f:2e:58:30:81:8f:ca:42:47:a2:3a:72:67: 8d:92:48:17 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCpIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA2MzAw MTUyNDFaFw0yNTA2MjQxMDQ2NDVaMDMxMTAvBgNVBAMTKDE5MEEwNUVBMUM0MTU4 NjREM0RBNzYxQTU5NUNBMkI4MkM3QTBBMzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDJPVwUrv/GSGeHzMOm472w3FqQDeQ+Dxhl3ZgVTL8GnvN1rLyE A93WbImh5wb8wIPs+/ZNM9h1yldMA7gmQC1iUd60Vw0MyH0fbwrQwafA7WNigFaM xqntZS2V5a3Y0oDOqtSb1EygMbAmiB31doAl8VB9asRAoP9ZNlVrLKlBPJCbFEqU w4Sa7yqBqjS69FzZ6kvcY1oRgbne3kMDeusA9wnCrZd66gNM5dKJ69Y42GN1dOpi 9QBj3F1JiyTN2MYEkKBbT+eiIEX1iUviRIb9O3dy9ZvifbalBWGkHqBpNk5NehA6 LMgPCkDUtpRpJhP8XhLaH7xPx7sq2LtRnzkHAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUGQoF6hxBWGTT2nYaWVyiuCx6CjAwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0dRb0Y2aHhCV0dUVDJuWWFXVnlpdUN4NkNqQS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADc0mkwDQYJKoZIhvcNAQELBQADggEBAHY2Z1Be5RAZvJIKsfSdn7oo55ZI p5PJSXXRIsZeZRYHPGLkRMWUADwBVwU9CcFCgARowDqqfMMk3MyJIvv9yZXLiYUC DaBpzMN1CmpWjtALDnS+/Sc5vDxDkvoPHYLmrRgPK99gTU5gbbkwgM6lLGterii3 c32qdsejfMQu/BqaP4KtAp6DELtiFr0oYZjvsu7gYc82sVcslC70AKUbA8R5AqhV 579ILt41LkukZ4xpF4xDzq4PYor1dZGBrMfa+itlHKF/X6VR4o+pvGHQ/Nk3zDzo r/nFv3TMiG08Z9l3NX7YfoMhv823S2lewyjkXy5YMIGPykJHojpyZ42SSBc= -----END CERTIFICATE-----Generated at Sun Feb 16 22:07:11 2025 by rpki-client