$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/GxUS7gciZ7TOYKYgS-d5VrJIL2o.roa File: GxUS7gciZ7TOYKYgS-d5VrJIL2o.roa (raw, json) Hash identifier: A8NZMSpJIpuo+ACIFvHP1kLzNoG900BnDkZT923s/Q0= Subject key identifier: 1B:15:12:EE:07:22:67:B4:CE:60:A6:20:4B:E7:79:56:B2:48:2F:6A Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0ACB Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/GxUS7gciZ7TOYKYgS-d5VrJIL2o.roa Signing time: Fri 22 Nov 2024 06:23:53 +0000 ROA not before: Fri 22 Nov 2024 06:23:53 +0000 ROA not after: Sat 15 Nov 2025 01:30:03 +0000 asID: 9605 IP address blocks: 49.109.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2763 (0xacb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Nov 22 06:23:53 2024 GMT Not After : Nov 15 01:30:03 2025 GMT Subject: CN=1B1512EE072267B4CE60A6204BE77956B2482F6A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:68:23:6f:c2:bf:ce:0d:34:bd:b3:42:62:d0: f0:0d:1b:01:b0:1a:3c:74:2a:24:0f:d6:ac:b6:03: 7f:77:01:09:6f:08:eb:35:78:c4:3f:fd:14:ad:f2: a8:b7:ce:37:ed:7d:26:9b:81:45:c4:71:48:4f:9c: ff:96:05:34:f9:2c:fc:3a:4c:53:a8:8a:4c:c7:b2: f7:46:d1:12:06:46:2c:9f:40:26:8c:93:2b:26:94: f4:af:ee:01:e5:a1:1b:3a:a2:1a:25:a9:02:04:5d: ca:5b:07:d9:ce:88:c8:58:e4:a0:c5:3a:af:d0:19: ff:67:20:c2:0c:ec:0e:4c:a9:88:66:66:01:66:3f: 79:d0:49:90:56:e4:bf:e8:c1:52:e9:b0:b1:f9:4c: 68:88:56:22:e4:13:fe:11:4c:63:b0:82:1c:a4:4f: c5:71:22:26:f2:fe:7c:13:56:d6:60:d8:53:45:63: 20:7d:aa:f5:2c:39:38:f4:0e:55:fb:a9:82:de:ef: a0:7b:09:e0:bb:db:c0:b8:f2:9c:ed:f4:a7:09:a5: f5:24:a7:3f:77:e2:0f:ef:ce:99:9a:2c:da:1f:d4: 04:a4:26:2b:ed:04:64:74:b2:cd:05:9e:d0:3e:0b: f7:57:15:73:63:3f:fd:42:3d:56:d9:17:2e:9b:e7: d6:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:15:12:EE:07:22:67:B4:CE:60:A6:20:4B:E7:79:56:B2:48:2F:6A X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/GxUS7gciZ7TOYKYgS-d5VrJIL2o.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.109.224.0/20 Signature Algorithm: sha256WithRSAEncryption 93:da:9b:23:bc:ec:66:d1:fb:a3:9c:3f:c1:2a:5a:bf:d4:d4: d7:b0:ee:b5:2c:c1:30:9d:61:86:53:53:ea:e9:1d:e1:8a:35: 84:1a:cf:ee:e0:2e:aa:ec:98:7e:7a:80:c6:60:3a:04:b8:c2: cc:2f:c3:57:0a:55:78:65:84:8b:a6:2e:a5:1b:23:07:e3:06: 75:f1:28:7e:18:07:00:53:7c:6c:8c:80:68:c1:7e:71:d0:10: 20:f1:ca:6c:45:df:84:6f:0e:9f:8a:d4:a4:58:1a:bf:5c:af: 07:49:b4:c0:d4:f4:06:54:0e:bf:e6:55:d4:27:3b:94:6c:4f: c5:bc:77:76:59:fb:1e:8c:0f:93:65:f3:e6:b8:65:fc:7a:8c: 4d:10:f3:45:5d:a6:0d:f3:2c:d5:32:07:fd:9f:0a:dd:2a:3b: cd:ed:5d:e1:1f:d7:1a:5a:87:a8:ca:09:88:bc:fb:e9:22:d8: 12:9b:da:f5:d7:30:1d:8f:e5:13:13:ef:b8:70:01:ad:d9:e4: 8b:b1:ad:b7:ab:27:4c:da:a6:a5:42:9a:b5:02:fd:86:3b:34: 6b:fa:49:e8:de:e9:e5:ef:29:a6:06:d9:39:ec:d1:73:35:69: ab:c0:46:c3:f6:f2:27:83:1e:4a:d3:31:ad:6b:2b:d1:bf:4a: e3:91:3b:7c -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCsswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDExMjIw NjIzNTNaFw0yNTExMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDFCMTUxMkVFMDcyMjY3 QjRDRTYwQTYyMDRCRTc3OTU2QjI0ODJGNkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDoaCNvwr/ODTS9s0Ji0PANGwGwGjx0KiQP1qy2A393AQlvCOs1 eMQ//RSt8qi3zjftfSabgUXEcUhPnP+WBTT5LPw6TFOoikzHsvdG0RIGRiyfQCaM kysmlPSv7gHloRs6oholqQIEXcpbB9nOiMhY5KDFOq/QGf9nIMIM7A5MqYhmZgFm P3nQSZBW5L/owVLpsLH5TGiIViLkE/4RTGOwghykT8VxIiby/nwTVtZg2FNFYyB9 qvUsOTj0DlX7qYLe76B7CeC728C48pzt9KcJpfUkpz934g/vzpmaLNof1ASkJivt BGR0ss0FntA+C/dXFXNjP/1CPVbZFy6b59b9AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUGxUS7gciZ7TOYKYgS+d5VrJIL2owHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0d4VVM3Z2NpWjdUT1lLWWdTLWQ1VnJKSUwyby5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQxbeAwDQYJKoZIhvcNAQELBQADggEBAJPamyO87GbR+6OcP8EqWr/U1New 7rUswTCdYYZTU+rpHeGKNYQaz+7gLqrsmH56gMZgOgS4wswvw1cKVXhlhIumLqUb IwfjBnXxKH4YBwBTfGyMgGjBfnHQECDxymxF34RvDp+K1KRYGr9crwdJtMDU9AZU Dr/mVdQnO5RsT8W8d3ZZ+x6MD5Nl8+a4Zfx6jE0Q80Vdpg3zLNUyB/2fCt0qO83t XeEf1xpah6jKCYi8++ki2BKb2vXXMB2P5RMT77hwAa3Z5IuxrberJ0zapqVCmrUC /YY7NGv6Seje6eXvKaYG2Tns0XM1aavARsP28ieDHkrTMa1rK9G/SuORO3w= -----END CERTIFICATE-----Generated at Sun Feb 16 22:06:14 2025 by rpki-client