$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/HGiMZmquqTR1BoO-w4ogyfweBRM.roa File: HGiMZmquqTR1BoO-w4ogyfweBRM.roa (raw, json) Hash identifier: rPqp0MPNpXssrWIEZaVvCsdq7Xt7Mk3mdXO6/0G/Cdg= Subject key identifier: 1C:68:8C:66:6A:AE:A9:34:75:06:83:BE:C3:8A:20:C9:FC:1E:05:13 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0A67 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/HGiMZmquqTR1BoO-w4ogyfweBRM.roa Signing time: Sun 30 Jun 2024 01:50:25 +0000 ROA not before: Sun 30 Jun 2024 01:50:25 +0000 ROA not after: Tue 24 Jun 2025 10:46:45 +0000 asID: 9605 IP address blocks: 49.103.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2663 (0xa67) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 30 01:50:25 2024 GMT Not After : Jun 24 10:46:45 2025 GMT Subject: CN=1C688C666AAEA934750683BEC38A20C9FC1E0513 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:2b:7e:19:b3:85:cc:d9:1a:e4:90:45:ab:f7: db:21:0c:7e:fb:5c:f5:87:a4:80:47:88:b0:bf:f5: b6:f9:81:e9:ff:11:2d:2e:27:02:07:2a:d7:64:b6: e4:57:d8:6f:b3:bb:be:13:90:31:1e:d5:18:ee:08: ba:e9:7f:bd:74:68:47:3f:09:99:88:24:9a:0a:2d: 85:9e:13:3b:f2:96:55:74:0e:61:2b:f0:11:fb:84: f7:95:6e:11:22:93:7a:59:e0:9f:1d:1a:81:f2:c6: 5a:46:40:cb:bb:59:d5:bf:81:23:6a:16:65:74:b0: af:53:a6:06:fc:3c:a9:aa:5b:33:5f:ec:ca:07:f9: 3f:b6:71:1b:32:69:b0:8f:e3:4d:0e:e2:4e:c7:ff: 9b:13:c5:7b:27:4b:1d:20:3a:df:a9:b7:6c:76:d0: d2:19:11:b7:10:27:2d:62:03:26:25:e5:b3:3d:e6: 49:a4:c4:12:c3:7e:a8:23:f8:7d:ba:bd:cd:9a:2a: fa:40:7f:9c:e4:bd:86:38:db:0a:00:c7:32:59:b9: a7:0e:f7:5e:34:11:ec:e3:e4:8a:1e:24:39:09:5b: 48:24:63:93:41:b1:b0:f0:62:42:02:9a:f3:ec:38: 1e:79:25:cf:ea:f1:cb:11:5b:14:2c:55:05:bd:eb: 5e:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:68:8C:66:6A:AE:A9:34:75:06:83:BE:C3:8A:20:C9:FC:1E:05:13 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/HGiMZmquqTR1BoO-w4ogyfweBRM.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.103.32.0/20 Signature Algorithm: sha256WithRSAEncryption 2b:30:32:bd:36:6b:e6:9d:81:f5:88:e5:9f:29:d8:f7:8b:9b: 95:11:5c:05:c2:e7:ed:15:77:b5:77:af:cd:d4:64:3a:f1:eb: 3b:40:45:a0:68:81:4d:da:f7:23:9c:94:01:61:15:9d:9a:af: 96:ea:4e:4a:6b:91:ed:d7:fe:f0:dc:51:ae:63:3d:a5:38:de: 68:7f:79:23:35:68:2f:61:69:32:c1:c6:a1:af:3f:bd:07:80: cc:10:47:3b:b1:df:5b:4a:0f:3e:8d:f6:94:92:08:f2:59:a0: 72:b0:08:00:c4:b8:55:97:c0:0d:f1:e2:56:d8:1e:7a:5a:20: 01:43:6b:0a:4b:d3:aa:c9:c3:88:d3:d2:33:f1:aa:b3:4b:ad: a3:2a:9e:8e:6d:c9:79:fe:cb:60:44:fe:3a:69:22:9e:6b:49: 02:52:f0:30:08:7c:ac:44:fc:eb:8b:59:89:69:9c:61:3c:35: 4d:9e:12:9d:98:02:aa:d1:45:a4:ae:b0:95:71:d3:ba:ce:95: 35:a3:91:b1:7e:33:50:fb:43:0b:2a:81:18:a4:d7:7d:0f:93: 53:d7:f2:2f:71:47:b3:61:ae:ff:b1:e5:f9:12:15:78:fe:03: af:d3:97:96:29:e7:ab:91:85:3e:65:35:80:27:25:1a:ef:9d: 41:fc:2b:23 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCmcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA2MzAw MTUwMjVaFw0yNTA2MjQxMDQ2NDVaMDMxMTAvBgNVBAMTKDFDNjg4QzY2NkFBRUE5 MzQ3NTA2ODNCRUMzOEEyMEM5RkMxRTA1MTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD4K34Zs4XM2RrkkEWr99shDH77XPWHpIBHiLC/9bb5gen/ES0u JwIHKtdktuRX2G+zu74TkDEe1RjuCLrpf710aEc/CZmIJJoKLYWeEzvyllV0DmEr 8BH7hPeVbhEik3pZ4J8dGoHyxlpGQMu7WdW/gSNqFmV0sK9Tpgb8PKmqWzNf7MoH +T+2cRsyabCP400O4k7H/5sTxXsnSx0gOt+pt2x20NIZEbcQJy1iAyYl5bM95kmk xBLDfqgj+H26vc2aKvpAf5zkvYY42woAxzJZuacO9140Eezj5IoeJDkJW0gkY5NB sbDwYkICmvPsOB55Jc/q8csRWxQsVQW9616BAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUHGiMZmquqTR1BoO+w4ogyfweBRMwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0hHaU1abXF1cVRSMUJvTy13NG9neWZ3ZUJSTS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQxZyAwDQYJKoZIhvcNAQELBQADggEBACswMr02a+adgfWI5Z8p2PeLm5UR XAXC5+0Vd7V3r83UZDrx6ztARaBogU3a9yOclAFhFZ2ar5bqTkprke3X/vDcUa5j PaU43mh/eSM1aC9haTLBxqGvP70HgMwQRzux31tKDz6N9pSSCPJZoHKwCADEuFWX wA3x4lbYHnpaIAFDawpL06rJw4jT0jPxqrNLraMqno5tyXn+y2BE/jppIp5rSQJS 8DAIfKxE/OuLWYlpnGE8NU2eEp2YAqrRRaSusJVx07rOlTWjkbF+M1D7QwsqgRik 130Pk1PX8i9xR7Nhrv+x5fkSFXj+A6/Tl5Yp56uRhT5lNYAnJRrvnUH8KyM= -----END CERTIFICATE-----Generated at Sun Feb 16 22:23:48 2025 by rpki-client