$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/HVyavefWFAeLkrFGOPh3ObAABhk.roa File: HVyavefWFAeLkrFGOPh3ObAABhk.roa (raw, json) Hash identifier: P8i7CLdDv3yKWg8YfJPZDenDr7QGbgbNKz2rmyk3NZY= Subject key identifier: 1D:5C:9A:BD:E7:D6:14:07:8B:92:B1:46:38:F8:77:39:B0:00:06:19 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 084E Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/HVyavefWFAeLkrFGOPh3ObAABhk.roa Signing time: Tue 30 Apr 2024 02:16:27 +0000 ROA not before: Tue 30 Apr 2024 02:16:27 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 110.163.226.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2126 (0x84e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 30 02:16:27 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=1D5C9ABDE7D614078B92B14638F87739B0000619 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:05:20:64:f4:6a:b9:e1:e3:a2:b4:6d:61:61: c9:94:4f:34:fc:04:09:30:85:c2:1a:aa:9c:0b:61: 53:fc:78:cb:d3:0d:73:c6:45:13:66:cf:f2:00:5a: 3f:66:c4:4f:d9:a6:1d:b5:2e:e6:93:78:cf:70:ff: 8b:b3:c3:b9:fb:e4:2a:50:35:55:1c:02:5c:0f:a0: 2f:77:ca:45:1b:d0:a4:7d:d5:cf:20:a5:55:00:62: 38:fe:bc:13:51:40:34:20:b3:ea:5c:f0:4a:3f:f7: 50:5f:e7:5a:70:85:ae:ce:6e:d8:3d:20:b5:80:d4: 47:3d:66:ab:d1:e4:c8:51:fd:5e:18:cc:ae:cd:35: 6a:41:17:42:4a:f6:d3:b0:db:38:be:7b:a9:76:b9: 4f:95:b2:7e:e1:5e:3d:31:60:5c:85:5c:91:8c:e4: b6:91:10:eb:9c:29:63:c4:2b:c8:80:2c:52:b7:b5: 5b:e7:e1:23:27:37:fe:0d:b1:c6:01:e5:78:1d:cb: 30:76:e0:35:4a:b4:03:42:2c:84:f7:ee:a3:2e:5b: 69:30:47:ba:94:17:6e:15:36:b7:bd:02:42:67:6e: 3b:52:2b:84:7a:22:7c:88:39:9e:25:a3:19:6b:51: 6b:94:9f:8d:63:f9:4f:56:3a:22:29:fa:ad:28:c7: 1f:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:5C:9A:BD:E7:D6:14:07:8B:92:B1:46:38:F8:77:39:B0:00:06:19 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/HVyavefWFAeLkrFGOPh3ObAABhk.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 110.163.226.0/23 Signature Algorithm: sha256WithRSAEncryption 37:0f:bd:30:4a:ad:a9:56:19:3e:9c:78:5e:b9:80:ec:aa:19: e4:b2:15:fd:24:e8:8a:18:16:03:d6:88:98:7a:56:81:db:9b: ec:b5:52:f7:c1:0b:b7:5f:9e:de:cf:8d:b3:d9:17:52:af:9f: c6:f0:45:df:ba:27:69:c3:98:3e:c2:86:f0:4c:1d:ba:3a:e0: 7f:ba:09:88:f5:56:52:22:4f:35:bb:9a:87:cb:e2:5f:6d:16: f0:c4:77:36:1b:59:5f:55:f2:e2:7d:ec:32:91:97:d6:c1:2f: 23:c4:fd:3e:a4:e0:10:89:3d:8a:ab:7e:e7:25:6f:7b:e5:47: 22:1d:14:2a:a4:c5:51:bc:cd:d3:19:fa:43:da:77:88:37:2f: 9a:5b:67:ea:32:60:eb:5f:1d:f9:e4:a0:63:02:6c:13:ab:51: dc:7e:72:ef:79:96:ab:44:d3:37:07:ed:9f:2a:ed:df:f4:04: ef:ba:ef:b4:77:5a:d4:08:07:56:cb:10:81:59:f5:17:58:8e: a8:89:a9:ed:ff:b3:b6:19:a9:9f:06:dd:9f:f2:90:2d:00:96: ad:2a:2e:67:a1:e1:52:28:78:f1:2b:5a:b0:22:e2:1c:da:98: 70:63:af:f6:62:2d:88:0c:92:22:03:e4:19:91:25:e0:84:b3: 46:bf:8f:13 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCE4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw MjE2MjdaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDFENUM5QUJERTdENjE0 MDc4QjkyQjE0NjM4Rjg3NzM5QjAwMDA2MTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDRBSBk9Gq54eOitG1hYcmUTzT8BAkwhcIaqpwLYVP8eMvTDXPG RRNmz/IAWj9mxE/Zph21LuaTeM9w/4uzw7n75CpQNVUcAlwPoC93ykUb0KR91c8g pVUAYjj+vBNRQDQgs+pc8Eo/91Bf51pwha7Obtg9ILWA1Ec9ZqvR5MhR/V4YzK7N NWpBF0JK9tOw2zi+e6l2uU+Vsn7hXj0xYFyFXJGM5LaREOucKWPEK8iALFK3tVvn 4SMnN/4NscYB5XgdyzB24DVKtANCLIT37qMuW2kwR7qUF24VNre9AkJnbjtSK4R6 InyIOZ4loxlrUWuUn41j+U9WOiIp+q0oxx+LAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUHVyavefWFAeLkrFGOPh3ObAABhkwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0hWeWF2ZWZXRkFlTGtyRkdPUGgzT2JBQUJoay5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFuo+IwDQYJKoZIhvcNAQELBQADggEBADcPvTBKralWGT6ceF65gOyqGeSy Ff0k6IoYFgPWiJh6VoHbm+y1UvfBC7dfnt7PjbPZF1Kvn8bwRd+6J2nDmD7ChvBM Hbo64H+6CYj1VlIiTzW7mofL4l9tFvDEdzYbWV9V8uJ97DKRl9bBLyPE/T6k4BCJ PYqrfuclb3vlRyIdFCqkxVG8zdMZ+kPad4g3L5pbZ+oyYOtfHfnkoGMCbBOrUdx+ cu95lqtE0zcH7Z8q7d/0BO+677R3WtQIB1bLEIFZ9RdYjqiJqe3/s7YZqZ8G3Z/y kC0Alq0qLmeh4VIoePErWrAi4hzamHBjr/ZiLYgMkiID5BmRJeCEs0a/jxM= -----END CERTIFICATE-----Generated at Sun Feb 16 22:24:06 2025 by rpki-client