$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/HWVEZI0EBRXoTI6GhRvQXh7BEdI.roa File: HWVEZI0EBRXoTI6GhRvQXh7BEdI.roa (raw, json) Hash identifier: GCaMjBzyidm1rVAlyqUSxdsz0u9UXj6gzn5+b4NfcGA= Subject key identifier: 1D:65:44:64:8D:04:05:15:E8:4C:8E:86:85:1B:D0:5E:1E:C1:11:D2 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 09C1 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/HWVEZI0EBRXoTI6GhRvQXh7BEdI.roa Signing time: Sun 30 Jun 2024 01:40:23 +0000 ROA not before: Sun 30 Jun 2024 01:40:23 +0000 ROA not after: Tue 24 Jun 2025 10:46:45 +0000 asID: 9605 IP address blocks: 220.210.100.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2497 (0x9c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 30 01:40:23 2024 GMT Not After : Jun 24 10:46:45 2025 GMT Subject: CN=1D6544648D040515E84C8E86851BD05E1EC111D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:d6:11:25:74:ac:99:d6:9a:2f:6d:ad:14:17: 1d:fd:e0:82:23:d5:05:bd:27:ce:4f:f4:32:fd:ec: cf:23:5f:9b:9d:31:51:79:2f:b5:fc:0c:f4:85:c2: 2b:4d:bc:be:78:36:84:48:5c:71:bc:40:d6:47:9d: 1c:b6:00:ee:e8:7f:54:b0:b4:fc:ac:7b:ad:f3:f5: 1c:86:8f:97:18:29:c4:e6:28:0a:46:2a:9b:88:54: 91:ef:af:15:fe:aa:f1:b3:6f:3b:f0:b1:19:b2:ca: 2e:b0:b3:e2:7a:f3:d3:cd:f8:56:9e:45:1e:00:2e: 17:0b:dd:33:7d:42:87:1c:54:13:8b:43:df:bc:ce: ba:f1:79:15:da:b8:28:75:c2:1e:df:0b:94:80:0e: 27:7a:71:b4:97:c8:46:38:1a:e4:59:1c:a8:e2:6b: 00:98:50:9b:60:f4:66:5e:91:71:cf:7a:3b:6b:d2: 16:59:78:ca:cb:21:06:d4:84:98:cf:f4:a5:16:ec: db:dc:db:5e:df:19:85:9e:d8:14:5a:13:b1:ff:93: cc:63:32:a0:02:d1:96:80:b4:5d:47:8a:0b:4f:77: 2c:b4:22:30:65:bd:f7:de:7e:4f:d2:d9:4a:53:90: 34:47:68:30:92:85:6f:1e:3d:95:ef:69:b4:91:ec: 40:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:65:44:64:8D:04:05:15:E8:4C:8E:86:85:1B:D0:5E:1E:C1:11:D2 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/HWVEZI0EBRXoTI6GhRvQXh7BEdI.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 220.210.100.0/22 Signature Algorithm: sha256WithRSAEncryption a9:d5:00:cd:8b:b5:a6:8c:55:a8:80:ea:43:d6:45:e7:88:83: 1f:26:2b:b6:34:a4:db:1f:3e:59:c2:e1:8e:e7:97:a5:e2:ce: de:d0:71:b6:23:1c:eb:ce:39:44:7a:33:24:94:1b:b6:c6:a4: 82:e8:f7:3d:e3:b4:82:66:b2:20:b3:94:b8:2f:ca:2c:fa:68: 28:2f:57:22:5a:1c:76:53:82:4e:1f:8e:03:58:e0:ad:cb:aa: b5:ee:a1:a3:88:d5:49:58:0c:38:a8:fe:42:da:2e:ed:30:56: 57:30:67:3b:80:8f:06:87:52:11:d5:81:11:6d:94:b5:a6:b4: 30:fe:4b:08:58:2e:f7:31:0f:26:a1:4d:3d:cb:c0:45:48:d5: 2d:4d:d5:50:62:6e:72:53:66:7d:e9:0e:09:9c:32:e9:67:36: 96:44:7b:78:40:3d:5e:c6:02:ec:70:b5:a1:92:9a:85:9d:db: ef:bb:20:3d:f7:f7:36:6a:f1:b3:98:ff:07:e0:07:c7:af:ec: f8:eb:49:38:df:56:a1:bf:85:88:d0:db:20:d3:3e:03:6f:8b: 4f:66:c4:bd:b4:a8:3b:45:19:37:23:f3:67:7e:e1:91:19:e0: 3e:c4:82:9d:56:ea:f1:af:b5:22:53:d0:9e:f0:15:0f:c3:f1: 8d:57:d9:1c -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCcEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA2MzAw MTQwMjNaFw0yNTA2MjQxMDQ2NDVaMDMxMTAvBgNVBAMTKDFENjU0NDY0OEQwNDA1 MTVFODRDOEU4Njg1MUJEMDVFMUVDMTExRDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDj1hEldKyZ1povba0UFx394IIj1QW9J85P9DL97M8jX5udMVF5 L7X8DPSFwitNvL54NoRIXHG8QNZHnRy2AO7of1SwtPyse63z9RyGj5cYKcTmKApG KpuIVJHvrxX+qvGzbzvwsRmyyi6ws+J689PN+FaeRR4ALhcL3TN9QoccVBOLQ9+8 zrrxeRXauCh1wh7fC5SADid6cbSXyEY4GuRZHKjiawCYUJtg9GZekXHPejtr0hZZ eMrLIQbUhJjP9KUW7Nvc217fGYWe2BRaE7H/k8xjMqAC0ZaAtF1HigtPdyy0IjBl vffefk/S2UpTkDRHaDCShW8ePZXvabSR7EApAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUHWVEZI0EBRXoTI6GhRvQXh7BEdIwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0hXVkVaSTBFQlJYb1RJNkdoUnZRWGg3QkVkSS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBALc0mQwDQYJKoZIhvcNAQELBQADggEBAKnVAM2LtaaMVaiA6kPWReeIgx8m K7Y0pNsfPlnC4Y7nl6Xizt7QcbYjHOvOOUR6MySUG7bGpILo9z3jtIJmsiCzlLgv yiz6aCgvVyJaHHZTgk4fjgNY4K3LqrXuoaOI1UlYDDio/kLaLu0wVlcwZzuAjwaH UhHVgRFtlLWmtDD+SwhYLvcxDyahTT3LwEVI1S1N1VBibnJTZn3pDgmcMulnNpZE e3hAPV7GAuxwtaGSmoWd2++7ID339zZq8bOY/wfgB8ev7PjrSTjfVqG/hYjQ2yDT PgNvi09mxL20qDtFGTcj82d+4ZEZ4D7Egp1W6vGvtSJT0J7wFQ/D8Y1X2Rw= -----END CERTIFICATE-----Generated at Sun Feb 16 22:21:17 2025 by rpki-client