$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/JrmBma1Ejx1nbKX2a8MZhdylDYk.roa File: JrmBma1Ejx1nbKX2a8MZhdylDYk.roa (raw, json) Hash identifier: OMdhcTpTHICPSjDWYbxit2B3nXm8O64bkatDY4w1Jeg= Subject key identifier: 26:B9:81:99:AD:44:8F:1D:67:6C:A5:F6:6B:C3:19:85:DC:A5:0D:89 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 06FC Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/JrmBma1Ejx1nbKX2a8MZhdylDYk.roa Signing time: Tue 30 Apr 2024 01:52:49 +0000 ROA not before: Tue 30 Apr 2024 01:52:49 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 1.75.248.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1788 (0x6fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 30 01:52:49 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=26B98199AD448F1D676CA5F66BC31985DCA50D89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:88:80:89:b0:bc:3d:10:60:2a:ea:78:50:2d: e6:fa:ec:bc:75:3d:1b:7f:75:30:8e:f6:46:41:fd: a3:f3:60:a0:ec:b3:c7:bb:b6:71:c8:c2:ec:d8:26: e4:4b:6b:61:8f:b4:f5:88:2b:b5:1f:3c:7f:47:eb: 05:11:bc:b7:fc:e2:31:1e:f7:7a:b4:f4:f8:7b:88: 9a:68:7c:0a:8f:71:ad:b1:b1:33:2d:90:4c:7c:ec: 74:db:87:58:b3:83:63:ac:6f:23:dd:06:c4:4b:44: 1c:08:7a:6e:38:40:cf:90:e4:52:3f:99:ab:83:dc: e7:ec:52:fe:81:82:db:58:fb:de:a8:a2:f4:1d:f9: 18:c1:5d:6b:92:44:63:5f:a9:eb:aa:8a:1d:69:56: 9c:7e:f7:60:84:81:05:83:8e:d5:aa:37:a7:6c:4d: b7:cd:52:6a:54:3e:4e:19:01:0c:46:66:9d:78:77: 82:cd:82:23:4a:55:d6:51:0b:7e:c8:c3:cc:f2:9f: dd:91:94:5c:5d:86:f8:6c:74:e7:8e:37:90:fa:ae: dc:c3:bd:a1:9e:29:7b:83:b1:af:4b:24:fa:ca:9e: 19:1e:69:03:28:0a:b6:e4:1f:7c:36:15:85:9d:06: 5a:00:4c:b1:11:31:88:9f:78:25:0b:17:6d:51:6b: bc:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:B9:81:99:AD:44:8F:1D:67:6C:A5:F6:6B:C3:19:85:DC:A5:0D:89 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/JrmBma1Ejx1nbKX2a8MZhdylDYk.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.75.248.0/22 Signature Algorithm: sha256WithRSAEncryption 59:80:93:f8:e7:53:0b:d2:49:c9:18:6f:e4:3b:38:f4:dd:2a: 10:45:23:5e:2b:48:4a:58:82:87:04:84:ab:4a:d0:9a:76:cc: d5:f7:6b:ba:a5:c4:fa:6f:16:09:93:a3:ce:93:aa:14:38:1d: 2d:ce:3a:7f:44:f9:86:bf:de:ae:02:25:01:a2:67:0a:4c:ce: c3:f6:2e:6e:ba:7a:d1:3d:38:4b:87:fe:f5:18:b6:a8:15:2f: f5:56:6a:fb:f5:ff:f3:46:41:e9:29:6f:e2:93:38:5e:3b:43: f7:e8:9a:77:67:eb:71:a5:ec:62:72:6b:be:db:b4:24:f5:33: cf:1d:95:5a:a6:5a:9b:8e:48:d5:94:56:98:48:ca:60:17:10: 8c:45:11:8a:fe:32:01:1e:89:3a:20:36:5e:e4:9e:0a:e6:80: 51:be:c5:25:14:a6:08:00:c4:0d:96:c2:05:68:1e:a5:77:16: 04:b0:cf:70:10:8a:b7:d0:ba:7d:ea:cd:05:28:62:0e:9e:d6: e9:f2:d7:72:e9:f7:a5:27:b3:dc:a8:11:87:1c:18:b7:d6:3c: 85:4f:31:32:19:de:08:85:3b:13:e8:db:33:55:b5:b5:de:ff: 03:c8:84:22:de:5d:f0:b1:8d:bb:30:11:ad:a3:0d:fc:b0:ff: c0:fe:6e:0a -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBvwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw MTUyNDlaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDI2Qjk4MTk5QUQ0NDhG MUQ2NzZDQTVGNjZCQzMxOTg1RENBNTBEODkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC3iICJsLw9EGAq6nhQLeb67Lx1PRt/dTCO9kZB/aPzYKDss8e7 tnHIwuzYJuRLa2GPtPWIK7UfPH9H6wURvLf84jEe93q09Ph7iJpofAqPca2xsTMt kEx87HTbh1izg2OsbyPdBsRLRBwIem44QM+Q5FI/mauD3OfsUv6BgttY+96oovQd +RjBXWuSRGNfqeuqih1pVpx+92CEgQWDjtWqN6dsTbfNUmpUPk4ZAQxGZp14d4LN giNKVdZRC37Iw8zyn92RlFxdhvhsdOeON5D6rtzDvaGeKXuDsa9LJPrKnhkeaQMo CrbkH3w2FYWdBloATLERMYifeCULF21Ra7x3AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUJrmBma1Ejx1nbKX2a8MZhdylDYkwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0pybUJtYTFFangxbmJLWDJhOE1aaGR5bERZay5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIBS/gwDQYJKoZIhvcNAQELBQADggEBAFmAk/jnUwvSSckYb+Q7OPTdKhBF I14rSEpYgocEhKtK0Jp2zNX3a7qlxPpvFgmTo86TqhQ4HS3OOn9E+Ya/3q4CJQGi ZwpMzsP2Lm66etE9OEuH/vUYtqgVL/VWavv1//NGQekpb+KTOF47Q/fomndn63Gl 7GJya77btCT1M88dlVqmWpuOSNWUVphIymAXEIxFEYr+MgEeiTogNl7kngrmgFG+ xSUUpggAxA2WwgVoHqV3FgSwz3AQirfQun3qzQUoYg6e1uny13Lp96Uns9yoEYcc GLfWPIVPMTIZ3giFOxPo2zNVtbXe/wPIhCLeXfCxjbswEa2jDfyw/8D+bgo= -----END CERTIFICATE-----Generated at Sun Feb 16 22:20:24 2025 by rpki-client