$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/JumbGd3iD3CAl6ZWIXQx38PxBvU.roa File: JumbGd3iD3CAl6ZWIXQx38PxBvU.roa (raw, json) Hash identifier: DyZr1+HO2okZWZgi0iC3gwiyA0g0FMzfLkbKQOFHzOU= Subject key identifier: 26:E9:9B:19:DD:E2:0F:70:80:97:A6:56:21:74:31:DF:C3:F1:06:F5 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0B16 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/JumbGd3iD3CAl6ZWIXQx38PxBvU.roa Signing time: Fri 31 Jan 2025 01:34:29 +0000 ROA not before: Fri 31 Jan 2025 01:34:29 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.97.104.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Feb 2025 20:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2838 (0xb16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jan 31 01:34:29 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=26E99B19DDE20F708097A656217431DFC3F106F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:66:c1:a4:1a:37:29:c2:92:5a:98:a2:39:c6: 4a:d0:b5:1e:15:ea:e2:69:c1:2e:5b:c9:cd:fb:85: 7b:5d:99:0a:78:ca:51:c7:2b:7c:d9:13:bd:1f:85: 04:63:ca:92:b7:73:86:3b:62:f1:91:6f:37:35:2e: b7:48:06:2a:53:69:15:18:f1:2b:df:f3:07:9c:3f: 8a:34:e1:7d:9a:9e:8e:a8:31:70:2c:ec:ab:ff:78: 44:1e:59:f9:0d:53:35:14:a5:4d:ea:80:b7:62:16: a6:0c:13:e6:c0:9d:c6:03:00:52:81:bb:00:bf:a5: ac:1b:18:c4:16:7f:e3:a9:1a:8e:33:c4:aa:36:45: c3:f5:2a:9e:8a:8e:d4:3a:32:8a:ab:b4:1f:c0:ac: f9:fa:b1:4b:3a:f0:3e:d0:ab:b5:9e:e7:85:2c:d9: df:6f:80:bc:5e:d4:8c:f4:c6:81:41:8b:8d:25:10: 6e:d9:4d:22:7e:97:76:5c:af:f1:17:71:51:b3:82: 4f:26:ca:bc:9d:e4:fc:4f:9a:e1:a7:10:a2:d4:14: 35:74:69:66:cf:a8:b2:94:9d:95:0e:26:58:c8:bc: d5:b8:81:a9:59:6a:a7:6b:73:d7:08:5f:21:3d:99: 59:a6:16:56:e3:6f:aa:a7:63:4d:82:4d:a3:bc:29: 11:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:E9:9B:19:DD:E2:0F:70:80:97:A6:56:21:74:31:DF:C3:F1:06:F5 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/JumbGd3iD3CAl6ZWIXQx38PxBvU.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.97.104.0/23 Signature Algorithm: sha256WithRSAEncryption 44:8a:f2:07:b2:fa:b0:fc:66:c4:d8:18:04:67:da:af:11:79: 37:8a:53:de:c5:c0:82:a8:01:4a:a1:b3:65:56:b2:22:3d:15: de:6b:bc:56:6a:73:a1:8a:61:a5:ca:18:bc:a7:ae:1d:6d:e9: e9:10:6c:7f:a1:d7:7c:c8:58:f4:a5:00:36:5f:8b:9c:2c:42: 9b:7c:b6:b8:fd:33:a6:b7:64:b4:7d:cb:27:14:b7:5b:f2:39: 64:93:55:99:d6:ce:af:98:6e:ec:c9:90:93:42:94:56:5f:8a: c4:39:92:32:06:99:c6:99:c0:a1:84:b7:32:0f:a3:d0:c1:eb: 30:1a:43:90:02:79:bb:e2:a0:d2:cf:b6:a7:3b:f3:74:8c:68: 88:40:ec:fc:79:b0:20:0a:e5:a2:27:c1:03:c0:b9:2e:54:2e: 0d:6d:7e:46:f8:e2:b4:7c:98:c2:e9:30:de:bb:ea:90:5b:11: aa:f2:b1:4f:eb:08:bb:d8:de:ec:35:00:60:fd:25:c9:a2:6b: d5:f0:c5:01:47:04:42:47:b5:ea:a4:fc:44:65:e7:89:2e:d1: 34:72:48:c6:ad:f0:1a:a7:47:79:71:d5:b7:77:ad:77:fb:81: 2a:0f:44:57:80:0b:23:8f:85:45:2a:c6:38:0d:8f:f4:13:f5: ed:4a:7c:88 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCxYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTAxMzEw MTM0MjlaFw0yNjAxMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDI2RTk5QjE5RERFMjBG NzA4MDk3QTY1NjIxNzQzMURGQzNGMTA2RjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCiZsGkGjcpwpJamKI5xkrQtR4V6uJpwS5byc37hXtdmQp4ylHH K3zZE70fhQRjypK3c4Y7YvGRbzc1LrdIBipTaRUY8Svf8wecP4o04X2ano6oMXAs 7Kv/eEQeWfkNUzUUpU3qgLdiFqYME+bAncYDAFKBuwC/pawbGMQWf+OpGo4zxKo2 RcP1Kp6KjtQ6MoqrtB/ArPn6sUs68D7Qq7We54Us2d9vgLxe1Iz0xoFBi40lEG7Z TSJ+l3Zcr/EXcVGzgk8myryd5PxPmuGnEKLUFDV0aWbPqLKUnZUOJljIvNW4galZ aqdrc9cIXyE9mVmmFlbjb6qnY02CTaO8KRHjAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUJumbGd3iD3CAl6ZWIXQx38PxBvUwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0p1bWJHZDNpRDNDQWw2WldJWFF4MzhQeEJ2VS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExYWgwDQYJKoZIhvcNAQELBQADggEBAESK8gey+rD8ZsTYGARn2q8ReTeK U97FwIKoAUqhs2VWsiI9Fd5rvFZqc6GKYaXKGLynrh1t6ekQbH+h13zIWPSlADZf i5wsQpt8trj9M6a3ZLR9yycUt1vyOWSTVZnWzq+YbuzJkJNClFZfisQ5kjIGmcaZ wKGEtzIPo9DB6zAaQ5ACebvioNLPtqc783SMaIhA7Px5sCAK5aInwQPAuS5ULg1t fkb44rR8mMLpMN676pBbEarysU/rCLvY3uw1AGD9Jcmia9XwxQFHBEJHteqk/ERl 54ku0TRySMat8BqnR3lx1bd3rXf7gSoPRFeACyOPhUUqxjgNj/QT9e1KfIg= -----END CERTIFICATE-----Generated at Wed Feb 19 22:34:20 2025 by rpki-client