$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/LIGgl7aVCoyIYS_mxB8nunlbXZE.roa File: LIGgl7aVCoyIYS_mxB8nunlbXZE.roa (raw, json) Hash identifier: +BZePkPed5k78BgJJJmXY0+TVbMllv2J41Vu2yVNYAY= Subject key identifier: 2C:81:A0:97:B6:95:0A:8C:88:61:2F:E6:C4:1F:27:BA:79:5B:5D:91 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0B2C Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/LIGgl7aVCoyIYS_mxB8nunlbXZE.roa Signing time: Fri 31 Jan 2025 01:38:03 +0000 ROA not before: Fri 31 Jan 2025 01:38:03 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.97.124.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Feb 2025 20:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2860 (0xb2c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jan 31 01:38:03 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=2C81A097B6950A8C88612FE6C41F27BA795B5D91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:02:b4:d4:4c:0a:2d:9b:92:21:3a:c6:df:28: c2:d7:58:f9:b2:15:d0:ff:52:53:c4:3e:9d:18:aa: ac:6b:f0:80:0f:21:2b:a9:f0:f1:e7:5a:a9:d5:e8: ba:26:d3:e5:3e:a2:0b:a0:70:1c:29:20:1b:95:69: 9c:16:c3:9e:cc:44:ee:b5:84:1b:f3:9d:a3:a8:a1: c5:b1:28:13:a6:1f:8b:d1:be:02:31:4c:3d:dc:53: d3:fc:14:8a:59:b1:d2:ed:8c:2c:32:9b:ae:e0:0e: 2f:aa:7e:ee:3e:0a:f2:24:15:de:ad:a8:7f:a6:d4: 7d:87:da:87:24:60:c3:b8:6c:56:e3:4c:1d:4d:0f: ca:15:11:8d:fd:b3:f7:61:52:4b:b3:fb:c3:a4:57: 2b:33:22:82:42:37:f8:20:f2:da:1b:13:6d:12:95: 6d:7a:a5:80:78:f3:37:de:ea:6b:d0:33:63:5c:90: a2:2b:4f:89:3c:7c:fa:d2:e0:60:ae:98:21:b2:17: 02:6d:eb:3f:e2:33:b7:c9:a1:ae:23:e8:0c:53:19: 4a:07:82:6c:45:4a:4f:01:5a:87:52:16:22:7b:fd: fe:bf:44:46:8f:1d:4c:c2:79:ee:b4:32:d5:cb:5c: 63:5d:e0:17:5c:52:03:ab:a0:66:03:98:67:10:2f: bf:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:81:A0:97:B6:95:0A:8C:88:61:2F:E6:C4:1F:27:BA:79:5B:5D:91 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/LIGgl7aVCoyIYS_mxB8nunlbXZE.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.97.124.0/22 Signature Algorithm: sha256WithRSAEncryption 82:dc:b3:0a:6e:3c:e1:6c:93:b7:e7:71:d3:e6:df:eb:b2:9a: 2b:a5:f2:f9:ad:22:61:2f:45:0e:05:f0:b1:8b:61:ae:6c:e4: 09:83:35:31:df:63:56:f0:9a:8a:2f:b0:1a:df:35:00:f3:1e: a5:de:28:88:89:a9:3e:23:f5:3c:4f:c3:44:f2:16:6b:b7:bd: 69:d5:92:85:7f:dd:e3:37:08:91:2e:4c:28:d3:13:64:63:a3: 90:54:c3:68:ac:4f:b6:cf:a6:95:b7:61:a2:90:48:33:a5:ef: 5a:6e:25:ec:b8:21:4a:19:b3:88:24:0f:1f:22:95:90:f7:79: ec:1f:7f:1a:e8:34:ca:a8:2c:ec:be:e3:0d:2b:50:b2:94:9f: cd:c9:20:7d:b2:be:1c:fd:73:0c:6c:ee:ee:0b:b9:8f:6d:46: 19:70:23:36:27:d0:fc:83:36:9a:af:4b:62:bb:8e:13:90:26: ab:12:62:19:ed:a8:4f:a1:14:08:a1:25:b2:a7:b4:c1:80:9d: a0:06:96:e0:33:40:05:38:24:84:a1:c3:90:72:65:6a:68:f3: 3f:6c:73:7f:9d:48:38:16:19:2c:d3:62:e8:82:73:37:0e:c3: e4:33:9d:4b:5a:02:1a:b0:15:6f:99:21:c9:e9:6e:ed:95:db: aa:f3:7e:cf -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCywwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTAxMzEw MTM4MDNaFw0yNjAxMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDJDODFBMDk3QjY5NTBB OEM4ODYxMkZFNkM0MUYyN0JBNzk1QjVEOTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDMArTUTAotm5IhOsbfKMLXWPmyFdD/UlPEPp0Yqqxr8IAPISup 8PHnWqnV6Lom0+U+ogugcBwpIBuVaZwWw57MRO61hBvznaOoocWxKBOmH4vRvgIx TD3cU9P8FIpZsdLtjCwym67gDi+qfu4+CvIkFd6tqH+m1H2H2ockYMO4bFbjTB1N D8oVEY39s/dhUkuz+8OkVyszIoJCN/gg8tobE20SlW16pYB48zfe6mvQM2NckKIr T4k8fPrS4GCumCGyFwJt6z/iM7fJoa4j6AxTGUoHgmxFSk8BWodSFiJ7/f6/REaP HUzCee60MtXLXGNd4BdcUgOroGYDmGcQL7+3AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQULIGgl7aVCoyIYS/mxB8nunlbXZEwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0xJR2dsN2FWQ295SVlTX214QjhudW5sYlhaRS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIxYXwwDQYJKoZIhvcNAQELBQADggEBAILcswpuPOFsk7fncdPm3+uymiul 8vmtImEvRQ4F8LGLYa5s5AmDNTHfY1bwmoovsBrfNQDzHqXeKIiJqT4j9TxPw0Ty Fmu3vWnVkoV/3eM3CJEuTCjTE2Rjo5BUw2isT7bPppW3YaKQSDOl71puJey4IUoZ s4gkDx8ilZD3eewffxroNMqoLOy+4w0rULKUn83JIH2yvhz9cwxs7u4LuY9tRhlw IzYn0PyDNpqvS2K7jhOQJqsSYhntqE+hFAihJbKntMGAnaAGluAzQAU4JIShw5By ZWpo8z9sc3+dSDgWGSzTYuiCczcOw+QznUtaAhqwFW+ZIcnpbu2V26rzfs8= -----END CERTIFICATE-----Generated at Wed Feb 19 22:31:13 2025 by rpki-client