$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/LiUp3AaUSaz3draPxLdCddtsP7w.roa File: LiUp3AaUSaz3draPxLdCddtsP7w.roa (raw, json) Hash identifier: kcsAlEsNfGBprjUnnrJhlCQdAyLnAWKpWtoBCZEbLEA= Subject key identifier: 2E:25:29:DC:06:94:49:AC:F7:76:B6:8F:C4:B7:42:75:DB:6C:3F:BC Certificate issuer: /CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E Certificate serial: 4C Authority key identifier: F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/LiUp3AaUSaz3draPxLdCddtsP7w.roa Signing time: Sun 30 Jun 2024 01:42:23 +0000 ROA not before: Sun 30 Jun 2024 01:42:23 +0000 ROA not after: Tue 24 Jun 2025 10:46:45 +0000 asID: 9605 IP address blocks: 146.99.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76 (0x4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E Validity Not Before: Jun 30 01:42:23 2024 GMT Not After : Jun 24 10:46:45 2025 GMT Subject: CN=2E2529DC069449ACF776B68FC4B74275DB6C3FBC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:8a:89:5b:f0:1a:0a:60:a9:a6:a3:f7:49:97: 2f:4d:d4:ba:39:6f:ee:10:8f:35:19:75:f5:08:95: 96:a0:4c:ce:1c:f3:8d:6d:51:68:26:9e:46:bf:0a: 65:fd:ef:f7:fe:b7:fa:e5:c6:d5:0d:c4:ad:22:a8: 9f:f8:2c:22:87:03:c4:e8:0d:2d:bb:91:c6:25:94: 7d:03:5a:47:e4:87:6e:91:fc:da:4a:e8:67:7d:aa: 74:f7:b5:b0:0f:ab:39:2b:c0:04:81:fc:d7:80:3f: 2f:a7:04:a1:1e:c0:e7:cb:aa:96:70:e3:95:4d:fe: da:60:7a:6a:d1:35:bc:84:eb:28:04:0f:e8:7a:dc: b6:2c:a5:89:aa:e8:e6:8e:1f:e4:e6:91:a6:42:c8: be:20:45:bd:11:49:22:ce:a3:a4:4e:30:2b:51:d6: fe:eb:eb:59:41:01:24:74:ae:d4:09:ee:25:fc:c2: 75:44:3d:68:b4:01:18:7e:49:b6:cc:b3:95:bf:6b: 18:1a:86:24:1a:c7:ed:6c:07:7d:2c:b7:ff:01:81: fe:23:2c:a2:b4:b7:85:0d:09:24:12:bb:7d:e3:7d: 14:de:b8:fe:de:88:17:24:87:20:e1:3c:ac:80:2a: d4:65:e8:01:01:52:6f:ce:d4:42:9a:65:5a:46:c8: d1:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:25:29:DC:06:94:49:AC:F7:76:B6:8F:C4:B7:42:75:DB:6C:3F:BC X509v3 Authority Key Identifier: keyid:F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/LiUp3AaUSaz3draPxLdCddtsP7w.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 146.99.128.0/17 Signature Algorithm: sha256WithRSAEncryption 4e:e9:cb:d6:3b:09:2f:60:09:5c:d5:9a:da:f7:64:89:8b:7f: 61:9c:e5:0e:1c:26:24:74:21:d2:6b:b5:a0:cc:f9:32:c2:1c: bc:1c:d7:37:a0:99:ad:0c:48:57:01:20:b5:5d:29:69:3f:aa: 4f:d0:35:72:84:64:5e:8e:59:19:f6:1d:39:00:bf:86:4f:e3: 63:d0:56:7d:06:1a:94:ed:bc:b0:ea:7f:6c:61:f4:b8:d7:b8: af:e5:3a:93:69:93:c1:c6:60:ad:3b:c1:34:1d:f6:87:04:d4: 7e:31:43:6f:43:74:a8:c7:a5:73:f8:d8:53:e6:9d:36:11:16: 5d:1a:e1:f8:10:15:a1:d0:f6:2e:4b:24:47:c8:1f:7d:2f:42: 3e:33:87:c8:1e:7e:e8:d2:65:e5:b3:fb:cb:67:40:6e:96:38: 8f:42:f4:ab:a6:56:b7:8b:82:53:a9:2a:55:bf:1e:34:22:b5: a6:64:59:c6:fc:1b:50:d4:cf:87:f3:eb:ef:b3:5a:1e:1c:ee: 30:e7:c0:8c:d4:e4:8b:51:ec:0b:f2:de:b5:05:3b:c3:2c:d8: 5a:fd:05:fa:1c:50:f6:2d:14:31:6d:69:b1:f2:e9:3d:c8:19: cb:64:e7:79:0c:10:67:f9:5e:12:e1:17:91:73:42:10:7d:7a: b7:f4:76:d0 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBTDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGODlF MEYxNUMxRTIwRTE5MUFBRjE3Mjg4RjZFMzBGRjAxODY5QTZFMB4XDTI0MDYzMDAx NDIyM1oXDTI1MDYyNDEwNDY0NVowMzExMC8GA1UEAxMoMkUyNTI5REMwNjk0NDlB Q0Y3NzZCNjhGQzRCNzQyNzVEQjZDM0ZCQzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAO+KiVvwGgpgqaaj90mXL03Uujlv7hCPNRl19QiVlqBMzhzzjW1R aCaeRr8KZf3v9/63+uXG1Q3ErSKon/gsIocDxOgNLbuRxiWUfQNaR+SHbpH82kro Z32qdPe1sA+rOSvABIH814A/L6cEoR7A58uqlnDjlU3+2mB6atE1vITrKAQP6Hrc tiyliaro5o4f5OaRpkLIviBFvRFJIs6jpE4wK1HW/uvrWUEBJHSu1AnuJfzCdUQ9 aLQBGH5Jtsyzlb9rGBqGJBrH7WwHfSy3/wGB/iMsorS3hQ0JJBK7feN9FN64/t6I FySHIOE8rIAq1GXoAQFSb87UQpplWkbI0f8CAwEAAaOCAiQwggIgMB0GA1UdDgQW BBQuJSncBpRJrPd2to/Et0J122w/vDAfBgNVHSMEGDAWgBT4ng8VweIOGRqvFyiP bjD/AYaabjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzA5Ly1KNFBGY0hpRGhrYXJ4Y29qMjR3X3dHR21tNC5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLy1KNFBGY0hpRGhrYXJ4Y29qMjR3X3dH R21tNC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8zMDkvTGlVcDNBYVVTYXozZHJhUHhMZENkZHRzUDd3LnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEB5JjgDANBgkqhkiG9w0BAQsFAAOCAQEATunL1jsJL2AJXNWa2vdkiYt/YZzl DhwmJHQh0mu1oMz5MsIcvBzXN6CZrQxIVwEgtV0paT+qT9A1coRkXo5ZGfYdOQC/ hk/jY9BWfQYalO28sOp/bGH0uNe4r+U6k2mTwcZgrTvBNB32hwTUfjFDb0N0qMel c/jYU+adNhEWXRrh+BAVodD2LkskR8gffS9CPjOHyB5+6NJl5bP7y2dAbpY4j0L0 q6ZWt4uCU6kqVb8eNCK1pmRZxvwbUNTPh/Pr77NaHhzuMOfAjNTki1HsC/LetQU7 wyzYWv0F+hxQ9i0UMW1psfLpPcgZy2TneQwQZ/leEuEXkXNCEH16t/R20A== -----END CERTIFICATE-----Generated at Sun Feb 16 22:33:35 2025 by rpki-client