$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Lk-4GMNX0D_ACTC8VKQ4RWMWTuI.roa File: Lk-4GMNX0D_ACTC8VKQ4RWMWTuI.roa (raw, json) Hash identifier: kYArsW+RINFogx3/aGxTvRjdvIG2kY+KohEHaWjP2SA= Subject key identifier: 2E:4F:B8:18:C3:57:D0:3F:C0:09:30:BC:54:A4:38:45:63:16:4E:E2 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 08C8 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Lk-4GMNX0D_ACTC8VKQ4RWMWTuI.roa Signing time: Tue 30 Apr 2024 02:24:36 +0000 ROA not before: Tue 30 Apr 2024 02:24:36 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 49.97.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2248 (0x8c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 30 02:24:36 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=2E4FB818C357D03FC00930BC54A4384563164EE2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:80:25:ee:30:cc:52:8e:d0:f2:bc:88:62:38: a4:a7:8a:cd:2e:9a:62:29:e0:8c:cc:52:31:89:81: 34:3e:5b:1a:e6:fe:3b:cd:83:49:77:aa:40:af:a3: dc:f0:37:45:a7:e4:4d:50:05:de:ae:f6:79:aa:88: 77:fe:d5:a5:46:37:02:1c:4b:b4:6b:b5:c4:b6:82: de:f5:bf:e5:45:98:97:ee:bd:0e:5b:ce:80:42:c5: 5a:8a:c5:e2:25:49:ce:ec:8c:29:65:78:48:a5:29: e9:df:2a:a2:cd:a9:1f:55:57:78:62:3a:33:13:45: be:27:51:00:5f:1c:86:c4:60:36:f1:2c:a8:5b:e9: 55:91:f2:f7:b5:a2:c7:43:7a:51:66:a3:da:83:39: f9:b1:6a:7e:38:44:10:21:26:65:0c:51:4d:39:89: ee:76:d3:4a:e9:b8:43:42:b0:c0:46:89:73:dd:e7: e5:0a:70:bc:14:87:a7:c6:51:dc:69:f6:a0:e5:17: eb:cd:c1:d2:93:94:12:4f:dd:73:ac:e5:d6:44:66: a4:9c:17:5c:37:66:0a:15:b8:22:12:d4:cf:2f:35: ae:09:4a:7e:05:6f:ca:34:9c:d1:c0:ec:e9:2a:d1: d6:b8:69:a9:92:36:c4:9f:f7:fa:44:02:ae:4a:81: 51:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:4F:B8:18:C3:57:D0:3F:C0:09:30:BC:54:A4:38:45:63:16:4E:E2 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Lk-4GMNX0D_ACTC8VKQ4RWMWTuI.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.97.86.0/24 Signature Algorithm: sha256WithRSAEncryption 04:2e:d2:da:b3:a1:8c:7b:6d:da:42:b8:94:f6:c6:1c:24:69: 4b:b1:36:2f:94:ea:64:99:3c:ac:67:e3:bc:be:07:1f:ee:5c: a7:a1:19:a7:9a:9e:c2:17:31:cf:fd:9c:25:f7:40:a2:ec:34: 36:25:3b:9e:30:f9:79:a9:fb:1e:50:a6:ba:db:be:ed:3c:cc: 62:e3:89:23:ea:c9:b7:e7:42:47:46:63:0c:75:27:d6:20:75: 1f:cb:45:32:0f:de:8a:ec:b0:ca:03:e8:24:5c:ab:05:6f:ba: 29:e3:ff:51:60:e6:24:0f:ab:d5:2e:14:e7:2d:fe:04:f0:f1: ea:4a:81:b1:95:32:6c:f9:8a:ff:d4:ab:a2:45:f3:ad:c9:e1: 8b:eb:91:ab:b1:2a:12:4e:68:79:f0:3b:0e:c8:c1:de:12:a9: fd:02:40:e2:99:ed:ef:78:a7:62:0c:42:98:58:ef:60:2e:f1: 7a:88:1d:af:21:a6:3f:d7:65:a8:06:22:00:09:71:36:cd:fc: e1:20:82:b7:d7:da:f2:3f:ad:3a:5e:f7:38:95:f0:e0:de:42: 6f:92:ce:05:b9:07:6c:2b:9b:93:6f:fc:be:2f:5d:6d:2d:e1: c3:e7:35:05:56:62:d8:fa:1b:75:fd:d2:14:65:cf:71:f1:5e: a5:e6:41:8b -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCMgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw MjI0MzZaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDJFNEZCODE4QzM1N0Qw M0ZDMDA5MzBCQzU0QTQzODQ1NjMxNjRFRTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCtgCXuMMxSjtDyvIhiOKSnis0ummIp4IzMUjGJgTQ+Wxrm/jvN g0l3qkCvo9zwN0Wn5E1QBd6u9nmqiHf+1aVGNwIcS7RrtcS2gt71v+VFmJfuvQ5b zoBCxVqKxeIlSc7sjClleEilKenfKqLNqR9VV3hiOjMTRb4nUQBfHIbEYDbxLKhb 6VWR8ve1osdDelFmo9qDOfmxan44RBAhJmUMUU05ie5200rpuENCsMBGiXPd5+UK cLwUh6fGUdxp9qDlF+vNwdKTlBJP3XOs5dZEZqScF1w3ZgoVuCIS1M8vNa4JSn4F b8o0nNHA7Okq0da4aamSNsSf9/pEAq5KgVEpAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQULk+4GMNX0D/ACTC8VKQ4RWMWTuIwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0xrLTRHTU5YMERfQUNUQzhWS1E0UldNV1R1SS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAxYVYwDQYJKoZIhvcNAQELBQADggEBAAQu0tqzoYx7bdpCuJT2xhwkaUux Ni+U6mSZPKxn47y+Bx/uXKehGaeansIXMc/9nCX3QKLsNDYlO54w+Xmp+x5Qprrb vu08zGLjiSPqybfnQkdGYwx1J9YgdR/LRTIP3orssMoD6CRcqwVvuinj/1Fg5iQP q9UuFOct/gTw8epKgbGVMmz5iv/Uq6JF863J4YvrkauxKhJOaHnwOw7Iwd4Sqf0C QOKZ7e94p2IMQphY72Au8XqIHa8hpj/XZagGIgAJcTbN/OEggrfX2vI/rTpe9ziV 8ODeQm+SzgW5B2wrm5Nv/L4vXW0t4cPnNQVWYtj6G3X90hRlz3HxXqXmQYs= -----END CERTIFICATE-----Generated at Sun Feb 16 22:09:54 2025 by rpki-client