$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/M94ojZWYjtOvK_4sk8FL5rqWDO0.roa File: M94ojZWYjtOvK_4sk8FL5rqWDO0.roa (raw, json) Hash identifier: 1neF5MWOiUCO57pNs4T3p5w4GAP1Zo0HTRal5mXzpJE= Subject key identifier: 33:DE:28:8D:95:98:8E:D3:AF:2B:FE:2C:93:C1:4B:E6:BA:96:0C:ED Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0740 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/M94ojZWYjtOvK_4sk8FL5rqWDO0.roa Signing time: Tue 30 Apr 2024 01:58:46 +0000 ROA not before: Tue 30 Apr 2024 01:58:46 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 49.105.92.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1856 (0x740) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 30 01:58:46 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=33DE288D95988ED3AF2BFE2C93C14BE6BA960CED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:f2:74:d5:d8:5f:c1:b1:e7:96:80:e3:9b:16: 27:18:01:1a:44:81:21:24:4c:c1:19:98:49:a9:c4: 27:f2:8b:27:4c:0e:7f:2a:c3:4f:8b:9f:3a:f5:64: 7c:d6:07:2d:ac:1b:18:28:de:a4:a6:e6:b8:cc:e0: a0:4b:11:b5:3d:c9:93:dc:80:61:5b:26:9b:0b:f3: b1:86:89:9b:8e:ed:10:15:b2:72:2e:76:ce:05:55: 2a:54:94:cf:82:18:57:f3:7a:41:eb:33:5e:4d:0f: f0:69:8a:de:7a:38:3f:62:61:8e:b0:49:78:d4:32: c1:34:d5:1f:f7:aa:e6:5e:69:0f:f8:cb:30:38:01: f2:41:6a:b5:3d:71:7a:b5:69:c0:e5:54:54:b8:95: 3e:53:b8:2a:20:e2:f4:db:a0:99:89:9d:71:c9:8c: e6:80:ab:fc:f2:c8:eb:8c:26:e5:9c:42:03:14:8e: bb:de:eb:d2:d7:a8:e9:bd:bf:2e:19:dc:c6:7b:13: 3b:d3:67:2a:ad:78:66:66:56:1f:27:9f:c0:1a:7d: c3:42:2f:25:b4:29:4e:6e:b1:99:5c:37:eb:f4:d2: 44:27:d4:c6:71:8c:b4:6e:e7:98:a6:7e:8c:25:be: a3:af:d2:d7:9e:9a:7a:d5:af:28:e0:82:05:d1:11: 58:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:DE:28:8D:95:98:8E:D3:AF:2B:FE:2C:93:C1:4B:E6:BA:96:0C:ED X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/M94ojZWYjtOvK_4sk8FL5rqWDO0.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.105.92.0/22 Signature Algorithm: sha256WithRSAEncryption 82:54:d9:41:f3:7d:79:ac:79:f8:48:a8:d7:06:b4:c8:46:5d: 45:69:fb:bc:df:98:88:8e:4b:74:18:8e:cd:62:45:8f:4b:01: 50:b2:10:d9:d9:04:d3:f4:4a:ef:7a:93:4c:09:90:b3:95:d3: da:72:5f:72:99:e5:a8:04:ee:cc:92:0e:56:62:4d:2e:e2:89: e8:55:c3:1c:a9:b2:b7:23:b2:f6:57:37:8b:13:bc:86:fa:91: 36:24:fe:d9:ed:9c:4c:de:dd:cf:d7:7f:ca:83:3c:1b:47:df: ae:3b:ff:c1:c6:51:de:13:25:a2:f4:e0:d9:c8:83:ea:c1:52: 12:00:db:7f:ef:6f:83:e3:fc:ac:65:36:bb:aa:b6:13:89:dc: 93:22:3c:f7:d8:47:d9:49:44:d7:86:2d:0d:32:ea:07:f0:55: 6a:f4:84:6f:32:35:a5:71:44:77:00:ed:c1:88:18:9e:3d:91: e6:f8:b0:25:80:eb:e3:f2:71:4d:b5:fc:46:a6:5f:d3:97:e0: cd:f4:7c:41:28:3f:33:da:0c:8f:8f:f5:5a:48:72:d8:e4:fe: f5:4e:6e:a2:7f:f0:2b:e8:19:ae:2e:57:8d:73:e4:20:68:e0: 32:c9:1f:7e:e0:30:ab:ae:35:95:78:78:bc:10:8e:71:13:ff: 61:a5:fc:af -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICB0AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw MTU4NDZaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDMzREUyODhEOTU5ODhF RDNBRjJCRkUyQzkzQzE0QkU2QkE5NjBDRUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCm8nTV2F/BseeWgOObFicYARpEgSEkTMEZmEmpxCfyiydMDn8q w0+Lnzr1ZHzWBy2sGxgo3qSm5rjM4KBLEbU9yZPcgGFbJpsL87GGiZuO7RAVsnIu ds4FVSpUlM+CGFfzekHrM15ND/Bpit56OD9iYY6wSXjUMsE01R/3quZeaQ/4yzA4 AfJBarU9cXq1acDlVFS4lT5TuCog4vTboJmJnXHJjOaAq/zyyOuMJuWcQgMUjrve 69LXqOm9vy4Z3MZ7EzvTZyqteGZmVh8nn8AafcNCLyW0KU5usZlcN+v00kQn1MZx jLRu55imfowlvqOv0teemnrVryjgggXREVgfAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUM94ojZWYjtOvK/4sk8FL5rqWDO0wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L005NG9qWldZanRPdktfNHNrOEZMNXJxV0RPMC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIxaVwwDQYJKoZIhvcNAQELBQADggEBAIJU2UHzfXmsefhIqNcGtMhGXUVp +7zfmIiOS3QYjs1iRY9LAVCyENnZBNP0Su96k0wJkLOV09pyX3KZ5agE7sySDlZi TS7iiehVwxypsrcjsvZXN4sTvIb6kTYk/tntnEze3c/Xf8qDPBtH3647/8HGUd4T JaL04NnIg+rBUhIA23/vb4Pj/KxlNruqthOJ3JMiPPfYR9lJRNeGLQ0y6gfwVWr0 hG8yNaVxRHcA7cGIGJ49keb4sCWA6+PycU21/EamX9OX4M30fEEoPzPaDI+P9VpI ctjk/vVObqJ/8CvoGa4uV41z5CBo4DLJH37gMKuuNZV4eLwQjnET/2Gl/K8= -----END CERTIFICATE-----Generated at Sun Feb 16 22:33:16 2025 by rpki-client