$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Ma9Y0sMP2mwe46rE_buDiv1ahn0.roa File: Ma9Y0sMP2mwe46rE_buDiv1ahn0.roa (raw, json) Hash identifier: 4Perp0YPMrezwgL6IlkXpIgEBB8E1GAcXttuR1H5QHI= Subject key identifier: 31:AF:58:D2:C3:0F:DA:6C:1E:E3:AA:C4:FD:BB:83:8A:FD:5A:86:7D Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0B30 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Ma9Y0sMP2mwe46rE_buDiv1ahn0.roa Signing time: Fri 31 Jan 2025 01:38:06 +0000 ROA not before: Fri 31 Jan 2025 01:38:06 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.97.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2864 (0xb30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jan 31 01:38:06 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=31AF58D2C30FDA6C1EE3AAC4FDBB838AFD5A867D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:2d:eb:14:0b:a2:0a:4d:77:df:89:b4:6f:6c: d7:86:0e:7b:85:7b:db:39:0c:c4:31:68:8b:48:ba: 28:70:a7:b0:94:fa:79:f2:22:0b:71:9c:aa:15:91: 97:b2:2e:96:b0:f0:4d:54:f0:f3:c8:5c:a0:54:f9: eb:69:79:18:63:27:a0:c6:77:a8:f3:9d:3f:a9:45: 25:c1:37:b1:8c:33:3e:44:cb:5b:b1:f0:9e:be:d0: aa:5e:81:a4:10:8f:c2:49:c5:92:01:2f:9d:a8:3f: c4:1a:08:81:2e:e4:c4:d9:f4:75:f8:26:65:5e:af: 30:6c:4f:09:bc:e2:d1:1f:80:89:8f:9c:15:41:de: 34:af:f2:74:e0:ac:b2:57:7a:31:a0:08:ea:54:5b: 0e:e1:47:14:80:dd:a6:c3:66:1e:c9:56:a9:9a:55: f0:fa:b7:ac:db:b2:81:95:30:8b:e5:4b:37:f7:03: 91:06:44:50:63:38:b7:23:33:35:41:b5:d1:03:52: f9:86:32:19:a4:0f:1c:26:58:de:03:a0:3f:a2:08: d3:3b:92:54:70:e1:6c:7c:e1:6e:cd:97:9c:37:45: c1:42:8c:ce:8e:f4:44:b7:bf:9c:c5:7c:73:8d:d0: 86:e3:d2:43:3c:98:0a:49:c4:ee:4b:7f:be:f9:f8: 40:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:AF:58:D2:C3:0F:DA:6C:1E:E3:AA:C4:FD:BB:83:8A:FD:5A:86:7D X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Ma9Y0sMP2mwe46rE_buDiv1ahn0.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.97.20.0/22 Signature Algorithm: sha256WithRSAEncryption 15:74:5f:0e:67:b0:cd:03:0e:10:eb:89:e1:5f:92:c8:41:c5: cc:16:03:7f:da:8b:85:f1:96:d6:7c:39:7c:48:a8:dc:db:98: 4a:b0:cf:d2:96:c1:fb:64:2e:40:da:4c:00:05:8d:67:42:b8: c4:2f:9f:be:da:8c:a6:73:e2:af:cd:50:87:c5:2d:3c:69:c3: e8:3d:90:ae:26:4d:94:73:99:ee:6b:94:b2:75:fc:53:23:1f: 64:c4:7a:ce:d5:19:f7:7c:63:16:ee:7e:7c:a6:5f:07:22:31: 5f:14:72:3b:49:1f:4d:c3:50:c2:3e:ba:ce:cc:71:0c:54:23: fa:38:ed:fb:fe:83:3d:d8:f8:f9:7c:80:a4:96:94:2d:0a:54: 94:15:a5:b0:00:8c:d9:93:0b:29:e8:34:71:ce:2a:83:3d:0f: 49:eb:fd:15:a2:b4:8e:32:9b:31:4e:f8:2e:31:ca:91:e6:25: 81:52:ca:94:e2:a8:65:d5:60:05:53:86:b1:a8:8d:cf:1e:84: 59:cf:6e:3a:c4:fa:9a:e4:65:62:db:00:3a:ba:8f:1e:97:c3: 7a:9d:24:cc:07:95:45:47:a7:5e:1e:db:1a:00:0a:98:55:3d: b9:fa:43:bb:8b:6f:b8:75:33:20:a4:17:06:36:0b:3c:21:cf: b4:19:bd:72 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCzAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTAxMzEw MTM4MDZaFw0yNjAxMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDMxQUY1OEQyQzMwRkRB NkMxRUUzQUFDNEZEQkI4MzhBRkQ1QTg2N0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDULesUC6IKTXffibRvbNeGDnuFe9s5DMQxaItIuihwp7CU+nny IgtxnKoVkZeyLpaw8E1U8PPIXKBU+etpeRhjJ6DGd6jznT+pRSXBN7GMMz5Ey1ux 8J6+0KpegaQQj8JJxZIBL52oP8QaCIEu5MTZ9HX4JmVerzBsTwm84tEfgImPnBVB 3jSv8nTgrLJXejGgCOpUWw7hRxSA3abDZh7JVqmaVfD6t6zbsoGVMIvlSzf3A5EG RFBjOLcjMzVBtdEDUvmGMhmkDxwmWN4DoD+iCNM7klRw4Wx84W7Nl5w3RcFCjM6O 9ES3v5zFfHON0Ibj0kM8mApJxO5Lf775+EAlAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUMa9Y0sMP2mwe46rE/buDiv1ahn0wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L01hOVkwc01QMm13ZTQ2ckVfYnVEaXYxYWhuMC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIxYRQwDQYJKoZIhvcNAQELBQADggEBABV0Xw5nsM0DDhDrieFfkshBxcwW A3/ai4XxltZ8OXxIqNzbmEqwz9KWwftkLkDaTAAFjWdCuMQvn77ajKZz4q/NUIfF LTxpw+g9kK4mTZRzme5rlLJ1/FMjH2TEes7VGfd8YxbufnymXwciMV8UcjtJH03D UMI+us7McQxUI/o47fv+gz3Y+Pl8gKSWlC0KVJQVpbAAjNmTCynoNHHOKoM9D0nr /RWitI4ymzFO+C4xypHmJYFSypTiqGXVYAVThrGojc8ehFnPbjrE+prkZWLbADq6 jx6Xw3qdJMwHlUVHp14e2xoACphVPbn6Q7uLb7h1MyCkFwY2Czwhz7QZvXI= -----END CERTIFICATE-----Generated at Wed Feb 19 22:41:22 2025 by rpki-client