$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/NzX-zp3VqdEiq5k4yNWbc9fjcZ8.roa File: NzX-zp3VqdEiq5k4yNWbc9fjcZ8.roa (raw, json) Hash identifier: Q9rJ7JMLzl3yeyyyQzAthCxv9Ht4FLjQxLbgJopVlJo= Subject key identifier: 37:35:FE:CE:9D:D5:A9:D1:22:AB:99:38:C8:D5:9B:73:D7:E3:71:9F Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0ABB Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/NzX-zp3VqdEiq5k4yNWbc9fjcZ8.roa Signing time: Wed 31 Jul 2024 01:28:56 +0000 ROA not before: Wed 31 Jul 2024 01:28:56 +0000 ROA not after: Tue 15 Jul 2025 01:30:02 +0000 asID: 9605 IP address blocks: 49.109.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 22:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2747 (0xabb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jul 31 01:28:56 2024 GMT Not After : Jul 15 01:30:02 2025 GMT Subject: CN=3735FECE9DD5A9D122AB9938C8D59B73D7E3719F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:31:47:06:29:5a:e4:d7:80:ba:c8:4e:eb:e2: 76:32:b9:0d:ee:7f:6a:43:49:a7:85:27:93:6d:33: 28:9f:3e:57:c4:d7:9e:ca:e7:89:25:fc:6c:32:04: f8:32:98:15:01:26:29:1c:2b:c4:b7:88:00:7b:5b: fd:3b:f4:48:2b:c3:ac:d5:bc:9d:7c:f5:0a:bc:00: e3:cd:f6:9f:d9:36:0c:4e:75:56:c7:fc:ca:7f:f0: a3:28:30:11:60:21:7c:f6:18:05:a1:25:34:99:3c: 6f:f8:db:3c:68:8b:95:59:fd:57:df:87:b7:93:6e: 98:e9:28:48:33:6a:34:e7:03:ac:9e:c8:82:34:6d: 9a:96:89:35:14:cb:f5:e5:bf:8f:10:a2:a2:95:91: ce:aa:38:a6:1f:5f:8c:7f:72:20:b6:90:85:15:44: 55:6f:1d:2b:88:05:95:b9:b6:10:06:c1:12:93:be: fc:dc:1b:e6:a5:ff:ed:23:d9:4c:f8:58:2f:10:4d: 22:e0:09:43:a5:41:fa:32:10:77:a3:6e:15:fe:cc: ec:65:ce:56:48:d1:f8:18:35:01:db:54:cd:2f:1d: 94:2f:5c:b1:0e:e2:d4:d3:65:e6:95:ca:15:5a:db: 77:4d:14:5b:9b:f5:74:29:91:20:07:e9:d4:5a:9c: 40:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:35:FE:CE:9D:D5:A9:D1:22:AB:99:38:C8:D5:9B:73:D7:E3:71:9F X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/NzX-zp3VqdEiq5k4yNWbc9fjcZ8.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.109.16.0/20 Signature Algorithm: sha256WithRSAEncryption 70:ab:bc:3e:60:d4:aa:d9:3b:e2:90:7a:94:b2:0b:ed:36:81: 7f:16:85:e0:2f:89:7c:c4:a2:41:38:d7:05:b5:9f:39:70:6d: 27:89:b0:7e:1e:ed:ec:65:18:d8:5e:f1:d2:bc:7c:b6:8d:3b: cb:56:f2:c2:9a:f0:c5:ae:f1:30:25:ed:95:42:42:82:fb:9b: 39:ec:66:bf:9f:0b:13:0c:aa:2b:dc:d9:64:a0:5a:9e:a6:f9: 3a:af:95:75:93:3b:cd:50:a7:88:f3:e9:6e:99:53:70:92:c3: f4:30:77:9c:3c:d8:6d:9e:cc:d2:49:96:5c:9f:1d:35:4e:aa: fa:1c:87:95:2f:13:55:0e:cf:9f:aa:42:05:aa:1a:6b:56:d0: 78:72:55:54:5c:ff:61:d8:5f:65:1e:6a:56:70:e1:73:65:cb: 29:9a:0e:92:8a:ea:e9:53:f7:db:d2:7d:e8:bd:6e:5d:54:fe: 98:e0:52:b7:6a:c0:4b:12:51:95:9d:0a:96:b9:ee:de:0a:3b: f8:ea:35:8b:c8:bb:6f:1d:73:aa:7a:dd:1b:a9:d1:f8:5f:cd: 6e:59:37:42:a0:3d:f1:0c:d1:a7:c0:72:5c:95:fa:ef:fb:46: 37:13:a1:9d:bf:a9:21:58:ec:b8:73:81:83:ea:60:54:ef:92: f9:24:ae:9b -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCrswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA3MzEw MTI4NTZaFw0yNTA3MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDM3MzVGRUNFOURENUE5 RDEyMkFCOTkzOEM4RDU5QjczRDdFMzcxOUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCgMUcGKVrk14C6yE7r4nYyuQ3uf2pDSaeFJ5NtMyifPlfE157K 54kl/GwyBPgymBUBJikcK8S3iAB7W/079Egrw6zVvJ189Qq8AOPN9p/ZNgxOdVbH /Mp/8KMoMBFgIXz2GAWhJTSZPG/42zxoi5VZ/Vffh7eTbpjpKEgzajTnA6yeyII0 bZqWiTUUy/Xlv48QoqKVkc6qOKYfX4x/ciC2kIUVRFVvHSuIBZW5thAGwRKTvvzc G+al/+0j2Uz4WC8QTSLgCUOlQfoyEHejbhX+zOxlzlZI0fgYNQHbVM0vHZQvXLEO 4tTTZeaVyhVa23dNFFub9XQpkSAH6dRanED9AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUNzX+zp3VqdEiq5k4yNWbc9fjcZ8wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L056WC16cDNWcWRFaXE1azR5TldiYzlmamNaOC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQxbRAwDQYJKoZIhvcNAQELBQADggEBAHCrvD5g1KrZO+KQepSyC+02gX8W heAviXzEokE41wW1nzlwbSeJsH4e7exlGNhe8dK8fLaNO8tW8sKa8MWu8TAl7ZVC QoL7mznsZr+fCxMMqivc2WSgWp6m+TqvlXWTO81Qp4jz6W6ZU3CSw/Qwd5w82G2e zNJJllyfHTVOqvoch5UvE1UOz5+qQgWqGmtW0HhyVVRc/2HYX2UealZw4XNlyyma DpKK6ulT99vSfei9bl1U/pjgUrdqwEsSUZWdCpa57t4KO/jqNYvIu28dc6p63Rup 0fhfzW5ZN0KgPfEM0afAclyV+u/7RjcToZ2/qSFY7LhzgYPqYFTvkvkkrps= -----END CERTIFICATE-----Generated at Mon Nov 25 23:54:41 2024 by rpki-client on console-ams.rpki-client.org