$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/QD-Wl0iVZ0zr4n8HNl0YXfJNmuw.roa File: QD-Wl0iVZ0zr4n8HNl0YXfJNmuw.roa (raw, json) Hash identifier: snDiLnN4vL8f9p1W7FLktrKAM/Ys8FPve4GO71g+XJ8= Subject key identifier: 40:3F:96:97:48:95:67:4C:EB:E2:7F:07:36:5D:18:5D:F2:4D:9A:EC Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 09D5 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/QD-Wl0iVZ0zr4n8HNl0YXfJNmuw.roa Signing time: Sun 30 Jun 2024 01:40:31 +0000 ROA not before: Sun 30 Jun 2024 01:40:31 +0000 ROA not after: Tue 24 Jun 2025 10:46:45 +0000 asID: 9605 IP address blocks: 220.159.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2517 (0x9d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 30 01:40:31 2024 GMT Not After : Jun 24 10:46:45 2025 GMT Subject: CN=403F96974895674CEBE27F07365D185DF24D9AEC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:12:85:c4:f2:16:12:d8:bf:da:4e:b5:ba:0d: 51:c4:5a:b8:c5:0a:7c:e1:2b:e7:ff:a1:73:63:37: 5b:3f:99:91:10:5c:37:e8:70:52:ef:56:6c:75:d6: 47:31:5c:4d:1e:5e:ca:16:0f:29:af:d5:5b:88:57: eb:ca:8f:b4:53:e4:44:42:4f:48:a3:cf:ab:9c:1d: 26:60:8c:13:1f:d4:07:db:7d:c9:42:51:73:0c:63: 75:60:07:aa:ab:37:8f:09:b4:a4:01:f4:8f:05:e6: 11:6b:55:71:2a:57:46:1d:6f:fb:e7:60:56:5c:eb: dd:dc:da:ac:8a:cf:a3:3d:25:08:2f:ae:54:df:49: cc:c5:a8:56:19:71:7f:ea:90:dd:3f:1b:a6:0f:82: 89:54:59:ff:44:9e:dd:20:b9:fd:d4:bf:25:52:a6: 1f:df:d0:d4:39:d4:a3:fc:8e:8a:bf:96:b4:e5:96: 61:de:5c:d2:d0:74:27:5c:63:08:b8:44:f7:62:d5: c1:c1:ba:f0:46:e2:74:af:e3:b8:51:8a:0a:57:00: f6:34:a6:82:18:d3:be:44:3f:62:ad:17:56:70:c9: 88:01:41:0a:22:f5:17:fd:1c:57:63:76:ef:c4:ce: a0:ea:3e:1b:af:a5:97:84:4e:00:11:0f:90:8c:73: 45:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:3F:96:97:48:95:67:4C:EB:E2:7F:07:36:5D:18:5D:F2:4D:9A:EC X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/QD-Wl0iVZ0zr4n8HNl0YXfJNmuw.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 220.159.251.0/24 Signature Algorithm: sha256WithRSAEncryption 50:d8:17:73:be:96:36:a8:22:ac:1f:15:52:e9:41:09:d7:61: 77:21:26:03:99:7e:c6:1d:0b:9c:e8:18:a3:52:e5:4c:45:c6: 62:c4:e6:7a:32:52:49:25:93:e5:31:6c:42:f2:86:cd:d1:1c: a4:96:a0:5b:0c:cf:02:e7:c9:37:3b:38:bb:18:18:ae:6d:6e: 77:43:3d:85:0f:fe:6a:30:0b:d7:14:df:39:be:bc:fe:40:51: 95:f5:f6:63:3c:13:a1:a8:2f:e5:7d:99:98:88:3c:17:81:f8: 9e:ec:e9:64:cf:7e:07:e8:e1:f1:42:c6:ac:ef:7e:09:b9:dc: a8:f9:4a:f7:e6:71:4b:07:a1:c3:5e:15:94:37:e6:5d:2b:04: 47:4c:d6:a9:c6:27:94:c3:e1:bd:65:5f:49:f4:cc:1a:2d:65: c4:de:fa:f8:6f:df:7e:f5:6d:ec:14:d8:be:cf:39:11:0b:c5: 2a:69:bf:75:78:9c:e9:77:d0:b7:49:9a:a8:62:69:ac:40:ea: ee:1c:eb:72:63:e4:ba:3f:c5:54:ce:4e:d3:32:61:67:77:bf: 5d:6a:96:ca:8b:7a:39:68:03:de:89:c5:99:1f:e2:97:e2:23: 9c:44:cd:9b:55:7c:47:ea:9c:4f:a8:56:15:d0:e7:17:84:39: b5:b8:4c:25 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCdUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA2MzAw MTQwMzFaFw0yNTA2MjQxMDQ2NDVaMDMxMTAvBgNVBAMTKDQwM0Y5Njk3NDg5NTY3 NENFQkUyN0YwNzM2NUQxODVERjI0RDlBRUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCuEoXE8hYS2L/aTrW6DVHEWrjFCnzhK+f/oXNjN1s/mZEQXDfo cFLvVmx11kcxXE0eXsoWDymv1VuIV+vKj7RT5ERCT0ijz6ucHSZgjBMf1AfbfclC UXMMY3VgB6qrN48JtKQB9I8F5hFrVXEqV0Ydb/vnYFZc693c2qyKz6M9JQgvrlTf SczFqFYZcX/qkN0/G6YPgolUWf9Ent0guf3UvyVSph/f0NQ51KP8joq/lrTllmHe XNLQdCdcYwi4RPdi1cHBuvBG4nSv47hRigpXAPY0poIY075EP2KtF1ZwyYgBQQoi 9Rf9HFdjdu/EzqDqPhuvpZeETgARD5CMc0WdAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUQD+Wl0iVZ0zr4n8HNl0YXfJNmuwwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1FELVdsMGlWWjB6cjRuOEhObDBZWGZKTm11dy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADcn/swDQYJKoZIhvcNAQELBQADggEBAFDYF3O+ljaoIqwfFVLpQQnXYXch JgOZfsYdC5zoGKNS5UxFxmLE5noyUkklk+UxbELyhs3RHKSWoFsMzwLnyTc7OLsY GK5tbndDPYUP/mowC9cU3zm+vP5AUZX19mM8E6GoL+V9mZiIPBeB+J7s6WTPfgfo 4fFCxqzvfgm53Kj5SvfmcUsHocNeFZQ35l0rBEdM1qnGJ5TD4b1lX0n0zBotZcTe +vhv3371bewU2L7PORELxSppv3V4nOl30LdJmqhiaaxA6u4c63Jj5Lo/xVTOTtMy YWd3v11qlsqLejloA96JxZkf4pfiI5xEzZtVfEfqnE+oVhXQ5xeEObW4TCU= -----END CERTIFICATE-----Generated at Sun Feb 16 22:14:17 2025 by rpki-client