$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/QNTyonYLpLeK45sFrtcs3G0s_rE.roa File: QNTyonYLpLeK45sFrtcs3G0s_rE.roa (raw, json) Hash identifier: xm0HjvIRL1q6eHcVIegKdo4A9UANVScU5U/hsHYdNFA= Subject key identifier: 40:D4:F2:A2:76:0B:A4:B7:8A:E3:9B:05:AE:D7:2C:DC:6D:2C:FE:B1 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 08F8 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/QNTyonYLpLeK45sFrtcs3G0s_rE.roa Signing time: Tue 30 Apr 2024 02:26:36 +0000 ROA not before: Tue 30 Apr 2024 02:26:36 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 49.98.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2296 (0x8f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 30 02:26:36 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=40D4F2A2760BA4B78AE39B05AED72CDC6D2CFEB1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:4e:e2:84:a3:82:ed:6a:53:e0:f4:26:c1:21: fa:31:53:78:e8:a8:b6:69:f4:cf:75:84:e0:6b:b2: c8:3f:3c:52:15:b6:b4:02:8b:f5:40:70:c1:0e:e5: bd:3d:41:e1:c4:54:26:e5:a6:c7:0b:18:7f:a9:c5: 32:4f:10:bf:88:08:5f:b6:da:40:0b:59:7e:8d:c7: 36:71:1d:0e:27:1d:e9:26:43:ec:22:4d:77:a6:8d: 17:7f:90:66:a9:65:ee:8d:e5:3c:52:d1:13:66:ce: 9a:18:2e:12:b3:b5:22:46:3f:2c:0f:88:f4:78:f4: df:d4:cd:19:79:4c:53:c3:fd:fd:e3:a8:2e:8e:b0: be:30:3b:ab:86:2f:f8:6a:89:08:28:33:e6:0b:a7: ff:d6:0a:ca:20:97:75:8c:35:89:b9:b9:d1:13:44: 53:29:44:46:f2:9e:d4:ff:05:c1:42:d9:55:0a:41: ee:99:95:a4:97:a3:65:2c:2a:42:b9:27:a1:67:fd: c9:52:1a:db:d6:13:b6:d1:a9:cb:92:6e:e7:22:fe: 35:98:81:9b:0a:1c:61:78:16:8f:44:1e:cf:d1:97: 31:62:6d:b2:07:9d:6b:e3:d4:3a:bc:74:61:c5:ab: 1b:d8:78:45:47:e1:ce:48:44:df:f4:74:a9:d6:50: b2:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:D4:F2:A2:76:0B:A4:B7:8A:E3:9B:05:AE:D7:2C:DC:6D:2C:FE:B1 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/QNTyonYLpLeK45sFrtcs3G0s_rE.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.98.40.0/24 Signature Algorithm: sha256WithRSAEncryption 83:20:0c:42:ec:f8:e5:2d:d6:79:94:31:ee:38:55:80:67:29: 37:74:f8:6e:9d:d4:47:32:0e:22:0e:46:33:d1:9e:37:b7:57: 03:2f:1e:dc:2c:38:d8:e7:84:9c:f9:14:7c:eb:4b:f9:04:ac: e8:95:3e:64:a7:4e:34:f0:a8:0f:0c:31:85:bf:37:27:40:ed: 15:00:55:9e:f4:47:c8:72:6d:cd:f4:0e:6f:5b:35:ff:83:ed: c3:1e:13:66:ae:83:55:3c:76:ce:09:69:d9:d8:9b:de:5d:9d: 4e:ee:22:26:ce:46:bc:16:26:5f:29:f9:a9:e7:23:5e:3f:12: 14:1d:0f:70:da:94:56:ea:00:e8:31:eb:4f:ce:12:65:a9:83: 08:e3:32:a9:c5:47:aa:ff:e7:7d:df:f0:69:9f:5d:b2:4e:98: 87:aa:5e:8f:e4:1f:c2:91:c1:67:69:40:b5:95:15:c6:a4:f1: f2:37:3d:ff:d5:14:84:7c:f3:aa:9d:cb:a6:ef:c9:2d:24:50: d7:4d:cc:4c:33:06:be:fd:f0:87:d2:ed:9f:fd:b2:21:53:8f: ba:8c:f7:dd:42:aa:0d:30:bf:2c:0a:cd:34:7a:6b:c2:28:58: 35:92:83:4b:63:a1:97:f1:93:82:c5:5e:ba:97:a9:4a:d2:cd: 34:08:64:06 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCPgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw MjI2MzZaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDQwRDRGMkEyNzYwQkE0 Qjc4QUUzOUIwNUFFRDcyQ0RDNkQyQ0ZFQjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDnTuKEo4LtalPg9CbBIfoxU3joqLZp9M91hOBrssg/PFIVtrQC i/VAcMEO5b09QeHEVCblpscLGH+pxTJPEL+ICF+22kALWX6NxzZxHQ4nHekmQ+wi TXemjRd/kGapZe6N5TxS0RNmzpoYLhKztSJGPywPiPR49N/UzRl5TFPD/f3jqC6O sL4wO6uGL/hqiQgoM+YLp//WCsogl3WMNYm5udETRFMpREbyntT/BcFC2VUKQe6Z laSXo2UsKkK5J6Fn/clSGtvWE7bRqcuSbuci/jWYgZsKHGF4Fo9EHs/RlzFibbIH nWvj1Dq8dGHFqxvYeEVH4c5IRN/0dKnWULJBAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUQNTyonYLpLeK45sFrtcs3G0s/rEwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1FOVHlvbllMcExlSzQ1c0ZydGNzM0cwc19yRS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAxYigwDQYJKoZIhvcNAQELBQADggEBAIMgDELs+OUt1nmUMe44VYBnKTd0 +G6d1EcyDiIORjPRnje3VwMvHtwsONjnhJz5FHzrS/kErOiVPmSnTjTwqA8MMYW/ NydA7RUAVZ70R8hybc30Dm9bNf+D7cMeE2aug1U8ds4JadnYm95dnU7uIibORrwW Jl8p+annI14/EhQdD3DalFbqAOgx60/OEmWpgwjjMqnFR6r/533f8GmfXbJOmIeq Xo/kH8KRwWdpQLWVFcak8fI3Pf/VFIR886qdy6bvyS0kUNdNzEwzBr798IfS7Z/9 siFTj7qM991Cqg0wvywKzTR6a8IoWDWSg0tjoZfxk4LFXrqXqUrSzTQIZAY= -----END CERTIFICATE-----Generated at Sun Feb 16 22:24:08 2025 by rpki-client