$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/S-Cb7BIHki-Xr8eEFnYtbsg-uSY.roa File: S-Cb7BIHki-Xr8eEFnYtbsg-uSY.roa (raw, json) Hash identifier: Upbtvm5vU16KXmjGRsDM3MCPzQ6aI8cJMV1HHlUr7WA= Subject key identifier: 4B:E0:9B:EC:12:07:92:2F:97:AF:C7:84:16:76:2D:6E:C8:3E:B9:26 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0AE8 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/S-Cb7BIHki-Xr8eEFnYtbsg-uSY.roa Signing time: Fri 31 Jan 2025 01:28:29 +0000 ROA not before: Fri 31 Jan 2025 01:28:29 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.97.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2792 (0xae8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jan 31 01:28:29 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=4BE09BEC1207922F97AFC78416762D6EC83EB926 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c9:ce:c2:dd:bd:1c:eb:20:bf:3b:1b:3b:05: 29:55:33:5f:0d:2d:3c:ee:07:ad:cc:85:a2:f0:a9: 6e:e2:60:c9:62:3c:b2:1f:54:1f:8c:79:32:5f:73: 64:1e:6c:d4:5d:c0:bd:5c:2e:24:02:58:6f:58:18: 00:cb:6a:c3:5b:ac:d5:6f:3a:19:6e:49:e4:9d:9d: 3c:7b:af:1d:a9:41:41:c3:66:d1:b5:aa:f9:19:1c: 14:bd:24:80:b1:f4:c3:95:90:f0:db:ca:4c:88:e5: e0:71:60:8e:2e:21:16:7b:40:ad:be:71:2c:c4:d3: ad:21:f9:bc:a7:30:19:b6:70:4e:83:67:e5:81:a2: f3:f8:2f:b4:59:55:c0:d1:65:fa:35:f5:d2:f5:60: af:eb:e8:de:bf:f8:27:ca:15:c0:d5:bc:94:c4:2e: 10:b2:f5:52:e4:2a:b2:fb:e3:d2:11:b8:41:03:13: 93:fe:da:b8:af:91:3b:94:57:b3:aa:9a:75:a5:67: 60:89:63:fd:72:71:2b:eb:e4:01:1d:15:0f:26:fe: 62:4b:42:fa:1e:e3:71:5c:8c:b4:9d:c8:30:35:26: 3f:70:39:7e:b3:a4:72:af:24:dc:7f:c6:8b:6b:b7: 7d:f4:5f:64:89:0a:1c:58:f8:ed:23:3c:75:e4:5d: 2a:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:E0:9B:EC:12:07:92:2F:97:AF:C7:84:16:76:2D:6E:C8:3E:B9:26 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/S-Cb7BIHki-Xr8eEFnYtbsg-uSY.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.97.106.0/24 Signature Algorithm: sha256WithRSAEncryption 66:64:fd:d0:2e:24:86:da:c7:28:57:b4:45:00:69:61:7b:e1: f9:d0:5c:e3:78:0c:1e:dc:58:ff:da:95:7d:1e:17:88:37:3a: 05:27:3a:df:bf:45:25:e7:61:d1:91:ad:ae:08:f4:0e:bb:dd: c5:3d:52:23:57:9c:20:a3:66:89:53:4f:48:84:cc:fe:be:a4: 5f:24:02:83:03:97:30:31:e2:98:39:3a:30:f3:ab:be:15:2b: 55:0c:57:af:7a:fc:45:cb:ad:93:14:e3:47:43:27:a7:c8:ac: cf:f7:60:e2:83:17:12:4e:ae:c1:09:2a:44:19:35:db:91:3b: 90:6e:22:d7:cd:a6:4d:d5:34:16:66:85:34:ba:bc:ee:09:54: e1:72:76:72:09:ee:33:27:b5:53:b3:7f:0f:80:d6:40:e5:d7: 95:58:b4:37:2e:11:4a:27:ec:10:27:2c:22:b9:84:15:3b:e4: fa:9e:12:da:7a:72:44:d2:34:01:8a:f6:36:99:f9:aa:00:d1: ae:ab:8f:49:1b:60:7e:0f:4a:79:6a:0a:27:9a:b5:6a:fb:08: 5f:71:6a:3f:06:60:4c:a9:8d:ec:70:cc:9f:41:b4:fc:52:4b: c0:9f:24:a8:19:df:15:73:47:65:1c:4f:08:12:2f:78:d0:ac: b6:88:71:67 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCugwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTAxMzEw MTI4MjlaFw0yNjAxMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDRCRTA5QkVDMTIwNzky MkY5N0FGQzc4NDE2NzYyRDZFQzgzRUI5MjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDJyc7C3b0c6yC/Oxs7BSlVM18NLTzuB63MhaLwqW7iYMliPLIf VB+MeTJfc2QebNRdwL1cLiQCWG9YGADLasNbrNVvOhluSeSdnTx7rx2pQUHDZtG1 qvkZHBS9JICx9MOVkPDbykyI5eBxYI4uIRZ7QK2+cSzE060h+bynMBm2cE6DZ+WB ovP4L7RZVcDRZfo19dL1YK/r6N6/+CfKFcDVvJTELhCy9VLkKrL749IRuEEDE5P+ 2rivkTuUV7OqmnWlZ2CJY/1ycSvr5AEdFQ8m/mJLQvoe43FcjLSdyDA1Jj9wOX6z pHKvJNx/xotrt330X2SJChxY+O0jPHXkXSorAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUS+Cb7BIHki+Xr8eEFnYtbsg+uSYwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1MtQ2I3QklIa2ktWHI4ZUVGbll0YnNnLXVTWS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAxYWowDQYJKoZIhvcNAQELBQADggEBAGZk/dAuJIbaxyhXtEUAaWF74fnQ XON4DB7cWP/alX0eF4g3OgUnOt+/RSXnYdGRra4I9A673cU9UiNXnCCjZolTT0iE zP6+pF8kAoMDlzAx4pg5OjDzq74VK1UMV696/EXLrZMU40dDJ6fIrM/3YOKDFxJO rsEJKkQZNduRO5BuItfNpk3VNBZmhTS6vO4JVOFydnIJ7jMntVOzfw+A1kDl15VY tDcuEUon7BAnLCK5hBU75PqeEtp6ckTSNAGK9jaZ+aoA0a6rj0kbYH4PSnlqCiea tWr7CF9xaj8GYEypjexwzJ9BtPxSS8CfJKgZ3xVzR2UcTwgSL3jQrLaIcWc= -----END CERTIFICATE-----Generated at Wed Feb 19 22:41:16 2025 by rpki-client