$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Tm8R2bcTkIKJWKqiLGT9gEbIvvc.roa File: Tm8R2bcTkIKJWKqiLGT9gEbIvvc.roa (raw, json) Hash identifier: xXOgERxXIbksJLPTE30hbMf6a7aqyKaV2qasrs+HJhY= Subject key identifier: 4E:6F:11:D9:B7:13:90:82:89:58:AA:A2:2C:64:FD:80:46:C8:BE:F7 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0AF3 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Tm8R2bcTkIKJWKqiLGT9gEbIvvc.roa Signing time: Fri 31 Jan 2025 01:28:34 +0000 ROA not before: Fri 31 Jan 2025 01:28:34 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.96.248.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2803 (0xaf3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jan 31 01:28:34 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=4E6F11D9B71390828958AAA22C64FD8046C8BEF7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:76:c5:0c:b8:6c:2f:af:90:cb:2b:47:8f:d8: c8:b9:8a:8f:6f:54:e2:1f:3b:79:e9:66:71:61:c7: 6e:12:8e:02:f2:72:90:e5:7d:89:d6:ce:0d:3d:01: 58:e0:b9:ed:1f:0e:4a:9d:c6:28:31:9c:2b:08:c6: c4:c7:5c:b6:39:de:59:90:58:b4:38:ad:2a:93:68: 42:68:12:79:9f:3a:c9:00:19:93:83:27:a4:1e:a4: a6:7b:f1:09:6a:a7:7b:87:38:26:ba:df:5b:d7:10: c2:72:bd:27:7f:3d:02:fc:9e:69:d7:c2:aa:1c:2d: 72:a0:cb:1f:8f:7b:08:89:65:ba:6b:ac:dd:ff:bd: 80:a9:c8:b5:99:11:b5:c1:3d:a5:ad:12:09:84:23: fe:80:8b:5f:8b:22:db:c6:79:72:97:d1:d7:11:16: 53:3d:c6:1b:b0:b7:ff:50:3c:ca:93:df:e5:48:8d: 66:46:da:cb:7d:d5:bb:81:3b:70:08:78:0d:2a:68: 48:d1:c7:03:40:10:85:5d:74:6c:7a:fc:da:4a:db: af:fb:d8:04:08:9c:1c:ec:90:84:fe:45:0c:c9:c4: 3c:63:de:e3:ff:9f:30:03:0b:b6:3b:0a:9d:fe:c1: 49:27:1e:e4:59:41:21:37:fa:75:12:e1:45:67:24: 72:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:6F:11:D9:B7:13:90:82:89:58:AA:A2:2C:64:FD:80:46:C8:BE:F7 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Tm8R2bcTkIKJWKqiLGT9gEbIvvc.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.96.248.0/23 Signature Algorithm: sha256WithRSAEncryption 69:01:b0:85:24:a1:0e:7c:7b:22:a3:9c:fc:d4:ae:a0:87:9a: ee:20:77:2c:15:83:ba:16:9d:1d:63:c7:2a:c7:b2:7d:a5:27: 0c:84:4b:66:3e:f1:09:b3:e5:35:e4:5d:13:ea:f8:bf:6d:80: c2:b5:20:59:7b:cf:6d:58:b3:aa:dd:58:93:81:17:5b:04:b6: 6d:5c:e4:ac:b8:90:62:cb:f2:e1:a1:e8:19:7b:51:4d:16:3a: 95:2d:89:02:43:79:b6:1d:55:11:8a:15:dc:32:89:e1:b4:f5: 4d:91:9f:28:75:f8:08:f8:7e:1a:8a:18:8b:fa:f6:8a:36:0d: 62:3c:28:76:36:d1:64:03:f5:48:3d:1f:09:40:fc:67:67:82: 91:94:68:18:e1:6a:a3:d1:41:bb:82:76:f0:28:73:bb:e3:9e: 49:4a:ba:d3:44:21:51:5d:ea:28:57:1b:fe:7b:fa:ba:85:e8: 59:be:31:34:b4:96:d3:e9:db:df:8f:b4:bf:9a:79:96:d1:0c: 48:00:be:ff:f9:c1:fb:a2:ff:4d:42:e5:fb:af:5b:e9:e5:38: 53:89:25:34:c2:73:2d:01:70:03:28:4f:e3:2e:17:96:85:09: f8:5f:d3:e2:8e:f2:a0:bb:df:9d:19:85:8b:7f:ed:fa:cf:a6: c5:1b:a4:fe -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCvMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTAxMzEw MTI4MzRaFw0yNjAxMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDRFNkYxMUQ5QjcxMzkw ODI4OTU4QUFBMjJDNjRGRDgwNDZDOEJFRjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC2dsUMuGwvr5DLK0eP2Mi5io9vVOIfO3npZnFhx24SjgLycpDl fYnWzg09AVjgue0fDkqdxigxnCsIxsTHXLY53lmQWLQ4rSqTaEJoEnmfOskAGZOD J6QepKZ78Qlqp3uHOCa631vXEMJyvSd/PQL8nmnXwqocLXKgyx+PewiJZbprrN3/ vYCpyLWZEbXBPaWtEgmEI/6Ai1+LItvGeXKX0dcRFlM9xhuwt/9QPMqT3+VIjWZG 2st91buBO3AIeA0qaEjRxwNAEIVddGx6/NpK26/72AQInBzskIT+RQzJxDxj3uP/ nzADC7Y7Cp3+wUknHuRZQSE3+nUS4UVnJHKhAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUTm8R2bcTkIKJWKqiLGT9gEbIvvcwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1RtOFIyYmNUa0lLSldLcWlMR1Q5Z0ViSXZ2Yy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExYPgwDQYJKoZIhvcNAQELBQADggEBAGkBsIUkoQ58eyKjnPzUrqCHmu4g dywVg7oWnR1jxyrHsn2lJwyES2Y+8Qmz5TXkXRPq+L9tgMK1IFl7z21Ys6rdWJOB F1sEtm1c5Ky4kGLL8uGh6Bl7UU0WOpUtiQJDebYdVRGKFdwyieG09U2Rnyh1+Aj4 fhqKGIv69oo2DWI8KHY20WQD9Ug9HwlA/GdngpGUaBjhaqPRQbuCdvAoc7vjnklK utNEIVFd6ihXG/57+rqF6Fm+MTS0ltPp29+PtL+aeZbRDEgAvv/5wfui/01C5fuv W+nlOFOJJTTCcy0BcAMoT+MuF5aFCfhf0+KO8qC7350ZhYt/7frPpsUbpP4= -----END CERTIFICATE-----Generated at Wed Feb 19 22:36:17 2025 by rpki-client