$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/VTqB9QOH3NJEfnYtP9mTgg2VBuc.roa File: VTqB9QOH3NJEfnYtP9mTgg2VBuc.roa (raw, json) Hash identifier: DmXQP5Pq0VtSK9LgQqq2W7z0oSLZUEMfVh2xMLnsr5k= Subject key identifier: 55:3A:81:F5:03:87:DC:D2:44:7E:76:2D:3F:D9:93:82:0D:95:06:E7 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 070F Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/VTqB9QOH3NJEfnYtP9mTgg2VBuc.roa Signing time: Tue 30 Apr 2024 01:52:57 +0000 ROA not before: Tue 30 Apr 2024 01:52:57 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 220.210.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1807 (0x70f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 30 01:52:57 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=553A81F50387DCD2447E762D3FD993820D9506E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:6e:18:aa:0c:59:a9:9e:91:cd:2c:23:45:56: 50:ab:2f:e0:07:4d:32:96:0e:69:eb:9e:2f:83:04: a8:95:ff:32:83:e6:d3:5c:7b:d3:92:b9:c4:6b:d9: e9:55:0c:b7:4c:86:22:88:40:da:de:d7:bd:fe:8c: 8a:ee:29:fe:12:d0:9e:47:9c:40:e1:50:ef:4f:8e: 68:65:38:31:09:16:61:10:c5:dd:af:ce:03:9b:64: 2e:11:20:22:22:bf:fb:c3:44:1e:64:ac:5b:cf:d0: 4f:95:b3:08:77:a9:7a:b2:68:ba:67:67:74:7e:d1: 3c:fc:d2:5f:c1:5a:d3:e1:e8:38:1d:87:0e:48:34: 66:21:68:e7:2e:e7:6d:db:9c:b7:fc:52:04:bf:2a: 25:cf:c6:a4:df:e7:4f:27:9e:00:46:63:ce:72:29: 9d:6b:25:87:0a:af:ef:dd:a1:8a:9b:ff:8d:38:cc: ee:ca:5a:d5:45:de:86:4a:89:a8:ad:44:a4:09:13: 4e:c4:af:bb:28:49:33:14:3f:2e:55:a3:da:35:8d: 09:79:4a:00:88:e3:0f:13:87:85:b9:d5:9d:71:f6: db:59:ed:c7:86:48:fa:53:f5:66:97:83:b5:e7:c9: 46:85:8a:18:ba:a6:62:b3:c9:d8:2f:8f:e1:53:77: 0c:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:3A:81:F5:03:87:DC:D2:44:7E:76:2D:3F:D9:93:82:0D:95:06:E7 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/VTqB9QOH3NJEfnYtP9mTgg2VBuc.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 220.210.108.0/22 Signature Algorithm: sha256WithRSAEncryption a0:c5:a2:51:57:29:0e:ca:88:48:b3:9c:3c:69:3d:2d:a2:4f: 9d:1b:62:f1:fc:23:92:6f:83:4c:c1:b0:36:1b:81:9e:82:13: ad:6d:eb:f0:96:d6:6d:24:5d:9c:31:16:bc:a7:1e:91:22:8c: 99:f7:3f:74:e2:5d:60:e8:8d:10:fb:94:91:97:dc:c1:c8:23: e2:80:5d:34:16:86:83:e1:b1:6d:64:77:5a:cc:6a:d3:9a:b3: 3d:63:64:0a:7c:e1:25:d5:e5:8f:bf:5a:61:3d:fb:cc:b2:fc: 2b:c2:00:d5:ff:04:b3:2b:59:8f:d7:f9:36:de:af:2f:17:81: e1:6f:a2:32:04:aa:25:26:37:8c:f6:86:0a:f7:b5:ec:d2:16: 8b:a4:bb:d0:a6:f3:5c:aa:1c:9b:2d:aa:32:c7:ae:00:c4:43: fb:b6:8d:26:c8:5e:bc:69:80:0e:0a:7c:1d:8a:c9:b9:b3:0e: e9:b4:ea:a7:72:64:e7:b9:2f:70:b2:f1:92:85:13:5d:db:db: d7:4c:51:ab:45:9a:9e:d2:40:f0:bf:15:f0:ed:20:35:ee:11: 44:01:52:3f:f4:a8:67:c4:6a:fd:4c:ff:b4:18:e5:d8:8d:86: 01:55:de:36:15:b1:31:6c:8b:26:b2:af:b7:66:a2:78:41:e0: 74:9f:87:2d -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBw8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw MTUyNTdaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDU1M0E4MUY1MDM4N0RD RDI0NDdFNzYyRDNGRDk5MzgyMEQ5NTA2RTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCebhiqDFmpnpHNLCNFVlCrL+AHTTKWDmnrni+DBKiV/zKD5tNc e9OSucRr2elVDLdMhiKIQNre173+jIruKf4S0J5HnEDhUO9PjmhlODEJFmEQxd2v zgObZC4RICIiv/vDRB5krFvP0E+Vswh3qXqyaLpnZ3R+0Tz80l/BWtPh6Dgdhw5I NGYhaOcu523bnLf8UgS/KiXPxqTf508nngBGY85yKZ1rJYcKr+/doYqb/404zO7K WtVF3oZKiaitRKQJE07Er7soSTMUPy5Vo9o1jQl5SgCI4w8Th4W51Z1x9ttZ7ceG SPpT9WaXg7XnyUaFihi6pmKzydgvj+FTdwzzAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUVTqB9QOH3NJEfnYtP9mTgg2VBucwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1ZUcUI5UU9IM05KRWZuWXRQOW1UZ2cyVkJ1Yy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBALc0mwwDQYJKoZIhvcNAQELBQADggEBAKDFolFXKQ7KiEiznDxpPS2iT50b YvH8I5Jvg0zBsDYbgZ6CE61t6/CW1m0kXZwxFrynHpEijJn3P3TiXWDojRD7lJGX 3MHII+KAXTQWhoPhsW1kd1rMatOasz1jZAp84SXV5Y+/WmE9+8yy/CvCANX/BLMr WY/X+Tbery8XgeFvojIEqiUmN4z2hgr3tezSFouku9Cm81yqHJstqjLHrgDEQ/u2 jSbIXrxpgA4KfB2KybmzDum06qdyZOe5L3Cy8ZKFE13b29dMUatFmp7SQPC/FfDt IDXuEUQBUj/0qGfEav1M/7QY5diNhgFV3jYVsTFsiyayr7dmonhB4HSfhy0= -----END CERTIFICATE-----Generated at Sun Feb 16 22:26:21 2025 by rpki-client