$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZM6mMl5aI5bJw3gk8LRxmqMY-XE.roa File: ZM6mMl5aI5bJw3gk8LRxmqMY-XE.roa (raw, json) Hash identifier: WWl2WZgbiG1ZAa1cvtzxUJicEi5JGjEemYNyemgptbs= Subject key identifier: 64:CE:A6:32:5E:5A:23:96:C9:C3:78:24:F0:B4:71:9A:A3:18:F9:71 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0AD9 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZM6mMl5aI5bJw3gk8LRxmqMY-XE.roa Signing time: Fri 31 Jan 2025 01:28:24 +0000 ROA not before: Fri 31 Jan 2025 01:28:24 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.97.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2777 (0xad9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jan 31 01:28:24 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=64CEA6325E5A2396C9C37824F0B4719AA318F971 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:f9:38:d3:5d:e6:80:d4:f7:fc:d1:6a:7e:82: 9f:5b:25:4b:a0:83:d9:94:46:5c:d7:82:b1:f6:3c: 99:5f:91:d2:80:69:88:41:fd:3d:e7:9f:bf:bc:71: aa:a3:bd:4d:96:8d:6e:fa:29:8c:2c:59:89:e1:9d: 78:4a:40:23:bf:2f:c2:d2:62:d0:a2:a7:fd:e7:ba: ce:36:4b:6f:3e:33:78:82:f1:af:a0:c2:97:ed:41: 46:f3:a8:dc:31:17:75:f7:7c:f8:e2:85:2a:9b:63: 70:54:72:93:c2:91:c4:2b:14:46:d5:6a:93:d4:04: b2:ef:00:a5:16:ec:e1:98:e0:80:ef:57:c7:68:10: c9:7e:fc:4b:de:71:96:d5:a7:50:f2:1e:88:e1:54: fd:be:48:81:00:36:5c:ea:e1:2d:fd:30:20:4d:f5: 6b:82:9a:0f:30:a7:2e:ec:e5:74:e5:f7:ba:a2:99: 46:ca:4b:1d:82:eb:0e:85:dd:d3:4a:87:3e:47:04: 23:a2:d6:61:2c:4d:2c:52:4c:f7:59:0a:d6:9e:98: dc:60:da:64:20:14:97:5a:33:94:af:e3:16:4f:28: 4d:5e:32:be:96:38:66:e0:f8:a9:be:a4:d7:7d:e5: 18:ef:09:06:cf:9e:4f:19:06:8c:f0:84:0c:62:da: 7e:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:CE:A6:32:5E:5A:23:96:C9:C3:78:24:F0:B4:71:9A:A3:18:F9:71 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZM6mMl5aI5bJw3gk8LRxmqMY-XE.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.97.96.0/24 Signature Algorithm: sha256WithRSAEncryption 3d:01:73:6e:87:71:06:68:a7:15:8f:d9:2c:fa:4b:48:f0:5e: d5:d5:32:c4:0c:79:7a:61:38:e1:5a:e6:fe:74:fa:61:ea:09: 85:87:ae:91:2d:f2:30:b4:98:b4:5e:61:82:87:8b:66:2b:a2: b6:37:93:94:84:a8:f3:cf:2c:95:37:47:0f:ed:00:07:a5:8a: 83:eb:a3:01:ea:0c:16:cf:83:f4:1c:cb:fa:0f:67:f2:0e:d0: 72:e2:f5:dc:a2:90:c5:a0:bd:be:ae:33:4d:5b:a3:f0:a0:94: ea:99:68:05:3f:f8:76:bb:9f:bb:a8:e5:55:4c:b2:53:56:9c: 8e:23:07:16:97:4f:dc:33:50:2b:07:a8:af:b6:d5:e3:5b:f6: 98:e1:37:f7:4c:73:9e:d4:bd:b8:55:56:f0:ad:26:45:f9:0f: e0:63:da:e0:7b:57:ff:85:9f:36:3f:72:c4:6c:51:df:a9:70: 78:aa:e9:8f:30:49:69:11:99:f5:1f:93:24:07:28:8e:f3:cf: b4:82:c1:11:fa:52:6c:33:74:5b:92:60:7b:fb:3f:f4:42:07: e6:f3:8d:a8:ff:d3:2b:4f:8b:83:4e:aa:53:ad:29:0c:42:5b: f1:a1:c1:2f:4e:4f:34:fc:3a:7e:83:32:b3:c6:e0:9e:a2:15: d6:d5:39:3a -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCtkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTAxMzEw MTI4MjRaFw0yNjAxMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDY0Q0VBNjMyNUU1QTIz OTZDOUMzNzgyNEYwQjQ3MTlBQTMxOEY5NzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD3+TjTXeaA1Pf80Wp+gp9bJUugg9mURlzXgrH2PJlfkdKAaYhB /T3nn7+8caqjvU2WjW76KYwsWYnhnXhKQCO/L8LSYtCip/3nus42S28+M3iC8a+g wpftQUbzqNwxF3X3fPjihSqbY3BUcpPCkcQrFEbVapPUBLLvAKUW7OGY4IDvV8do EMl+/EvecZbVp1DyHojhVP2+SIEANlzq4S39MCBN9WuCmg8wpy7s5XTl97qimUbK Sx2C6w6F3dNKhz5HBCOi1mEsTSxSTPdZCtaemNxg2mQgFJdaM5Sv4xZPKE1eMr6W OGbg+Km+pNd95RjvCQbPnk8ZBozwhAxi2n6/AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUZM6mMl5aI5bJw3gk8LRxmqMY+XEwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1pNNm1NbDVhSTViSnczZ2s4TFJ4bXFNWS1YRS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAxYWAwDQYJKoZIhvcNAQELBQADggEBAD0Bc26HcQZopxWP2Sz6S0jwXtXV MsQMeXphOOFa5v50+mHqCYWHrpEt8jC0mLReYYKHi2YrorY3k5SEqPPPLJU3Rw/t AAelioProwHqDBbPg/Qcy/oPZ/IO0HLi9dyikMWgvb6uM01bo/CglOqZaAU/+Ha7 n7uo5VVMslNWnI4jBxaXT9wzUCsHqK+21eNb9pjhN/dMc57UvbhVVvCtJkX5D+Bj 2uB7V/+FnzY/csRsUd+pcHiq6Y8wSWkRmfUfkyQHKI7zz7SCwRH6UmwzdFuSYHv7 P/RCB+bzjaj/0ytPi4NOqlOtKQxCW/GhwS9OTzT8On6DMrPG4J6iFdbVOTo= -----END CERTIFICATE-----Generated at Wed Feb 19 22:43:48 2025 by rpki-client