$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/a0egmTTaoCEGkeqRnSORkxzMogM.roa File: a0egmTTaoCEGkeqRnSORkxzMogM.roa (raw, json) Hash identifier: WB22iqWHidKr+ON585mGeil6dzf96Y87JihLkPdekzQ= Subject key identifier: 6B:47:A0:99:34:DA:A0:21:06:91:EA:91:9D:23:91:93:1C:CC:A2:03 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0AF1 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/a0egmTTaoCEGkeqRnSORkxzMogM.roa Signing time: Fri 31 Jan 2025 01:28:33 +0000 ROA not before: Fri 31 Jan 2025 01:28:33 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.96.232.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Feb 2025 20:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2801 (0xaf1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jan 31 01:28:33 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=6B47A09934DAA0210691EA919D2391931CCCA203 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:de:e0:0d:46:88:42:09:c4:63:7c:1e:18:3d: 2c:2b:a3:07:30:d3:08:c0:68:f6:7d:31:f3:98:d6: 7e:03:5a:27:d7:82:40:b7:75:84:4d:bf:ac:b1:3d: fe:7b:64:e1:97:43:6c:32:81:ef:85:a5:75:dd:35: 96:d3:b1:e9:9c:27:c5:c5:39:e4:96:0e:4a:80:b4: 51:75:2f:1c:ac:97:06:e9:78:04:10:27:04:05:cb: b6:8b:dc:af:fc:4f:49:08:f8:c2:39:9c:43:95:6a: 97:30:f3:72:f1:1b:1d:1a:5d:0a:1d:70:5c:bd:77: ba:25:5b:b4:0f:f2:e2:4b:35:be:61:41:20:36:e8: 7d:16:be:ad:08:5d:3d:95:ec:0f:b3:9b:d9:af:5e: 48:d8:6f:9c:b0:22:54:c4:1f:fc:ef:50:a9:56:8a: f1:62:c5:e9:a4:ef:67:d3:51:98:af:a8:5a:68:77: a0:67:8a:75:13:14:c3:f4:bf:8a:45:45:8f:77:92: dd:61:23:b1:89:da:7a:61:e9:8b:63:09:ca:bc:0e: 3e:3f:ff:6a:60:a9:5e:60:66:63:15:75:78:bf:5d: 5c:14:70:b8:d6:4a:16:53:c5:c9:78:d4:f4:59:de: 70:2b:c7:c5:17:5f:72:31:6c:15:61:7f:c1:71:f3: 84:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:47:A0:99:34:DA:A0:21:06:91:EA:91:9D:23:91:93:1C:CC:A2:03 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/a0egmTTaoCEGkeqRnSORkxzMogM.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.96.232.0/21 Signature Algorithm: sha256WithRSAEncryption b6:fc:be:b5:0b:ad:25:94:42:14:47:75:5e:db:3a:62:e3:c4: 27:36:0d:42:0e:22:4b:ef:fb:08:2e:1d:e3:b9:4b:3f:b5:8d: 5a:07:1d:a7:3e:fd:07:de:17:9f:5b:b7:65:20:2a:02:54:4a: cf:bb:b1:8d:f4:d6:b3:6a:62:5c:a8:2c:9c:7c:fb:69:4b:91: e6:a0:de:07:c1:3a:51:42:9d:7a:7a:35:bb:01:fa:f3:24:9c: 7f:bc:76:27:82:ad:31:d1:27:fe:c9:5c:c5:a0:dd:d7:d2:eb: ac:2a:93:16:05:08:45:83:37:d1:01:29:d7:6d:c2:08:f9:70: c9:d2:db:51:b8:69:e6:93:75:f0:ba:18:a9:a2:05:cd:d9:8f: 3f:70:d7:7a:3a:5d:63:98:69:7b:85:36:b7:17:c4:43:29:40: 4b:f2:42:7c:99:bb:fe:31:bc:9e:d6:3e:ce:e1:41:f0:38:bd: 7b:ef:94:c5:88:63:3a:a0:97:60:ef:34:84:92:2f:51:fa:fe: 2f:f6:ad:2f:da:41:f8:16:53:57:dd:e7:81:fd:fb:5c:a6:08: f3:e8:d9:22:a9:df:1b:87:3e:55:95:0d:8d:34:8a:ff:48:8b: ff:67:98:80:9b:59:38:02:51:d5:db:2c:79:b2:aa:af:d1:da: dd:91:f8:0e -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCvEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTAxMzEw MTI4MzNaFw0yNjAxMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDZCNDdBMDk5MzREQUEw MjEwNjkxRUE5MTlEMjM5MTkzMUNDQ0EyMDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC93uANRohCCcRjfB4YPSwrowcw0wjAaPZ9MfOY1n4DWifXgkC3 dYRNv6yxPf57ZOGXQ2wyge+FpXXdNZbTsemcJ8XFOeSWDkqAtFF1LxyslwbpeAQQ JwQFy7aL3K/8T0kI+MI5nEOVapcw83LxGx0aXQodcFy9d7olW7QP8uJLNb5hQSA2 6H0Wvq0IXT2V7A+zm9mvXkjYb5ywIlTEH/zvUKlWivFixemk72fTUZivqFpod6Bn inUTFMP0v4pFRY93kt1hI7GJ2nph6YtjCcq8Dj4//2pgqV5gZmMVdXi/XVwUcLjW ShZTxcl41PRZ3nArx8UXX3IxbBVhf8Fx84RdAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUa0egmTTaoCEGkeqRnSORkxzMogMwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2EwZWdtVFRhb0NFR2tlcVJuU09Sa3h6TW9nTS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMxYOgwDQYJKoZIhvcNAQELBQADggEBALb8vrULrSWUQhRHdV7bOmLjxCc2 DUIOIkvv+wguHeO5Sz+1jVoHHac+/QfeF59bt2UgKgJUSs+7sY301rNqYlyoLJx8 +2lLkeag3gfBOlFCnXp6NbsB+vMknH+8dieCrTHRJ/7JXMWg3dfS66wqkxYFCEWD N9EBKddtwgj5cMnS21G4aeaTdfC6GKmiBc3Zjz9w13o6XWOYaXuFNrcXxEMpQEvy QnyZu/4xvJ7WPs7hQfA4vXvvlMWIYzqgl2DvNISSL1H6/i/2rS/aQfgWU1fd54H9 +1ymCPPo2SKp3xuHPlWVDY00iv9Ii/9nmICbWTgCUdXbLHmyqq/R2t2R+A4= -----END CERTIFICATE-----Generated at Wed Feb 19 22:39:02 2025 by rpki-client