$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/bvpON2PcT9xE9x9fSePYSJ6Ke30.roa File: bvpON2PcT9xE9x9fSePYSJ6Ke30.roa (raw, json) Hash identifier: QNb80IVP2mnxN1ofPeARxnmFQ4EOLnyb48CK0iqi6Do= Subject key identifier: 6E:FA:4E:37:63:DC:4F:DC:44:F7:1F:5F:49:E3:D8:48:9E:8A:7B:7D Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0976 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/bvpON2PcT9xE9x9fSePYSJ6Ke30.roa Signing time: Sun 30 Jun 2024 01:33:42 +0000 ROA not before: Sun 30 Jun 2024 01:33:42 +0000 ROA not after: Tue 24 Jun 2025 10:46:45 +0000 asID: 9605 IP address blocks: 1.74.64.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Mar 2025 20:25:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2422 (0x976) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 30 01:33:42 2024 GMT Not After : Jun 24 10:46:45 2025 GMT Subject: CN=6EFA4E3763DC4FDC44F71F5F49E3D8489E8A7B7D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:1b:c5:de:c3:0e:c5:c4:5e:75:f5:73:5b:6b: d2:76:b5:83:a7:5f:16:5e:d0:67:43:69:ee:4e:d5: 84:fe:f7:ef:be:1b:7c:6b:72:9f:ee:5c:76:49:66: bf:70:86:ac:79:1d:e9:99:8f:e5:a6:e8:79:eb:19: 00:ef:3f:97:a6:c3:60:aa:ff:9d:8b:cb:bc:9b:9f: 9d:1d:0b:fe:65:06:21:cf:40:31:40:de:05:ec:18: 31:5a:6e:7c:1c:ee:00:98:c8:f5:b9:41:8a:39:5d: bf:9e:7c:49:16:c7:59:6f:30:53:13:70:04:4c:81: f2:c3:b3:bc:55:f0:f9:18:92:89:a7:cb:a0:b0:07: 71:e1:d7:7a:dd:e3:b2:0a:2c:10:d3:58:03:0f:7d: b9:79:6a:d2:e9:98:c0:a7:9b:4a:e1:66:4c:f3:3b: 1f:ca:de:87:53:6e:1b:54:f2:9e:8b:96:ca:c7:d0: 3d:88:86:93:9e:7d:32:e3:ad:b1:a0:bc:3a:59:c3: 18:f4:f4:3d:da:8c:b7:9b:5b:51:b0:a0:67:3e:56: 77:59:6e:d4:56:a8:a2:b6:5f:2b:c7:d3:4e:de:11: 44:f3:26:11:51:6c:4a:54:e6:46:28:5e:1a:01:39: 09:eb:a3:57:73:6b:b3:53:39:10:7f:81:57:18:ca: a5:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:FA:4E:37:63:DC:4F:DC:44:F7:1F:5F:49:E3:D8:48:9E:8A:7B:7D X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/bvpON2PcT9xE9x9fSePYSJ6Ke30.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.74.64.0/19 Signature Algorithm: sha256WithRSAEncryption 53:40:85:9a:4c:56:dd:92:4e:48:11:b6:00:aa:1b:50:e3:f0: 84:10:7c:bc:75:de:d2:35:0e:dd:c8:4a:e5:07:d4:35:ca:66: ef:5d:ee:c5:0e:bc:e3:e7:90:7e:8a:79:b5:fb:1e:0e:51:5c: b2:86:a3:1f:13:90:38:ed:f9:4d:af:a5:34:6c:28:7c:1e:c7: 8b:0c:83:88:c3:4e:14:e5:53:fc:1a:6b:11:8a:7c:3c:66:89: 7c:1d:f3:d3:46:f4:cc:29:07:3c:be:46:dc:ef:31:7d:4e:6b: 27:45:ad:45:46:9e:00:09:21:e8:e2:93:6c:3e:d4:b7:b7:94: 18:94:ba:1e:f7:1a:af:76:27:16:a3:d3:d9:be:e5:ce:86:7f: 75:b2:cf:f0:43:c4:9d:cd:9c:20:c5:af:04:a0:ab:05:76:0f: b3:cb:bf:9c:a0:04:62:65:cc:ef:7e:ea:d4:27:c6:bb:70:f9: 8d:9b:c0:2c:5a:db:8e:ba:e5:c4:60:c5:0c:bb:d5:4b:a5:3a: ed:63:3e:15:f8:79:0c:4b:90:9b:c1:df:7d:b5:7c:d7:76:84: ed:d1:50:66:1e:f6:fa:d4:cf:33:ea:c6:83:fd:54:83:b4:f5: 73:b0:f5:c9:8f:5b:6a:bc:24:0e:44:0c:95:45:84:f4:23:1c: 83:a4:d9:d3 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCXYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA2MzAw MTMzNDJaFw0yNTA2MjQxMDQ2NDVaMDMxMTAvBgNVBAMTKDZFRkE0RTM3NjNEQzRG REM0NEY3MUY1RjQ5RTNEODQ4OUU4QTdCN0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDAG8Xeww7FxF519XNba9J2tYOnXxZe0GdDae5O1YT+9+++G3xr cp/uXHZJZr9whqx5HemZj+Wm6HnrGQDvP5emw2Cq/52Ly7ybn50dC/5lBiHPQDFA 3gXsGDFabnwc7gCYyPW5QYo5Xb+efEkWx1lvMFMTcARMgfLDs7xV8PkYkomny6Cw B3Hh13rd47IKLBDTWAMPfbl5atLpmMCnm0rhZkzzOx/K3odTbhtU8p6LlsrH0D2I hpOefTLjrbGgvDpZwxj09D3ajLebW1GwoGc+VndZbtRWqKK2XyvH007eEUTzJhFR bEpU5kYoXhoBOQnro1dza7NTORB/gVcYyqX5AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUbvpON2PcT9xE9x9fSePYSJ6Ke30wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2J2cE9OMlBjVDl4RTl4OWZTZVBZU0o2S2UzMC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAUBSkAwDQYJKoZIhvcNAQELBQADggEBAFNAhZpMVt2STkgRtgCqG1Dj8IQQ fLx13tI1Dt3ISuUH1DXKZu9d7sUOvOPnkH6KebX7Hg5RXLKGox8TkDjt+U2vpTRs KHwex4sMg4jDThTlU/waaxGKfDxmiXwd89NG9MwpBzy+RtzvMX1OaydFrUVGngAJ Iejik2w+1Le3lBiUuh73Gq92Jxaj09m+5c6Gf3Wyz/BDxJ3NnCDFrwSgqwV2D7PL v5ygBGJlzO9+6tQnxrtw+Y2bwCxa24665cRgxQy71UulOu1jPhX4eQxLkJvB3321 fNd2hO3RUGYe9vrUzzPqxoP9VIO09XOw9cmPW2q8JA5EDJVFhPQjHIOk2dM= -----END CERTIFICATE-----Generated at Thu Mar 13 01:43:19 2025 by rpki-client