$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/eam_bFU931bpmvlzs0kliJlwFAY.roa File: eam_bFU931bpmvlzs0kliJlwFAY.roa (raw, json) Hash identifier: Aq49nqMpG5ZchrI9ItGfB9nnanR93jVmFCG3ELtKmxI= Subject key identifier: 79:A9:BF:6C:55:3D:DF:56:E9:9A:F9:73:B3:49:25:88:99:70:14:06 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0783 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/eam_bFU931bpmvlzs0kliJlwFAY.roa Signing time: Tue 30 Apr 2024 02:04:41 +0000 ROA not before: Tue 30 Apr 2024 02:04:41 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 49.105.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1923 (0x783) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 30 02:04:41 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=79A9BF6C553DDF56E99AF973B349258899701406 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:41:94:5a:95:80:3c:50:c3:7e:77:9f:10:99: 7f:7d:b9:1d:be:cc:e7:04:ba:de:03:93:1f:68:0b: 42:ab:ab:4e:06:b6:c3:ba:9b:ff:0c:b6:95:b2:5e: 3d:9f:9d:2d:c7:3c:f5:7d:c7:f6:33:3f:00:bf:43: 57:8f:22:81:23:d4:82:50:30:d3:d1:58:d6:9d:a8: 72:4f:09:fc:3b:49:34:b9:de:64:0b:a3:18:5c:cb: 20:c7:aa:9a:8f:0f:c7:a2:ee:32:92:36:d8:b1:89: 63:db:76:96:15:aa:01:6c:9a:98:f3:e0:df:67:98: a4:12:40:1a:fa:45:48:c1:51:fe:9e:6f:3c:b8:3b: 31:72:a7:08:87:5a:94:64:a0:fc:97:52:49:a0:82: 70:b3:1e:96:dc:01:d4:9d:b2:ce:01:2c:ea:c4:ce: 45:2a:61:07:a9:9d:0a:68:25:4e:98:18:5c:8d:bd: eb:b8:a1:da:e3:2b:c0:6b:9e:90:a6:31:52:75:a3: 69:58:22:71:06:7f:58:e6:f2:8e:3e:a5:f0:10:e3: 89:ed:5c:0b:e0:2b:bd:c3:3e:f3:91:ad:84:a5:d3: 94:61:bc:b3:be:b0:53:3b:25:07:0a:e5:87:e6:86: df:f9:d0:1a:de:21:68:55:25:e7:59:61:08:a9:8d: bd:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:A9:BF:6C:55:3D:DF:56:E9:9A:F9:73:B3:49:25:88:99:70:14:06 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/eam_bFU931bpmvlzs0kliJlwFAY.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.105.120.0/21 Signature Algorithm: sha256WithRSAEncryption 24:28:5f:b6:bc:2b:74:d3:59:98:9f:8b:c5:ac:5c:2b:f8:49: 7c:77:d9:30:fe:29:27:17:11:0e:d9:02:e3:16:95:e7:46:1d: 3a:13:d2:3c:db:4a:b0:f9:02:d3:09:10:6b:19:d7:0c:da:2d: 89:ac:9d:6c:a5:70:91:3f:8e:a5:c8:85:a6:05:6b:c3:bd:92: a1:7d:b7:a4:07:20:17:5a:44:81:73:4e:39:82:01:b4:27:f5: 85:24:c8:00:2c:f7:9b:e2:80:83:99:20:43:48:0c:97:6c:4b: 92:b4:48:47:a4:97:5a:d8:66:d9:df:d7:a4:f1:7b:eb:8d:6c: 47:98:fb:51:ee:2c:09:66:f8:f7:f6:a9:81:e3:db:96:1b:58: 39:b4:1d:f2:7a:6d:f3:49:fe:44:45:1a:48:17:df:0b:15:a2: 13:ac:b2:4e:e2:e5:cd:5f:4e:dc:42:52:dc:49:8d:e5:3d:db: 39:a3:c5:2b:b8:d9:88:98:1c:9a:d8:a2:16:6b:3a:a1:dd:99: 2e:3f:2b:cd:0f:67:2b:44:50:b4:13:35:17:2a:86:ca:77:e6: e5:19:da:85:13:52:7a:50:6d:0e:28:d5:f4:2d:ab:3b:eb:4c: 99:fe:63:95:47:24:2b:9e:68:07:7a:7b:bd:6c:72:8d:78:62: fd:15:27:98 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICB4MwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw MjA0NDFaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDc5QTlCRjZDNTUzRERG NTZFOTlBRjk3M0IzNDkyNTg4OTk3MDE0MDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+QZRalYA8UMN+d58QmX99uR2+zOcEut4Dkx9oC0Krq04GtsO6 m/8MtpWyXj2fnS3HPPV9x/YzPwC/Q1ePIoEj1IJQMNPRWNadqHJPCfw7STS53mQL oxhcyyDHqpqPD8ei7jKSNtixiWPbdpYVqgFsmpjz4N9nmKQSQBr6RUjBUf6ebzy4 OzFypwiHWpRkoPyXUkmggnCzHpbcAdSdss4BLOrEzkUqYQepnQpoJU6YGFyNveu4 odrjK8BrnpCmMVJ1o2lYInEGf1jm8o4+pfAQ44ntXAvgK73DPvORrYSl05RhvLO+ sFM7JQcK5Yfmht/50BreIWhVJedZYQipjb3zAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUeam/bFU931bpmvlzs0kliJlwFAYwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2VhbV9iRlU5MzFicG12bHpzMGtsaUpsd0ZBWS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMxaXgwDQYJKoZIhvcNAQELBQADggEBACQoX7a8K3TTWZifi8WsXCv4SXx3 2TD+KScXEQ7ZAuMWledGHToT0jzbSrD5AtMJEGsZ1wzaLYmsnWylcJE/jqXIhaYF a8O9kqF9t6QHIBdaRIFzTjmCAbQn9YUkyAAs95vigIOZIENIDJdsS5K0SEekl1rY Ztnf16Txe+uNbEeY+1HuLAlm+Pf2qYHj25YbWDm0HfJ6bfNJ/kRFGkgX3wsVohOs sk7i5c1fTtxCUtxJjeU92zmjxSu42YiYHJrYohZrOqHdmS4/K80PZytEULQTNRcq hsp35uUZ2oUTUnpQbQ4o1fQtqzvrTJn+Y5VHJCueaAd6e71sco14Yv0VJ5g= -----END CERTIFICATE-----Generated at Sun Feb 16 22:07:47 2025 by rpki-client