$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/fcnpmmnf3tQ1NzCKtrXMydLaYAQ.roa File: fcnpmmnf3tQ1NzCKtrXMydLaYAQ.roa (raw, json) Hash identifier: OorU0Z6J3nhBzG8FFpo2s0U3tJ8GC5XSXkuIqoDC9u8= Subject key identifier: 7D:C9:E9:9A:69:DF:DE:D4:35:37:30:8A:B6:B5:CC:C9:D2:DA:60:04 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 07D0 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/fcnpmmnf3tQ1NzCKtrXMydLaYAQ.roa Signing time: Tue 30 Apr 2024 02:08:52 +0000 ROA not before: Tue 30 Apr 2024 02:08:52 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 49.104.46.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2000 (0x7d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 30 02:08:52 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=7DC9E99A69DFDED43537308AB6B5CCC9D2DA6004 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:85:42:c8:12:fd:8c:c2:21:18:9c:51:8f:c0: 02:62:5e:35:03:8c:ba:ce:a0:2e:c4:6c:17:51:dc: 0b:d2:8e:c4:da:46:ba:44:ef:48:d7:fc:43:38:d0: 45:5e:50:2c:b1:0f:a9:dc:ee:22:43:85:01:bd:6f: b9:18:c5:6d:dc:5f:8e:58:66:af:a3:77:97:87:8d: 55:2e:45:f8:2d:63:dd:76:c7:7b:97:96:f3:97:96: 4f:b3:d8:24:c7:72:9d:a6:0a:1a:60:7d:4b:06:2c: f7:2a:c5:28:ae:0d:7d:13:ec:00:c4:45:b5:72:37: 2a:42:ac:11:8a:46:f3:88:9c:7d:5d:9a:7a:ca:4d: 79:b3:1b:3a:22:96:01:16:c5:35:32:ae:d8:0f:70: 01:91:f4:34:e9:68:15:fd:fc:cd:c4:8b:4f:b0:55: 6c:13:eb:05:1a:1a:5a:24:3e:51:47:27:66:6f:be: a5:28:b6:25:1b:32:78:d3:a7:d4:8e:6f:20:2c:05: f8:8c:fb:f4:a3:e8:2c:78:2d:f1:43:79:2d:78:55: c3:32:ad:b1:41:06:ec:ec:ab:31:9a:89:04:b2:20: 35:93:ef:c3:d3:91:81:52:d4:2b:1c:8b:75:02:57: 48:82:c8:a5:3b:3a:ad:8e:69:2d:78:4e:1f:43:bb: b2:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:C9:E9:9A:69:DF:DE:D4:35:37:30:8A:B6:B5:CC:C9:D2:DA:60:04 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/fcnpmmnf3tQ1NzCKtrXMydLaYAQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.104.46.0/23 Signature Algorithm: sha256WithRSAEncryption bd:b1:a4:a6:ca:e8:d5:5e:63:cd:0d:5f:25:59:2e:da:8f:31: e3:09:bc:83:8b:d4:9a:8d:f5:72:97:a8:38:d2:c3:55:65:49: da:59:58:39:81:e7:00:db:fa:04:ed:e5:4c:b6:f9:15:af:ac: e5:2f:0c:29:19:c9:87:ec:52:8f:c2:15:70:be:79:2e:1b:bd: f9:bd:fa:95:cf:01:7d:66:c1:af:e5:8d:43:4a:ac:d3:1f:64: 99:98:83:fc:66:78:50:36:94:31:bd:a7:70:97:67:bb:7b:a3: e8:19:f1:8a:6f:e8:f6:dc:87:62:b1:3c:8c:8c:8f:c2:bf:ec: 21:c0:0d:46:6c:28:06:38:c2:ec:1d:b0:12:77:e1:53:26:ad: 3c:a5:83:54:a4:c8:80:49:75:4b:4a:df:2a:99:75:d2:ba:23: 55:50:c1:25:8f:5f:02:e0:e3:46:07:88:1f:e4:83:d1:96:09: 58:51:9d:55:0e:81:18:46:ec:11:11:b2:00:18:d6:73:89:73: e9:da:37:70:b2:d7:4e:38:d4:a9:d1:b1:08:2e:73:f9:78:a7: 80:c5:d8:c7:5b:fd:7e:b4:9f:a0:5d:d6:66:6f:43:35:c4:39: fb:c8:6c:1f:83:37:10:07:ba:8a:52:c6:91:c9:4d:be:4c:eb: 6c:69:89:5f -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICB9AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw MjA4NTJaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDdEQzlFOTlBNjlERkRF RDQzNTM3MzA4QUI2QjVDQ0M5RDJEQTYwMDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDPhULIEv2MwiEYnFGPwAJiXjUDjLrOoC7EbBdR3AvSjsTaRrpE 70jX/EM40EVeUCyxD6nc7iJDhQG9b7kYxW3cX45YZq+jd5eHjVUuRfgtY912x3uX lvOXlk+z2CTHcp2mChpgfUsGLPcqxSiuDX0T7ADERbVyNypCrBGKRvOInH1dmnrK TXmzGzoilgEWxTUyrtgPcAGR9DTpaBX9/M3Ei0+wVWwT6wUaGlokPlFHJ2ZvvqUo tiUbMnjTp9SObyAsBfiM+/Sj6Cx4LfFDeS14VcMyrbFBBuzsqzGaiQSyIDWT78PT kYFS1Csci3UCV0iCyKU7Oq2OaS14Th9Du7JFAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUfcnpmmnf3tQ1NzCKtrXMydLaYAQwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2ZjbnBtbW5mM3RRMU56Q0t0clhNeWRMYVlBUS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExaC4wDQYJKoZIhvcNAQELBQADggEBAL2xpKbK6NVeY80NXyVZLtqPMeMJ vIOL1JqN9XKXqDjSw1VlSdpZWDmB5wDb+gTt5Uy2+RWvrOUvDCkZyYfsUo/CFXC+ eS4bvfm9+pXPAX1mwa/ljUNKrNMfZJmYg/xmeFA2lDG9p3CXZ7t7o+gZ8Ypv6Pbc h2KxPIyMj8K/7CHADUZsKAY4wuwdsBJ34VMmrTylg1SkyIBJdUtK3yqZddK6I1VQ wSWPXwLg40YHiB/kg9GWCVhRnVUOgRhG7BERsgAY1nOJc+naN3Cy10441KnRsQgu c/l4p4DF2Mdb/X60n6Bd1mZvQzXEOfvIbB+DNxAHuopSxpHJTb5M62xpiV8= -----END CERTIFICATE-----Generated at Sun Feb 16 22:07:26 2025 by rpki-client