$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/gn24mpKXlh0KQ6w8scJ2g6rdlVc.roa File: gn24mpKXlh0KQ6w8scJ2g6rdlVc.roa (raw, json) Hash identifier: 8KOphlzRlB2zBhqkb9hzlWPbquSujncyvNunUT1IkfQ= Subject key identifier: 82:7D:B8:9A:92:97:96:1D:0A:43:AC:3C:B1:C2:76:83:AA:DD:95:57 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0885 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/gn24mpKXlh0KQ6w8scJ2g6rdlVc.roa Signing time: Tue 30 Apr 2024 02:20:30 +0000 ROA not before: Tue 30 Apr 2024 02:20:30 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 49.104.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2181 (0x885) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 30 02:20:30 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=827DB89A9297961D0A43AC3CB1C27683AADD9557 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:84:3a:f1:c3:24:87:ff:1d:dd:5f:ce:dc:86: 8b:f7:47:ed:14:fc:0a:17:08:b5:01:8b:34:f1:b8: 7a:b1:14:e9:2e:f4:8d:96:33:a5:d1:4f:81:f0:33: 3a:93:d1:7e:96:58:fc:e0:dd:ed:3d:19:e3:e9:ff: 55:ed:d5:f7:e6:8d:2c:a8:c8:9e:9d:a3:9b:4a:46: 57:df:df:22:23:08:d1:8c:5c:71:51:6c:26:b0:1e: db:87:d9:fd:4b:21:5b:28:ba:78:5a:d0:f8:dc:05: 9a:d9:15:61:59:37:47:20:cd:18:88:24:38:91:d0: c7:57:a7:4f:6a:1a:8e:0b:4c:bf:5a:cc:2c:7f:a7: e9:69:50:ac:07:ac:0f:19:e3:41:f1:f8:7f:89:2d: be:b1:89:01:33:c8:48:55:1c:84:68:5f:4f:3a:bc: 76:e6:7b:a2:21:09:92:9c:1b:c7:03:2b:10:2d:ae: a4:9d:46:fa:72:14:40:e3:90:7f:fb:d4:81:66:3e: cd:d8:e9:b1:fc:e9:b9:8f:f7:54:65:1c:67:89:49: b5:ec:4c:08:c8:b7:5d:6d:02:28:2c:70:bd:d3:82: cf:16:d2:8d:db:24:89:d9:a6:b0:6b:f5:9f:4f:f3: 61:a7:88:5e:e2:33:f4:9f:8a:06:21:8d:2f:b3:92: b6:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:7D:B8:9A:92:97:96:1D:0A:43:AC:3C:B1:C2:76:83:AA:DD:95:57 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/gn24mpKXlh0KQ6w8scJ2g6rdlVc.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.104.45.0/24 Signature Algorithm: sha256WithRSAEncryption c6:65:02:70:64:47:73:b6:7c:a3:30:06:f7:57:11:0d:e1:c2: b7:7a:37:84:c4:88:1c:dc:3a:56:77:5b:61:ae:b4:44:47:1d: 96:ec:82:4d:1c:06:d6:0e:b7:7e:b6:08:a3:e6:20:4c:4a:4b: c4:ea:6c:2f:1e:1d:f7:3d:19:6c:0f:b1:7a:85:94:06:99:16: 78:02:22:58:f0:25:4f:b7:f7:1c:63:f2:44:ed:e5:8b:b1:db: 95:74:06:c4:05:3d:f0:1b:16:bc:01:06:0f:bd:07:1c:1b:ce: 1d:36:ef:21:27:ea:5c:c6:16:2d:f8:4c:53:f4:00:f9:22:e0: 7d:20:a1:c2:cd:97:08:85:7e:39:03:04:2d:8e:a4:4a:34:36: 72:68:68:2e:08:36:8f:1b:a0:1e:b7:a2:c9:54:d4:61:08:08: 18:9f:f4:f4:ce:8f:4c:78:3c:41:e9:f4:a1:be:c1:82:c6:a4: a7:23:b6:c3:b4:6a:1c:53:e6:f7:51:a5:96:e5:53:5f:c9:6e: 27:93:50:21:d2:43:05:b7:b4:7e:3f:e5:9e:14:1e:c6:d1:13: 68:1f:cb:cc:6c:cb:f6:bc:9a:71:6a:5c:3d:9a:f6:7b:c4:c1: 75:c8:5a:1f:2f:a8:59:ef:7a:9a:49:04:27:25:be:4a:9d:ff: ba:68:93:0a -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCIUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw MjIwMzBaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDgyN0RCODlBOTI5Nzk2 MUQwQTQzQUMzQ0IxQzI3NjgzQUFERDk1NTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDahDrxwySH/x3dX87chov3R+0U/AoXCLUBizTxuHqxFOku9I2W M6XRT4HwMzqT0X6WWPzg3e09GePp/1Xt1ffmjSyoyJ6do5tKRlff3yIjCNGMXHFR bCawHtuH2f1LIVsounha0PjcBZrZFWFZN0cgzRiIJDiR0MdXp09qGo4LTL9azCx/ p+lpUKwHrA8Z40Hx+H+JLb6xiQEzyEhVHIRoX086vHbme6IhCZKcG8cDKxAtrqSd RvpyFEDjkH/71IFmPs3Y6bH86bmP91RlHGeJSbXsTAjIt11tAigscL3Tgs8W0o3b JInZprBr9Z9P82GniF7iM/SfigYhjS+zkraDAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUgn24mpKXlh0KQ6w8scJ2g6rdlVcwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2duMjRtcEtYbGgwS1E2dzhzY0oyZzZyZGxWYy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAxaC0wDQYJKoZIhvcNAQELBQADggEBAMZlAnBkR3O2fKMwBvdXEQ3hwrd6 N4TEiBzcOlZ3W2GutERHHZbsgk0cBtYOt362CKPmIExKS8TqbC8eHfc9GWwPsXqF lAaZFngCIljwJU+39xxj8kTt5Yux25V0BsQFPfAbFrwBBg+9Bxwbzh027yEn6lzG Fi34TFP0APki4H0gocLNlwiFfjkDBC2OpEo0NnJoaC4INo8boB63oslU1GEICBif 9PTOj0x4PEHp9KG+wYLGpKcjtsO0ahxT5vdRpZblU1/JbieTUCHSQwW3tH4/5Z4U HsbRE2gfy8xsy/a8mnFqXD2a9nvEwXXIWh8vqFnveppJBCclvkqd/7pokwo= -----END CERTIFICATE-----Generated at Sun Feb 16 22:31:13 2025 by rpki-client