$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/hJdvWeBW2FArCncBDM20-S101K8.roa File: hJdvWeBW2FArCncBDM20-S101K8.roa (raw, json) Hash identifier: nhRQ46vUl/opuMhejB3X+z58z28PxENgz7PdCyygYi8= Subject key identifier: 84:97:6F:59:E0:56:D8:50:2B:0A:77:01:0C:CD:B4:F9:2D:74:D4:AF Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0981 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/hJdvWeBW2FArCncBDM20-S101K8.roa Signing time: Sun 30 Jun 2024 01:36:21 +0000 ROA not before: Sun 30 Jun 2024 01:36:21 +0000 ROA not after: Tue 24 Jun 2025 10:46:45 +0000 asID: 9605 IP address blocks: 49.105.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2433 (0x981) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 30 01:36:21 2024 GMT Not After : Jun 24 10:46:45 2025 GMT Subject: CN=84976F59E056D8502B0A77010CCDB4F92D74D4AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ee:e8:ee:ab:16:93:a2:fc:66:45:56:cc:33: 19:20:a7:c0:1a:c9:1f:66:67:3e:5e:65:58:eb:65: 58:1c:40:88:29:47:16:b3:b1:5f:4a:af:7a:e7:13: 48:d5:0a:01:b0:4d:49:b4:cd:86:c1:7e:6d:7c:f8: c9:a7:e4:b7:3d:c3:7c:0c:45:1c:e2:ac:44:2f:be: 32:fc:30:b5:b9:21:2b:55:03:84:7b:fb:d3:7e:fe: 71:76:3d:7f:aa:b1:3d:69:ee:e0:49:b3:5e:8f:de: 5c:96:f8:69:83:b7:65:4b:1b:bf:fc:ee:c2:64:d2: 6e:93:b1:87:d6:4c:17:22:b7:35:3d:ea:46:73:ef: a8:6d:ab:f8:38:84:4a:64:ea:ba:e1:d2:91:4d:49: 29:7d:72:2d:70:82:19:27:92:f4:67:54:18:8f:95: a5:78:59:76:bf:df:db:bc:a6:a9:c0:68:a2:c7:32: 93:29:89:26:63:4d:cc:e5:80:58:d1:f3:7a:bb:ac: 61:f0:0f:02:e2:0e:19:35:ac:7e:a5:57:b5:00:c0: 5c:73:32:07:35:fa:e1:6b:a7:af:0b:aa:d6:ac:d4: 2f:82:47:75:fe:99:fc:8c:c3:10:28:45:a4:d2:a3: da:fa:d0:ee:05:e4:ac:ff:77:06:ec:af:99:b2:29: 93:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:97:6F:59:E0:56:D8:50:2B:0A:77:01:0C:CD:B4:F9:2D:74:D4:AF X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/hJdvWeBW2FArCncBDM20-S101K8.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.105.88.0/24 Signature Algorithm: sha256WithRSAEncryption de:a6:c8:b7:11:19:1f:87:f0:2a:5b:50:6a:19:05:64:27:42: 6b:da:b7:60:0c:6e:86:d0:96:ac:a6:00:72:f4:ea:a3:93:0c: c5:83:b1:d6:ab:b9:ad:a0:2c:90:6a:25:2f:1f:c3:e0:03:91: 61:9b:35:98:98:97:62:8a:1f:a4:f7:e1:50:36:7d:71:52:0b: 53:35:1c:7e:fa:56:3a:62:33:63:7a:a2:4f:e1:23:72:7e:fd: c3:f7:fd:92:e3:21:5d:11:ab:08:50:48:ec:07:8e:9a:d6:1d: 49:a5:2c:62:36:ff:2f:92:1e:74:09:3c:72:b2:dc:fe:0a:fc: 5e:c9:30:c3:a8:ca:94:13:d5:05:58:3d:47:dd:58:ed:68:cf: 0b:31:a9:3e:c9:c1:de:e6:70:d7:f2:69:0b:b2:9d:5d:ad:46: 61:a6:66:19:59:fe:35:1b:0c:53:83:27:15:7a:0b:ff:63:3b: b7:56:cb:77:92:1e:fe:b3:89:2f:e7:e3:42:11:d3:0d:88:55: 25:92:df:a3:90:f3:db:ad:05:9b:9d:40:9e:38:98:7c:69:4b: 45:9f:92:ed:63:26:64:ec:73:00:dd:c4:12:d3:a2:65:ab:2c: ec:01:e4:8f:f0:5e:b6:1f:ea:66:e9:75:bb:af:0f:bf:aa:40: a0:38:bd:a4 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCYEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA2MzAw MTM2MjFaFw0yNTA2MjQxMDQ2NDVaMDMxMTAvBgNVBAMTKDg0OTc2RjU5RTA1NkQ4 NTAyQjBBNzcwMTBDQ0RCNEY5MkQ3NEQ0QUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDM7ujuqxaTovxmRVbMMxkgp8AayR9mZz5eZVjrZVgcQIgpRxaz sV9Kr3rnE0jVCgGwTUm0zYbBfm18+Mmn5Lc9w3wMRRzirEQvvjL8MLW5IStVA4R7 +9N+/nF2PX+qsT1p7uBJs16P3lyW+GmDt2VLG7/87sJk0m6TsYfWTBcitzU96kZz 76htq/g4hEpk6rrh0pFNSSl9ci1wghknkvRnVBiPlaV4WXa/39u8pqnAaKLHMpMp iSZjTczlgFjR83q7rGHwDwLiDhk1rH6lV7UAwFxzMgc1+uFrp68Lqtas1C+CR3X+ mfyMwxAoRaTSo9r60O4F5Kz/dwbsr5myKZN1AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUhJdvWeBW2FArCncBDM20+S101K8wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2hKZHZXZUJXMkZBckNuY0JETTIwLVMxMDFLOC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAxaVgwDQYJKoZIhvcNAQELBQADggEBAN6myLcRGR+H8CpbUGoZBWQnQmva t2AMbobQlqymAHL06qOTDMWDsdarua2gLJBqJS8fw+ADkWGbNZiYl2KKH6T34VA2 fXFSC1M1HH76VjpiM2N6ok/hI3J+/cP3/ZLjIV0RqwhQSOwHjprWHUmlLGI2/y+S HnQJPHKy3P4K/F7JMMOoypQT1QVYPUfdWO1ozwsxqT7Jwd7mcNfyaQuynV2tRmGm ZhlZ/jUbDFODJxV6C/9jO7dWy3eSHv6ziS/n40IR0w2IVSWS36OQ89utBZudQJ44 mHxpS0Wfku1jJmTscwDdxBLTomWrLOwB5I/wXrYf6mbpdbuvD7+qQKA4vaQ= -----END CERTIFICATE-----Generated at Sun Feb 16 22:06:50 2025 by rpki-client