$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/hPRkpS2GVTdqtmrJdRL4Cb0SV_U.roa File: hPRkpS2GVTdqtmrJdRL4Cb0SV_U.roa (raw, json) Hash identifier: eNkx+ElGkJ+M3FOyKhDztc0Uu3R4yDt+lXgvmmc7Bcc= Subject key identifier: 84:F4:64:A5:2D:86:55:37:6A:B6:6A:C9:75:12:F8:09:BD:12:57:F5 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 08F5 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/hPRkpS2GVTdqtmrJdRL4Cb0SV_U.roa Signing time: Tue 30 Apr 2024 02:26:35 +0000 ROA not before: Tue 30 Apr 2024 02:26:35 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 49.96.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2293 (0x8f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 30 02:26:35 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=84F464A52D8655376AB66AC97512F809BD1257F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:24:fa:10:7b:75:ef:8f:2f:71:f6:60:8f:b1: 04:27:8e:61:6b:92:b5:28:38:1a:5a:2c:1b:3e:e8: 6f:4d:92:44:86:0f:9d:d7:84:e0:f2:a8:0d:f2:db: c9:8f:d7:56:4b:a0:b9:3e:28:bb:fb:0d:47:de:bb: 85:fa:1b:25:79:7a:26:ca:7b:9b:62:c4:b1:a1:b0: 1e:15:60:06:f5:db:ac:4b:ed:a5:96:0a:16:f7:60: d6:33:c9:a8:23:a2:10:9d:f3:2d:c7:0c:e5:e6:0a: f2:3e:74:70:c2:e1:d0:6a:96:c5:a2:14:24:c4:3b: 34:c9:98:fd:71:1d:8d:64:a3:54:d8:cd:49:60:96: 1c:eb:60:6f:0b:4f:9e:bd:14:46:9f:e9:fb:07:9f: 38:e1:45:81:3e:5b:ea:ef:1d:5b:66:02:5d:f5:8b: b4:12:d9:78:cd:6a:ee:97:80:65:07:33:ff:7b:0b: 8a:86:a9:63:50:c1:b6:0d:1f:d1:01:dd:96:01:1f: 2c:5c:fc:2a:f1:f0:0a:79:61:94:da:3a:3a:e2:43: c7:40:71:7e:ea:2b:7b:f2:41:d6:c6:a9:f8:a8:67: 9f:9d:9e:5f:9a:16:35:71:e7:77:82:47:dc:a8:39: 97:70:9f:cc:c8:8e:c5:e6:b2:4a:13:9b:d9:e8:95: 97:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:F4:64:A5:2D:86:55:37:6A:B6:6A:C9:75:12:F8:09:BD:12:57:F5 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/hPRkpS2GVTdqtmrJdRL4Cb0SV_U.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.96.45.0/24 Signature Algorithm: sha256WithRSAEncryption a3:e6:f5:cd:73:c4:69:f1:30:eb:c7:b9:78:96:6e:9f:fd:8d: 9e:c8:68:90:7e:98:24:d8:04:bd:95:3d:08:b8:ae:02:be:83: da:c4:45:1d:e8:37:78:a5:c7:4b:ec:ed:cb:49:02:37:11:79: da:41:52:78:5e:7b:b3:01:45:06:d9:97:36:b1:c8:35:76:ec: 6f:14:f5:21:f6:d2:5d:11:1b:5c:63:e4:18:6f:e2:90:1c:2b: cb:8e:2e:b2:34:ab:67:64:cf:48:d0:b8:74:69:0c:53:3a:bc: eb:c6:c4:bf:e4:fe:18:ac:71:aa:72:15:ca:a8:a7:21:fd:4f: 93:ac:58:83:48:de:6d:16:d4:61:f3:ce:53:d8:7c:57:a9:c7: 16:d2:6a:34:56:f6:d4:77:bd:bc:46:9e:92:51:01:1a:ad:24: 68:a1:52:7c:1c:20:8e:22:db:70:2f:09:50:6a:b0:dd:9a:7d: 72:e4:05:5d:8e:5a:da:37:40:13:04:ec:da:d3:1c:8d:30:db: a0:9a:ac:b3:26:77:bb:b5:49:92:95:62:1a:90:87:24:09:d7: da:ee:c5:ba:5a:4d:e2:3e:79:5b:7d:97:61:5d:57:b1:14:29: 93:ad:2f:ce:ff:72:ed:af:fd:88:b6:b6:33:dd:6c:0d:3a:9a: 92:26:4e:9e -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCPUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw MjI2MzVaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDg0RjQ2NEE1MkQ4NjU1 Mzc2QUI2NkFDOTc1MTJGODA5QkQxMjU3RjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDrJPoQe3Xvjy9x9mCPsQQnjmFrkrUoOBpaLBs+6G9NkkSGD53X hODyqA3y28mP11ZLoLk+KLv7DUfeu4X6GyV5eibKe5tixLGhsB4VYAb126xL7aWW Chb3YNYzyagjohCd8y3HDOXmCvI+dHDC4dBqlsWiFCTEOzTJmP1xHY1ko1TYzUlg lhzrYG8LT569FEaf6fsHnzjhRYE+W+rvHVtmAl31i7QS2XjNau6XgGUHM/97C4qG qWNQwbYNH9EB3ZYBHyxc/Crx8Ap5YZTaOjriQ8dAcX7qK3vyQdbGqfioZ5+dnl+a FjVx53eCR9yoOZdwn8zIjsXmskoTm9nolZfXAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUhPRkpS2GVTdqtmrJdRL4Cb0SV/UwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2hQUmtwUzJHVlRkcXRtckpkUkw0Q2IwU1ZfVS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAxYC0wDQYJKoZIhvcNAQELBQADggEBAKPm9c1zxGnxMOvHuXiWbp/9jZ7I aJB+mCTYBL2VPQi4rgK+g9rERR3oN3ilx0vs7ctJAjcRedpBUnhee7MBRQbZlzax yDV27G8U9SH20l0RG1xj5Bhv4pAcK8uOLrI0q2dkz0jQuHRpDFM6vOvGxL/k/his capyFcqopyH9T5OsWINI3m0W1GHzzlPYfFepxxbSajRW9tR3vbxGnpJRARqtJGih UnwcII4i23AvCVBqsN2afXLkBV2OWto3QBME7NrTHI0w26CarLMmd7u1SZKVYhqQ hyQJ19ruxbpaTeI+eVt9l2FdV7EUKZOtL87/cu2v/Yi2tjPdbA06mpImTp4= -----END CERTIFICATE-----Generated at Sun Feb 16 22:07:23 2025 by rpki-client