$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/hYE9upvDUdxQNkOekGl8X9BNBMg.roa File: hYE9upvDUdxQNkOekGl8X9BNBMg.roa (raw, json) Hash identifier: iZiGUJXcqzrhNJ+3CuBYdIc/rq//tvm8bAeJNnyX7Mo= Subject key identifier: 85:81:3D:BA:9B:C3:51:DC:50:36:43:9E:90:69:7C:5F:D0:4D:04:C8 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0B03 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/hYE9upvDUdxQNkOekGl8X9BNBMg.roa Signing time: Fri 31 Jan 2025 01:34:20 +0000 ROA not before: Fri 31 Jan 2025 01:34:20 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.97.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2819 (0xb03) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jan 31 01:34:20 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=85813DBA9BC351DC5036439E90697C5FD04D04C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:6d:ad:43:54:c5:39:68:af:f5:39:14:7d:5c: c7:23:20:cd:1d:dc:2a:15:3f:a1:68:42:44:58:95: 6a:fb:c7:42:7c:4c:c8:af:10:58:a5:69:f0:06:3e: e5:ac:77:7f:48:2d:2f:ec:a1:2b:ef:cb:49:42:f5: 70:05:55:90:eb:eb:2e:07:c5:3c:4f:22:c7:05:45: 5e:5b:55:8b:bc:44:75:55:91:1a:23:dd:93:78:33: 73:94:3a:a6:de:2a:91:56:6a:5a:1e:a1:2b:dc:c5: dc:d4:5b:6c:ca:7e:4f:54:cf:ae:69:63:7b:ea:7e: 84:ea:55:68:ff:e0:57:4a:d7:17:9c:5b:17:59:b9: 0e:32:b1:b4:af:f0:1f:21:e7:b9:cd:ca:49:9c:73: 76:f3:7e:ca:ad:cf:c9:50:b0:9d:43:2d:08:8a:fb: 42:6b:ee:8e:db:02:46:93:02:0b:88:3b:8c:e3:20: 81:7e:1f:27:89:c1:74:62:66:da:6f:7f:6f:48:10: 9d:ed:1c:5b:6d:cf:a3:8f:b7:ca:ab:af:fb:49:60: 50:2a:fa:bc:22:a9:ee:8a:ce:1c:f1:8a:55:bc:20: c5:d4:bb:b2:dd:3c:fd:f8:d5:95:c0:f3:f0:1e:b9: 75:fa:6b:ec:0a:c3:6e:1e:d7:86:99:9b:0a:3a:bc: ed:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:81:3D:BA:9B:C3:51:DC:50:36:43:9E:90:69:7C:5F:D0:4D:04:C8 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/hYE9upvDUdxQNkOekGl8X9BNBMg.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.97.99.0/24 Signature Algorithm: sha256WithRSAEncryption 43:4f:a6:95:8c:68:81:bd:0e:4c:95:39:a2:28:2f:8a:11:d4: c4:07:27:49:17:00:46:9f:80:c4:c9:7d:6c:90:04:47:d0:0b: b9:9b:ba:4a:8e:a6:4c:98:49:f5:6e:b7:a3:e2:bd:a5:34:e3: 8b:13:cc:1f:f2:93:67:1d:96:ad:c4:98:36:88:8c:7b:11:53: d9:31:8a:e3:b8:73:4b:07:4e:09:6a:a5:d3:86:44:c1:32:1c: 8e:cd:f3:93:34:96:54:4f:a3:05:12:a0:58:9d:76:24:2b:6c: 4f:1c:ac:8a:c3:0a:57:79:b6:7a:f2:b6:d6:6f:0f:16:78:45: 7d:5f:2f:27:86:14:e1:8e:18:5e:c1:6f:a1:0d:c0:2b:30:cd: 16:a4:12:2a:93:7f:dc:a9:6d:51:7e:de:6c:b6:39:97:32:be: e9:99:cd:92:f1:b7:9f:c6:fc:64:bc:75:d6:35:48:87:71:1e: 12:43:01:73:8f:8b:7a:e3:98:f2:43:a3:5b:c7:e9:2b:e2:f3: 27:1a:20:c1:eb:93:0e:3a:ff:9c:3d:2e:98:ea:2f:d0:df:f2: 47:68:72:8d:1d:42:bc:bb:6f:5c:30:5d:6c:9c:49:5a:9b:3a: 5f:66:8a:cb:a7:f6:c4:1b:e3:a5:c7:a8:59:75:46:9e:73:82: 60:ec:7b:e3 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCwMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTAxMzEw MTM0MjBaFw0yNjAxMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDg1ODEzREJBOUJDMzUx REM1MDM2NDM5RTkwNjk3QzVGRDA0RDA0QzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC9ba1DVMU5aK/1ORR9XMcjIM0d3CoVP6FoQkRYlWr7x0J8TMiv EFilafAGPuWsd39ILS/soSvvy0lC9XAFVZDr6y4HxTxPIscFRV5bVYu8RHVVkRoj 3ZN4M3OUOqbeKpFWaloeoSvcxdzUW2zKfk9Uz65pY3vqfoTqVWj/4FdK1xecWxdZ uQ4ysbSv8B8h57nNykmcc3bzfsqtz8lQsJ1DLQiK+0Jr7o7bAkaTAguIO4zjIIF+ HyeJwXRiZtpvf29IEJ3tHFttz6OPt8qrr/tJYFAq+rwiqe6KzhzxilW8IMXUu7Ld PP341ZXA8/AeuXX6a+wKw24e14aZmwo6vO2ZAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUhYE9upvDUdxQNkOekGl8X9BNBMgwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2hZRTl1cHZEVWR4UU5rT2VrR2w4WDlCTkJNZy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAxYWMwDQYJKoZIhvcNAQELBQADggEBAENPppWMaIG9DkyVOaIoL4oR1MQH J0kXAEafgMTJfWyQBEfQC7mbukqOpkyYSfVut6PivaU044sTzB/yk2cdlq3EmDaI jHsRU9kxiuO4c0sHTglqpdOGRMEyHI7N85M0llRPowUSoFiddiQrbE8crIrDCld5 tnryttZvDxZ4RX1fLyeGFOGOGF7Bb6ENwCswzRakEiqTf9ypbVF+3my2OZcyvumZ zZLxt5/G/GS8ddY1SIdxHhJDAXOPi3rjmPJDo1vH6Svi8ycaIMHrkw46/5w9Lpjq L9Df8kdoco0dQry7b1wwXWycSVqbOl9misun9sQb46XHqFl1Rp5zgmDse+M= -----END CERTIFICATE-----Generated at Wed Feb 19 22:46:21 2025 by rpki-client