$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/iR0Scvz_kitgsyezCntYYzfbkYI.roa File: iR0Scvz_kitgsyezCntYYzfbkYI.roa (raw, json) Hash identifier: n+kpGw+YoYmxPeD80uUnb6rWfMNVEgqFzzD3pXPU70Q= Subject key identifier: 89:1D:12:72:FC:FF:92:2B:60:B3:27:B3:0A:7B:58:63:37:DB:91:82 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0AF8 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/iR0Scvz_kitgsyezCntYYzfbkYI.roa Signing time: Fri 31 Jan 2025 01:28:36 +0000 ROA not before: Fri 31 Jan 2025 01:28:36 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.97.68.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Feb 2025 20:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2808 (0xaf8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jan 31 01:28:36 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=891D1272FCFF922B60B327B30A7B586337DB9182 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ee:51:35:6e:63:2d:bd:51:22:13:c7:c0:17: 70:81:df:01:05:c4:bd:d1:6a:30:2c:15:20:42:fd: 7b:3d:08:2f:1a:6e:ef:1f:67:10:7e:08:a5:82:c4: 91:37:1e:cc:ca:4b:54:1a:b5:06:e2:e1:21:48:bb: 48:e0:c8:2e:4f:ae:45:1a:a3:a8:6b:38:2f:ec:f3: 74:03:ba:23:8b:03:09:59:1b:a7:72:54:0f:b0:7f: 92:c5:80:2c:30:38:e6:a2:38:9a:bf:98:30:56:3d: 7c:56:f3:4b:80:5d:1b:48:b9:26:f8:6d:28:f2:89: bc:1b:1d:3a:3e:69:77:9b:4c:20:58:3d:c7:80:c4: e7:46:9f:1b:08:4e:9d:f9:64:7f:b3:7a:92:51:3f: d6:2e:06:cd:6d:9c:b3:95:90:38:73:90:da:65:ad: de:fe:c5:59:d2:72:e5:18:9e:45:25:aa:12:a7:11: 77:ac:c0:cf:1d:9e:97:0c:52:9c:37:9e:95:ee:d7: 46:e9:72:30:e0:db:c3:9c:69:b9:37:da:ae:b6:69: 3e:47:d8:61:c2:64:ef:18:5a:03:2c:f0:b8:ce:b8: 5c:75:68:a1:37:99:da:59:87:d4:08:b2:7f:a4:65: 7e:72:7a:91:bb:80:df:55:9c:79:01:e4:94:a6:17: 2d:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:1D:12:72:FC:FF:92:2B:60:B3:27:B3:0A:7B:58:63:37:DB:91:82 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/iR0Scvz_kitgsyezCntYYzfbkYI.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.97.68.0/22 Signature Algorithm: sha256WithRSAEncryption 20:35:4d:34:2b:76:ff:56:79:45:23:19:6b:74:10:67:87:65: 95:dd:74:ba:3f:ac:de:0c:cc:6e:d4:3d:b7:8a:bb:d4:cd:e6: e6:14:cd:db:f9:be:35:7e:d5:3f:6e:6d:8e:d5:c8:81:cd:20: 75:8e:37:98:67:be:b5:5e:2e:c9:c4:10:f0:e5:a5:bc:c9:eb: ba:f5:24:08:84:ec:ee:cf:50:b6:c5:d3:c9:60:a5:f6:df:84: 0c:36:b1:99:f6:07:d6:ca:25:8c:a1:71:fa:a7:49:ea:16:dc: 00:de:c6:31:21:c1:3b:f0:d5:30:fd:90:f3:b5:de:41:67:08: 0e:cd:0f:27:c6:61:3c:53:6e:17:6d:1f:75:e3:d5:62:4b:51: 95:08:f4:cf:84:61:98:bb:6e:8b:0f:d0:f7:ec:f8:2b:07:ac: 47:90:03:37:20:0e:cb:08:e6:d4:98:6e:96:57:c6:f4:c7:df: 95:26:20:2e:3c:6f:bc:a3:61:e2:9c:a2:29:bc:6f:aa:9b:a1: 97:c4:d7:29:86:c2:bd:1c:24:d7:59:05:e9:22:36:42:1a:4a: 49:0c:9e:6b:30:da:17:8d:e2:f2:f2:4a:67:91:10:13:95:42: cc:38:f1:df:bd:4d:be:a6:d9:b0:d9:7b:b7:30:a3:47:0a:15: be:f4:05:8a -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCvgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTAxMzEw MTI4MzZaFw0yNjAxMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDg5MUQxMjcyRkNGRjky MkI2MEIzMjdCMzBBN0I1ODYzMzdEQjkxODIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDG7lE1bmMtvVEiE8fAF3CB3wEFxL3RajAsFSBC/Xs9CC8abu8f ZxB+CKWCxJE3HszKS1QatQbi4SFIu0jgyC5PrkUao6hrOC/s83QDuiOLAwlZG6dy VA+wf5LFgCwwOOaiOJq/mDBWPXxW80uAXRtIuSb4bSjyibwbHTo+aXebTCBYPceA xOdGnxsITp35ZH+zepJRP9YuBs1tnLOVkDhzkNplrd7+xVnScuUYnkUlqhKnEXes wM8dnpcMUpw3npXu10bpcjDg28Ocabk32q62aT5H2GHCZO8YWgMs8LjOuFx1aKE3 mdpZh9QIsn+kZX5yepG7gN9VnHkB5JSmFy2zAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUiR0Scvz/kitgsyezCntYYzfbkYIwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2lSMFNjdnpfa2l0Z3N5ZXpDbnRZWXpmYmtZSS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIxYUQwDQYJKoZIhvcNAQELBQADggEBACA1TTQrdv9WeUUjGWt0EGeHZZXd dLo/rN4MzG7UPbeKu9TN5uYUzdv5vjV+1T9ubY7VyIHNIHWON5hnvrVeLsnEEPDl pbzJ67r1JAiE7O7PULbF08lgpfbfhAw2sZn2B9bKJYyhcfqnSeoW3ADexjEhwTvw 1TD9kPO13kFnCA7NDyfGYTxTbhdtH3Xj1WJLUZUI9M+EYZi7bosP0Pfs+CsHrEeQ AzcgDssI5tSYbpZXxvTH35UmIC48b7yjYeKcoim8b6qboZfE1ymGwr0cJNdZBeki NkIaSkkMnmsw2heN4vLySmeREBOVQsw48d+9Tb6m2bDZe7cwo0cKFb70BYo= -----END CERTIFICATE-----Generated at Wed Feb 19 22:44:03 2025 by rpki-client