$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/jtHALLrBPn0mAZO6lQ2WsN9G0BQ.roa File: jtHALLrBPn0mAZO6lQ2WsN9G0BQ.roa (raw, json) Hash identifier: T7bWVKYVNEIBA+vn7nRRGhbxk6Ev3EQZh5hDyf8acwE= Subject key identifier: 8E:D1:C0:2C:BA:C1:3E:7D:26:01:93:BA:95:0D:96:B0:DF:46:D0:14 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0949 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/jtHALLrBPn0mAZO6lQ2WsN9G0BQ.roa Signing time: Sun 30 Jun 2024 01:29:33 +0000 ROA not before: Sun 30 Jun 2024 01:29:33 +0000 ROA not after: Tue 24 Jun 2025 10:46:45 +0000 asID: 9605 IP address blocks: 110.161.160.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2377 (0x949) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 30 01:29:33 2024 GMT Not After : Jun 24 10:46:45 2025 GMT Subject: CN=8ED1C02CBAC13E7D260193BA950D96B0DF46D014 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:4f:99:23:bd:eb:53:57:06:4b:d3:f3:a7:67: 55:86:9e:e4:62:8f:c6:e7:e5:ae:c8:06:ff:8f:4b: c0:1b:df:fd:79:44:24:43:83:56:29:cc:2d:cc:68: 41:a5:3d:c7:35:0e:62:02:7f:bd:6e:07:75:bc:85: 74:0c:7d:32:37:60:2f:43:5d:3a:28:9f:3b:75:c0: 9a:a6:69:ad:e0:6c:6e:d0:3b:20:47:51:45:64:e2: 39:3e:4a:60:87:94:f2:82:73:45:d0:37:2c:1e:0d: 22:8e:4e:78:b7:75:a9:af:ec:c3:8e:e0:45:3d:f2: 2b:1a:ec:65:83:ed:94:e2:a2:97:24:14:94:9b:7f: 41:e9:8a:5f:22:76:05:a5:b0:ea:9f:c3:46:40:ca: fd:f1:5f:c7:fa:e1:bc:85:74:cc:f5:e7:d5:4a:47: cc:25:a9:4d:ae:92:a5:ba:44:0b:40:43:de:ae:e3: 1d:ab:8a:63:6a:a2:34:d5:7d:d5:fa:30:ad:33:c9: ae:b2:ef:d6:6c:dd:66:97:aa:3a:ba:a4:00:5c:a4: 12:4e:1a:95:59:91:d6:28:70:c4:b0:29:c1:82:b6: 1e:c5:81:ec:dc:ac:fb:fa:d0:5e:66:40:9a:cf:15: 6e:91:a5:b3:21:f5:ef:8f:c8:84:4d:9d:bb:bc:40: 1c:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:D1:C0:2C:BA:C1:3E:7D:26:01:93:BA:95:0D:96:B0:DF:46:D0:14 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/jtHALLrBPn0mAZO6lQ2WsN9G0BQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 110.161.160.0/19 Signature Algorithm: sha256WithRSAEncryption 85:6a:67:13:1d:e6:97:05:5a:65:a7:90:8f:2b:0d:9e:7f:a2: 1a:cc:7e:50:a0:ec:21:c8:b2:49:04:99:f7:20:eb:b8:9d:37: 07:84:3a:f8:45:ef:59:4f:0b:80:27:92:43:e9:5a:cf:13:7b: f5:6e:d2:a3:95:5c:91:9a:46:48:52:00:ed:76:50:5f:d0:99: 33:96:8f:8d:9b:c5:1e:87:b3:cc:f9:89:a0:19:98:23:14:7c: 61:df:25:eb:f9:f9:7b:8b:a1:74:e0:7e:1c:9c:8b:ff:83:78: 56:20:c2:bb:ff:ae:fc:00:8a:a0:83:01:ba:7d:a0:11:d9:a9: 35:55:98:33:45:97:88:20:3d:03:34:c5:f4:11:00:98:c6:18: 0a:b2:16:bd:24:3c:18:80:54:bc:5c:dd:ed:30:8d:f2:46:07: 92:38:c3:89:a7:e1:17:76:60:63:98:e1:76:bd:03:f4:aa:0f: 6c:85:f5:3f:e6:78:6f:95:be:66:b5:7e:65:f2:66:64:dc:a0: da:d5:e7:ff:24:9a:ce:d2:11:79:0f:95:7d:e9:3b:12:66:97: 4b:2f:1b:3b:e5:f2:3e:70:02:9e:37:3d:cd:21:b6:d3:18:70: 18:48:02:6c:23:7c:c5:47:cd:e9:89:4c:c1:40:aa:83:4c:27: 09:40:eb:fa -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCUkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA2MzAw MTI5MzNaFw0yNTA2MjQxMDQ2NDVaMDMxMTAvBgNVBAMTKDhFRDFDMDJDQkFDMTNF N0QyNjAxOTNCQTk1MEQ5NkIwREY0NkQwMTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCuT5kjvetTVwZL0/OnZ1WGnuRij8bn5a7IBv+PS8Ab3/15RCRD g1YpzC3MaEGlPcc1DmICf71uB3W8hXQMfTI3YC9DXToonzt1wJqmaa3gbG7QOyBH UUVk4jk+SmCHlPKCc0XQNyweDSKOTni3damv7MOO4EU98isa7GWD7ZTiopckFJSb f0Hpil8idgWlsOqfw0ZAyv3xX8f64byFdMz159VKR8wlqU2ukqW6RAtAQ96u4x2r imNqojTVfdX6MK0zya6y79Zs3WaXqjq6pABcpBJOGpVZkdYocMSwKcGCth7Fgezc rPv60F5mQJrPFW6RpbMh9e+PyIRNnbu8QByrAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUjtHALLrBPn0mAZO6lQ2WsN9G0BQwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2p0SEFMTHJCUG4wbUFaTzZsUTJXc045RzBCUS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAVuoaAwDQYJKoZIhvcNAQELBQADggEBAIVqZxMd5pcFWmWnkI8rDZ5/ohrM flCg7CHIskkEmfcg67idNweEOvhF71lPC4AnkkPpWs8Te/Vu0qOVXJGaRkhSAO12 UF/QmTOWj42bxR6Hs8z5iaAZmCMUfGHfJev5+XuLoXTgfhyci/+DeFYgwrv/rvwA iqCDAbp9oBHZqTVVmDNFl4ggPQM0xfQRAJjGGAqyFr0kPBiAVLxc3e0wjfJGB5I4 w4mn4Rd2YGOY4Xa9A/SqD2yF9T/meG+Vvma1fmXyZmTcoNrV5/8kms7SEXkPlX3p OxJml0svGzvl8j5wAp43Pc0httMYcBhIAmwjfMVHzemJTMFAqoNMJwlA6/o= -----END CERTIFICATE-----Generated at Sun Feb 16 22:06:15 2025 by rpki-client