$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/jw1N_ZijR5QCMpgQC6Q-wmUjPVs.roa File: jw1N_ZijR5QCMpgQC6Q-wmUjPVs.roa (raw, json) Hash identifier: /yoQQkQbNaQn9acLSNM5XdHs9B3nB1gQhpLB3gkGu3E= Subject key identifier: 8F:0D:4D:FD:98:A3:47:94:02:32:98:10:0B:A4:3E:C2:65:23:3D:5B Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 09E4 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/jw1N_ZijR5QCMpgQC6Q-wmUjPVs.roa Signing time: Sun 30 Jun 2024 01:42:20 +0000 ROA not before: Sun 30 Jun 2024 01:42:20 +0000 ROA not after: Tue 24 Jun 2025 10:46:45 +0000 asID: 9605 IP address blocks: 211.14.68.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2532 (0x9e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 30 01:42:20 2024 GMT Not After : Jun 24 10:46:45 2025 GMT Subject: CN=8F0D4DFD98A34794023298100BA43EC265233D5B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:0c:32:33:b9:c4:ce:14:dc:60:60:87:82:a0: 7f:d4:cc:85:e3:ed:4a:2f:21:c7:9a:07:11:2c:39: 3e:12:0c:86:2d:f9:31:fb:44:c4:ba:62:e5:02:9e: aa:a6:7b:78:3b:b7:05:6d:37:68:66:7a:9f:43:40: 0e:19:88:42:97:e6:6b:d6:d1:b9:ba:5b:47:9b:c5: 97:cd:e9:b3:40:6c:8f:55:44:fc:e2:06:09:20:84: 1a:52:54:0a:b3:3d:3c:3b:c7:26:b3:cd:12:e3:23: 19:e0:22:8c:c1:b4:0c:82:a3:0c:4d:17:15:e8:fb: 06:2b:5c:b7:37:28:8c:9f:f0:0e:d8:bc:d9:77:6f: 4a:44:be:3d:7c:06:b4:4f:fc:61:3f:03:a7:eb:1b: 62:25:e0:82:17:f7:cd:7f:a6:51:f5:9b:18:8a:08: 1a:35:e1:a9:3c:95:af:d2:72:45:62:2e:0e:21:13: ad:6b:d7:f2:d9:01:b7:f5:59:52:22:46:69:70:58: fa:e3:44:7a:12:1b:cb:6f:e8:ea:bd:c2:2c:51:57: 93:17:03:dc:05:e2:29:db:7f:26:de:a5:fb:cc:a2: 2c:a3:f2:17:70:2a:ab:16:69:76:1a:6a:ff:ed:7a: 8c:77:68:a0:a2:7e:be:58:5f:42:c6:7a:a7:ff:8e: d7:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:0D:4D:FD:98:A3:47:94:02:32:98:10:0B:A4:3E:C2:65:23:3D:5B X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/jw1N_ZijR5QCMpgQC6Q-wmUjPVs.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 211.14.68.0/22 Signature Algorithm: sha256WithRSAEncryption 21:0f:f7:59:25:4b:da:09:c9:d1:f7:ad:77:3d:c1:57:63:1b: bf:43:ff:0c:e1:8f:f5:ac:76:8b:9f:ae:85:99:55:14:03:12: bb:61:23:a8:40:1d:cc:43:80:24:f4:2a:04:8c:47:01:3e:62: ac:7d:93:fa:e3:f1:19:82:ce:b7:b0:36:c0:02:6d:06:e0:d1: fa:5b:b3:a6:d3:19:13:0b:9b:dd:c0:85:22:3d:a5:ed:91:b2: 21:be:21:fb:16:31:78:f0:27:94:86:c5:68:8d:09:df:7d:49: 46:55:1d:a8:d7:b7:a2:5f:7a:38:54:fa:c8:ac:85:d4:38:91: 04:2e:13:69:8f:9d:94:91:e0:4b:8c:ea:ca:3c:ad:3b:c4:b0: c3:51:fd:10:02:95:69:20:df:32:32:a2:26:13:a4:08:ca:af: 85:ec:ba:69:9b:de:40:42:4b:4f:c3:73:b0:fd:bc:44:ca:2e: 31:c6:ad:7b:27:28:e9:27:91:37:6e:8f:26:bb:1b:8a:83:f1: b5:6b:19:82:91:e3:6c:a3:2f:4b:47:39:44:5a:5c:f9:07:b5: 54:77:4e:4b:79:2e:4c:3e:8e:9e:14:b3:72:e2:42:62:38:8f: d5:ef:47:1f:71:b9:ca:5a:d1:ad:1a:d6:3c:dc:ba:56:aa:2c: 63:28:02:67 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCeQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA2MzAw MTQyMjBaFw0yNTA2MjQxMDQ2NDVaMDMxMTAvBgNVBAMTKDhGMEQ0REZEOThBMzQ3 OTQwMjMyOTgxMDBCQTQzRUMyNjUyMzNENUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC8DDIzucTOFNxgYIeCoH/UzIXj7UovIceaBxEsOT4SDIYt+TH7 RMS6YuUCnqqme3g7twVtN2hmep9DQA4ZiEKX5mvW0bm6W0ebxZfN6bNAbI9VRPzi BgkghBpSVAqzPTw7xyazzRLjIxngIozBtAyCowxNFxXo+wYrXLc3KIyf8A7YvNl3 b0pEvj18BrRP/GE/A6frG2Il4IIX981/plH1mxiKCBo14ak8la/SckViLg4hE61r 1/LZAbf1WVIiRmlwWPrjRHoSG8tv6Oq9wixRV5MXA9wF4inbfybepfvMoiyj8hdw KqsWaXYaav/teox3aKCifr5YX0LGeqf/jtf/AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUjw1N/ZijR5QCMpgQC6Q+wmUjPVswHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2p3MU5fWmlqUjVRQ01wZ1FDNlEtd21ValBWcy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBALTDkQwDQYJKoZIhvcNAQELBQADggEBACEP91klS9oJydH3rXc9wVdjG79D /wzhj/WsdoufroWZVRQDErthI6hAHcxDgCT0KgSMRwE+Yqx9k/rj8RmCzrewNsAC bQbg0fpbs6bTGRMLm93AhSI9pe2RsiG+IfsWMXjwJ5SGxWiNCd99SUZVHajXt6Jf ejhU+sishdQ4kQQuE2mPnZSR4EuM6so8rTvEsMNR/RAClWkg3zIyoiYTpAjKr4Xs ummb3kBCS0/Dc7D9vETKLjHGrXsnKOknkTdujya7G4qD8bVrGYKR42yjL0tHOURa XPkHtVR3Tkt5Lkw+jp4Us3LiQmI4j9XvRx9xucpa0a0a1jzculaqLGMoAmc= -----END CERTIFICATE-----Generated at Sun Feb 16 22:27:06 2025 by rpki-client