$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/lc0duP93O-bS1v0uzDoAgyYzeIo.roa File: lc0duP93O-bS1v0uzDoAgyYzeIo.roa (raw, json) Hash identifier: vKxUG+eiopGxrkznBkG3UXp4rWUkYezwhBMaRrHQJAA= Subject key identifier: 95:CD:1D:B8:FF:77:3B:E6:D2:D6:FD:2E:CC:3A:00:83:26:33:78:8A Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 079B Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/lc0duP93O-bS1v0uzDoAgyYzeIo.roa Signing time: Tue 30 Apr 2024 02:06:27 +0000 ROA not before: Tue 30 Apr 2024 02:06:27 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 220.210.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1947 (0x79b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 30 02:06:27 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=95CD1DB8FF773BE6D2D6FD2ECC3A00832633788A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:6f:9c:b5:98:82:4a:54:74:e5:38:07:5b:34: 51:38:58:e5:84:53:3e:5d:a0:a6:95:eb:bf:92:98: aa:ec:81:55:3e:94:71:df:4f:05:1a:b0:a2:1a:8f: 99:61:79:d5:0f:4e:1a:0f:59:97:c6:7c:e8:b6:57: 57:21:fc:c4:c5:ce:e4:4c:9d:f7:d7:99:04:ab:a1: f4:a2:ef:43:11:28:86:2e:ce:83:16:79:50:45:a7: 88:02:38:a2:a0:c2:9a:13:6a:c4:1f:19:59:65:18: 0d:4c:6e:9a:66:22:14:2d:16:93:09:e3:ae:3c:3a: 6a:f1:50:14:5e:6c:85:60:1b:6c:c0:9c:ff:96:1a: 02:e8:58:dc:a9:1b:fa:f5:a0:b6:bd:79:77:85:9c: d0:c1:de:ef:98:09:fb:2e:e9:f3:90:85:b3:ed:3a: 4a:b6:e6:03:ff:c3:8a:55:04:05:92:92:44:e9:2d: a1:a2:45:bb:7c:e2:6e:32:d2:02:77:fe:36:22:46: 7c:bf:41:4f:87:d8:eb:0d:b7:c2:e3:75:7b:c3:2c: 97:72:b6:75:71:92:18:5a:4a:32:45:ff:00:c1:81: e0:4b:62:f0:a6:ef:f4:e4:84:96:e2:77:59:22:53: 94:c3:c8:15:74:16:dd:8f:e4:9f:36:d7:f7:75:b7: 0f:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:CD:1D:B8:FF:77:3B:E6:D2:D6:FD:2E:CC:3A:00:83:26:33:78:8A X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/lc0duP93O-bS1v0uzDoAgyYzeIo.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 220.210.32.0/20 Signature Algorithm: sha256WithRSAEncryption 80:c3:fe:53:16:86:71:f8:ed:b1:4a:25:5c:cb:46:2f:ff:64: 18:4f:12:34:ce:7b:ae:74:d7:b2:29:e4:8e:49:6b:51:48:2a: 56:a1:2d:96:66:60:48:cd:43:c8:f4:ef:21:3e:a9:34:65:86: 47:c3:ec:29:3e:87:2b:7c:d3:e5:df:01:f7:f9:19:a0:13:aa: c3:c5:89:af:e5:f9:55:39:63:fd:ea:54:6a:f1:fe:17:75:18: 4d:5e:66:59:6a:34:6a:2f:14:bf:b5:48:49:88:ef:6f:94:89: fc:8d:82:af:bf:23:3b:4d:22:cc:2b:15:14:ec:f7:70:b9:1b: 90:65:26:7e:9a:bf:bb:db:10:f4:1c:8c:80:f1:3d:2d:3c:66: 87:77:1b:8c:90:c0:76:94:c3:f0:0f:6e:02:66:f9:8e:eb:83: a4:24:63:97:71:90:2a:b6:cb:3f:c8:3d:d9:26:9f:6e:89:da: 5a:ea:c5:84:b7:b9:85:e1:f3:29:54:ba:2f:c4:f7:1f:48:8f: 43:75:17:67:5a:3d:58:c7:5d:c1:de:88:f0:80:81:72:e0:68: c4:fa:e2:e5:e7:0f:07:11:38:09:8d:7e:5f:4a:ba:8c:be:f4: 5d:5a:bc:a7:b5:bf:37:13:0e:b2:5e:ce:42:ad:06:ef:d1:7a: 7f:7d:88:f3 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICB5swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw MjA2MjdaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDk1Q0QxREI4RkY3NzNC RTZEMkQ2RkQyRUNDM0EwMDgzMjYzMzc4OEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDbb5y1mIJKVHTlOAdbNFE4WOWEUz5doKaV67+SmKrsgVU+lHHf TwUasKIaj5lhedUPThoPWZfGfOi2V1ch/MTFzuRMnffXmQSrofSi70MRKIYuzoMW eVBFp4gCOKKgwpoTasQfGVllGA1MbppmIhQtFpMJ4648OmrxUBRebIVgG2zAnP+W GgLoWNypG/r1oLa9eXeFnNDB3u+YCfsu6fOQhbPtOkq25gP/w4pVBAWSkkTpLaGi Rbt84m4y0gJ3/jYiRny/QU+H2OsNt8LjdXvDLJdytnVxkhhaSjJF/wDBgeBLYvCm 7/TkhJbid1kiU5TDyBV0Ft2P5J821/d1tw/dAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUlc0duP93O+bS1v0uzDoAgyYzeIowHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2xjMGR1UDkzTy1iUzF2MHV6RG9BZ3lZemVJby5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBATc0iAwDQYJKoZIhvcNAQELBQADggEBAIDD/lMWhnH47bFKJVzLRi//ZBhP EjTOe65017Ip5I5Ja1FIKlahLZZmYEjNQ8j07yE+qTRlhkfD7Ck+hyt80+XfAff5 GaATqsPFia/l+VU5Y/3qVGrx/hd1GE1eZllqNGovFL+1SEmI72+UifyNgq+/IztN IswrFRTs93C5G5BlJn6av7vbEPQcjIDxPS08Zod3G4yQwHaUw/APbgJm+Y7rg6Qk Y5dxkCq2yz/IPdkmn26J2lrqxYS3uYXh8ylUui/E9x9Ij0N1F2daPVjHXcHeiPCA gXLgaMT64uXnDwcROAmNfl9Kuoy+9F1avKe1vzcTDrJezkKtBu/Ren99iPM= -----END CERTIFICATE-----Generated at Sun Feb 16 22:22:49 2025 by rpki-client