$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/nXuu6xvopooVprbh7ZGjTIBZomc.roa File: nXuu6xvopooVprbh7ZGjTIBZomc.roa (raw, json) Hash identifier: Z5RkoCE63TxcbF3S6sC7owDLT/Wq5Z9is1tjDbNG/yQ= Subject key identifier: 9D:7B:AE:EB:1B:E8:A6:8A:15:A6:B6:E1:ED:91:A3:4C:80:59:A2:67 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0A04 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/nXuu6xvopooVprbh7ZGjTIBZomc.roa Signing time: Sun 30 Jun 2024 01:44:13 +0000 ROA not before: Sun 30 Jun 2024 01:44:13 +0000 ROA not after: Tue 24 Jun 2025 10:46:45 +0000 asID: 9605 IP address blocks: 211.14.93.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2564 (0xa04) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 30 01:44:13 2024 GMT Not After : Jun 24 10:46:45 2025 GMT Subject: CN=9D7BAEEB1BE8A68A15A6B6E1ED91A34C8059A267 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:94:e7:b3:79:53:37:c9:0a:6b:fb:2a:fb:a3: 5f:b0:15:15:fc:e3:2b:b2:ed:7a:ea:eb:6a:b4:d3: 36:fa:f9:46:43:7e:e7:ae:89:1a:ab:cf:0d:d7:d6: 26:cd:23:39:c2:7f:74:0f:44:e1:5c:1a:8d:7c:0f: 38:d3:cf:1a:54:28:8d:b9:ba:28:22:93:86:62:91: 1a:f8:cb:55:95:cd:c0:57:47:e7:e2:ad:2c:b9:a4: 5f:31:bc:fa:6a:3a:1f:47:d4:d4:2e:90:c6:fa:0d: 01:5c:53:9f:3c:72:bb:d5:5e:58:d3:06:11:f7:b9: b8:cf:7e:40:66:1a:53:a1:8a:f8:fd:82:56:cd:46: ee:9e:6f:a9:44:5b:b9:57:d1:1b:5f:f4:f9:1a:53: 65:71:1e:0d:1c:c6:f8:21:5f:cf:70:c7:12:73:1a: 6d:22:69:6e:00:cb:9c:49:8d:03:c9:db:a8:f7:09: 65:86:55:6f:32:db:1a:33:e1:59:71:a3:8f:82:e4: 02:a0:3b:5c:75:86:39:4e:1c:49:05:e9:e8:08:25: e2:08:e6:f0:b4:79:e3:c1:64:6b:04:07:f0:b2:c0: ec:cd:9b:32:42:39:20:76:4d:6f:a3:a3:ba:e8:e8: 46:2d:6b:32:5d:79:6f:1f:79:0d:da:5c:fc:6c:b1: bc:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:7B:AE:EB:1B:E8:A6:8A:15:A6:B6:E1:ED:91:A3:4C:80:59:A2:67 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/nXuu6xvopooVprbh7ZGjTIBZomc.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 211.14.93.0/24 Signature Algorithm: sha256WithRSAEncryption 83:9c:17:6a:be:af:32:25:ef:87:77:3a:10:94:16:fa:1a:4a: a5:d3:a8:6f:99:f5:d2:3b:29:b4:8d:3d:ac:3e:c3:d2:47:a5: c7:89:3e:77:5a:bd:eb:c9:49:1d:7e:90:3c:b1:61:88:fa:78: 71:32:83:f3:03:d4:37:d5:fb:79:ad:aa:71:16:cf:f0:ae:09: bf:c7:a2:57:45:6e:3f:2f:48:85:65:2f:97:e7:64:b9:ac:01: 8a:23:74:37:0a:97:54:3b:c2:62:04:f2:8c:b5:1d:8f:09:c9: fe:05:b1:85:58:9c:71:8a:c3:6d:cb:7c:ea:99:c8:a2:9c:b3: 44:25:90:70:b9:78:ab:4e:53:77:fb:1a:6a:70:57:9b:ff:93: 13:c2:42:87:92:8b:4a:2d:8d:3f:3e:7f:ca:73:a6:3c:3e:f8: bf:70:47:f1:9a:aa:21:3c:2a:cd:d7:3c:6d:fd:5e:63:4b:eb: f1:76:1e:28:20:67:b7:14:d9:e3:2a:1d:18:b1:9f:22:f9:f4: 77:24:25:ea:51:4e:e7:fb:3e:30:2e:05:2d:2b:45:a4:d8:5e: b8:68:fb:ca:ba:86:b1:2a:07:d6:3e:80:05:71:1b:f4:1d:61: 37:00:bc:74:db:32:7a:de:8d:45:c8:d0:c5:0a:52:4c:3f:ef: 3e:52:e6:3a -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCgQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA2MzAw MTQ0MTNaFw0yNTA2MjQxMDQ2NDVaMDMxMTAvBgNVBAMTKDlEN0JBRUVCMUJFOEE2 OEExNUE2QjZFMUVEOTFBMzRDODA1OUEyNjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDOlOezeVM3yQpr+yr7o1+wFRX84yuy7Xrq62q00zb6+UZDfueu iRqrzw3X1ibNIznCf3QPROFcGo18DzjTzxpUKI25uigik4ZikRr4y1WVzcBXR+fi rSy5pF8xvPpqOh9H1NQukMb6DQFcU588crvVXljTBhH3ubjPfkBmGlOhivj9glbN Ru6eb6lEW7lX0Rtf9PkaU2VxHg0cxvghX89wxxJzGm0iaW4Ay5xJjQPJ26j3CWWG VW8y2xoz4Vlxo4+C5AKgO1x1hjlOHEkF6egIJeII5vC0eePBZGsEB/CywOzNmzJC OSB2TW+jo7ro6EYtazJdeW8feQ3aXPxssbw/AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUnXuu6xvopooVprbh7ZGjTIBZomcwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L25YdXU2eHZvcG9vVnByYmg3WkdqVElCWm9tYy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADTDl0wDQYJKoZIhvcNAQELBQADggEBAIOcF2q+rzIl74d3OhCUFvoaSqXT qG+Z9dI7KbSNPaw+w9JHpceJPndavevJSR1+kDyxYYj6eHEyg/MD1DfV+3mtqnEW z/CuCb/HoldFbj8vSIVlL5fnZLmsAYojdDcKl1Q7wmIE8oy1HY8Jyf4FsYVYnHGK w23LfOqZyKKcs0QlkHC5eKtOU3f7GmpwV5v/kxPCQoeSi0otjT8+f8pzpjw++L9w R/GaqiE8Ks3XPG39XmNL6/F2HiggZ7cU2eMqHRixnyL59HckJepRTuf7PjAuBS0r RaTYXrho+8q6hrEqB9Y+gAVxG/QdYTcAvHTbMnrejUXI0MUKUkw/7z5S5jo= -----END CERTIFICATE-----Generated at Sun Feb 16 22:07:31 2025 by rpki-client