$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ng6mVUBfwW5iCU8YlipSTqLp7mU.roa File: ng6mVUBfwW5iCU8YlipSTqLp7mU.roa (raw, json) Hash identifier: 9/YEkfQa6N2HwajtV2Je4ccnqKJ3xlMpf7+26CBkST8= Subject key identifier: 9E:0E:A6:55:40:5F:C1:6E:62:09:4F:18:96:2A:52:4E:A2:E9:EE:65 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0A41 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ng6mVUBfwW5iCU8YlipSTqLp7mU.roa Signing time: Sun 30 Jun 2024 01:48:22 +0000 ROA not before: Sun 30 Jun 2024 01:48:22 +0000 ROA not after: Tue 24 Jun 2025 10:46:45 +0000 asID: 9605 IP address blocks: 1.77.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2625 (0xa41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 30 01:48:22 2024 GMT Not After : Jun 24 10:46:45 2025 GMT Subject: CN=9E0EA655405FC16E62094F18962A524EA2E9EE65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:4d:3a:c0:0f:2b:1f:7a:86:f3:a7:95:fb:ec: b2:f8:d6:7b:49:8a:f5:e4:00:a1:11:57:76:d9:1d: e3:84:83:d4:64:27:4a:c5:b9:3e:89:49:ca:bc:87: df:e5:1b:56:f0:a5:9c:42:3f:08:98:75:76:d7:0d: d3:11:ce:e1:a1:28:c7:bb:8f:1c:51:4c:ff:8a:4c: a5:41:09:2e:5d:73:48:0f:09:96:a3:7b:fd:04:48: 10:1e:b9:07:86:42:0e:fd:83:0d:cf:20:be:92:be: d1:35:20:6b:f7:2b:51:f0:fe:eb:9b:0f:ef:be:c6: be:e6:af:b8:0e:31:e5:8b:f7:29:16:e9:5b:be:e3: 67:61:32:74:ea:6c:b2:d3:b4:ab:85:a8:dc:56:c6: 0a:e1:2a:fb:4c:6a:cb:5b:1f:f2:f5:23:7c:02:4a: 66:9c:52:57:15:c4:b0:ac:d0:af:d7:ac:9c:45:9a: 13:f2:c7:24:84:ed:e3:43:03:2b:d0:f6:73:28:1a: 7e:78:c4:41:cf:8d:09:0f:4a:3b:cb:0e:eb:6c:f0: 81:f9:60:32:79:a6:65:55:84:31:7a:bf:0a:7f:05: f7:00:5e:d0:77:7f:76:31:bc:bf:d4:9f:22:de:8d: ee:9a:0f:08:ab:5c:9b:1f:0c:82:38:a8:cd:60:9e: 8c:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:0E:A6:55:40:5F:C1:6E:62:09:4F:18:96:2A:52:4E:A2:E9:EE:65 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ng6mVUBfwW5iCU8YlipSTqLp7mU.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.77.0.0/17 Signature Algorithm: sha256WithRSAEncryption 96:43:7a:80:3c:4e:56:0c:65:43:d6:a1:d9:34:bf:0a:53:b0: 7c:7f:be:29:44:96:a0:32:69:82:e7:e4:81:51:20:24:6a:10: 8c:3f:77:58:92:ab:cc:7f:f0:56:dc:f9:6c:55:46:88:8f:ff: 57:92:a1:e2:7d:45:68:8e:0f:65:05:42:4e:28:e6:56:c0:0a: 5a:32:3f:52:b8:f8:e8:bc:4a:ac:65:7b:31:5e:f2:c7:c6:71: 2f:c2:82:10:7f:eb:8a:a6:dd:2e:4a:23:90:6e:10:c3:ac:de: 0a:93:f7:95:3a:8f:47:d3:51:9e:cf:d2:74:11:b7:a0:4e:d4: 41:3f:8f:35:10:73:d1:41:69:95:d0:ce:74:c7:38:70:b6:ca: 34:de:2a:e3:99:dc:ea:19:79:d7:ea:ca:ea:e4:48:6a:9f:5e: 93:e7:7d:65:19:58:bb:df:25:c0:f2:22:0c:d3:3a:94:f7:23: aa:23:23:7a:a8:47:8f:45:23:9b:39:f6:83:30:58:74:36:28: ec:d1:81:32:7b:23:00:7e:be:49:39:63:1a:ca:3e:6c:50:e6: 69:13:03:4e:62:46:29:86:4d:10:35:e6:40:e2:9f:11:38:4d: 1a:f0:d1:e4:1e:57:97:e8:85:fd:db:91:d4:8d:ae:fb:c3:ad: 32:18:a5:cb -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCkEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA2MzAw MTQ4MjJaFw0yNTA2MjQxMDQ2NDVaMDMxMTAvBgNVBAMTKDlFMEVBNjU1NDA1RkMx NkU2MjA5NEYxODk2MkE1MjRFQTJFOUVFNjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDMTTrADysfeobzp5X77LL41ntJivXkAKERV3bZHeOEg9RkJ0rF uT6JScq8h9/lG1bwpZxCPwiYdXbXDdMRzuGhKMe7jxxRTP+KTKVBCS5dc0gPCZaj e/0ESBAeuQeGQg79gw3PIL6SvtE1IGv3K1Hw/uubD+++xr7mr7gOMeWL9ykW6Vu+ 42dhMnTqbLLTtKuFqNxWxgrhKvtMastbH/L1I3wCSmacUlcVxLCs0K/XrJxFmhPy xySE7eNDAyvQ9nMoGn54xEHPjQkPSjvLDuts8IH5YDJ5pmVVhDF6vwp/BfcAXtB3 f3YxvL/UnyLeje6aDwirXJsfDII4qM1gnoz/AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUng6mVUBfwW5iCU8YlipSTqLp7mUwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L25nNm1WVUJmd1c1aUNVOFlsaXBTVHFMcDdtVS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAcBTQAwDQYJKoZIhvcNAQELBQADggEBAJZDeoA8TlYMZUPWodk0vwpTsHx/ vilElqAyaYLn5IFRICRqEIw/d1iSq8x/8Fbc+WxVRoiP/1eSoeJ9RWiOD2UFQk4o 5lbACloyP1K4+Oi8SqxlezFe8sfGcS/CghB/64qm3S5KI5BuEMOs3gqT95U6j0fT UZ7P0nQRt6BO1EE/jzUQc9FBaZXQznTHOHC2yjTeKuOZ3OoZedfqyurkSGqfXpPn fWUZWLvfJcDyIgzTOpT3I6ojI3qoR49FI5s59oMwWHQ2KOzRgTJ7IwB+vkk5YxrK PmxQ5mkTA05iRimGTRA15kDinxE4TRrw0eQeV5fohf3bkdSNrvvDrTIYpcs= -----END CERTIFICATE-----Generated at Sun Feb 16 22:26:33 2025 by rpki-client