$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/o_om8m6RRx29H8FDRYwnOleDqzE.roa File: o_om8m6RRx29H8FDRYwnOleDqzE.roa (raw, json) Hash identifier: s4GoEoMHO11p5lDHmHcGc+i4TNMgwbOIZYSuiaRiWc4= Subject key identifier: A3:FA:26:F2:6E:91:47:1D:BD:1F:C1:43:45:8C:27:3A:57:83:AB:31 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 09EF Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/o_om8m6RRx29H8FDRYwnOleDqzE.roa Signing time: Sun 30 Jun 2024 01:42:25 +0000 ROA not before: Sun 30 Jun 2024 01:42:25 +0000 ROA not after: Tue 24 Jun 2025 10:46:45 +0000 asID: 9605 IP address blocks: 220.210.110.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2543 (0x9ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 30 01:42:25 2024 GMT Not After : Jun 24 10:46:45 2025 GMT Subject: CN=A3FA26F26E91471DBD1FC143458C273A5783AB31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:32:13:2f:df:98:c2:6d:ed:94:c3:29:dd:95: 6d:f1:fe:df:c5:11:8f:1d:2b:d1:69:fd:9a:97:91: 49:bd:80:1c:9e:62:00:3d:ac:a9:1d:62:79:a1:5b: ed:eb:cf:11:07:62:10:72:e8:62:49:d2:07:23:91: 4f:f1:a7:94:9b:1d:da:52:b2:05:f6:69:23:37:39: b7:9f:7b:a2:ce:c2:a6:82:c2:82:86:ae:4c:84:ea: 7b:f0:d1:2c:cc:eb:b6:dc:aa:b5:ed:17:8f:83:ef: 7a:fb:d8:1d:7c:ba:f2:6e:7b:13:01:df:fb:6d:6a: 0e:ac:f0:49:77:9b:fe:02:46:c4:06:74:40:57:22: e7:1f:f5:01:56:9b:78:27:b3:84:e9:36:e5:3b:0e: cc:89:b3:70:a9:9e:35:8c:6b:74:cf:1c:23:50:54: d7:aa:43:79:4d:1c:f2:e7:81:a6:bd:ce:02:43:77: 94:dd:de:16:15:c5:a9:a1:a8:de:1e:ff:2e:1b:84: 1f:cc:98:99:9b:7d:59:9b:7e:25:90:71:45:25:62: 64:d1:ca:e8:5b:83:ad:2f:07:60:0c:9f:57:b5:a9: fd:52:8f:26:ba:4d:1f:c2:13:1b:78:e4:fe:47:03: 56:b4:98:b6:26:18:d9:03:a8:ce:0a:12:a5:cb:bd: 4e:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:FA:26:F2:6E:91:47:1D:BD:1F:C1:43:45:8C:27:3A:57:83:AB:31 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/o_om8m6RRx29H8FDRYwnOleDqzE.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 220.210.110.0/23 Signature Algorithm: sha256WithRSAEncryption 95:c3:2a:d8:59:eb:a0:2e:51:50:d9:f9:58:2d:a0:48:43:b5: 14:b3:38:e0:7f:88:8c:2b:92:35:28:25:7f:e9:15:5c:f0:8a: 95:4f:0e:77:19:81:98:a7:46:17:40:5e:2c:c8:a3:0a:84:5e: f3:05:6a:4a:56:7d:09:ff:5f:a2:ee:99:07:e7:33:ab:d7:f2: 9d:a4:f5:90:78:e9:46:a6:b3:75:fc:84:f7:95:28:80:0e:19: 71:df:b0:02:06:2c:6f:41:40:e7:6e:41:39:fe:36:71:56:50: 38:5a:2c:ce:cf:f5:e2:95:2f:96:6f:c2:64:b9:78:2c:e6:9b: f1:af:c2:0a:32:dd:82:ce:3c:67:1e:0d:06:44:63:16:ca:69: fe:fa:7a:97:04:f6:b6:84:b9:8d:ac:81:f6:87:3c:e2:d2:34: fa:94:a3:2b:41:1a:08:62:e5:a6:94:0f:11:7f:3f:cf:9e:fb: f9:32:d4:39:51:68:ba:ea:be:1f:53:0e:d8:4b:9f:74:1d:a2: 10:99:d4:56:d9:b1:ea:8c:1a:81:13:b8:18:18:63:72:c1:87: 51:9b:a1:da:2a:71:a1:ef:f6:6c:52:42:55:c2:5f:92:21:31: 0a:2a:23:9a:e9:cc:b8:98:7d:e8:3d:45:3d:ca:44:48:76:65: 4d:49:2e:82 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCe8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA2MzAw MTQyMjVaFw0yNTA2MjQxMDQ2NDVaMDMxMTAvBgNVBAMTKEEzRkEyNkYyNkU5MTQ3 MURCRDFGQzE0MzQ1OEMyNzNBNTc4M0FCMzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDtMhMv35jCbe2UwyndlW3x/t/FEY8dK9Fp/ZqXkUm9gByeYgA9 rKkdYnmhW+3rzxEHYhBy6GJJ0gcjkU/xp5SbHdpSsgX2aSM3Obefe6LOwqaCwoKG rkyE6nvw0SzM67bcqrXtF4+D73r72B18uvJuexMB3/ttag6s8El3m/4CRsQGdEBX Iucf9QFWm3gns4TpNuU7DsyJs3CpnjWMa3TPHCNQVNeqQ3lNHPLngaa9zgJDd5Td 3hYVxamhqN4e/y4bhB/MmJmbfVmbfiWQcUUlYmTRyuhbg60vB2AMn1e1qf1Sjya6 TR/CExt45P5HA1a0mLYmGNkDqM4KEqXLvU5jAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUo/om8m6RRx29H8FDRYwnOleDqzEwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L29fb204bTZSUngyOUg4RkRSWXduT2xlRHF6RS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAHc0m4wDQYJKoZIhvcNAQELBQADggEBAJXDKthZ66AuUVDZ+VgtoEhDtRSz OOB/iIwrkjUoJX/pFVzwipVPDncZgZinRhdAXizIowqEXvMFakpWfQn/X6LumQfn M6vX8p2k9ZB46Uams3X8hPeVKIAOGXHfsAIGLG9BQOduQTn+NnFWUDhaLM7P9eKV L5ZvwmS5eCzmm/Gvwgoy3YLOPGceDQZEYxbKaf76epcE9raEuY2sgfaHPOLSNPqU oytBGghi5aaUDxF/P8+e+/ky1DlRaLrqvh9TDthLn3QdohCZ1FbZseqMGoETuBgY Y3LBh1GbodoqcaHv9mxSQlXCX5IhMQoqI5rpzLiYfeg9RT3KREh2ZU1JLoI= -----END CERTIFICATE-----Generated at Sun Feb 16 22:09:59 2025 by rpki-client