$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/pMozAtk5lE60MqKC0xAVW6iFoSM.roa File: pMozAtk5lE60MqKC0xAVW6iFoSM.roa (raw, json) Hash identifier: lhgOad4exvFf1X0hv09RyUb9+LzxpuYPUy3LFKKSRUM= Subject key identifier: A4:CA:33:02:D9:39:94:4E:B4:32:A2:82:D3:10:15:5B:A8:85:A1:23 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 09BB Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/pMozAtk5lE60MqKC0xAVW6iFoSM.roa Signing time: Sun 30 Jun 2024 01:38:24 +0000 ROA not before: Sun 30 Jun 2024 01:38:24 +0000 ROA not after: Tue 24 Jun 2025 10:46:45 +0000 asID: 9605 IP address blocks: 110.158.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2491 (0x9bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 30 01:38:24 2024 GMT Not After : Jun 24 10:46:45 2025 GMT Subject: CN=A4CA3302D939944EB432A282D310155BA885A123 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:64:dd:54:de:9f:bb:3d:00:ad:9d:7e:6c:50: 63:bb:63:71:db:59:58:97:a7:f2:c3:4f:90:43:70: 7b:f0:de:a8:74:df:51:fd:83:65:95:d5:61:61:d6: bc:bf:24:7e:14:2f:46:21:08:2b:5e:68:9d:11:4b: 37:a2:cb:d7:c6:8d:2b:02:fb:33:df:28:07:43:d8: ea:fc:8d:d3:6a:b2:83:bb:9f:09:0d:43:57:54:8f: d6:6d:08:5c:e6:be:66:11:e4:09:a9:09:01:9d:4d: c1:6a:98:41:58:4a:3a:e3:69:d0:92:03:64:92:1a: 78:cf:e4:6c:80:ac:e0:a9:4b:a2:1d:63:88:17:e0: 52:4e:87:ed:e3:cf:61:47:ae:f1:11:50:cc:3b:35: 84:57:28:39:88:2f:56:e0:b9:36:4a:b2:2d:f5:8f: 94:d4:af:cc:d4:97:f9:3f:a8:0e:f7:9e:db:9c:25: d3:61:01:fa:49:ae:70:5c:4d:b6:c4:f1:87:08:ae: d6:59:db:e1:5d:5a:74:fe:ed:34:00:be:f0:26:67: 02:7a:4c:6f:3f:65:aa:0a:24:c1:4e:55:f2:7c:2a: be:70:a7:a9:f5:52:9a:05:ea:1e:89:ea:8b:5d:9b: ca:6b:61:ba:e8:e5:cb:28:e5:15:16:fe:86:20:df: 94:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:CA:33:02:D9:39:94:4E:B4:32:A2:82:D3:10:15:5B:A8:85:A1:23 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/pMozAtk5lE60MqKC0xAVW6iFoSM.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 110.158.0.0/18 Signature Algorithm: sha256WithRSAEncryption d0:1c:a5:b7:39:64:40:3e:7a:8e:14:e0:fa:13:fd:ad:a7:9b: 16:06:be:96:e2:7c:03:de:44:6b:a4:12:2e:35:e0:92:b0:06: 1f:f1:d2:b8:6a:9d:ff:26:8c:d4:90:2d:16:13:17:7d:be:d0: 4f:df:22:ed:79:e7:51:98:82:e0:a4:c1:08:3a:bc:06:43:58: a1:85:e5:42:ed:90:8e:f1:ed:2b:7d:0b:cc:8e:c5:6d:0b:5c: 80:af:9f:d2:d1:c2:83:a9:4f:76:0a:01:91:9c:00:30:8a:01: 31:9f:83:d1:bb:ba:0d:4e:be:20:fc:30:19:be:e7:39:db:12: f7:66:15:bf:8a:e4:b2:df:62:49:db:c6:72:78:22:97:f3:0a: 94:ce:ce:f9:74:5d:aa:44:dc:06:fc:ea:a1:ca:55:4a:41:34: a1:47:3e:2e:a2:03:4d:c8:3b:2f:9a:98:d7:e4:d0:38:33:3a: 67:96:45:68:1b:72:fe:d2:6c:2d:c4:c1:8f:e5:5a:c9:8d:32: 49:94:fa:7e:43:bb:3e:b2:36:32:26:c8:bb:3f:c6:32:ef:55: 5a:fd:ac:bc:b3:06:e7:e4:67:9c:68:66:8a:53:5c:19:ef:3c: aa:e3:9a:99:3e:87:36:8f:b1:b2:d5:0f:cd:16:82:43:b5:ee: 82:60:57:64 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCbswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA2MzAw MTM4MjRaFw0yNTA2MjQxMDQ2NDVaMDMxMTAvBgNVBAMTKEE0Q0EzMzAyRDkzOTk0 NEVCNDMyQTI4MkQzMTAxNTVCQTg4NUExMjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDfZN1U3p+7PQCtnX5sUGO7Y3HbWViXp/LDT5BDcHvw3qh031H9 g2WV1WFh1ry/JH4UL0YhCCteaJ0RSzeiy9fGjSsC+zPfKAdD2Or8jdNqsoO7nwkN Q1dUj9ZtCFzmvmYR5AmpCQGdTcFqmEFYSjrjadCSA2SSGnjP5GyArOCpS6IdY4gX 4FJOh+3jz2FHrvERUMw7NYRXKDmIL1bguTZKsi31j5TUr8zUl/k/qA73ntucJdNh AfpJrnBcTbbE8YcIrtZZ2+FdWnT+7TQAvvAmZwJ6TG8/ZaoKJMFOVfJ8Kr5wp6n1 UpoF6h6J6otdm8prYbro5cso5RUW/oYg35RzAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUpMozAtk5lE60MqKC0xAVW6iFoSMwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3BNb3pBdGs1bEU2ME1xS0MweEFWVzZpRm9TTS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAZungAwDQYJKoZIhvcNAQELBQADggEBANAcpbc5ZEA+eo4U4PoT/a2nmxYG vpbifAPeRGukEi414JKwBh/x0rhqnf8mjNSQLRYTF32+0E/fIu1551GYguCkwQg6 vAZDWKGF5ULtkI7x7St9C8yOxW0LXICvn9LRwoOpT3YKAZGcADCKATGfg9G7ug1O viD8MBm+5znbEvdmFb+K5LLfYknbxnJ4IpfzCpTOzvl0XapE3Ab86qHKVUpBNKFH Pi6iA03IOy+amNfk0DgzOmeWRWgbcv7SbC3EwY/lWsmNMkmU+n5Duz6yNjImyLs/ xjLvVVr9rLyzBufkZ5xoZopTXBnvPKrjmpk+hzaPsbLVD80WgkO17oJgV2Q= -----END CERTIFICATE-----Generated at Sun Feb 16 22:25:56 2025 by rpki-client