$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/rWICOrio3aClXHh8uzM6aQ1Z_PI.roa File: rWICOrio3aClXHh8uzM6aQ1Z_PI.roa (raw, json) Hash identifier: 3TBMZkfIE/k1dVnUA8PDOVKoQNU2Bda+zaQJcAz2/fE= Subject key identifier: AD:62:02:3A:B8:A8:DD:A0:A5:5C:78:7C:BB:33:3A:69:0D:59:FC:F2 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 09B7 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/rWICOrio3aClXHh8uzM6aQ1Z_PI.roa Signing time: Sun 30 Jun 2024 01:38:22 +0000 ROA not before: Sun 30 Jun 2024 01:38:22 +0000 ROA not after: Tue 24 Jun 2025 10:46:45 +0000 asID: 9605 IP address blocks: 27.230.104.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2487 (0x9b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 30 01:38:22 2024 GMT Not After : Jun 24 10:46:45 2025 GMT Subject: CN=AD62023AB8A8DDA0A55C787CBB333A690D59FCF2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:78:01:80:20:b4:f7:db:75:7b:40:25:77:71: 48:57:15:fa:81:45:94:bd:e4:d8:e1:72:18:09:75: b9:17:13:06:6c:5e:b5:b2:7d:47:2f:e9:6f:b6:d1: 9e:d1:e1:d6:04:99:30:7b:0f:62:54:fc:09:12:b3: 45:b1:55:08:90:b0:f7:03:4d:1b:7e:98:f4:52:a8: d0:47:84:cf:5f:d5:2c:9d:88:c8:fe:cd:aa:53:d2: b6:85:9a:97:e4:93:a0:9e:83:23:86:dc:e7:82:ec: 90:e4:64:d9:b2:f6:62:2c:bc:66:7a:bf:ff:01:b5: 41:88:69:41:82:49:50:9f:b5:81:c7:b8:63:5d:dd: 51:a6:36:bb:ef:f8:8b:c3:5b:6b:a8:80:ca:03:f0: 35:ba:08:68:dd:83:94:43:7f:a1:0c:75:7b:29:1c: cf:cd:ed:3f:f9:7d:4c:76:ef:6a:d0:be:da:df:ac: 78:ec:38:14:f3:fa:dd:04:da:05:04:ef:d2:19:ac: 60:95:fc:3e:f3:17:81:b9:a5:69:a8:b1:15:62:d8: 61:83:8d:31:45:38:3f:07:2e:11:d3:4d:b6:38:75: 58:bc:fb:8c:e6:3c:96:b3:a3:f4:6a:e1:86:e7:df: 88:52:89:82:27:b8:29:ca:29:e3:7d:ef:85:3d:0c: 85:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:62:02:3A:B8:A8:DD:A0:A5:5C:78:7C:BB:33:3A:69:0D:59:FC:F2 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/rWICOrio3aClXHh8uzM6aQ1Z_PI.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.230.104.0/22 Signature Algorithm: sha256WithRSAEncryption 76:6e:87:e1:1b:11:9a:c4:97:01:e6:bf:20:01:91:44:17:06: 1a:04:cd:d8:a4:4c:3c:70:cd:b0:96:a6:52:b8:23:b9:02:16: ae:08:0d:5f:ed:09:95:18:e2:b9:33:67:7f:d8:ab:95:f6:6f: 4f:84:46:64:0a:60:46:7e:d9:54:ec:59:43:72:c9:ca:36:97: 9c:1c:f0:7e:87:1f:99:b4:3c:23:a3:b2:8b:a5:17:b7:82:be: 44:33:28:ea:df:c0:c3:ab:92:e2:29:07:48:7a:c2:b4:93:5c: 33:fe:f0:23:17:ff:b2:b0:27:e9:14:8b:f3:aa:c6:93:a1:00: 67:35:96:db:95:0e:ec:86:1e:0f:1e:41:19:f0:8b:4c:4a:eb: e2:ec:e5:b7:20:05:8a:24:e6:1c:42:23:25:dc:c5:e6:6d:3d: 64:a7:3a:b6:88:13:4f:63:15:ea:87:51:c7:25:d8:e6:b5:5d: b7:9e:c0:7a:ec:15:14:cf:96:83:40:8a:f4:2d:62:a6:e2:d9: 7c:a5:1f:7e:92:7e:42:b5:d2:f3:e1:eb:f2:b2:7a:39:a2:67: 3e:d9:e1:86:6d:eb:86:fd:f9:c6:e3:b2:f3:24:e6:7d:d4:76: 37:d7:38:b4:4b:b1:cf:33:37:71:3c:0e:b2:15:e9:ef:33:bf: fa:10:8d:2b -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCbcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA2MzAw MTM4MjJaFw0yNTA2MjQxMDQ2NDVaMDMxMTAvBgNVBAMTKEFENjIwMjNBQjhBOERE QTBBNTVDNzg3Q0JCMzMzQTY5MEQ1OUZDRjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDQeAGAILT323V7QCV3cUhXFfqBRZS95NjhchgJdbkXEwZsXrWy fUcv6W+20Z7R4dYEmTB7D2JU/AkSs0WxVQiQsPcDTRt+mPRSqNBHhM9f1SydiMj+ zapT0raFmpfkk6CegyOG3OeC7JDkZNmy9mIsvGZ6v/8BtUGIaUGCSVCftYHHuGNd 3VGmNrvv+IvDW2uogMoD8DW6CGjdg5RDf6EMdXspHM/N7T/5fUx272rQvtrfrHjs OBTz+t0E2gUE79IZrGCV/D7zF4G5pWmosRVi2GGDjTFFOD8HLhHTTbY4dVi8+4zm PJazo/Rq4Ybn34hSiYInuCnKKeN974U9DIVjAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUrWICOrio3aClXHh8uzM6aQ1Z/PIwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3JXSUNPcmlvM2FDbFhIaDh1ek02YVExWl9QSS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIb5mgwDQYJKoZIhvcNAQELBQADggEBAHZuh+EbEZrElwHmvyABkUQXBhoE zdikTDxwzbCWplK4I7kCFq4IDV/tCZUY4rkzZ3/Yq5X2b0+ERmQKYEZ+2VTsWUNy yco2l5wc8H6HH5m0PCOjsoulF7eCvkQzKOrfwMOrkuIpB0h6wrSTXDP+8CMX/7Kw J+kUi/OqxpOhAGc1ltuVDuyGHg8eQRnwi0xK6+Ls5bcgBYok5hxCIyXcxeZtPWSn OraIE09jFeqHUccl2Oa1XbeewHrsFRTPloNAivQtYqbi2XylH36SfkK10vPh6/Ky ejmiZz7Z4YZt64b9+cbjsvMk5n3UdjfXOLRLsc8zN3E8DrIV6e8zv/oQjSs= -----END CERTIFICATE-----Generated at Sun Feb 16 22:11:23 2025 by rpki-client