$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/rcToGFwI015Thp1ZAIOTDwBV_yM.roa File: rcToGFwI015Thp1ZAIOTDwBV_yM.roa (raw, json) Hash identifier: vce11AQPrH7rabCc3bSRVgeHg5W315sP+zjqtxb3naM= Subject key identifier: AD:C4:E8:18:5C:08:D3:5E:53:86:9D:59:00:83:93:0F:00:55:FF:23 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0B27 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/rcToGFwI015Thp1ZAIOTDwBV_yM.roa Signing time: Fri 31 Jan 2025 01:38:02 +0000 ROA not before: Fri 31 Jan 2025 01:38:02 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.97.100.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2855 (0xb27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jan 31 01:38:02 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=ADC4E8185C08D35E53869D590083930F0055FF23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:de:20:c7:fd:38:18:01:b5:3c:a9:65:2b:a1: 65:95:25:fd:c4:45:aa:69:61:d7:2d:cb:57:a6:2b: d1:40:c6:96:3f:15:6c:05:f8:c3:16:23:54:72:ae: a5:00:8d:f9:2d:7f:3a:a2:e2:e8:85:8f:48:9c:19: d4:b7:d6:40:ea:0b:cc:3d:6e:e9:8f:fa:af:8e:ff: 62:34:ce:16:e3:16:b8:6a:c1:68:d1:26:02:2e:3e: b3:13:71:f8:32:ba:8c:d2:dd:40:4d:47:a7:5f:54: c9:aa:af:1d:5b:63:55:9b:24:e6:7c:29:b9:3e:53: 48:3f:90:21:a8:8d:d7:71:df:bd:e9:07:e4:11:2a: 6b:68:64:bc:4a:90:ea:ad:9c:4a:a4:53:49:48:01: c4:77:7a:0e:45:11:67:84:be:b0:11:ab:b8:dc:09: 2e:db:84:7c:7a:35:a9:5a:22:d7:ff:fa:28:20:9f: c4:73:e3:6c:b1:e6:54:f4:63:9a:62:ac:22:6b:69: ec:06:b2:ee:27:e4:d5:ad:a2:65:ee:53:dc:18:d0: 91:31:d1:6c:eb:9a:b9:78:e9:2c:ea:37:a0:a3:73: 98:5b:1e:b8:30:42:bc:fb:76:55:4a:1f:63:01:ed: 87:8f:8b:8a:8b:a3:e7:86:d3:a6:3a:4c:ee:12:5e: 8b:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:C4:E8:18:5C:08:D3:5E:53:86:9D:59:00:83:93:0F:00:55:FF:23 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/rcToGFwI015Thp1ZAIOTDwBV_yM.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.97.100.0/23 Signature Algorithm: sha256WithRSAEncryption af:ce:31:48:0d:8c:e7:d6:28:d9:b4:5c:98:e4:b9:87:42:88: 4a:76:52:8a:57:57:f1:cb:c5:f3:53:cf:c4:f2:da:6e:98:1f: 92:7a:64:ea:21:f2:9c:83:e9:72:c9:9a:ad:e3:a1:0f:8b:af: ce:58:8e:86:ec:f0:7e:99:f3:59:21:27:25:ac:04:cf:65:36: f3:51:b2:76:25:bf:13:5f:bf:9a:0c:16:2f:b3:c4:86:15:98: 8d:10:82:85:2a:af:27:e6:53:38:66:8b:1c:27:d3:75:d0:a9: 21:86:e8:db:8d:f9:b5:b8:d0:9f:24:d6:af:c7:39:c1:2f:21: 0f:17:f9:f9:bc:0f:1e:4f:a6:1a:40:0d:70:7c:a3:c6:0c:c7: cc:ee:c9:b3:f5:b1:4f:c2:13:f2:e8:10:e0:0b:43:77:cc:29: b2:1e:6a:de:b7:5b:67:10:f7:2f:75:5a:a7:05:9f:37:ff:c9: de:a1:7f:9e:cf:e9:a5:ba:1c:c6:0e:dd:66:01:c0:fb:80:50: f5:d2:df:c5:93:a8:2f:0c:24:ee:d7:9f:31:e8:73:9f:32:47: b5:51:c9:3d:26:04:17:da:6a:74:40:2f:4d:47:63:70:7a:83: 8c:13:c2:72:f2:33:06:ba:1d:a5:67:15:07:8c:c8:b3:15:9a: 9d:94:ab:cc -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCycwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTAxMzEw MTM4MDJaFw0yNjAxMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEFEQzRFODE4NUMwOEQz NUU1Mzg2OUQ1OTAwODM5MzBGMDA1NUZGMjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC13iDH/TgYAbU8qWUroWWVJf3ERappYdcty1emK9FAxpY/FWwF +MMWI1RyrqUAjfktfzqi4uiFj0icGdS31kDqC8w9bumP+q+O/2I0zhbjFrhqwWjR JgIuPrMTcfgyuozS3UBNR6dfVMmqrx1bY1WbJOZ8Kbk+U0g/kCGojddx373pB+QR KmtoZLxKkOqtnEqkU0lIAcR3eg5FEWeEvrARq7jcCS7bhHx6NalaItf/+iggn8Rz 42yx5lT0Y5pirCJraewGsu4n5NWtomXuU9wY0JEx0Wzrmrl46SzqN6Cjc5hbHrgw Qrz7dlVKH2MB7YePi4qLo+eG06Y6TO4SXotPAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUrcToGFwI015Thp1ZAIOTDwBV/yMwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3JjVG9HRndJMDE1VGhwMVpBSU9URHdCVl95TS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExYWQwDQYJKoZIhvcNAQELBQADggEBAK/OMUgNjOfWKNm0XJjkuYdCiEp2 UopXV/HLxfNTz8Ty2m6YH5J6ZOoh8pyD6XLJmq3joQ+Lr85Yjobs8H6Z81khJyWs BM9lNvNRsnYlvxNfv5oMFi+zxIYVmI0QgoUqryfmUzhmixwn03XQqSGG6NuN+bW4 0J8k1q/HOcEvIQ8X+fm8Dx5PphpADXB8o8YMx8zuybP1sU/CE/LoEOALQ3fMKbIe at63W2cQ9y91WqcFnzf/yd6hf57P6aW6HMYO3WYBwPuAUPXS38WTqC8MJO7XnzHo c58yR7VRyT0mBBfaanRAL01HY3B6g4wTwnLyMwa6HaVnFQeMyLMVmp2Uq8w= -----END CERTIFICATE-----Generated at Wed Feb 19 22:44:05 2025 by rpki-client