$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/xWCyw9leagk62IBXWB-5N10B5Fk.roa File: xWCyw9leagk62IBXWB-5N10B5Fk.roa (raw, json) Hash identifier: l5JjDwk7APUaSNrRQSg+vsPa77J2qi+mt7TVBqHFFLk= Subject key identifier: C5:60:B2:C3:D9:5E:6A:09:3A:D8:80:57:58:1F:B9:37:5D:01:E4:59 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0B1E Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/xWCyw9leagk62IBXWB-5N10B5Fk.roa Signing time: Fri 31 Jan 2025 01:37:57 +0000 ROA not before: Fri 31 Jan 2025 01:37:57 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.97.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Feb 2025 20:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2846 (0xb1e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jan 31 01:37:57 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=C560B2C3D95E6A093AD88057581FB9375D01E459 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:d2:59:b0:77:09:ae:bf:96:c4:ea:2b:6c:64: 8a:66:6b:05:3f:89:32:ee:ed:6f:5b:4a:6e:e8:36: 1c:f9:97:dd:34:d5:ff:45:22:e9:b7:03:49:fa:0b: 95:dd:b1:0f:df:5c:3a:e6:83:53:96:7e:32:35:a6: 50:76:3a:b2:22:a4:0a:3b:93:97:e0:93:6b:da:e0: 16:bf:72:6e:1a:1a:62:ec:c3:66:dc:44:d0:9e:af: 1f:67:eb:2e:94:a6:32:8f:5d:23:df:43:3a:48:0a: d9:ad:99:b1:cd:4f:25:0a:bd:c6:80:8c:5f:80:38: 3c:39:43:fc:ed:bb:8d:11:c7:e5:f9:c4:29:5c:4e: 1f:bb:38:b6:b8:0a:6e:dc:aa:c0:fb:78:30:e2:fd: 00:a7:82:ed:71:86:47:13:64:56:33:18:3a:92:ed: 40:3f:09:0c:97:55:13:77:05:5d:89:75:9a:ec:c8: cd:48:36:ca:f2:32:72:1e:c1:80:cb:a9:f2:9e:39: a0:b6:ee:19:5f:38:de:68:c6:3c:89:f9:1c:44:b6: c1:72:7c:59:dc:6a:f0:1f:87:ef:28:8e:5d:b9:6a: 6b:d1:1c:ed:41:b1:21:71:2e:53:9c:8a:77:2e:56: 0c:ab:eb:5d:ed:42:c0:ad:e0:63:ab:d1:f3:97:2d: 76:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:60:B2:C3:D9:5E:6A:09:3A:D8:80:57:58:1F:B9:37:5D:01:E4:59 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/xWCyw9leagk62IBXWB-5N10B5Fk.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.97.100.0/24 Signature Algorithm: sha256WithRSAEncryption c0:31:a5:d4:62:13:90:c0:87:fb:56:ca:b4:14:70:96:ef:0b: 6f:98:26:28:44:bd:44:b4:83:d6:14:fe:eb:30:8a:21:06:38: 6b:76:d8:97:72:7c:c4:f9:17:0a:5d:e6:d8:db:ec:3a:7b:8b: 46:36:76:73:55:b2:12:5e:ca:47:3c:f5:ba:0b:be:b6:d6:90: 36:01:f0:63:e4:6b:81:26:3a:62:19:ed:04:56:e4:13:df:24: 89:96:6c:8a:5a:5f:7e:55:6c:29:2b:77:9d:16:01:d1:7a:dd: b5:3d:e8:ef:79:67:02:52:69:a7:5b:65:27:9a:30:c6:58:a4: 5e:43:0a:fe:6f:2c:07:6a:c1:c5:6e:6e:0b:97:d3:d0:01:ee: 4a:a9:03:b0:2c:a0:0b:4b:82:81:b6:92:f8:bc:21:32:3d:26: ad:43:8f:7c:5e:e7:6f:7b:a7:0a:7f:b4:e1:3c:78:15:71:24: d1:bb:9d:68:c2:89:b3:9f:24:40:37:8c:58:3f:52:ab:30:b7: 62:a5:d3:9b:bc:70:26:03:6d:30:27:e0:52:e6:19:ed:b5:71: f6:f1:33:22:a8:bc:2a:1c:9c:fc:31:e8:19:3f:ed:46:4f:3c: 3a:66:62:7f:00:bc:08:38:e9:6b:b1:07:23:64:16:32:6e:85: 87:7d:e1:f7 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCx4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTAxMzEw MTM3NTdaFw0yNjAxMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEM1NjBCMkMzRDk1RTZB MDkzQUQ4ODA1NzU4MUZCOTM3NUQwMUU0NTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDS0lmwdwmuv5bE6itsZIpmawU/iTLu7W9bSm7oNhz5l9001f9F Ium3A0n6C5XdsQ/fXDrmg1OWfjI1plB2OrIipAo7k5fgk2va4Ba/cm4aGmLsw2bc RNCerx9n6y6UpjKPXSPfQzpICtmtmbHNTyUKvcaAjF+AODw5Q/ztu40Rx+X5xClc Th+7OLa4Cm7cqsD7eDDi/QCngu1xhkcTZFYzGDqS7UA/CQyXVRN3BV2JdZrsyM1I NsryMnIewYDLqfKeOaC27hlfON5oxjyJ+RxEtsFyfFncavAfh+8ojl25amvRHO1B sSFxLlOcincuVgyr613tQsCt4GOr0fOXLXaDAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUxWCyw9leagk62IBXWB+5N10B5FkwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3hXQ3l3OWxlYWdrNjJJQlhXQi01TjEwQjVGay5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAxYWQwDQYJKoZIhvcNAQELBQADggEBAMAxpdRiE5DAh/tWyrQUcJbvC2+Y JihEvUS0g9YU/uswiiEGOGt22JdyfMT5Fwpd5tjb7Dp7i0Y2dnNVshJeykc89boL vrbWkDYB8GPka4EmOmIZ7QRW5BPfJImWbIpaX35VbCkrd50WAdF63bU96O95ZwJS aadbZSeaMMZYpF5DCv5vLAdqwcVubguX09AB7kqpA7AsoAtLgoG2kvi8ITI9Jq1D j3xe5297pwp/tOE8eBVxJNG7nWjCibOfJEA3jFg/Uqswt2Kl05u8cCYDbTAn4FLm Ge21cfbxMyKovCocnPwx6Bk/7UZPPDpmYn8AvAg46WuxByNkFjJuhYd94fc= -----END CERTIFICATE-----Generated at Wed Feb 19 22:43:39 2025 by rpki-client