$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/y3YB5Y9EW97kTmFEqK0BsJT2MMA.roa File: y3YB5Y9EW97kTmFEqK0BsJT2MMA.roa (raw, json) Hash identifier: phnfb0fBSRvJm4X8SdsoJLWSfc8eU1iMSqZ77qcYb/w= Subject key identifier: CB:76:01:E5:8F:44:5B:DE:E4:4E:61:44:A8:AD:01:B0:94:F6:30:C0 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 09CF Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/y3YB5Y9EW97kTmFEqK0BsJT2MMA.roa Signing time: Sun 30 Jun 2024 01:40:29 +0000 ROA not before: Sun 30 Jun 2024 01:40:29 +0000 ROA not after: Tue 24 Jun 2025 10:46:45 +0000 asID: 9605 IP address blocks: 220.159.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2511 (0x9cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 30 01:40:29 2024 GMT Not After : Jun 24 10:46:45 2025 GMT Subject: CN=CB7601E58F445BDEE44E6144A8AD01B094F630C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:ec:f9:71:cf:99:a6:9a:4f:3b:8d:c9:e9:cc: 51:64:c0:c7:6f:57:d5:28:8b:07:fa:38:c1:bc:97: 87:cb:35:85:7d:d5:72:2c:2f:dc:b2:21:0c:2c:c2: 9e:70:71:61:bd:6b:50:92:14:b9:89:a9:a5:64:7a: cf:98:24:f3:9b:fb:52:93:31:9d:10:3a:55:65:99: 8f:16:20:d0:53:9e:05:6f:d4:9a:8c:7e:47:4a:ef: dd:e3:58:b1:ad:00:3a:86:dc:ec:ea:18:b5:e9:58: 63:b7:16:3b:81:bc:1c:3b:d9:6a:87:96:4c:d9:f6: e6:93:30:7f:44:41:fa:4d:ed:cc:b9:b1:0a:26:c9: 94:46:3a:bb:0e:10:af:f3:aa:5f:e6:c8:ee:6a:21: 8b:73:55:1c:cb:3e:c3:14:e6:fb:53:92:cc:8d:8a: 78:24:b9:14:06:30:1f:d9:38:43:26:ff:99:50:cd: 0f:6b:93:11:8d:03:b2:7e:70:33:0c:e8:9d:6d:35: e5:a2:32:36:47:ad:5a:c0:44:9b:e2:a9:a6:2f:52: a6:d6:49:5d:01:76:52:40:ba:8f:dd:2a:ee:6a:57: bf:00:3d:d4:bc:3d:70:b7:95:6d:52:b3:5f:8f:8b: ea:72:c8:78:c9:62:f2:49:06:9d:92:c3:46:b0:39: d0:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:76:01:E5:8F:44:5B:DE:E4:4E:61:44:A8:AD:01:B0:94:F6:30:C0 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/y3YB5Y9EW97kTmFEqK0BsJT2MMA.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 220.159.212.0/22 Signature Algorithm: sha256WithRSAEncryption 40:b8:d7:0d:ed:25:80:7e:1c:d8:56:67:cf:7c:61:e4:ce:82: 83:c4:0b:77:84:be:1c:2b:1b:24:85:d4:12:d9:78:f5:56:8c: 44:3c:f4:4c:56:4f:62:04:82:e9:bc:11:69:8a:67:c0:18:c0: 21:b3:5c:f4:59:b9:07:f5:66:e4:89:2b:61:a0:98:65:5f:93: bb:2b:1b:36:60:f7:e0:e5:a1:96:7c:f8:26:ab:00:94:f4:ae: 36:e4:bb:7d:6f:d8:bc:eb:df:38:90:0b:b0:a5:c7:20:64:52: 5e:b9:59:00:1f:0f:0d:7c:32:2f:b4:d4:f2:5d:c1:0a:74:c6: aa:a7:60:ae:e2:55:ce:93:7c:d0:b5:ce:2d:42:7a:95:cf:cf: 7d:80:2c:78:f2:2b:1e:ed:4c:22:3d:f2:4e:0d:ad:7f:14:5d: 6f:13:fd:a6:b5:17:11:7f:23:26:85:8d:1a:5f:35:7c:43:48: ea:af:08:24:e2:b8:31:88:be:54:63:72:c7:95:d3:13:f8:54: 67:36:6a:89:71:bb:b4:0e:06:9b:3c:f3:55:1d:23:f4:c7:00: 10:aa:4b:16:26:59:14:19:ad:f6:b1:0f:c6:be:c6:ed:5e:41: 34:cd:cd:1b:02:9d:35:5e:59:24:ef:ce:80:02:8b:c1:55:ab: 78:d6:b0:b2 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCc8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA2MzAw MTQwMjlaFw0yNTA2MjQxMDQ2NDVaMDMxMTAvBgNVBAMTKENCNzYwMUU1OEY0NDVC REVFNDRFNjE0NEE4QUQwMUIwOTRGNjMwQzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDz7Plxz5mmmk87jcnpzFFkwMdvV9Uoiwf6OMG8l4fLNYV91XIs L9yyIQwswp5wcWG9a1CSFLmJqaVkes+YJPOb+1KTMZ0QOlVlmY8WINBTngVv1JqM fkdK793jWLGtADqG3OzqGLXpWGO3FjuBvBw72WqHlkzZ9uaTMH9EQfpN7cy5sQom yZRGOrsOEK/zql/myO5qIYtzVRzLPsMU5vtTksyNingkuRQGMB/ZOEMm/5lQzQ9r kxGNA7J+cDMM6J1tNeWiMjZHrVrARJviqaYvUqbWSV0BdlJAuo/dKu5qV78APdS8 PXC3lW1Ss1+Pi+pyyHjJYvJJBp2Sw0awOdB1AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUy3YB5Y9EW97kTmFEqK0BsJT2MMAwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3kzWUI1WTlFVzk3a1RtRkVxSzBCc0pUMk1NQS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBALcn9QwDQYJKoZIhvcNAQELBQADggEBAEC41w3tJYB+HNhWZ898YeTOgoPE C3eEvhwrGySF1BLZePVWjEQ89ExWT2IEgum8EWmKZ8AYwCGzXPRZuQf1ZuSJK2Gg mGVfk7srGzZg9+DloZZ8+CarAJT0rjbku31v2Lzr3ziQC7ClxyBkUl65WQAfDw18 Mi+01PJdwQp0xqqnYK7iVc6TfNC1zi1CepXPz32ALHjyKx7tTCI98k4NrX8UXW8T /aa1FxF/IyaFjRpfNXxDSOqvCCTiuDGIvlRjcseV0xP4VGc2aolxu7QOBps881Ud I/THABCqSxYmWRQZrfaxD8a+xu1eQTTNzRsCnTVeWSTvzoACi8FVq3jWsLI= -----END CERTIFICATE-----Generated at Sun Feb 16 22:27:10 2025 by rpki-client