$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/zZqFlAwdJRSTxMxOZstVoOKubrk.roa File: zZqFlAwdJRSTxMxOZstVoOKubrk.roa (raw, json) Hash identifier: qYnMvFnPV3ArEpEuaY8u26vwuB6g8tCFH04xoIsTbic= Subject key identifier: CD:9A:85:94:0C:1D:25:14:93:C4:CC:4E:66:CB:55:A0:E2:AE:6E:B9 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 09A4 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/zZqFlAwdJRSTxMxOZstVoOKubrk.roa Signing time: Sun 30 Jun 2024 01:38:15 +0000 ROA not before: Sun 30 Jun 2024 01:38:15 +0000 ROA not after: Tue 24 Jun 2025 10:46:45 +0000 asID: 9605 IP address blocks: 49.106.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2468 (0x9a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 30 01:38:15 2024 GMT Not After : Jun 24 10:46:45 2025 GMT Subject: CN=CD9A85940C1D251493C4CC4E66CB55A0E2AE6EB9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:09:b0:be:56:c5:b8:15:8b:7e:ed:ae:ac:6b: 00:22:19:84:08:fc:cb:4d:cc:17:0b:3e:68:6d:60: 85:c1:5a:9a:84:e1:d9:3b:f3:87:bd:d7:8d:71:fa: be:b5:46:cc:95:a8:d4:b8:f7:38:4c:af:fb:57:cd: d4:d8:5f:d5:99:3a:c1:1b:4e:9a:a9:b6:e2:60:c7: 8b:15:c4:07:e8:89:88:b2:55:23:2a:ba:c0:e7:65: 0a:26:92:fa:dc:3b:03:51:75:45:c7:9a:bf:b0:6b: 2c:da:15:c7:e2:2a:55:60:f5:91:26:d0:e8:6b:4f: f7:72:b9:6f:1d:6f:4c:53:0a:f5:2a:6f:0b:c4:7e: ef:bd:08:ee:6c:a7:f7:8c:72:23:18:76:21:f5:52: 5f:71:31:8c:eb:27:83:36:46:7b:26:99:39:28:e9: ca:9c:d1:fb:bc:30:bb:87:b4:74:5f:21:b2:29:a0: 26:a8:ec:04:51:ec:be:11:3e:89:10:cf:48:24:6a: bf:ad:04:a9:87:85:12:b7:50:3c:c2:e6:7b:89:d1: 1a:25:fe:cf:cc:26:8c:87:b6:13:02:ae:27:f1:08: 7c:03:2a:9c:9f:9e:a3:11:c8:28:9b:f7:8a:93:0c: 2e:94:22:33:df:f0:ba:99:50:e8:9f:1b:c7:58:2d: 5d:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:9A:85:94:0C:1D:25:14:93:C4:CC:4E:66:CB:55:A0:E2:AE:6E:B9 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/zZqFlAwdJRSTxMxOZstVoOKubrk.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.106.189.0/24 Signature Algorithm: sha256WithRSAEncryption c3:4f:e8:27:1c:43:ce:10:3f:97:50:05:eb:f8:3e:f7:65:cc: aa:02:3a:ef:5a:6f:dc:60:8f:8a:ad:7e:34:bc:58:f6:cd:51: 04:0a:ba:a8:45:74:1f:6b:bb:32:81:4a:03:97:5f:5d:94:5b: f7:5a:b3:fb:e3:66:cd:00:21:c3:57:b9:7f:0c:7b:dc:e3:5d: ed:de:47:4f:ea:33:62:92:6c:8d:86:34:9b:d0:13:cf:f4:5d: 8c:90:37:07:09:64:45:a5:a5:b9:56:08:2b:86:aa:51:86:01: 64:e8:94:88:44:32:d3:ed:a6:38:b3:f5:c7:b3:0f:eb:eb:af: e3:d4:cb:75:cd:1a:56:77:7b:d7:c7:ec:16:68:b3:f0:da:f6: ff:0c:81:ef:0c:9c:5a:21:e6:41:cf:b7:31:0a:e7:fe:92:3e: 21:3d:72:17:e3:32:0c:9d:a2:4b:c0:e0:8c:86:ae:25:cd:a7: 29:32:6b:89:19:5f:a3:73:f7:46:7b:6f:ac:b1:e5:fd:ce:16: c8:09:8d:d6:7d:db:26:4f:65:82:16:ae:e3:e4:97:d6:05:3f: e8:92:c4:bb:46:07:e8:8d:cd:74:7f:56:73:96:b4:75:d2:e8: a7:0b:e7:1b:b8:c4:79:62:63:b6:bc:61:ae:57:cf:6f:51:0d: 20:0a:2b:bb -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCaQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA2MzAw MTM4MTVaFw0yNTA2MjQxMDQ2NDVaMDMxMTAvBgNVBAMTKENEOUE4NTk0MEMxRDI1 MTQ5M0M0Q0M0RTY2Q0I1NUEwRTJBRTZFQjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDaCbC+VsW4FYt+7a6sawAiGYQI/MtNzBcLPmhtYIXBWpqE4dk7 84e9141x+r61RsyVqNS49zhMr/tXzdTYX9WZOsEbTpqptuJgx4sVxAfoiYiyVSMq usDnZQomkvrcOwNRdUXHmr+wayzaFcfiKlVg9ZEm0OhrT/dyuW8db0xTCvUqbwvE fu+9CO5sp/eMciMYdiH1Ul9xMYzrJ4M2RnsmmTko6cqc0fu8MLuHtHRfIbIpoCao 7ARR7L4RPokQz0gkar+tBKmHhRK3UDzC5nuJ0Rol/s/MJoyHthMCrifxCHwDKpyf nqMRyCib94qTDC6UIjPf8LqZUOifG8dYLV2lAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUzZqFlAwdJRSTxMxOZstVoOKubrkwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3pacUZsQXdkSlJTVHhNeE9ac3RWb09LdWJyay5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAxar0wDQYJKoZIhvcNAQELBQADggEBAMNP6CccQ84QP5dQBev4PvdlzKoC Ou9ab9xgj4qtfjS8WPbNUQQKuqhFdB9ruzKBSgOXX12UW/das/vjZs0AIcNXuX8M e9zjXe3eR0/qM2KSbI2GNJvQE8/0XYyQNwcJZEWlpblWCCuGqlGGAWTolIhEMtPt pjiz9cezD+vrr+PUy3XNGlZ3e9fH7BZos/Da9v8Mge8MnFoh5kHPtzEK5/6SPiE9 chfjMgydokvA4IyGriXNpykya4kZX6Nz90Z7b6yx5f3OFsgJjdZ92yZPZYIWruPk l9YFP+iSxLtGB+iNzXR/VnOWtHXS6KcL5xu4xHliY7a8Ya5Xz29RDSAKK7s= -----END CERTIFICATE-----Generated at Sun Feb 16 22:06:14 2025 by rpki-client