$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/3MSC4pyUFVUcsWJ56n1u3EL6cfM.roa File: 3MSC4pyUFVUcsWJ56n1u3EL6cfM.roa (raw, json) Hash identifier: VNdRvUeRzMeXancsDFYAGza7UE/2qJNZUEyE4d8A1+A= Subject key identifier: DC:C4:82:E2:9C:94:15:55:1C:B1:62:79:EA:7D:6E:DC:42:FA:71:F3 Certificate issuer: /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A Certificate serial: 0214 Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/3MSC4pyUFVUcsWJ56n1u3EL6cfM.roa Signing time: Mon 30 Sep 2024 01:30:07 +0000 ROA not before: Mon 30 Sep 2024 01:30:07 +0000 ROA not after: Mon 15 Sep 2025 01:30:03 +0000 asID: 7684 IP address blocks: 49.212.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 16:57:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 532 (0x214) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A Validity Not Before: Sep 30 01:30:07 2024 GMT Not After : Sep 15 01:30:03 2025 GMT Subject: CN=DCC482E29C9415551CB16279EA7D6EDC42FA71F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:f4:9a:17:9e:c9:31:ba:7c:48:57:21:7b:49: 93:89:77:71:e9:80:e1:49:0f:72:f8:26:ed:59:de: 56:f9:f5:9e:ae:8a:37:46:f3:db:18:48:20:9b:e2: 5b:c2:d4:42:20:4e:39:21:93:cf:74:0a:d0:9e:18: 77:84:de:42:bc:4b:b8:b9:0e:21:67:72:40:dc:f6: da:e9:28:ee:fb:d1:97:7d:b7:2e:bd:45:b3:2f:ff: 30:2b:86:08:48:a5:fa:cc:18:0a:51:b2:98:e7:ce: 52:80:c8:e0:1c:d9:84:2b:fa:48:5d:86:77:dc:ae: 5f:68:47:6b:da:14:b9:a1:e8:ad:37:9a:c6:4c:85: 37:2f:cd:ae:66:3b:dd:d0:b3:c7:12:30:41:15:a4: b5:d7:39:e1:41:e8:48:65:bf:8e:ca:72:8d:dc:c6: 8f:40:25:30:ac:91:35:b2:43:c1:86:a2:7c:cf:d2: d5:cd:ce:17:c9:0e:1c:ca:03:67:d9:d7:96:42:ed: 4b:81:3e:15:03:19:37:4e:f7:57:9b:86:e9:35:99: 31:06:af:9a:d1:2c:ec:3e:d0:e5:97:ba:f3:e7:fe: a1:0d:08:7a:84:52:0a:9b:c7:ac:c1:57:12:b1:c3: f6:59:dd:70:fe:fa:6f:ce:eb:e6:ff:04:a4:c6:7e: 6d:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:C4:82:E2:9C:94:15:55:1C:B1:62:79:EA:7D:6E:DC:42:FA:71:F3 X509v3 Authority Key Identifier: keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/3MSC4pyUFVUcsWJ56n1u3EL6cfM.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.212.228.0/24 Signature Algorithm: sha256WithRSAEncryption a6:7a:1c:86:2d:10:eb:c8:e2:ce:15:51:57:6c:ca:07:36:b8: ad:10:64:12:d8:b1:a0:69:8e:08:aa:2a:2c:0f:da:5b:29:d5: b8:be:b5:76:fb:3c:61:67:a3:f3:b2:10:81:d9:f7:fc:a4:21: d3:c7:73:96:6a:95:8a:f0:06:b6:b0:ca:5c:9c:71:d2:54:47: 62:ba:b1:2b:6b:ef:92:72:68:90:e7:17:34:a4:e6:77:09:96: 12:ad:23:80:56:7b:6a:00:5c:da:b7:a1:83:3d:e1:71:2f:ba: 93:23:e1:8c:88:d2:0c:d7:31:c4:0b:99:82:2e:b7:99:9f:e0: 48:09:36:0b:fd:b2:86:7f:fa:f6:33:37:45:92:c3:7f:3e:bc: f1:b9:da:bf:95:57:42:3e:82:ee:eb:ff:0f:15:24:b5:c1:ab: b2:60:f0:1e:bf:6b:ef:ff:a5:37:48:47:37:32:f8:2b:fb:68: af:f9:0b:35:77:82:54:6e:b6:e2:4e:50:5c:1b:fc:27:19:c2: 9c:0d:d0:31:e1:05:89:eb:28:a4:cc:b3:cf:85:6e:44:cb:85: a0:62:e8:8d:e0:04:9b:26:01:91:62:1f:ee:99:ef:7a:53:f5: bc:75:72:ce:a1:95:1d:96:23:71:3c:9c:fd:fd:96:f6:60:68: 1c:f4:5f:c4 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgICAhQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjAz MjBGNkQwOURCMThDMEY3MEIzNTRBM0Q4NzQ1MEY3MEU2RDcxQTAeFw0yNDA5MzAw MTMwMDdaFw0yNTA5MTUwMTMwMDNaMDMxMTAvBgNVBAMTKERDQzQ4MkUyOUM5NDE1 NTUxQ0IxNjI3OUVBN0Q2RURDNDJGQTcxRjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCm9JoXnskxunxIVyF7SZOJd3HpgOFJD3L4Ju1Z3lb59Z6uijdG 89sYSCCb4lvC1EIgTjkhk890CtCeGHeE3kK8S7i5DiFnckDc9trpKO770Zd9ty69 RbMv/zArhghIpfrMGApRspjnzlKAyOAc2YQr+khdhnfcrl9oR2vaFLmh6K03msZM hTcvza5mO93Qs8cSMEEVpLXXOeFB6Ehlv47Kco3cxo9AJTCskTWyQ8GGonzP0tXN zhfJDhzKA2fZ15ZC7UuBPhUDGTdO91ebhuk1mTEGr5rRLOw+0OWXuvPn/qENCHqE Ugqbx6zBVxKxw/ZZ3XD++m/O6+b/BKTGfm0hAgMBAAGjggIoMIICJDAdBgNVHQ4E FgQU3MSC4pyUFVUcsWJ56n1u3EL6cfMwHwYDVR0jBBgwFoAUIDIPbQnbGMD3CzVK PYdFD3Dm1xowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzEwMjQ3L0lESVBiUW5iR01EM0N6VktQWWRGRDNEbTF4by5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0lESVBiUW5iR01EM0N6VktQWWRG RDNEbTF4by5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8xMDI0Ny8zTVNDNHB5VUZWVWNzV0o1Nm4xdTNFTDZjZk0u cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAMdTkMA0GCSqGSIb3DQEBCwUAA4IBAQCmehyGLRDryOLOFVFXbMoH NritEGQS2LGgaY4IqiosD9pbKdW4vrV2+zxhZ6PzshCB2ff8pCHTx3OWapWK8Aa2 sMpcnHHSVEdiurEra++ScmiQ5xc0pOZ3CZYSrSOAVntqAFzat6GDPeFxL7qTI+GM iNIM1zHEC5mCLreZn+BICTYL/bKGf/r2MzdFksN/Przxudq/lVdCPoLu6/8PFSS1 wauyYPAev2vv/6U3SEc3Mvgr+2iv+Qs1d4JUbrbiTlBcG/wnGcKcDdAx4QWJ6yik zLPPhW5Ey4WgYuiN4ASbJgGRYh/ume96U/W8dXLOoZUdliNxPJz9/Zb2YGgc9F/E -----END CERTIFICATE-----Generated at Sat Apr 26 18:48:25 2025 by rpki-client