$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/2xU5GBJr8jRXjrvsXqsPPS4jdY8.roa File: 2xU5GBJr8jRXjrvsXqsPPS4jdY8.roa (raw, json) Hash identifier: 6W/HAQSCkoPRW6Z5C3e7ctW7+Zv/GwwzdDGgtAOAfMo= Subject key identifier: DB:15:39:18:12:6B:F2:34:57:8E:BB:EC:5E:AB:0F:3D:2E:23:75:8F Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0953 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/2xU5GBJr8jRXjrvsXqsPPS4jdY8.roa Signing time: Sun 30 Jun 2024 01:29:38 +0000 ROA not before: Sun 30 Jun 2024 01:29:38 +0000 ROA not after: Tue 24 Jun 2025 10:46:45 +0000 asID: 9605 IP address blocks: 27.230.48.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 15:43:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2387 (0x953) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 30 01:29:38 2024 GMT Not After : Jun 24 10:46:45 2025 GMT Subject: CN=DB153918126BF234578EBBEC5EAB0F3D2E23758F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:63:5a:5a:15:9e:78:d6:ee:40:19:2d:f6:28: 41:62:60:4a:d9:41:ea:5d:87:92:2a:75:46:c4:5c: 5e:1e:f8:41:f0:d9:dd:77:8e:1e:11:95:ae:1e:6f: c1:eb:86:c8:72:60:a0:6e:26:27:af:18:cb:ab:db: ab:0f:7b:a1:8f:3d:23:17:4f:01:85:fd:f7:6d:b6: e1:59:77:ae:62:62:d6:a2:d4:43:8e:17:41:03:59: aa:b8:ea:eb:b2:bc:0a:14:44:7a:b5:1e:c0:df:62: a3:66:c5:35:81:02:d5:5b:e3:e7:87:7b:e4:17:0f: 8d:8c:2b:6b:33:1c:2b:1b:8e:98:5e:a4:7b:16:36: a6:d3:ae:84:f2:c8:67:ce:00:2c:b2:98:1b:f0:a3: e0:f9:e4:da:40:c9:84:db:48:a5:0d:20:45:22:03: 9e:cc:7c:e2:a6:e0:db:36:49:45:6b:fe:c7:26:2d: 7d:0f:4f:2f:6b:8a:42:9b:1f:ff:23:24:e3:46:83: 97:50:60:ac:10:9e:3c:41:ff:bf:fd:e0:d8:9c:3b: 19:25:c1:11:22:9e:e0:c0:5a:d1:7d:c7:d7:54:da: 1c:b0:67:2c:89:d0:6b:c4:9a:3d:c1:f0:62:f5:7a: 17:d7:5c:96:a8:ff:00:fd:aa:a2:57:b0:b7:4f:c6: 71:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:15:39:18:12:6B:F2:34:57:8E:BB:EC:5E:AB:0F:3D:2E:23:75:8F X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/2xU5GBJr8jRXjrvsXqsPPS4jdY8.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.230.48.0/23 Signature Algorithm: sha256WithRSAEncryption e1:01:2a:1c:6e:e2:ed:a6:06:2a:89:45:86:21:91:87:29:f2: 1c:cb:7b:b9:16:5d:45:dc:15:2f:a6:89:c7:d6:3c:48:62:4e: 84:fe:a8:b3:d1:70:87:bd:48:cf:a6:dd:95:db:80:db:4c:f7: 08:d4:11:b8:e9:1d:f3:23:23:48:29:3d:de:9d:e9:c9:80:cc: b1:9a:c4:1d:0b:57:c8:f3:d0:98:1c:a1:7c:87:73:0e:ea:d3: 55:53:96:0c:61:04:a6:7f:1a:0f:c6:0e:d0:57:6b:b4:b7:8e: 4a:ab:e4:30:67:63:22:a2:aa:7a:e2:28:90:5a:dd:a9:54:31: 76:c5:a4:c4:c3:1e:95:b9:a3:48:d8:fa:93:6d:70:fe:e3:0f: 3a:7e:26:4f:62:c8:21:a5:bc:c9:e2:ef:2c:60:e6:6e:45:bc: 4c:29:02:1a:4f:8b:e4:69:0a:02:a6:03:49:7e:e3:67:10:d2: 0e:56:3c:e7:e9:1e:c8:97:0c:05:14:5e:5c:c9:73:73:98:1b: c0:79:98:aa:51:79:86:4b:dd:a3:07:ad:a7:f8:43:a9:5e:d6: 79:e2:fc:40:d3:6d:a0:4f:72:96:d2:9e:e6:97:34:cf:0e:23: 40:c6:83:40:42:07:d6:3b:21:49:52:24:f4:2d:47:cd:a7:bd: ac:57:d5:b0 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCVMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA2MzAw MTI5MzhaFw0yNTA2MjQxMDQ2NDVaMDMxMTAvBgNVBAMTKERCMTUzOTE4MTI2QkYy MzQ1NzhFQkJFQzVFQUIwRjNEMkUyMzc1OEYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDVY1paFZ541u5AGS32KEFiYErZQepdh5IqdUbEXF4e+EHw2d13 jh4Rla4eb8HrhshyYKBuJievGMur26sPe6GPPSMXTwGF/fdttuFZd65iYtai1EOO F0EDWaq46uuyvAoURHq1HsDfYqNmxTWBAtVb4+eHe+QXD42MK2szHCsbjphepHsW NqbTroTyyGfOACyymBvwo+D55NpAyYTbSKUNIEUiA57MfOKm4Ns2SUVr/scmLX0P Ty9rikKbH/8jJONGg5dQYKwQnjxB/7/94NicOxklwREinuDAWtF9x9dU2hywZyyJ 0GvEmj3B8GL1ehfXXJao/wD9qqJXsLdPxnHRAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU2xU5GBJr8jRXjrvsXqsPPS4jdY8wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5LzJ4VTVHQkpyOGpSWGpydnNYcXNQUFM0amRZOC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEb5jAwDQYJKoZIhvcNAQELBQADggEBAOEBKhxu4u2mBiqJRYYhkYcp8hzL e7kWXUXcFS+micfWPEhiToT+qLPRcIe9SM+m3ZXbgNtM9wjUEbjpHfMjI0gpPd6d 6cmAzLGaxB0LV8jz0JgcoXyHcw7q01VTlgxhBKZ/Gg/GDtBXa7S3jkqr5DBnYyKi qnriKJBa3alUMXbFpMTDHpW5o0jY+pNtcP7jDzp+Jk9iyCGlvMni7yxg5m5FvEwp AhpPi+RpCgKmA0l+42cQ0g5WPOfpHsiXDAUUXlzJc3OYG8B5mKpReYZL3aMHraf4 Q6le1nni/EDTbaBPcpbSnuaXNM8OI0DGg0BCB9Y7IUlSJPQtR82nvaxX1bA= -----END CERTIFICATE-----Generated at Sat Apr 26 18:22:46 2025 by rpki-client