$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/IAWwZscj9P78aBOtkjZrPmxifv0.roa File: IAWwZscj9P78aBOtkjZrPmxifv0.roa (raw, json) Hash identifier: N/+FSJ33bO1lb9L3CSYofflrzJWpDwQFjUA/eFKiiVQ= Subject key identifier: 20:05:B0:66:C7:23:F4:FE:FC:68:13:AD:92:36:6B:3E:6C:62:7E:FD Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0ACA Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/IAWwZscj9P78aBOtkjZrPmxifv0.roa Signing time: Fri 22 Nov 2024 06:19:41 +0000 ROA not before: Fri 22 Nov 2024 06:19:41 +0000 ROA not after: Sat 15 Nov 2025 01:30:03 +0000 asID: 9605 IP address blocks: 27.230.46.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 16:57:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2762 (0xaca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Nov 22 06:19:41 2024 GMT Not After : Nov 15 01:30:03 2025 GMT Subject: CN=2005B066C723F4FEFC6813AD92366B3E6C627EFD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:87:f6:83:eb:b7:5a:ab:ce:fe:c6:68:0f:6c: ce:09:7c:6a:82:18:72:1b:36:e8:4f:34:ab:34:a2: eb:17:10:49:b4:77:01:19:c0:d1:5f:b3:18:a7:a3: 0a:c9:48:d9:8b:09:75:c8:19:54:85:9b:7a:e0:c2: 7b:29:8a:16:f6:2f:a4:11:cd:b2:75:64:44:e1:93: c8:2a:d7:68:79:76:fb:b6:c6:42:17:e1:bc:1a:b0: b9:c5:7c:d9:23:c8:72:af:00:f9:93:40:46:3c:5c: df:8c:c3:0f:59:d6:e3:9c:2e:51:72:2e:4b:29:0b: d4:48:02:11:5f:e0:f8:bd:3f:97:b3:fe:f2:1d:15: eb:7b:db:20:2c:ae:54:36:34:9e:f2:b9:6d:25:e1: f3:5c:63:4e:78:db:a8:a3:94:ef:30:65:87:f7:87: 23:01:3d:35:6b:b8:ec:6e:88:f8:48:48:64:46:f8: b3:24:6e:f2:d6:a0:40:ff:e7:91:89:52:e6:b3:77: 7c:29:bc:27:d6:dd:b1:21:ab:cf:51:27:de:0c:57: 6a:32:87:c6:81:af:cc:b6:ce:3d:e7:9b:2a:5b:51: 49:32:20:46:ae:df:e5:8d:12:0e:16:46:17:0e:52: 05:ea:5b:83:bf:b9:89:07:a9:71:bd:1a:48:18:c5: e1:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:05:B0:66:C7:23:F4:FE:FC:68:13:AD:92:36:6B:3E:6C:62:7E:FD X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/IAWwZscj9P78aBOtkjZrPmxifv0.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.230.46.0/23 Signature Algorithm: sha256WithRSAEncryption b2:e5:92:57:90:1c:7c:d3:dd:1c:1a:1c:aa:39:bc:65:5d:86: b4:07:e2:ae:a7:f7:ad:29:7c:e0:18:59:9d:c5:27:eb:6e:20: 38:08:28:28:8f:68:1d:47:1b:ee:18:e7:e5:dc:27:72:2d:e1: 91:b4:6a:26:31:c5:37:6a:f8:ad:88:6f:35:0b:56:ec:6f:21: d5:6e:94:7c:18:86:61:d6:8a:fe:16:63:63:59:ea:c6:e2:36: eb:13:f7:a3:5b:02:f4:82:ca:f5:c5:80:b9:11:1b:76:f2:27: 8f:95:64:e2:60:3c:5f:80:29:d1:01:18:90:42:62:c6:c6:b7: 8b:09:80:6f:28:61:f9:69:14:a6:dc:5e:33:7b:a8:37:09:24: f4:5a:fe:3b:98:b5:cb:ea:41:71:91:92:db:bb:20:99:15:fb: d2:04:24:d4:9a:de:5a:1b:46:b9:45:6f:83:92:8c:f2:00:e4: b6:9a:0d:d9:20:41:74:05:b0:81:63:8a:d6:88:67:f4:57:22: a2:2f:01:85:7a:57:ad:58:10:1d:b6:6a:26:6c:84:1c:1c:df: 94:5c:75:66:39:e2:1b:ab:ff:bf:96:08:c2:55:6e:56:39:8f: 86:41:94:e9:88:f4:5d:c8:91:db:8e:53:24:71:96:e5:e0:0b: b5:ac:77:27 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCsowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDExMjIw NjE5NDFaFw0yNTExMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDIwMDVCMDY2QzcyM0Y0 RkVGQzY4MTNBRDkyMzY2QjNFNkM2MjdFRkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDWh/aD67daq87+xmgPbM4JfGqCGHIbNuhPNKs0ousXEEm0dwEZ wNFfsxinowrJSNmLCXXIGVSFm3rgwnspihb2L6QRzbJ1ZEThk8gq12h5dvu2xkIX 4bwasLnFfNkjyHKvAPmTQEY8XN+Mww9Z1uOcLlFyLkspC9RIAhFf4Pi9P5ez/vId Fet72yAsrlQ2NJ7yuW0l4fNcY05426ijlO8wZYf3hyMBPTVruOxuiPhISGRG+LMk bvLWoED/55GJUuazd3wpvCfW3bEhq89RJ94MV2oyh8aBr8y2zj3nmypbUUkyIEau 3+WNEg4WRhcOUgXqW4O/uYkHqXG9GkgYxeEpAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUIAWwZscj9P78aBOtkjZrPmxifv0wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0lBV3dac2NqOVA3OGFCT3RralpyUG14aWZ2MC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEb5i4wDQYJKoZIhvcNAQELBQADggEBALLlkleQHHzT3RwaHKo5vGVdhrQH 4q6n960pfOAYWZ3FJ+tuIDgIKCiPaB1HG+4Y5+XcJ3It4ZG0aiYxxTdq+K2IbzUL VuxvIdVulHwYhmHWiv4WY2NZ6sbiNusT96NbAvSCyvXFgLkRG3byJ4+VZOJgPF+A KdEBGJBCYsbGt4sJgG8oYflpFKbcXjN7qDcJJPRa/juYtcvqQXGRktu7IJkV+9IE JNSa3lobRrlFb4OSjPIA5LaaDdkgQXQFsIFjitaIZ/RXIqIvAYV6V61YEB22aiZs hBwc35RcdWY54hur/7+WCMJVblY5j4ZBlOmI9F3IkduOUyRxluXgC7Wsdyc= -----END CERTIFICATE-----Generated at Sat Apr 26 19:44:04 2025 by rpki-client