$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/M4A5KDijhICsiWoxoedCl228hu0.roa File: M4A5KDijhICsiWoxoedCl228hu0.roa (raw, json) Hash identifier: qdceeA5vJLRMUsYMU+W0wVh6Ze22D8FoM6wxk/lrqYI= Subject key identifier: 33:80:39:28:38:A3:84:80:AC:89:6A:31:A1:E7:42:97:6D:BC:86:ED Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0A55 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/M4A5KDijhICsiWoxoedCl228hu0.roa Signing time: Sun 30 Jun 2024 01:48:32 +0000 ROA not before: Sun 30 Jun 2024 01:48:32 +0000 ROA not after: Tue 24 Jun 2025 10:46:45 +0000 asID: 9605 IP address blocks: 1.79.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 16:57:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2645 (0xa55) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 30 01:48:32 2024 GMT Not After : Jun 24 10:46:45 2025 GMT Subject: CN=3380392838A38480AC896A31A1E742976DBC86ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:54:3f:4b:e3:d1:99:d2:09:b2:2b:b3:88:90: df:68:5a:47:3f:c7:7d:e5:76:36:86:6d:7a:53:5a: c7:6b:d6:83:b3:fe:4c:ee:0c:8a:13:e8:c4:d5:77: ca:b0:2f:d1:22:a1:58:b0:01:85:8f:10:30:3b:7d: 24:b3:f0:e8:60:f4:6a:3e:36:1f:f2:e2:40:37:49: 32:83:ed:cc:60:7d:2b:97:f9:df:3c:8f:4b:4e:65: cc:a2:6e:11:22:68:36:24:89:ba:38:33:65:90:26: 97:c7:8e:ca:91:1d:d2:44:bf:34:48:db:12:24:81: 96:a5:92:4d:7f:57:81:7f:ad:26:16:05:06:0c:a9: 97:68:82:54:d9:79:10:83:bf:16:96:0f:3d:d9:a9: be:01:cd:c3:35:ed:51:3c:ed:04:86:c6:1d:6f:7a: b4:75:f6:73:42:e8:6a:1a:a9:24:5e:39:04:22:2a: 31:10:d2:5a:33:f5:6e:a9:f0:77:0c:e9:67:8a:42: 38:1d:64:5b:20:97:ae:c4:27:26:26:d0:71:bd:41: 1b:cb:0e:bb:2d:92:a0:c7:9a:f7:87:a3:1e:9c:db: e8:9d:31:ca:3c:21:26:d0:55:2e:01:08:3c:a4:4a: da:04:23:90:9b:9d:ce:70:ee:e3:18:ee:de:93:8a: c7:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:80:39:28:38:A3:84:80:AC:89:6A:31:A1:E7:42:97:6D:BC:86:ED X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/M4A5KDijhICsiWoxoedCl228hu0.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.79.108.0/22 Signature Algorithm: sha256WithRSAEncryption e3:e8:01:3a:35:20:cd:46:6c:7e:64:3d:f0:5b:05:3a:3e:18: 97:29:a1:95:97:86:74:94:3f:e2:87:8f:4b:5b:68:72:9f:9f: f1:74:c1:da:6f:62:77:3d:88:bb:28:19:9e:23:71:7f:21:77: e0:83:14:2a:87:12:51:29:43:2b:e8:29:2d:fd:32:aa:d1:a3: 24:28:24:e8:13:b9:6b:8c:93:bd:ee:81:fd:ba:60:d2:64:18: 07:17:8f:a3:5b:1f:59:04:35:6f:a3:45:4c:3e:7c:e3:c1:95: 44:58:14:ef:8b:42:ee:ba:ff:e9:71:1d:db:bc:7d:fa:ea:44: fd:b0:c1:e4:99:93:62:03:3f:18:dd:ff:6d:4c:df:04:50:87: d4:07:0c:59:89:5a:c0:7c:7d:8f:25:3b:76:bb:b0:1d:2a:6c: 0e:7e:37:19:54:9e:99:b6:26:b7:16:ee:0a:b1:d6:cc:1f:8f: ce:5c:01:0b:37:4b:2a:38:a2:3c:fb:be:33:1a:45:cc:62:14: b8:fd:de:9a:1c:f1:c3:6f:4f:ba:ab:76:b4:f1:50:8f:91:0b: 70:2e:09:96:77:a6:88:4a:02:d1:20:4d:0e:6b:04:57:db:04: ca:f0:99:bc:62:6b:17:6e:44:89:9d:e2:11:04:07:1e:18:28: c3:d5:8c:50 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICClUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA2MzAw MTQ4MzJaFw0yNTA2MjQxMDQ2NDVaMDMxMTAvBgNVBAMTKDMzODAzOTI4MzhBMzg0 ODBBQzg5NkEzMUExRTc0Mjk3NkRCQzg2RUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC5VD9L49GZ0gmyK7OIkN9oWkc/x33ldjaGbXpTWsdr1oOz/kzu DIoT6MTVd8qwL9EioViwAYWPEDA7fSSz8Ohg9Go+Nh/y4kA3STKD7cxgfSuX+d88 j0tOZcyibhEiaDYkibo4M2WQJpfHjsqRHdJEvzRI2xIkgZalkk1/V4F/rSYWBQYM qZdoglTZeRCDvxaWDz3Zqb4BzcM17VE87QSGxh1verR19nNC6GoaqSReOQQiKjEQ 0loz9W6p8HcM6WeKQjgdZFsgl67EJyYm0HG9QRvLDrstkqDHmveHox6c2+idMco8 ISbQVS4BCDykStoEI5Cbnc5w7uMY7t6TiseRAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUM4A5KDijhICsiWoxoedCl228hu0wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L000QTVLRGlqaElDc2lXb3hvZWRDbDIyOGh1MC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIBT2wwDQYJKoZIhvcNAQELBQADggEBAOPoATo1IM1GbH5kPfBbBTo+GJcp oZWXhnSUP+KHj0tbaHKfn/F0wdpvYnc9iLsoGZ4jcX8hd+CDFCqHElEpQyvoKS39 MqrRoyQoJOgTuWuMk73ugf26YNJkGAcXj6NbH1kENW+jRUw+fOPBlURYFO+LQu66 /+lxHdu8ffrqRP2wweSZk2IDPxjd/21M3wRQh9QHDFmJWsB8fY8lO3a7sB0qbA5+ NxlUnpm2JrcW7gqx1swfj85cAQs3Syo4ojz7vjMaRcxiFLj93poc8cNvT7qrdrTx UI+RC3AuCZZ3pohKAtEgTQ5rBFfbBMrwmbxiaxduRImd4hEEBx4YKMPVjFA= -----END CERTIFICATE-----Generated at Sat Apr 26 18:58:56 2025 by rpki-client