$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/XhKltBm1fwkihtyh34RhbNfIKSs.roa File: XhKltBm1fwkihtyh34RhbNfIKSs.roa (raw, json) Hash identifier: JMrggle229pYOWhzb/bkOOGNvjXqASDofC8SITBoqME= Subject key identifier: 5E:12:A5:B4:19:B5:7F:09:22:86:DC:A1:DF:84:61:6C:D7:C8:29:2B Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 097F Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/XhKltBm1fwkihtyh34RhbNfIKSs.roa Signing time: Sun 30 Jun 2024 01:36:20 +0000 ROA not before: Sun 30 Jun 2024 01:36:20 +0000 ROA not after: Tue 24 Jun 2025 10:46:45 +0000 asID: 9605 IP address blocks: 1.79.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 15:43:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2431 (0x97f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 30 01:36:20 2024 GMT Not After : Jun 24 10:46:45 2025 GMT Subject: CN=5E12A5B419B57F092286DCA1DF84616CD7C8292B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:1e:b1:e3:70:ce:17:a8:6d:87:ca:40:b3:bd: 65:a2:3d:2e:a2:cc:39:fe:b3:c7:c5:6f:fa:d3:ad: bd:26:01:02:8d:7b:f1:7c:25:a7:d5:ef:cc:94:a2: eb:f8:b2:78:0f:83:30:72:ac:13:78:32:b4:19:52: df:20:f4:c7:34:c4:67:c5:8f:68:d5:b3:91:3d:e6: 48:c8:68:7f:58:4b:c5:a7:30:32:e6:4a:5f:7d:d7: 3a:4f:7f:60:89:96:a2:ab:c4:3c:03:e7:0f:aa:3c: c4:49:31:5a:56:24:4f:1b:80:9d:60:8d:17:5b:d2: 7e:2c:c7:b0:88:67:e6:7a:94:cc:51:12:ad:66:c4: 37:d6:f1:25:aa:df:cf:17:43:8e:7a:61:a7:0c:35: c0:c4:37:65:6b:0d:16:5f:69:49:f9:29:07:9c:4d: 4c:76:94:52:79:34:05:70:90:0f:b8:78:81:17:16: fc:8f:bf:42:3d:b9:83:6e:53:25:cc:5f:3e:2c:42: 11:0d:27:60:0b:80:78:a1:47:f3:b2:1c:04:b2:f7: 2e:69:6e:2b:65:c0:32:d4:59:b7:c2:91:56:64:19: c7:b3:31:5e:e2:3b:2e:93:79:70:47:b2:8c:c9:69: ea:76:ad:9f:c8:4d:6a:11:88:78:77:c6:25:43:b3: 03:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:12:A5:B4:19:B5:7F:09:22:86:DC:A1:DF:84:61:6C:D7:C8:29:2B X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/XhKltBm1fwkihtyh34RhbNfIKSs.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.79.220.0/22 Signature Algorithm: sha256WithRSAEncryption 6f:29:23:ce:04:2c:c3:7a:db:30:6f:ea:3b:71:a6:d9:a5:4b: f1:28:d6:ac:c6:9c:31:82:81:d1:13:5a:64:d5:e8:46:fc:e5: 9e:e9:f1:ea:91:74:1a:0f:bb:6e:12:c3:78:3c:06:5e:21:bf: 6c:ba:71:cd:ed:9e:4e:89:6d:b5:ad:2d:fa:a4:92:73:1e:f7: aa:f2:d6:42:66:0d:0e:e4:b0:59:39:fb:ab:16:92:25:ee:2c: 33:90:1a:47:91:32:2f:e4:e4:f5:cc:78:50:58:86:1b:48:b0: c9:4e:1f:6d:a0:d5:59:7d:27:e4:0b:f3:87:42:34:8f:26:8a: b5:45:c3:2d:45:99:4a:15:27:09:94:95:e1:a9:74:a9:a6:e5: 56:92:fd:90:f7:eb:10:13:2c:84:a2:d0:ea:96:9b:73:96:42: e2:81:c0:4c:e2:91:81:04:93:30:d9:16:18:b4:73:74:dc:ec: f7:a0:0f:53:af:11:b2:86:48:e7:a5:10:12:8b:c8:10:7b:83: 21:11:76:13:79:13:f4:8e:3b:80:7c:2c:87:b5:23:ff:fe:29: 7a:1d:08:f4:a7:4b:b3:44:e8:86:9f:7c:6e:b5:c4:24:e2:47: f3:9f:b9:3b:d9:49:49:b4:29:08:1b:89:32:26:32:26:e9:57: 2d:ff:25:75 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCX8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA2MzAw MTM2MjBaFw0yNTA2MjQxMDQ2NDVaMDMxMTAvBgNVBAMTKDVFMTJBNUI0MTlCNTdG MDkyMjg2RENBMURGODQ2MTZDRDdDODI5MkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDTHrHjcM4XqG2HykCzvWWiPS6izDn+s8fFb/rTrb0mAQKNe/F8 JafV78yUouv4sngPgzByrBN4MrQZUt8g9Mc0xGfFj2jVs5E95kjIaH9YS8WnMDLm Sl991zpPf2CJlqKrxDwD5w+qPMRJMVpWJE8bgJ1gjRdb0n4sx7CIZ+Z6lMxREq1m xDfW8SWq388XQ456YacMNcDEN2VrDRZfaUn5KQecTUx2lFJ5NAVwkA+4eIEXFvyP v0I9uYNuUyXMXz4sQhENJ2ALgHihR/OyHASy9y5pbitlwDLUWbfCkVZkGcezMV7i Oy6TeXBHsozJaep2rZ/ITWoRiHh3xiVDswNFAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUXhKltBm1fwkihtyh34RhbNfIKSswHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1hoS2x0Qm0xZndraWh0eWgzNFJoYk5mSUtTcy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIBT9wwDQYJKoZIhvcNAQELBQADggEBAG8pI84ELMN62zBv6jtxptmlS/Eo 1qzGnDGCgdETWmTV6Eb85Z7p8eqRdBoPu24Sw3g8Bl4hv2y6cc3tnk6JbbWtLfqk knMe96ry1kJmDQ7ksFk5+6sWkiXuLDOQGkeRMi/k5PXMeFBYhhtIsMlOH22g1Vl9 J+QL84dCNI8mirVFwy1FmUoVJwmUleGpdKmm5VaS/ZD36xATLISi0OqWm3OWQuKB wEzikYEEkzDZFhi0c3Tc7PegD1OvEbKGSOelEBKLyBB7gyERdhN5E/SOO4B8LIe1 I//+KXodCPSnS7NE6IaffG61xCTiR/OfuTvZSUm0KQgbiTImMibpVy3/JXU= -----END CERTIFICATE-----Generated at Sat Apr 26 18:24:22 2025 by rpki-client