$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/1toNKuRoSUgTqYq5XdMke3hWUJQ.roa File: 1toNKuRoSUgTqYq5XdMke3hWUJQ.roa (raw, json) Hash identifier: 53c35+71xTJw0MHiFSAk9G/t32ogAlZVxEU3mM63PBg= Subject key identifier: D6:DA:0D:2A:E4:68:49:48:13:A9:8A:B9:5D:D3:24:7B:78:56:50:94 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0B2A Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/1toNKuRoSUgTqYq5XdMke3hWUJQ.roa Signing time: Fri 31 Jan 2025 01:38:03 +0000 ROA not before: Fri 31 Jan 2025 01:38:03 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 9605 IP address blocks: 1.72.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Apr 2025 17:33:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2858 (0xb2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jan 31 01:38:03 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=D6DA0D2AE468494813A98AB95DD3247B78565094 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:7d:be:3b:c8:76:36:e6:5e:69:42:0f:0e:20: b5:7c:87:a7:44:4a:9b:bf:0a:b3:fd:cf:47:e7:1e: cc:ac:58:a8:31:b6:c8:78:05:fc:c9:84:b3:92:12: c9:4d:a4:9d:f8:62:2b:f8:c9:ef:da:2f:cc:2f:d8: d8:40:31:b1:da:5b:ce:44:13:47:44:e9:2a:3b:52: af:c5:95:51:ad:e6:75:46:dc:00:f6:bc:6c:c3:8b: de:b1:73:4c:22:7b:b0:6b:21:81:1c:2e:78:9a:a6: b0:2e:64:26:75:1f:ba:72:51:0a:99:68:62:7f:54: 0b:58:39:aa:e6:fd:79:ae:b4:e2:b0:7d:7b:26:b8: 7d:09:d3:65:a9:5c:02:13:23:c7:a9:9e:09:e7:71: a2:26:46:7a:7c:81:9c:19:bc:50:93:ea:9e:68:8a: 27:8b:74:34:c0:f5:b5:66:0a:2a:dd:fc:33:f4:fb: 6d:44:ba:5a:32:ae:0a:9e:9b:9b:ee:b0:75:06:6e: bc:98:b2:24:e7:a8:1d:e4:3b:8e:20:51:20:8d:35: 07:73:a3:2e:f8:b2:d2:ac:cc:48:c8:4d:70:36:86: 48:5f:26:b1:bf:6b:0e:d6:0a:fe:30:fc:af:38:2f: c0:e3:ac:36:7b:20:96:40:0e:0f:6a:52:f6:e8:95: 73:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:DA:0D:2A:E4:68:49:48:13:A9:8A:B9:5D:D3:24:7B:78:56:50:94 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/1toNKuRoSUgTqYq5XdMke3hWUJQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.72.8.0/24 Signature Algorithm: sha256WithRSAEncryption ac:e9:06:e4:2d:38:33:ad:20:f4:a3:51:cf:db:22:b7:9e:89: 08:90:74:bf:5d:3e:09:e7:20:39:3c:8e:db:7d:03:60:8e:ff: f0:45:ab:21:4d:fe:d4:ea:f8:40:d9:32:bc:3b:88:4b:87:90: 4a:aa:14:58:0b:27:f9:52:01:6b:59:6f:ee:ba:a7:6a:23:48: 01:0e:c3:2d:5a:90:2d:9c:ea:d9:43:2b:de:58:c0:3e:9a:cc: 11:50:a9:42:79:f8:63:56:1a:98:66:77:30:06:a7:ed:b4:2b: a2:bd:86:07:5c:ea:d5:03:c0:f5:24:8f:3f:76:bc:59:a0:69: 60:d2:5c:27:00:18:fa:24:1d:77:57:c1:94:6d:51:aa:b4:a2: df:24:36:70:db:b2:cb:64:92:41:3d:24:01:2c:fe:8e:61:d3: bf:88:31:13:46:c8:08:7a:89:38:06:53:01:0e:d3:35:6c:6f: b5:7c:05:0e:50:67:60:1a:ec:3b:64:07:5e:0a:d7:0f:94:92: 54:a8:bb:c4:f7:fa:40:c0:0d:19:6c:fe:98:cc:cc:0d:3e:40: 5c:c2:37:c6:0e:ab:5a:d1:69:05:11:69:b3:b2:55:f0:12:a8: f5:f6:3e:db:3f:9a:aa:46:92:03:04:85:04:a3:43:b1:d5:31: e5:d8:58:04 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCyowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTAxMzEw MTM4MDNaFw0yNjAxMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEQ2REEwRDJBRTQ2ODQ5 NDgxM0E5OEFCOTVERDMyNDdCNzg1NjUwOTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDdfb47yHY25l5pQg8OILV8h6dESpu/CrP9z0fnHsysWKgxtsh4 BfzJhLOSEslNpJ34Yiv4ye/aL8wv2NhAMbHaW85EE0dE6So7Uq/FlVGt5nVG3AD2 vGzDi96xc0wie7BrIYEcLniaprAuZCZ1H7pyUQqZaGJ/VAtYOarm/XmutOKwfXsm uH0J02WpXAITI8epngnncaImRnp8gZwZvFCT6p5oiieLdDTA9bVmCird/DP0+21E uloyrgqem5vusHUGbryYsiTnqB3kO44gUSCNNQdzoy74stKszEjITXA2hkhfJrG/ aw7WCv4w/K84L8DjrDZ7IJZADg9qUvbolXN5AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU1toNKuRoSUgTqYq5XdMke3hWUJQwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5LzF0b05LdVJvU1VnVHFZcTVYZE1rZTNoV1VKUS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAABSAgwDQYJKoZIhvcNAQELBQADggEBAKzpBuQtODOtIPSjUc/bIreeiQiQ dL9dPgnnIDk8jtt9A2CO//BFqyFN/tTq+EDZMrw7iEuHkEqqFFgLJ/lSAWtZb+66 p2ojSAEOwy1akC2c6tlDK95YwD6azBFQqUJ5+GNWGphmdzAGp+20K6K9hgdc6tUD wPUkjz92vFmgaWDSXCcAGPokHXdXwZRtUaq0ot8kNnDbsstkkkE9JAEs/o5h07+I MRNGyAh6iTgGUwEO0zVsb7V8BQ5QZ2Aa7DtkB14K1w+UklSou8T3+kDADRls/pjM zA0+QFzCN8YOq1rRaQURabOyVfASqPX2Pts/mqpGkgMEhQSjQ7HVMeXYWAQ= -----END CERTIFICATE-----Generated at Thu Apr 17 19:40:44 2025 by rpki-client