$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZP51NcHeIRxb115xaDb9tjEPRq0.roa File: ZP51NcHeIRxb115xaDb9tjEPRq0.roa (raw, json) Hash identifier: gIjUezX1czT3YuVRuh3COM6IK8BjJ/uVrstuxnhG2os= Subject key identifier: 64:FE:75:35:C1:DE:21:1C:5B:D7:5E:71:68:36:FD:B6:31:0F:46:AD Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0CFD Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZP51NcHeIRxb115xaDb9tjEPRq0.roa Signing time: Tue 01 Apr 2025 02:11:36 +0000 ROA not before: Tue 01 Apr 2025 02:11:36 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 1.73.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3325 (0xcfd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:11:36 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=64FE7535C1DE211C5BD75E716836FDB6310F46AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:ba:06:df:fd:60:77:f1:e8:99:95:53:ba:ac: 1c:98:ba:e3:90:cc:09:a3:e6:c8:f8:3f:f1:9d:62: 2b:47:e3:b1:a1:2b:e5:ed:2b:a7:f7:94:e7:7e:d1: 7a:ce:7f:b8:23:87:24:6e:53:ce:85:ac:dc:c3:7d: ad:f2:50:b1:ee:ec:01:3c:aa:23:bd:74:fb:93:6d: 4b:f6:58:9e:ba:e3:da:91:e5:32:00:3b:7d:56:97: 48:f4:52:05:42:9a:ca:74:de:c3:24:e1:ea:2b:68: 19:94:9b:01:6d:14:38:29:df:c9:02:39:78:bf:1f: 2b:21:4c:30:1a:05:57:c0:0d:b0:59:c7:b2:d8:ba: e8:22:67:e8:52:cc:8a:5e:27:f2:c1:e3:2e:4e:20: 7c:79:48:90:f7:1a:0a:86:e9:86:de:b3:d2:76:9c: 9a:36:37:2c:d2:90:bf:97:d4:75:cf:2d:6e:26:95: 8a:a3:44:75:ce:8b:b2:4c:c1:9c:1e:f9:ee:ae:a9: 19:12:f1:e9:e7:a5:4c:c5:cb:99:d2:0c:15:bf:ef: 34:fa:12:e6:e6:19:49:9c:42:ca:72:b0:3b:f8:6e: c1:8f:c6:fe:b4:92:e0:b6:37:88:15:52:d8:4b:5e: 65:37:49:35:11:cc:69:b0:4d:66:d0:00:3c:a7:1f: bf:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:FE:75:35:C1:DE:21:1C:5B:D7:5E:71:68:36:FD:B6:31:0F:46:AD X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZP51NcHeIRxb115xaDb9tjEPRq0.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.73.0.0/18 Signature Algorithm: sha256WithRSAEncryption b2:1b:62:ec:f4:be:05:7d:9a:0b:f4:b9:2c:a9:35:cb:8b:75: fe:ea:28:37:6a:2b:c9:6b:34:39:02:30:a4:c6:3f:ab:e5:07: af:69:62:57:f7:16:55:7a:07:40:08:2d:2f:c1:c9:e9:98:7c: 20:fc:5d:d6:16:9b:cb:10:69:98:c4:a5:02:f4:55:4a:44:74: ea:ce:99:2c:08:d3:97:d6:be:62:1b:e4:43:59:68:e1:fb:10: 67:87:46:58:59:bd:57:54:2d:7c:fc:0a:d7:0a:48:85:5c:00: 83:8e:33:dd:8b:1c:90:0a:7c:e9:4f:99:22:37:35:0f:28:65: 20:8b:65:91:47:be:94:2f:9e:80:0f:36:51:51:d6:37:7f:b6: 79:10:ab:92:f8:f6:eb:5f:dc:ce:7f:56:a2:36:3b:69:32:ee: 18:2b:a5:a6:26:ac:28:5a:4e:ca:c6:7b:2f:bf:bf:3e:6b:60: da:59:5f:34:0a:d0:7e:c4:22:28:62:27:95:28:f4:ee:2c:a9: 1e:6c:c9:d1:d0:66:cf:2f:09:0f:24:96:ba:dc:00:aa:42:35: ba:59:50:15:41:26:cd:93:5d:9f:02:19:1c:bd:cf:1d:20:72: 51:25:02:6a:41:74:cc:cb:96:d0:26:8c:d7:f4:45:31:07:42: 55:72:6f:d2 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDP0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjExMzZaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDY0RkU3NTM1QzFERTIx MUM1QkQ3NUU3MTY4MzZGREI2MzEwRjQ2QUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCYugbf/WB38eiZlVO6rByYuuOQzAmj5sj4P/GdYitH47GhK+Xt K6f3lOd+0XrOf7gjhyRuU86FrNzDfa3yULHu7AE8qiO9dPuTbUv2WJ6649qR5TIA O31Wl0j0UgVCmsp03sMk4eoraBmUmwFtFDgp38kCOXi/HyshTDAaBVfADbBZx7LY uugiZ+hSzIpeJ/LB4y5OIHx5SJD3GgqG6Ybes9J2nJo2NyzSkL+X1HXPLW4mlYqj RHXOi7JMwZwe+e6uqRkS8ennpUzFy5nSDBW/7zT6EubmGUmcQspysDv4bsGPxv60 kuC2N4gVUthLXmU3STURzGmwTWbQADynH7+vAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUZP51NcHeIRxb115xaDb9tjEPRq0wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1pQNTFOY0hlSVJ4YjExNXhhRGI5dGpFUFJxMC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAYBSQAwDQYJKoZIhvcNAQELBQADggEBALIbYuz0vgV9mgv0uSypNcuLdf7q KDdqK8lrNDkCMKTGP6vlB69pYlf3FlV6B0AILS/ByemYfCD8XdYWm8sQaZjEpQL0 VUpEdOrOmSwI05fWvmIb5ENZaOH7EGeHRlhZvVdULXz8CtcKSIVcAIOOM92LHJAK fOlPmSI3NQ8oZSCLZZFHvpQvnoAPNlFR1jd/tnkQq5L49utf3M5/VqI2O2ky7hgr paYmrChaTsrGey+/vz5rYNpZXzQK0H7EIihiJ5Uo9O4sqR5sydHQZs8vCQ8klrrc AKpCNbpZUBVBJs2TXZ8CGRy9zx0gclElAmpBdMzLltAmjNf0RTEHQlVyb9I= -----END CERTIFICATE-----Generated at Sat Apr 5 17:35:27 2025 by rpki-client