$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZuqLKJgrcv_Abd3oPFtARNBZzWg.roa File: ZuqLKJgrcv_Abd3oPFtARNBZzWg.roa (raw, json) Hash identifier: FI3YqwGErW7hTkFBDe0iVMTxF6oYiRKHSufTRmmtd5g= Subject key identifier: 66:EA:8B:28:98:2B:72:FF:C0:6D:DD:E8:3C:5B:40:44:D0:59:CD:68 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0AEC Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZuqLKJgrcv_Abd3oPFtARNBZzWg.roa Signing time: Fri 31 Jan 2025 01:28:31 +0000 ROA not before: Fri 31 Jan 2025 01:28:31 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 9605 IP address blocks: 1.73.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Apr 2025 17:04:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2796 (0xaec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jan 31 01:28:31 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=66EA8B28982B72FFC06DDDE83C5B4044D059CD68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:9f:51:15:5b:13:17:dd:eb:2b:0b:e7:26:60: 14:30:8a:0b:50:bb:8b:d6:d8:ce:81:2d:9c:5c:f2: 79:65:bf:39:ba:47:55:e3:f6:d3:aa:83:0a:67:e8: 61:d3:ed:8e:ae:13:07:9f:e9:23:66:8f:3c:d2:f2: 0d:7e:3d:19:59:c3:72:a9:a0:1b:81:f1:5f:6e:f2: e5:c3:eb:fb:af:66:8f:53:f9:3e:4e:02:68:26:81: 10:88:37:8d:9d:06:06:3a:c0:6b:1f:76:d2:b1:18: 1d:81:a8:03:20:e7:16:76:1e:1b:58:87:04:05:71: de:cb:81:6c:eb:b4:50:8d:3a:fc:83:91:37:80:ec: f9:82:83:4b:ca:6a:ac:a9:29:88:d0:45:ef:66:04: 3b:92:dd:6c:7c:b4:13:b7:2f:f8:15:7c:c1:58:48: a7:b9:ff:cf:13:00:41:67:09:ac:b0:a6:6a:46:f3: 04:5f:3a:ac:95:6e:f6:57:d9:64:bb:79:44:8a:c5: 3f:cb:90:f4:e6:01:a3:f2:41:8a:f2:66:22:db:56: 05:4a:c6:a3:b0:34:3d:d5:2b:ff:94:0d:09:59:7e: 10:f2:79:3b:e2:be:2e:a5:73:88:08:e8:d1:6b:91: bc:3f:cf:bc:02:13:89:12:a6:67:b6:0d:23:55:56: eb:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:EA:8B:28:98:2B:72:FF:C0:6D:DD:E8:3C:5B:40:44:D0:59:CD:68 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZuqLKJgrcv_Abd3oPFtARNBZzWg.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.73.74.0/24 Signature Algorithm: sha256WithRSAEncryption a8:f4:78:3d:17:eb:a4:77:a2:09:a0:e8:7b:3d:2e:98:a2:25: a1:ab:12:b9:3a:cb:3a:94:b9:51:6e:67:69:29:80:fd:67:4a: 29:30:85:5f:d3:32:31:27:0d:95:fe:77:52:d1:8c:5a:67:17: a7:26:5d:bb:1e:de:a5:23:61:d2:28:a0:6a:48:90:f4:9f:94: 22:db:47:e7:83:72:73:6c:00:92:13:c5:28:a9:6d:a2:37:29: f4:89:a0:f5:51:e6:44:cc:70:b1:77:3e:41:b5:5b:d0:b8:f0: 73:2b:93:ec:a1:ce:d1:50:53:b2:7b:79:8e:da:b5:dd:68:48: af:2a:e9:25:33:df:dd:8f:5c:3c:12:ef:20:46:c1:36:1d:79: a5:97:91:2b:83:ba:f6:a7:50:89:04:ba:53:d3:7f:a2:53:10: a5:40:9f:33:33:4b:30:45:60:9b:5f:6e:df:8f:07:e2:a6:87: 3b:9c:3e:a9:27:c8:cf:b4:ae:89:b1:74:54:57:eb:37:f8:0d: e7:7e:cc:4f:e6:3b:cc:b2:bb:95:1e:64:ed:b6:30:3d:11:4a: cb:99:c3:92:34:ea:7a:53:be:d6:d8:53:cd:3f:02:86:8c:96: 5a:01:be:5a:b2:60:4e:43:d0:bd:0a:3e:d4:43:13:43:3f:a9: c0:a9:74:46 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCuwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTAxMzEw MTI4MzFaFw0yNjAxMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDY2RUE4QjI4OTgyQjcy RkZDMDZERERFODNDNUI0MDQ0RDA1OUNENjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDAn1EVWxMX3esrC+cmYBQwigtQu4vW2M6BLZxc8nllvzm6R1Xj 9tOqgwpn6GHT7Y6uEwef6SNmjzzS8g1+PRlZw3KpoBuB8V9u8uXD6/uvZo9T+T5O AmgmgRCIN42dBgY6wGsfdtKxGB2BqAMg5xZ2HhtYhwQFcd7LgWzrtFCNOvyDkTeA 7PmCg0vKaqypKYjQRe9mBDuS3Wx8tBO3L/gVfMFYSKe5/88TAEFnCaywpmpG8wRf OqyVbvZX2WS7eUSKxT/LkPTmAaPyQYryZiLbVgVKxqOwND3VK/+UDQlZfhDyeTvi vi6lc4gI6NFrkbw/z7wCE4kSpme2DSNVVuuHAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUZuqLKJgrcv/Abd3oPFtARNBZzWgwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1p1cUxLSmdyY3ZfQWJkM29QRnRBUk5CWnpXZy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAABSUowDQYJKoZIhvcNAQELBQADggEBAKj0eD0X66R3ogmg6Hs9LpiiJaGr Erk6yzqUuVFuZ2kpgP1nSikwhV/TMjEnDZX+d1LRjFpnF6cmXbse3qUjYdIooGpI kPSflCLbR+eDcnNsAJITxSipbaI3KfSJoPVR5kTMcLF3PkG1W9C48HMrk+yhztFQ U7J7eY7atd1oSK8q6SUz392PXDwS7yBGwTYdeaWXkSuDuvanUIkEulPTf6JTEKVA nzMzSzBFYJtfbt+PB+KmhzucPqknyM+0romxdFRX6zf4Ded+zE/mO8yyu5UeZO22 MD0RSsuZw5I06npTvtbYU80/AoaMlloBvlqyYE5D0L0KPtRDE0M/qcCpdEY= -----END CERTIFICATE-----Generated at Thu Apr 17 19:28:54 2025 by rpki-client