$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/3Bwz9kPPDtN9HTMlKwMC9tha-lA.roa File: 3Bwz9kPPDtN9HTMlKwMC9tha-lA.roa (raw, json) Hash identifier: GGkRa0uKqeRMmaAl8jlc68O26qXCP6A7VqqDr3Gv3XQ= Subject key identifier: DC:1C:33:F6:43:CF:0E:D3:7D:1D:33:25:2B:03:02:F6:D8:5A:FA:50 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0B14 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/3Bwz9kPPDtN9HTMlKwMC9tha-lA.roa Signing time: Fri 31 Jan 2025 01:34:28 +0000 ROA not before: Fri 31 Jan 2025 01:34:28 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 9605 IP address blocks: 1.72.8.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2836 (0xb14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jan 31 01:34:28 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=DC1C33F643CF0ED37D1D33252B0302F6D85AFA50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:e2:12:50:a8:8f:39:2d:0b:41:98:b9:cc:59: 19:a0:6d:4f:f7:97:15:4b:67:9b:80:29:f8:f3:ab: ef:eb:77:30:08:a5:67:e2:53:cd:79:58:ba:6a:47: 34:9b:68:36:4a:f8:93:2b:80:f9:25:cd:7a:7e:cc: a9:e6:4b:01:cb:81:5d:55:01:d9:88:ea:f6:38:e2: cc:a9:bb:09:2c:ae:c1:ad:93:f4:ca:7f:76:fa:c4: 51:27:45:70:6c:8f:e5:d6:4f:ff:b3:05:a4:17:cf: d7:3a:3f:12:30:15:84:27:58:ca:ec:4b:91:d8:17: 90:25:62:54:1b:2a:00:de:78:99:47:71:80:d8:41: 35:e4:f0:aa:71:cd:87:68:57:c9:07:f0:62:99:1d: 6b:e9:0b:7f:4e:be:bc:0a:ec:63:2f:e0:87:42:83: 16:51:2f:4e:c8:db:ce:56:60:1d:c9:7c:75:4a:0a: 03:f6:38:2e:ac:f6:fa:95:f0:de:d0:49:e1:6e:53: 76:02:e0:5d:0a:6a:d7:1f:23:97:29:8c:72:dd:a0: 70:a3:f2:8c:9f:94:db:d5:c1:3c:04:c4:10:c5:52: 44:cd:75:f9:1b:a0:61:fe:b0:78:07:2d:74:0d:ff: 25:fa:cb:2f:8f:42:59:7b:f4:75:0e:59:ce:fb:f4: d6:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:1C:33:F6:43:CF:0E:D3:7D:1D:33:25:2B:03:02:F6:D8:5A:FA:50 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/3Bwz9kPPDtN9HTMlKwMC9tha-lA.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.72.8.0/23 Signature Algorithm: sha256WithRSAEncryption 4d:2d:c7:96:39:69:5e:0f:6d:d0:8f:e4:17:54:1f:10:4a:11: b7:e5:64:65:76:a6:94:6d:6f:3c:bb:99:b7:db:ed:e0:9c:98: ef:2f:c7:0e:7a:5f:8c:d6:b9:d6:64:8f:55:77:f8:7f:56:3c: 91:b3:c1:36:4c:e8:e0:04:c0:46:55:b5:23:05:4c:42:53:c8: c3:76:da:77:8a:25:0d:45:14:cb:e3:6e:4c:92:cc:4d:c2:0c: a6:94:2a:7c:3a:d8:78:f6:41:0e:30:ff:8b:f1:3a:96:6f:14: 89:fa:74:44:11:b8:92:dd:69:72:1c:30:0a:98:cc:69:18:a7: 84:04:4c:47:7a:78:09:62:3e:dd:0a:16:48:c2:4b:d3:33:e6: ab:00:3c:43:f8:f4:ef:15:45:cc:5a:f7:69:f6:fa:e0:c2:dd: 9f:6c:ce:b8:5b:68:ca:bd:10:d7:fa:5d:bf:b6:35:fb:fd:fe: 03:4f:a8:77:52:c1:22:7f:5d:62:f3:42:97:1a:df:2d:d1:4b: 35:17:ed:e0:88:35:2f:65:08:77:1e:50:38:1b:b0:1c:39:70: 2c:85:5b:01:5e:11:ce:42:8b:b4:68:6b:e6:9f:98:e2:12:56: 18:aa:c2:0a:14:d0:82:31:f2:93:06:3f:1e:75:f2:a5:b2:22: 84:d5:9c:51 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCxQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTAxMzEw MTM0MjhaFw0yNjAxMTUwMTMwMDNaMDMxMTAvBgNVBAMTKERDMUMzM0Y2NDNDRjBF RDM3RDFEMzMyNTJCMDMwMkY2RDg1QUZBNTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDj4hJQqI85LQtBmLnMWRmgbU/3lxVLZ5uAKfjzq+/rdzAIpWfi U815WLpqRzSbaDZK+JMrgPklzXp+zKnmSwHLgV1VAdmI6vY44sypuwksrsGtk/TK f3b6xFEnRXBsj+XWT/+zBaQXz9c6PxIwFYQnWMrsS5HYF5AlYlQbKgDeeJlHcYDY QTXk8KpxzYdoV8kH8GKZHWvpC39OvrwK7GMv4IdCgxZRL07I285WYB3JfHVKCgP2 OC6s9vqV8N7QSeFuU3YC4F0KatcfI5cpjHLdoHCj8oyflNvVwTwExBDFUkTNdfkb oGH+sHgHLXQN/yX6yy+PQll79HUOWc779NYfAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU3Bwz9kPPDtN9HTMlKwMC9tha+lAwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5LzNCd3o5a1BQRHROOUhUTWxLd01DOXRoYS1sQS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEBSAgwDQYJKoZIhvcNAQELBQADggEBAE0tx5Y5aV4PbdCP5BdUHxBKEbfl ZGV2ppRtbzy7mbfb7eCcmO8vxw56X4zWudZkj1V3+H9WPJGzwTZM6OAEwEZVtSMF TEJTyMN22neKJQ1FFMvjbkySzE3CDKaUKnw62Hj2QQ4w/4vxOpZvFIn6dEQRuJLd aXIcMAqYzGkYp4QETEd6eAliPt0KFkjCS9Mz5qsAPEP49O8VRcxa92n2+uDC3Z9s zrhbaMq9ENf6Xb+2Nfv9/gNPqHdSwSJ/XWLzQpca3y3RSzUX7eCINS9lCHceUDgb sBw5cCyFWwFeEc5Ci7Roa+afmOISVhiqwgoU0IIx8pMGPx518qWyIoTVnFE= -----END CERTIFICATE-----Generated at Wed Feb 19 22:43:19 2025 by rpki-client