$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/7aL9OomaH7fnqRHUN61j2zgFcpI.roa File: 7aL9OomaH7fnqRHUN61j2zgFcpI.roa (raw, json) Hash identifier: O/2ZnPpwFKHnOdSLEwzEsg1wcoK0V4um7XwgZddHiZM= Subject key identifier: ED:A2:FD:3A:89:9A:1F:B7:E7:A9:11:D4:37:AD:63:DB:38:05:72:92 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0A9E Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/7aL9OomaH7fnqRHUN61j2zgFcpI.roa Signing time: Sun 30 Jun 2024 01:54:22 +0000 ROA not before: Sun 30 Jun 2024 01:54:22 +0000 ROA not after: Tue 24 Jun 2025 10:46:45 +0000 asID: 9605 IP address blocks: 1.75.188.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2718 (0xa9e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 30 01:54:22 2024 GMT Not After : Jun 24 10:46:45 2025 GMT Subject: CN=EDA2FD3A899A1FB7E7A911D437AD63DB38057292 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:94:f2:76:4b:0d:cb:cd:56:c8:0f:e2:84:e4: 77:5c:3e:07:6e:3d:e5:a9:73:09:dd:19:78:2e:27: 1f:48:80:07:04:ce:10:44:c6:ba:27:d1:3f:b2:5b: 9f:db:c8:a4:f6:c6:58:5b:12:7e:34:61:81:85:7a: 53:fa:2e:07:b5:ee:16:44:fe:ff:8b:ea:ac:e0:1d: 3f:74:88:c2:a7:30:5b:ba:1a:8d:39:e4:44:0d:3b: 5f:fc:66:18:9f:bc:dc:e1:a7:81:7e:7d:f4:57:c7: 54:24:7d:de:d8:c6:38:da:18:44:8f:dd:5d:01:a7: 89:53:2b:00:e3:c4:cc:ca:6a:c0:06:64:32:ad:b8: d6:75:a0:e4:37:ef:71:9d:36:32:3e:02:36:55:c1: 0c:1c:8f:e5:9e:0c:f0:72:fe:4d:06:10:35:0a:28: 7f:9a:02:0d:b0:29:6e:e7:48:77:a6:3c:bb:7c:78: 5c:12:78:c3:a1:29:f6:13:1a:1e:7a:63:05:0e:9f: 1a:1e:2c:7b:82:8c:3d:29:bd:93:d6:3d:64:58:70: ac:4a:9c:1f:93:12:fc:78:bc:de:13:1a:fd:1e:92: b6:ac:66:6d:85:78:ba:be:2d:12:88:d7:69:d7:96: f1:a2:68:48:38:b8:7f:c9:04:57:b3:62:f1:77:84: 8d:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:A2:FD:3A:89:9A:1F:B7:E7:A9:11:D4:37:AD:63:DB:38:05:72:92 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/7aL9OomaH7fnqRHUN61j2zgFcpI.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.75.188.0/23 Signature Algorithm: sha256WithRSAEncryption 84:bb:f4:67:4b:e1:ab:0f:63:5b:e4:21:01:84:1a:34:e6:55: 26:bb:fb:07:1e:9a:ff:89:c6:9b:7a:56:87:05:bf:14:8d:2d: c0:29:d1:44:61:bf:36:b7:c6:4b:a9:d2:4b:31:53:a4:57:80: 2c:90:4b:61:d6:73:2b:3c:a9:0c:62:14:9c:44:ca:75:45:50: 6c:6d:1a:4c:8b:09:23:a8:9a:1a:f6:d7:eb:ed:53:d7:06:f8: 1c:dc:73:9c:54:de:84:50:a1:04:61:cd:23:e3:32:85:d0:18: 4c:99:a2:a6:d6:7a:69:6e:e7:80:4c:af:25:36:a4:63:01:12: 24:35:e8:ce:dd:2f:12:7d:59:78:3d:ea:4e:e7:f2:b5:45:b0: d8:b5:24:5f:e4:ae:7a:c5:8d:cf:ad:1f:fd:07:55:5a:91:77: 09:7a:d2:eb:96:f0:f1:08:1a:8f:92:b1:c0:d1:4b:e7:da:26: 92:d3:3a:57:e5:ca:97:f2:21:04:87:4f:9c:c9:8f:40:f7:8e: 4c:1e:cc:fc:0c:81:fc:da:e2:87:f1:b2:df:aa:32:01:8d:1e: 35:4a:ed:97:2f:10:66:9d:62:b9:ba:bf:6e:8f:11:a2:6f:38: 57:04:a4:b1:0d:a1:07:52:02:26:34:62:ce:13:ee:73:05:ff: 2f:55:4e:22 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCp4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA2MzAw MTU0MjJaFw0yNTA2MjQxMDQ2NDVaMDMxMTAvBgNVBAMTKEVEQTJGRDNBODk5QTFG QjdFN0E5MTFENDM3QUQ2M0RCMzgwNTcyOTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDrlPJ2Sw3LzVbID+KE5HdcPgduPeWpcwndGXguJx9IgAcEzhBE xron0T+yW5/byKT2xlhbEn40YYGFelP6Lge17hZE/v+L6qzgHT90iMKnMFu6Go05 5EQNO1/8ZhifvNzhp4F+ffRXx1Qkfd7YxjjaGESP3V0Bp4lTKwDjxMzKasAGZDKt uNZ1oOQ373GdNjI+AjZVwQwcj+WeDPBy/k0GEDUKKH+aAg2wKW7nSHemPLt8eFwS eMOhKfYTGh56YwUOnxoeLHuCjD0pvZPWPWRYcKxKnB+TEvx4vN4TGv0ekrasZm2F eLq+LRKI12nXlvGiaEg4uH/JBFezYvF3hI0NAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU7aL9OomaH7fnqRHUN61j2zgFcpIwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5LzdhTDlPb21hSDdmbnFSSFVONjFqMnpnRmNwSS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEBS7wwDQYJKoZIhvcNAQELBQADggEBAIS79GdL4asPY1vkIQGEGjTmVSa7 +wcemv+Jxpt6VocFvxSNLcAp0URhvza3xkup0ksxU6RXgCyQS2HWcys8qQxiFJxE ynVFUGxtGkyLCSOomhr21+vtU9cG+Bzcc5xU3oRQoQRhzSPjMoXQGEyZoqbWemlu 54BMryU2pGMBEiQ16M7dLxJ9WXg96k7n8rVFsNi1JF/krnrFjc+tH/0HVVqRdwl6 0uuW8PEIGo+SscDRS+faJpLTOlflypfyIQSHT5zJj0D3jkwezPwMgfza4ofxst+q MgGNHjVK7ZcvEGadYrm6v26PEaJvOFcEpLENoQdSAiY0Ys4T7nMF/y9VTiI= -----END CERTIFICATE-----Generated at Sun Feb 16 22:32:53 2025 by rpki-client